dependabot-python 0.86.8 → 0.86.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9891574d6dd6ac3eed7e0ccbf34cabca679e476b573275b9eede46135d1d1a28
-  data.tar.gz: 908ab05d6fc58388988b99dde45c565cf9226a7dbe5db515f27d7c824d475f6c
+  metadata.gz: bce889c8431b2b11f31dfb6f070d4f165c556d36c2570afd3d49839db825fc21
+  data.tar.gz: c2bfbb3aa8425c0045703c620ba70355bb0832ce245f879eb52a38bdd76361e9
 SHA512:
-  metadata.gz: afabe8b8db9ce866a0cde4e9f914fdaddd0542c0337244eb52bbbc60195022acbe4fe7c22a1432bd4b4567d5e42ff518efaf24c49da12a60cd9cc9c8595a1372
-  data.tar.gz: ac049ae67e7e720899e2d24b43038e3a203ca73a1346d524157bb6ed8d1b5aefe58dfe827a2ff2667797b6aa41e7e023de64f8c410ac5d9f8de12846cfe18691
+  metadata.gz: 5ef345fc811c2928373b5ea3789a307486a7b3b6641a4a91288d273a87f4c2ee468fd513653bc0e25397cd98ac73a9f785c41123b1af5c0dbdae63ae1156a87a
+  data.tar.gz: b3c2bdaa5a69b84047c61b18e280eec7e0aa430e7c036b369856f9fc3ba92673bf394dd0507ee78cf1c3ea6b6333540a7e0901363a5a08c5991d62027c71fc4d

data/lib/dependabot/python/file_updater/pip_compile_file_updater.rb

@@ -71,7 +71,7 @@ module Dependabot
               updated_content = File.read(file.name)
 
               updated_content =
-                replace_header_with_original(updated_content, file.content)
+                post_process_compiled_file(updated_content, file)
               next if updated_content == file.content
 
               file.dup.tap { |f| f.content = updated_content }
@@ -230,6 +230,11 @@ module Dependabot
           ).updated_content
         end
 
+        def post_process_compiled_file(updated_content, file)
+          content = replace_header_with_original(updated_content, file.content)
+          replace_absolute_file_paths(content, file.content)
+        end
+
         def replace_header_with_original(updated_content, original_content)
           original_header_lines =
             original_content.lines.take_while { |l| l.start_with?("#") }
@@ -240,6 +245,26 @@ module Dependabot
           [*original_header_lines, *updated_content_lines].join
         end
 
+        def replace_absolute_file_paths(updated_content, original_content)
+          content = updated_content
+
+          update_count = 0
+          original_content.lines.each do |original_line|
+            next unless original_line.start_with?("-e")
+
+            line_to_update =
+              updated_content.lines.
+              select { |l| l.start_with?("-e") }.
+              at(update_count)
+            raise "Mismatch in editable requirements!" unless line_to_update
+
+            content = content.gsub(line_to_update, original_line)
+            update_count += 1
+          end
+
+          content
+        end
+
         def pip_compile_options(filename)
           current_requirements_file_name = filename.sub(/\.in$/, ".txt")
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.86.8
+  version: 0.86.9
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.86.8
+        version: 0.86.9
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.86.8
+        version: 0.86.9
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement