dependabot-python 0.217.0 → 0.218.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 899ec65a9768346b0e6881529a45525fd701ecca8e2e7d286c3b323a472d222f
-  data.tar.gz: e657d76e2cad5898793cac513f8dd006b64b1b03ed8b7310128b60dd1133e6c1
+  metadata.gz: c01560d0752d398acafec2a0646b28f5f93de7fcfac1ea12570409445fbeb562
+  data.tar.gz: a2b6e55a4bff31e80a0cf57e739d5a6dabdd82b42fcf2ce276e15be26093470b
 SHA512:
-  metadata.gz: 613fed03d4f327edea06462cdd57d864108430e277d7dcbb685f56c50c170fad737ea7d5f73441afe793294ff45c00d3e6b581c49702235788e6c45728a4caa8
-  data.tar.gz: 5e3cf16cc2e2df3cfbefdc0f90b3a8b79b3d5bdd91aa3c454f946e1bbd626b3bd83728c468dc96c7fbcff4e024c9aa0b851cc9c6f6719098c1a636f804a77d35
+  metadata.gz: f1cf2d6733074ca4ba42f86e251f18a34ca2f0ea88dbfac4b04d1513b2d1e01e9122736c3850aa99a3f014bb5aab5c677a0bd1cb88bdaf9ed26829a09352624f
+  data.tar.gz: 8e920d74c3dfeb2404ef1dd42f3a2a933427f28b0bdcc5af3c5ff1f0027dbb44da959673859b863c24dc50e88f1b289d3b059e8d62fe4e4fbdde4fcdb6f4fcae

data/lib/dependabot/python/update_checker/requirements_updater.rb

@@ -30,6 +30,8 @@ module Dependabot
         end
 
         def updated_requirements
+          return requirements if update_strategy == :lockfile_only
+
           requirements.map do |req|
             case req[:file]
             when /setup\.(?:py|cfg)$/ then updated_setup_requirement(req)

data/lib/dependabot/python/update_checker.rb

@@ -78,6 +78,10 @@ module Dependabot
         ).updated_requirements
       end
 
+      def requirements_unlocked_or_can_be?
+        requirements_update_strategy != :lockfile_only
+      end
+
       def requirements_update_strategy
         # If passed in as an option (in the base class) honour that option
         return @requirements_update_strategy.to_sym if @requirements_update_strategy

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.217.0
+  version: 0.218.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-04-24 00:00:00.000000000 Z
+date: 2023-05-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.217.0
+        version: 0.218.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.217.0
+        version: 0.218.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -259,8 +259,8 @@ homepage: https://github.com/dependabot/dependabot-core
 licenses:
 - Nonstandard
 metadata:
-  issue_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/blob/main/CHANGELOG.md
+  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.218.0
 post_install_message: 
 rdoc_options: []
 require_paths: