dependabot-python 0.106.43 → 0.106.44

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '0972ab7029349ec0d489c7d831e286989496eea0799ca5d9b4ef829eb2db13c4'
-  data.tar.gz: 522ad609a9d980a8de031b141549fc0dcba63cd6db788789b2ff604954d944c5
+  metadata.gz: cd1a46f1c5248dfcba2577238675c4aac25ac050cacb2a431f512cfb5c5f66ac
+  data.tar.gz: 9ada331e6948ceecb2cd2579ee40d01085122ae33db6dba0534cc0d31752eef3
 SHA512:
-  metadata.gz: fb614cfaff9d269158ffea95878651911c89cedffe27e129140d876369df46737ce161b7749881b5d6898e5589a2ed932cdb8e5210b5a14addfe0310f082e18a
-  data.tar.gz: 23e4cbd687fdbc4d9305fb3164d4b6ed3bdff9021aeee2222b8d6087154e55d42d48df8b6b961de52be6fe0ea8c8eea0ad323e66f5cc050e167ee58a29cdfa8f
+  metadata.gz: 1132abea1402fb8d7e14d111c348df1f488e1b57f2cf50d0948202269cb30226709ed6b260881beb1786ef03a0f63eb9d38a80577cd455ad68c218108b23d028
+  data.tar.gz: c376f11c0f122bfd9ed94e4f277047f2ad373d8249cf9290d19838a0b7cc2f6281b4bc47c60e2e59d24ff4312df085806bf93b71b18438bf798dd30f28f9697b

data/helpers/requirements.txt

@@ -1,5 +1,5 @@
 pip==19.1.1
-pip-tools==3.6.1
+pip-tools==3.7.0
 hashin==0.14.5
 pipenv==2018.11.26
 pipfile==0.0.2

data/lib/dependabot/python/file_updater/pip_compile_file_updater.rb

@@ -81,8 +81,6 @@ module Dependabot
                 "pyenv exec pip-compile #{pip_compile_options(filename)} "\
                 "#{filename}"
               )
-
-              unredact_git_credentials_in_compiled_file(filename)
             end
 
             # Remove any .python-version file before parsing the reqs
@@ -326,41 +324,6 @@ module Dependabot
           content
         end
 
-        # Pip redacts git credentials in the compiled pip-tools file. We don't
-        # want that, as it makes the compiled files unusable. (This is kind of
-        # a pip-tools bug.)
-        def unredact_git_credentials_in_compiled_file(filename)
-          compiled_name = filename.gsub(/\.in$/, ".txt")
-          original_content = dependency_files.
-                             find { |f| f.name == compiled_name }&.content ||
-                             dependency_files.
-                             find { |f| f.name == filename }.content
-
-          updated_content = File.read(compiled_name)
-          new_content = updated_content
-
-          update_count = 0
-          original_content.lines.each do |original_line|
-            next unless original_line.match?(/^(-e )?git+/)
-            next unless original_line.match?(%r{(?<=:)[^/].*?(?=@)})
-            next update_count += 1 if updated_content.include?(original_line)
-
-            line_to_update =
-              updated_content.lines.
-              select { |l| l.match?(/^(-e )?git+/) && l.include?(":****@") }.
-              at(update_count)
-            raise "Mismatch in editable requirements!" unless line_to_update
-
-            auth = original_line.match(%r{(?<=:)[^/].*?(?=@)}).to_s
-            new_content =
-              new_content.
-              gsub(line_to_update, line_to_update.gsub(":****@", ":#{auth}@"))
-            update_count += 1
-          end
-
-          File.write(compiled_name, new_content)
-        end
-
         def update_hashes_if_required(updated_content, original_content)
           deps_to_update =
             deps_to_augment_hashes_for(updated_content, original_content)

data/lib/dependabot/python/update_checker/pip_compile_version_resolver.rb

@@ -75,8 +75,6 @@ module Dependabot
                     "pyenv exec pip-compile --allow-unsafe "\
                      "--build-isolation #{filename}"
                   )
-
-                  unredact_git_credentials_in_compiled_file(filename)
                 end
 
                 # Remove any .python-version file before parsing the reqs
@@ -122,41 +120,6 @@ module Dependabot
           raise
         end
 
-        # Pip redacts git credentials in the compiled pip-tools file. We don't
-        # want that, as it makes the compiled files unusable. (This is kind of
-        # a pip-tools bug.)
-        def unredact_git_credentials_in_compiled_file(filename)
-          compiled_name = filename.gsub(/\.in$/, ".txt")
-          original_content = dependency_files.
-                             find { |f| f.name == compiled_name }&.content ||
-                             dependency_files.
-                             find { |f| f.name == filename }.content
-
-          updated_content = File.read(compiled_name)
-          new_content = updated_content
-
-          update_count = 0
-          original_content.lines.each do |original_line|
-            next unless original_line.match?(/^(-e )?git+/)
-            next unless original_line.match?(%r{(?<=:)[^/].*?(?=@)})
-            next update_count += 1 if updated_content.include?(original_line)
-
-            line_to_update =
-              updated_content.lines.
-              select { |l| l.match?(/^(-e )?git+/) && l.include?(":****@") }.
-              at(update_count)
-            raise "Mismatch in editable requirements!" unless line_to_update
-
-            auth = original_line.match(%r{(?<=:)[^/].*?(?=@)}).to_s
-            new_content =
-              new_content.
-              gsub(line_to_update, line_to_update.gsub(":****@", ":#{auth}@"))
-            update_count += 1
-          end
-
-          File.write(compiled_name, new_content)
-        end
-
         # Needed because pip-compile's resolver isn't perfect.
         # Note: We raise errors from this method, rather than returning a
         # boolean, so that all deps for this repo will raise identical

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.106.43
+  version: 0.106.44
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-05-09 00:00:00.000000000 Z
+date: 2019-05-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.106.43
+        version: 0.106.44
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.106.43
+        version: 0.106.44
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement