dependabot-python 0.98.9 → 0.98.10

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9c7cb8d706758609f2e47cd7ef3fa2162b63a414f69f2d76b54d39a9b91557b1
-  data.tar.gz: 29e91b8d465c7a82ba762d44d281d8f385ee1a8a7da551485c6edbb811caa08d
+  metadata.gz: c883a569d0291587e0abe85d6d59cf30185ee6389e67d796c96dd2c91dfdd93a
+  data.tar.gz: 8dda941527038c0fe9ca17379b977e84911fd3bb4393c23ee38923e6ab9a6ef9
 SHA512:
-  metadata.gz: 5f3401315ffb18377a35acffafec926c4a6e134d7375499da9a62868deda16f8006294b71632b98051cceefc6e1ebae803d033a3d0eb5ca35b0a0ef4ee321bb9
-  data.tar.gz: 6069aba2e0b7dd7a76afb080e9514071db039182c71e7df5130e3fcf862e66450c708acf3b8c32f14dd624a208d2bfc0c959c65c51ab05d3bfe921fa23bf1b45
+  metadata.gz: 35fb8f1ac9bf4dab6e48a8acfb468bfc2baedc894538c9bffc439321298777fe4a1787a74f2f979d4e493a5486ea17f4616fa39fbc589fe3e6126817bdcd9aaa
+  data.tar.gz: 852118c1cc474740c4f8f5121edd3477c09ba9b129da8d7ea1891455d28dda4e64b61bfdff81b4b9127e17c9f0411221548a4d821cf744e1d294edbddb0df8c0

data/lib/dependabot/python/file_updater/pip_compile_file_updater.rb

@@ -67,7 +67,7 @@ module Dependabot
               # This is slow, as pip-compile needs to do installs.
               cmd_dep_name = Shellwords.join([
                 "pyenv", "exec", "pip-compile",
-                pip_compile_options(filename),
+                *pip_compile_options(filename),
                 "-P", dependency.name
               ].reject(&:empty?))
               cmd_dep_version = Shellwords.join([dependency.version, filename])
@@ -77,7 +77,7 @@ module Dependabot
               # Run pip-compile a second time, without an update argument, to
               # ensure it resets the right comments.
               run_pip_compile_command(
-                ["pyenv", "exec", "pip-compile", pip_compile_options(filename),
+                ["pyenv", "exec", "pip-compile", *pip_compile_options(filename),
                  filename].reject(&:empty?)
               )
             end
@@ -409,25 +409,25 @@ module Dependabot
 
           return unless requirements_file
 
-          options = ""
+          options = []
 
           if requirements_file.content.include?("--hash=sha")
-            options += " --generate-hashes"
+            options << "--generate-hashes"
           end
 
           if includes_unsafe_packages?(requirements_file.content)
-            options += " --allow-unsafe"
+            options << "--allow-unsafe"
           end
 
           unless requirements_file.content.include?("# via ")
-            options += " --no-annotate"
+            options << "--no-annotate"
           end
 
           unless requirements_file.content.include?("autogenerated by pip-c")
-            options += " --no-header"
+            options << "--no-header"
           end
 
-          options.strip
+          options
         end
 
         def includes_unsafe_packages?(content)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.98.9
+  version: 0.98.10
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.98.9
+        version: 0.98.10
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.98.9
+        version: 0.98.10
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement