dependabot-python 0.86.20 → 0.86.21

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8fcbce927ea059fe2672e736508def76b344a00fb94e9fa0883cf86b38e9fb6a
-  data.tar.gz: 868537b0f90cf685081023fa92faf765be27dd3aceb7943a1a903fb0eaa283be
+  metadata.gz: 4af6e6b34c973eed3ba47dba9f9156a1d817f58021fa63406649aa72a47c02db
+  data.tar.gz: 8fcc616d7c4dcdb1a6159d844fcd231690ecef29e6d58c232d07363f2707f633
 SHA512:
-  metadata.gz: 4a64bb3fd200ff221f52c08069fd00a97945f2596f8c7c0f8b0414c68fc448bff79b7a42f216669a04e69c0a53d893a0ff5cb57034c73378a2233c73dd2b7adb
-  data.tar.gz: 5d15741d6d63ed77e60aca94955df032f99fd85e9cf17f54804c3ec9f1a5099019f6a940b088c2a475822d1a98bad647f040f6c0e8c0db3dae37805767135f72
+  metadata.gz: 8a4c5ddd9270fe30268a7f24b2c208ff053d1db5f1090e7433300aa3b2857592170db3dbfd240b6d49eb0b02db68816951937b6ce46df15d3b8f32a9a367d466
+  data.tar.gz: 6e17cbd7b045d0665ac45a708c20383d35e4ceccb0fe4d882dadb734226ebe0588409c89aae1ffea7d2041b16fc34cd25e87e1885e938307f118820f7853c1d6

data/lib/dependabot/python/file_updater/pip_compile_file_updater.rb

@@ -232,6 +232,7 @@ module Dependabot
 
         def post_process_compiled_file(updated_content, file)
           content = replace_header_with_original(updated_content, file.content)
+          content = update_hashes_if_required(content, file.content)
           replace_absolute_file_paths(content, file.content)
         end
 
@@ -265,6 +266,16 @@ module Dependabot
           content
         end
 
+        def update_hashes_if_required(updated_content, _original_content)
+          # TODO: Update the hashes if required.
+          # See https://github.com/dependabot/feedback/issues/235
+          #
+          # 1. Parse the old and new files
+          # 2. For any dependency where the number of hashes has changed, use
+          #    hashin to update the hashes
+          updated_content
+        end
+
         def pip_compile_options(filename)
           current_requirements_file_name = filename.sub(/\.in$/, ".txt")
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.86.20
+  version: 0.86.21
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-12-31 00:00:00.000000000 Z
+date: 2019-01-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-core
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.86.20
+        version: 0.86.21
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.86.20
+        version: 0.86.21
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement