dependabot-python 0.103.2 → 0.103.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 02db6555b28730db09abbf0d1f9dd1fbff2a78192ef53bf06e5c23061e421f1c
-  data.tar.gz: 7dfecc9a812e8b1ee5cccd6a28a8414361a2367a2e6fb69b76913ffe18f84258
+  metadata.gz: d64f64df327433ddbf7d5e43161ca5c264124f030f3553459fa158947e7150fb
+  data.tar.gz: e5cc86b5834ffb83185059bad9ff61ebfb1fe341d4339649597de5934efce7cf
 SHA512:
-  metadata.gz: 0acd5a4c82c096a27fcc430750d60ec209ea09db873aa4d57d8b7fe6d9d50f09ecd01434b9e1d660c1b80657e7dce512e18e421a3fe981fce8565726e7a1733a
-  data.tar.gz: ada0f22066873a44b5463c762e75121c3e28401b143885e4e9f42b3978fad495f71dea878edbda101efd60cbf415b8ece4955fbde794e1355c7900da0bd446f0
+  metadata.gz: 8b5380f5e10eb60c8e91f05dbd2f15f8b57f4c7784a6a3d3f50ce4f9dde11a5679d32e601d113f52d9cfbd5ac4dbc083f6a122fd3e4987a814ce3e6a200cc753
+  data.tar.gz: f04dc6f06d306619384f80904c3556cf6b620fb63aaae5ef9a551da98d0e7b4d32c3260753967e28e2ccc38251318a18b9bd6e4dca086f3d6907cd523ea02113

data/lib/dependabot/python/requirement.rb

@@ -124,11 +124,12 @@ module Dependabot
              captures.first.to_s&.strip
         exact_op = ["", "=", "==", "==="].include?(op)
 
-        req_string.
+        req_string.strip.
           split(".").
           first(req_string.split(".").index("*") + 1).
           join(".").
-          tr("*", "a").
+          gsub(/\*(?!$)/, "0").
+          gsub(/\*$/, "0.a").
           tap { |s| exact_op ? s.gsub!(/^(?<!!)=*/, "~>") : s }
       end
     end

data/lib/dependabot/python/version.rb

@@ -45,7 +45,7 @@ module Dependabot
       end
 
       def <=>(other)
-        version_comparison = super(other)
+        version_comparison = old_comp(other)
         return version_comparison unless version_comparison.zero?
 
         unless post_version_comparison(other).zero?
@@ -110,6 +110,48 @@ module Dependabot
           tr("-", ".").
           gsub(/(\d)([a-z])/i, '\1.\2')
       end
+
+      # TODO: Delete this once we're using a version of Rubygems that includes
+      # https://github.com/rubygems/rubygems/pull/2651
+      #
+      # rubocop:disable Metrics/CyclomaticComplexity
+      # rubocop:disable Metrics/PerceivedComplexity
+      # rubocop:disable Style/CaseEquality
+      # rubocop:disable Metrics/LineLength
+      # rubocop:disable Style/ParallelAssignment
+      # rubocop:disable Style/RedundantReturn
+      def old_comp(other)
+        return unless Gem::Version === other
+        return 0 if @version == other._version || canonical_segments == other.canonical_segments
+
+        lhsegments = canonical_segments
+        rhsegments = other.canonical_segments
+
+        lhsize = lhsegments.size
+        rhsize = rhsegments.size
+        limit  = (lhsize > rhsize ? lhsize : rhsize) - 1
+
+        i = 0
+
+        while i <= limit
+          lhs, rhs = lhsegments[i] || 0, rhsegments[i] || 0
+          i += 1
+
+          next      if lhs == rhs
+          return -1 if String  === lhs && Numeric === rhs
+          return  1 if Numeric === lhs && String  === rhs
+
+          return lhs <=> rhs
+        end
+
+        return 0
+      end
+      # rubocop:enable Metrics/CyclomaticComplexity
+      # rubocop:enable Metrics/PerceivedComplexity
+      # rubocop:enable Style/CaseEquality
+      # rubocop:enable Metrics/LineLength
+      # rubocop:enable Style/ParallelAssignment
+      # rubocop:enable Style/RedundantReturn
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.103.2
+  version: 0.103.3
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.103.2
+        version: 0.103.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.103.2
+        version: 0.103.3
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement