dependabot-python 0.98.15 → 0.98.16

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e09c6fff2c7447e2a1a1581b9983f782769b0c04029e50e3019e11d513d03ddf
-  data.tar.gz: 4740b7678c92bb41614638468a5279f2b9b0404011144bab863d654431bbf9e5
+  metadata.gz: a20f6a5b17c638ba7b511ea05511c82cfa87c1d7bb5e037db6871fbefc6f197b
+  data.tar.gz: d693cac0af963ea95481dcfea8ce691293b79b423b0dfd7abefa11268c5e08b5
 SHA512:
-  metadata.gz: ac404e1d554a61aa4605eccf592d70a6f316438e4e241de8977578261e9b7f7f7d461519e22bbaed81d89ef68fde5e8d7ec470c84ba8daea8283c3ab1608326a
-  data.tar.gz: 5a3353dfe904c24b6285893d7fcc397354ca24294da426cbf0d2b6bb4bddb85c98be873d2d30e8af51b46dcb32bb1951ac909ef213ce378c55f5b059e55ee594
+  metadata.gz: 3dd9b2507d5aad67c603949d9b7308e2c5a067ea61f8d8bdd7f6a96992667e6584c3485ff0baadc7eb35e3513827097e8f45079cb558a7cc783c8699ef91c523
+  data.tar.gz: ed41be6a6158526e7b3b28e9c545b48e61a9dec279d3709ae212e5f0066d4c33509e35404cad4a8402e99d9304ff9f4e82b33292d775269fa321857715854679

data/helpers/build

@@ -16,5 +16,5 @@ cp -r \
   "$install_dir"
 
 cd "$install_dir"
-PYENV_VERSION=2.7.15 pyenv exec pip install -r "requirements.txt"
+PYENV_VERSION=2.7.16 pyenv exec pip install -r "requirements.txt"
 PYENV_VERSION=3.6.8  pyenv exec pip install -r "requirements.txt"

data/helpers/lib/parser.py

@@ -20,6 +20,10 @@ def parse_requirements(directory):
     pip_compile_files = glob.glob(os.path.join(directory, '*.in')) \
                         + glob.glob(os.path.join(directory, '**', '*.in'))
 
+    def version_from_install_req(install_req):
+        if install_req.is_pinned:
+            return next(iter(install_req.specifier)).version
+
     for reqs_file in requirement_files + pip_compile_files:
         try:
             requirements = pip._internal.req.req_file.parse_requirements(
@@ -29,10 +33,6 @@ def parse_requirements(directory):
             for install_req in requirements:
                 if install_req.original_link:
                     continue
-                if install_req.is_pinned:
-                    version = next(iter(install_req.specifier)).version
-                else:
-                    version = None
 
                 pattern = r"-[cr] (.*) \(line \d+\)"
                 abs_path = re.search(pattern, install_req.comes_from).group(1)
@@ -40,7 +40,7 @@ def parse_requirements(directory):
 
                 requirement_packages.append({
                     "name": install_req.req.name,
-                    "version": version,
+                    "version": version_from_install_req(install_req),
                     "markers": str(install_req.markers) or None,
                     "file": rel_path,
                     "requirement": str(install_req.specifier) or None
@@ -55,17 +55,18 @@ def parse_setup(directory):
     # Parse the setup.py
     setup_packages = []
     if os.path.isfile(directory + '/setup.py'):
+        def version_from_install_req(install_req):
+            if install_req.is_pinned:
+                return next(iter(install_req.specifier)).version
+
         def parse_requirement(req, req_type):
             install_req = install_req_from_line(req)
             if install_req.original_link:
                 return
-            if install_req.is_pinned:
-                version = next(iter(install_req.specifier)).version
-            else:
-                version = None
+
             setup_packages.append({
                 "name": install_req.req.name,
-                "version": version,
+                "version": version_from_install_req(install_req),
                 "markers": str(install_req.markers) or None,
                 "file": "setup.py",
                 "requirement": str(install_req.specifier) or None,

data/lib/dependabot/python/file_fetcher.rb

@@ -262,7 +262,7 @@ module Dependabot
       def fetch_path_setup_file(path, allow_pyproject: false)
         path_setup_files = []
 
-        unless path.end_with?(".tar.gz", ".zip", ".whl")
+        unless path.end_with?(".tar.gz", ".whl", ".zip")
           path = Pathname.new(File.join(path, "setup.py")).cleanpath.to_path
         end
         return [] if path == "setup.py" && setup_file

data/lib/dependabot/python/file_updater/pip_compile_file_updater.rb

@@ -169,9 +169,9 @@ module Dependabot
 
           raise relevant_error unless error_suggests_bad_python_version?(msg)
           raise relevant_error if user_specified_python_version
-          raise relevant_error if python_version == "2.7.15"
+          raise relevant_error if python_version == "2.7.16"
 
-          @python_version = "2.7.15"
+          @python_version = "2.7.16"
           retry
         ensure
           @python_version = nil

data/lib/dependabot/python/file_updater/pipfile_file_updater.rb

@@ -281,7 +281,7 @@ module Dependabot
           run_command(["pyenv", "local", python_version])
           run_command(["pyenv", "exec", "pipenv", "--rm"])
 
-          @python_version = "2.7.15"
+          @python_version = "2.7.16"
           retry
         ensure
           @python_version = nil

data/lib/dependabot/python/python_versions.rb

@@ -4,7 +4,7 @@ module Dependabot
   module Python
     module PythonVersions
       PRE_INSTALLED_PYTHON_VERSIONS = %w(
-        3.6.8 2.7.15
+        3.6.8 2.7.16
       ).freeze
 
       # Due to an OpenSSL issue we can only install the following versions in
@@ -13,7 +13,7 @@ module Dependabot
         3.7.2 3.7.1 3.7.0
         3.6.8 3.6.7 3.6.6 3.6.5 3.6.4 3.6.3 3.6.2 3.6.1 3.6.0
         3.5.6 3.5.5 3.5.4 3.5.3
-        2.7.15 2.7.14 2.7.13
+        2.7.16 2.7.15 2.7.14 2.7.13
       ).freeze
 
       # This list gets iterated through to find a valid version, so we have

data/lib/dependabot/python/update_checker/pip_compile_version_resolver.rb

@@ -176,9 +176,9 @@ module Dependabot
 
           raise relevant_error unless error_suggests_bad_python_version?(msg)
           raise relevant_error if user_specified_python_version
-          raise relevant_error if python_version == "2.7.15"
+          raise relevant_error if python_version == "2.7.16"
 
-          @python_version = "2.7.15"
+          @python_version = "2.7.16"
           retry
         ensure
           @python_version = nil

data/lib/dependabot/python/update_checker/pipfile_version_resolver.rb

@@ -524,7 +524,7 @@ module Dependabot
           run_command(["pyenv", "local", python_version])
           run_command(["pyenv", "exec", "pipenv", "--rm"])
 
-          @python_version = "2.7.15"
+          @python_version = "2.7.16"
           retry
         ensure
           @python_version = nil

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.98.15
+  version: 0.98.16
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.98.15
+        version: 0.98.16
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.98.15
+        version: 0.98.16
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement