dependabot-python 0.363.0 → 0.364.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7cc1d0760f4a6f24d10d75d27c11c194d41eb47a26903927b42ba775ce8d7088
-  data.tar.gz: 90c3a5758a74e86b813a50e3d262d87944c783c3ece0dd99047939651571c4fe
+  metadata.gz: ad6e1e80553f3ffd620ea7d83d9e9d6dbe3d910b069df6e970b3b0176090f024
+  data.tar.gz: 4869abdc7a7905d29c03d5e3620f7b5f8f5a5321131f035d9aa070563db6cff2
 SHA512:
-  metadata.gz: 9493ba092dcdd370a58895cc4f37670ec4ac3b6d142ad21dd49a2a1f4165178f748389706bc0802167d2b7a6f9cf213b4cda44ce0fd19f03a34c1e0c5d4b2fa6
-  data.tar.gz: 7406412e5b8223da13f54ccdb2fdb1b9b5189b582c68bfc0d561c5f3a8c5068e7793692f33e7fcd840650fdcc8dd3328552b5556ea39715890d43d7dac37b6eb
+  metadata.gz: 896f820ec9168bee0abb669b46c5ad4368d741b6a15bc3b81d22cbaeea63416043c1a81801c9df5965177c8b4681b7f9dc860b90b36b870a1e8be3700725a670
+  data.tar.gz: c4a75fcb7e5ad87522d6817a1d3cc716d11b0766f164ce7917e196a879f743761eab3eb269bebd57d4473d51f3117f9e35e4d12ced3d55e31794ed7365eab290

data/helpers/requirements.txt

@@ -1,5 +1,5 @@
 pip==24.2
-pip-tools==7.4.1
+pip-tools==7.5.3
 flake8==7.3.0
 hashin==1.0.5
 pipenv==2024.4.1

data/lib/dependabot/python/file_updater/pip_compile_file_updater.rb

@@ -26,7 +26,11 @@ module Dependabot
 
         UNSAFE_PACKAGES = T.let(%w(setuptools distribute pip).freeze, T::Array[String])
         INCOMPATIBLE_VERSIONS_REGEX = T.let(
-          /not supported between instances of 'InstallationCandidate'.*\z/m,
+          Regexp.new(
+            "(?:not supported between instances of 'InstallationCandidate'" \
+            "|There are incompatible versions in the resolved dependencies).*\\z",
+            Regexp::MULTILINE
+          ),
           Regexp
         )
         WARNINGS = T.let(/\s*# WARNING:.*\Z/m, Regexp)

data/lib/dependabot/python/file_updater/requirement_replacer.rb

@@ -108,7 +108,7 @@ module Dependabot
             else
               original_dependency_declaration_string(old_req)
                 .sub(RequirementParser::NAME_WITH_EXTRAS) do |nm|
-                  (nm + (updated_requirement_string || ""))
+                  nm + (updated_requirement_string || "")
                 end
             end
 

data/lib/dependabot/python/package/package_details_fetcher.rb

@@ -68,13 +68,13 @@ module Dependabot
           package_releases = registry_urls
                              .select { |index_url| validate_index(index_url) } # Ensure only valid URLs
                              .flat_map do |index_url|
-                               fetch_from_registry(index_url) || [] # Ensure it always returns an array
-                             rescue Excon::Error::Timeout, Excon::Error::Socket
-                               raise if MAIN_PYPI_INDEXES.include?(index_url)
+            fetch_from_registry(index_url) || [] # Ensure it always returns an array
+          rescue Excon::Error::Timeout, Excon::Error::Socket
+            raise if MAIN_PYPI_INDEXES.include?(index_url)
 
-                               raise PrivateSourceTimedOut, sanitized_url(index_url)
-                             rescue URI::InvalidURIError
-                               raise DependencyFileNotResolvable, "Invalid URL: #{sanitized_url(index_url)}"
+            raise PrivateSourceTimedOut, sanitized_url(index_url)
+          rescue URI::InvalidURIError
+            raise DependencyFileNotResolvable, "Invalid URL: #{sanitized_url(index_url)}"
           end
 
           Dependabot::Package::PackageDetails.new(

data/lib/dependabot/python/update_checker/requirements_updater.rb

@@ -297,7 +297,7 @@ module Dependabot
             # Prefix match
             T.must(requirement_strings.find { |r| r.match?(/^(=+|\d)/) })
              .sub(RequirementParser::VERSION) do |v|
-               at_same_precision(T.must(latest_resolvable_version).to_s, v)
+              at_same_precision(T.must(latest_resolvable_version).to_s, v)
             end
           end
         end
@@ -321,7 +321,7 @@ module Dependabot
         end
 
         sig { params(requirement_strings: T::Array[String]).returns(String) }
-        def update_requirements_range(requirement_strings) # rubocop:disable Metrics/AbcSize
+        def update_requirements_range(requirement_strings)
           ruby_requirements =
             requirement_strings.map { |r| requirement_class.new(r) }
 
@@ -341,8 +341,7 @@ module Dependabot
           end.compact
 
           updated_requirement_strings
-            .sort_by { |r| requirement_class.new(r).requirements.first.last }
-            .map(&:to_s).join(",").delete(" ")
+            .sort_by { |r| requirement_class.new(r).requirements.first.last }.join(",").delete(" ")
         end
 
         # Updates the version in a constraint to be the given version

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.363.0
+  version: 0.364.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.363.0
+        version: 0.364.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.363.0
+        version: 0.364.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -291,7 +291,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.363.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.364.0
 rdoc_options: []
 require_paths:
 - lib