dependabot-python 0.92.8 → 0.93.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d55b79dbaa20b727a8338a150c6f53dd013cfcef8b2ccfa0ccc9342e617bd24f
-  data.tar.gz: ff1621156bfca039fbc7322a355c6492158808b2151df1df96a92efedc364c1e
+  metadata.gz: 1920e28898b728022389686349c4c44ba9d60690daa74084a197e47c61ff5f0d
+  data.tar.gz: eb6801ae91bfbbcff96ee1a6c2132245ebaed5c45682f084bb0e6bb6ae1a91ef
 SHA512:
-  metadata.gz: 2225945924464ce5b92da4322b96ab566a7aa6cc9c501641538488e961fce868689378b1975ccd02a3433bd4a214916cfa3b13c817994324b68ed5ddb502adfc
-  data.tar.gz: 70a7f6eb71aa90d931f8ba5cc9a3d4294b2923a888356e71969872e27c1832e5aa6b7e0849b5724a70020400418f2e07290243321c4295b887dacb957249ec7f
+  metadata.gz: 7fe840e09879b4fd191a24f747426a2e3fee4f3261f7f028fae6ebee0f657685a841e06561faea341d25a17118b0e9d6082b154d0a695d78563ca918e72196af
+  data.tar.gz: d558dcca5d80e603eecaf9b5689db391a6b562c8a0f064b0dcab45abf44a000a394d84297c04834a12b7dcfa81dea5bd40e9ee230b78eada338d7caa51ed7121

data/helpers/requirements.txt

@@ -1,5 +1,5 @@
-pip==18.1
-pip-tools==3.1.0
+pip==19.0.1
+pip-tools==3.3.1
 hashin==0.14.2
 pipenv==2018.11.26
 pipfile==0.0.2

data/lib/dependabot/python/file_updater/pip_compile_file_updater.rb

@@ -63,7 +63,13 @@ module Dependabot
               # This is slow, as pip-compile needs to do installs.
               run_command(
                 "pyenv exec pip-compile #{pip_compile_options(filename)} "\
-                "-P #{dependency.name} #{filename}"
+                "-P #{dependency.name}==#{dependency.version} #{filename}"
+              )
+              # Run pip-compile a second time, without an update argument, to
+              # ensure it resets the right comments.
+              run_command(
+                "pyenv exec pip-compile #{pip_compile_options(filename)} "\
+                "#{filename}"
               )
             end
 

data/lib/dependabot/python/update_checker/pip_compile_version_resolver.rb

@@ -59,6 +59,11 @@ module Dependabot
                   cmd = "pyenv exec pip-compile --allow-unsafe "\
                         "-P #{dependency.name} #{filename}"
                   run_command(cmd)
+                  # Run pip-compile a second time, without an update argument,
+                  # to ensure it handles markers correctly
+                  run_command(
+                    "pyenv exec pip-compile --allow-unsafe #{filename}"
+                  )
                 end
 
                 # Remove any .python-version file before parsing the reqs

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.92.8
+  version: 0.93.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-01-24 00:00:00.000000000 Z
+date: 2019-01-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-core
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.92.8
+        version: 0.93.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.92.8
+        version: 0.93.0
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement