dependabot-python 0.106.22 → 0.106.23

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d5ffb562964f9e1cfbfad7ab63d064a1568d559fd16640b24df2fae63ae67067
-  data.tar.gz: fffe26ba6f43c610bec6759fe4982a6d96010625c6b7db9d81aed880c673b823
+  metadata.gz: e4f43ca6e03a3165737008db1c14863d6a8605723bac69955130e8f68d0d5aa0
+  data.tar.gz: b8bc081bc2921dda414743801885c012414fa571c15036261cd30df8bc912ee7
 SHA512:
-  metadata.gz: ab14683c67d2ce90cb4157920d04184fed2a73bb2ada6639d0359057d0edb9cda305e30852cff6988148b4d4aac35280cd5a6b5f99268daddb6fd55f62e8a353
-  data.tar.gz: d16ccdc96356a0d45c7b05db3e937ad3898b3034f3c06166215558ee964566df2de4a287a1ec0402586a9c5407acb63f11997659900208d8864b6199dfa85c12
+  metadata.gz: 8f03815b87e1a33ef5522553f27488af10bf4f89f623cdf6997fc10c70ebf075eda87e943442bbf1c5220164f65d5e49a564d8fbd2d7ce87af714ea39451d82f
+  data.tar.gz: d038fbc33cee062fa0fdd79523b327ca79397d4d43a291032c6ea75de4ad5de99f420722c8e0cf93904afffb4c841c67c16c66d58b4cb5e0456df49d1627c9aa

data/lib/dependabot/python/file_updater/pip_compile_file_updater.rb

@@ -555,6 +555,7 @@ module Dependabot
 
         def user_specified_python_version
           file_version = python_version_file&.content&.strip
+          file_version ||= runtime_file_python_version
 
           return unless file_version
           return unless pyenv_versions.include?("#{file_version}\n")
@@ -562,6 +563,12 @@ module Dependabot
           file_version
         end
 
+        def runtime_file_python_version
+          return unless runtime_file
+
+          runtime_file.content.match(/(?<=python-).*/)&.to_s&.strip
+        end
+
         def pyenv_versions
           @pyenv_versions ||= run_command("pyenv install --list")
         end
@@ -585,6 +592,10 @@ module Dependabot
         def python_version_file
           dependency_files.find { |f| f.name == ".python-version" }
         end
+
+        def runtime_file
+          dependency_files.find { |f| f.name.end_with?("runtime.txt") }
+        end
       end
       # rubocop:enable Metrics/ClassLength
     end

data/lib/dependabot/python/file_updater/pipfile_file_updater.rb

@@ -389,7 +389,7 @@ module Dependabot
             return pipfile_python_requirement
           end
 
-          python_version_file_version
+          python_version_file_version || runtime_file_python_version
         end
 
         def python_version_file_version
@@ -401,6 +401,12 @@ module Dependabot
           file_version
         end
 
+        def runtime_file_python_version
+          return unless runtime_file
+
+          runtime_file.content.match(/(?<=python-).*/)&.to_s&.strip
+        end
+
         def pyenv_versions
           @pyenv_versions ||= run_command("pyenv install --list")
         end
@@ -468,6 +474,10 @@ module Dependabot
           dependency_files.find { |f| f.name == ".python-version" }
         end
 
+        def runtime_file
+          dependency_files.find { |f| f.name.end_with?("runtime.txt") }
+        end
+
         def pipenv_env_variables
           {
             "PIPENV_YES" => "true",       # Install new Python ver if needed

data/lib/dependabot/python/file_updater/poetry_file_updater.rb

@@ -232,11 +232,13 @@ module Dependabot
             poetry_object&.dig("dependencies", "python") ||
             poetry_object&.dig("dev-dependencies", "python")
 
-          return python_version_file_version unless requirement
+          unless requirement
+            return python_version_file_version || runtime_file_python_version
+          end
 
           requirements = Python::Requirement.requirements_array(requirement)
 
-          PythonVersions::SUPPORTED_VERSIONS.find do |version|
+          PythonVersions::SUPPORTED_VERSIONS_TO_ITERATE.find do |version|
             requirements.any? do |r|
               r.satisfied_by?(Python::Version.new(version))
             end
@@ -252,6 +254,12 @@ module Dependabot
           file_version
         end
 
