dependabot-python 0.362.0 → 0.363.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 41969fffceb16127501815b18338b47fed108ad0a31d01b47584d6798ec446ba
-  data.tar.gz: 279aa5702150e0fabae033d6050023a91c0aae715cef14dae31aa4686410645e
+  metadata.gz: 7cc1d0760f4a6f24d10d75d27c11c194d41eb47a26903927b42ba775ce8d7088
+  data.tar.gz: 90c3a5758a74e86b813a50e3d262d87944c783c3ece0dd99047939651571c4fe
 SHA512:
-  metadata.gz: 6e1b58219c98cb0d8c29644418ec930221ba85c5503e6db0c0df38125515202cb56545180187dcb24af2b7474aa7b63fbb4d34f22c7c0090dbb124142dbebb1f
-  data.tar.gz: bf71087e14538101af044f780b3de22c37f679bce0e0bf13e292b5c690c2ed9b08275b76186ca1582c3fab3226e4f8fcc720a21d7599b92952557563caeb2dad
+  metadata.gz: 9493ba092dcdd370a58895cc4f37670ec4ac3b6d142ad21dd49a2a1f4165178f748389706bc0802167d2b7a6f9cf213b4cda44ce0fd19f03a34c1e0c5d4b2fa6
+  data.tar.gz: 7406412e5b8223da13f54ccdb2fdb1b9b5189b582c68bfc0d561c5f3a8c5068e7793692f33e7fcd840650fdcc8dd3328552b5556ea39715890d43d7dac37b6eb

data/lib/dependabot/python/file_parser/pipfile_files_parser.rb

@@ -140,7 +140,7 @@ module Dependabot
         end
 
         sig do
-          params(obj: T.any(String, NilClass, T::Array[String], T::Hash[String, T.untyped])).returns(T.nilable(String))
+          params(obj: T.nilable(T.any(String, T::Array[String], T::Hash[String, T.untyped]))).returns(T.nilable(String))
         end
         def version_from_hash_or_string(obj)
           case obj
@@ -149,7 +149,7 @@ module Dependabot
           end
         end
 
-        sig { params(req: T.any(String, T::Hash[String, T.untyped])).returns(T.any(T::Boolean, NilClass, String)) }
+        sig { params(req: T.any(String, T::Hash[String, T.untyped])).returns(T.nilable(T.any(T::Boolean, String))) }
         def specifies_version?(req)
           return true if req.is_a?(String)
 

data/lib/dependabot/python/package/package_details_fetcher.rb

@@ -68,13 +68,13 @@ module Dependabot
           package_releases = registry_urls
                              .select { |index_url| validate_index(index_url) } # Ensure only valid URLs
                              .flat_map do |index_url|
-            fetch_from_registry(index_url) || [] # Ensure it always returns an array
-          rescue Excon::Error::Timeout, Excon::Error::Socket
-            raise if MAIN_PYPI_INDEXES.include?(index_url)
+                               fetch_from_registry(index_url) || [] # Ensure it always returns an array
+                             rescue Excon::Error::Timeout, Excon::Error::Socket
+                               raise if MAIN_PYPI_INDEXES.include?(index_url)
 
-            raise PrivateSourceTimedOut, sanitized_url(index_url)
-          rescue URI::InvalidURIError
-            raise DependencyFileNotResolvable, "Invalid URL: #{sanitized_url(index_url)}"
+                               raise PrivateSourceTimedOut, sanitized_url(index_url)
+                             rescue URI::InvalidURIError
+                               raise DependencyFileNotResolvable, "Invalid URL: #{sanitized_url(index_url)}"
           end
 
           Dependabot::Package::PackageDetails.new(

data/lib/dependabot/python/update_checker/requirements_updater.rb

@@ -297,7 +297,7 @@ module Dependabot
             # Prefix match
             T.must(requirement_strings.find { |r| r.match?(/^(=+|\d)/) })
              .sub(RequirementParser::VERSION) do |v|
-              at_same_precision(T.must(latest_resolvable_version).to_s, v)
+               at_same_precision(T.must(latest_resolvable_version).to_s, v)
             end
           end
         end
@@ -317,7 +317,7 @@ module Dependabot
           new_segments
             .first(count)
             .map.with_index { |s, i| i < precision ? s : "*" }
-            .join(".")
+                .join(".")
         end
 
         sig { params(requirement_strings: T::Array[String]).returns(String) }

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.362.0
+  version: 0.363.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.362.0
+        version: 0.363.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.362.0
+        version: 0.363.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -85,14 +85,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '2.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '2.0'
 - !ruby/object:Gem::Dependency
   name: rspec-sorbet
   requirement: !ruby/object:Gem::Requirement
@@ -291,7 +291,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.362.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.363.0
 rdoc_options: []
 require_paths:
 - lib