+        def runtime_file_python_version
+          return unless runtime_file
+
+          runtime_file.content.match(/(?<=python-).*/)&.to_s&.strip
+        end
+
         def pyenv_versions
           @pyenv_versions ||= run_poetry_command("pyenv install --list")
         end
@@ -318,6 +326,10 @@ module Dependabot
         def python_version_file
           dependency_files.find { |f| f.name == ".python-version" }
         end
+
+        def runtime_file
+          dependency_files.find { |f| f.name.end_with?("runtime.txt") }
+        end
       end
     end
   end

data/lib/dependabot/python/update_checker/pip_compile_version_resolver.rb

@@ -435,6 +435,7 @@ module Dependabot
 
         def user_specified_python_version
           file_version = python_version_file&.content&.strip
+          file_version ||= runtime_file_python_version
 
           return unless file_version
           return unless pyenv_versions.include?("#{file_version}\n")
@@ -442,6 +443,12 @@ module Dependabot
           file_version
         end
 
+        def runtime_file_python_version
+          return unless runtime_file
+
+          runtime_file.content.match(/(?<=python-).*/)&.to_s&.strip
+        end
+
         def pyenv_versions
           @pyenv_versions ||= run_command("pyenv install --list")
         end
@@ -465,6 +472,10 @@ module Dependabot
         def python_version_file
           dependency_files.find { |f| f.name == ".python-version" }
         end
+
+        def runtime_file
+          dependency_files.find { |f| f.name.end_with?("runtime.txt") }
+        end
       end
       # rubocop:enable Metrics/ClassLength
     end

data/lib/dependabot/python/update_checker/pipenv_version_resolver.rb

@@ -413,7 +413,7 @@ module Dependabot
             return pipfile_python_requirement
           end
 
-          python_version_file_version
+          python_version_file_version || runtime_file_python_version
         end
 
         def python_version_file_version
@@ -425,6 +425,12 @@ module Dependabot
           file_version
         end
 
+        def runtime_file_python_version
+          return unless runtime_file
+
+          runtime_file.content.match(/(?<=python-).*/)&.to_s&.strip
+        end
+
         def pyenv_versions
           @pyenv_versions ||= run_command("pyenv install --list")
         end
@@ -562,6 +568,10 @@ module Dependabot
         def python_version_file
           dependency_files.find { |f| f.name == ".python-version" }
         end
+
+        def runtime_file
+          dependency_files.find { |f| f.name.end_with?("runtime.txt") }
+        end
       end
     end
   end

data/lib/dependabot/python/update_checker/poetry_version_resolver.rb

@@ -169,12 +169,14 @@ module Dependabot
             poetry_object&.dig("dependencies", "python") ||
             poetry_object&.dig("dev-dependencies", "python")
 
-          return python_version_file_version unless requirement
+          unless requirement
+            return python_version_file_version || runtime_file_python_version
+          end
 
           requirements =
             Python::Requirement.requirements_array(requirement)
 
-          version = PythonVersions::SUPPORTED_VERSIONS.find do |v|
+          version = PythonVersions::SUPPORTED_VERSIONS_TO_ITERATE.find do |v|
             requirements.any? { |r| r.satisfied_by?(Python::Version.new(v)) }
           end
           return version if version
@@ -195,6 +197,12 @@ module Dependabot
           file_version
         end
 
+        def runtime_file_python_version
+          return unless runtime_file
+
+          runtime_file.content.match(/(?<=python-).*/)&.to_s&.strip
+        end
+
         def pyenv_versions
           @pyenv_versions ||= run_poetry_command("pyenv install --list")
         end
@@ -310,6 +318,10 @@ module Dependabot
           dependency_files.find { |f| f.name == ".python-version" }
         end
 
+        def runtime_file
+          dependency_files.find { |f| f.name.end_with?("runtime.txt") }
+        end
+
         def run_poetry_command(command)
           start = Time.now
           command = SharedHelpers.escape_command(command)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.106.22
+  version: 0.106.23
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.106.22
+        version: 0.106.23
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.106.22
+        version: 0.106.23
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement