dependabot-python 0.98.31 → 0.98.32

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 55f2df02a86fe3a817276864b695d703405ef351bb4bd0603d5f312ce77dfd33
-  data.tar.gz: c777600045af9242c35cbe00362b55fb564cb118d0eb67f6cb2ba38542a9f607
+  metadata.gz: 57ad32ac040184b8acacabaead63e2e477fad8692627037488964aedc4df6091
+  data.tar.gz: 4d940ffdff07e26f8910675777e8047e045d70c75663d69ac71231dc863a390d
 SHA512:
-  metadata.gz: 73358ae18269988f15538f36f63816742768dacb98a134ad1cc43639aa805596144f9c5d493a97f40416bf3aa13c67dad618cf7528e59e13f158dd3e313f9280
-  data.tar.gz: dc1e97ab3f7427cadc635953124e15ba7cb9115ad68986855163c64ddcb67aec22f66e9a2f7d5bc7eb398e7e753198fdfa4e32d4cccad4b1b48ea9de0fbc6b91
+  metadata.gz: 204c3fd077c46b617c2a81390f771452a8acdc3aa7cbb137bb69584a517cb7c9efe70a0eaf49bb612bf6036cbca0fb093ee00e0832943b54eb44c89b68164673
+  data.tar.gz: d9851b78fe7c2b639237c3378c1437bb0a4deb461c7291d1f4b4a0ec1a1f2c6570d3c300dc5c2e6432736e017b6ba9815ee93e79ef21f384b96b91d24d857852

data/lib/dependabot/python/file_updater/pipfile_preparer.rb

@@ -113,6 +113,8 @@ module Dependabot
             map { |h| h.dup.merge("url" => h["url"].gsub(%r{/*$}, "") + "/") }
         end
 
+        # Has test that it works without username / password.
+        # TODO: Test with proxy
         def config_variable_sources(credentials)
           @config_variable_sources ||=
             credentials.

data/lib/dependabot/python/file_updater/pyproject_preparer.rb

@@ -93,6 +93,8 @@ module Dependabot
             map { |h| h.dup.merge("url" => h["url"].gsub(%r{/*$}, "") + "/") }
         end
 
+        # Has test that it works without username / password.
+        # TODO: Test with proxy
         def config_variable_sources(credentials)
           @config_variable_sources ||=
             credentials.

data/lib/dependabot/python/metadata_finder.rb

@@ -146,6 +146,8 @@ module Dependabot
         @pypi_listing = {} # No listing found
       end
 
+      # Has test that it works without username / password.
+      # TODO: Test with proxy
       def possible_listing_urls
         credential_urls =
           credentials.

data/lib/dependabot/python/update_checker/latest_version_finder.rb

@@ -190,6 +190,8 @@ module Dependabot
           urls
         end
 
+        # Has test that it works without username / password.
+        # TODO: Test with proxy
         def config_variable_index_urls
           urls = { main: nil, extra: [] }
 

data/lib/dependabot/python/update_checker/pipfile_version_resolver.rb

@@ -421,10 +421,6 @@ module Dependabot
         end
 
         def check_private_sources_are_reachable
-          env_sources = pipfile_sources.select { |h| h["url"].include?("${") }
-
-          check_env_sources_included_in_config_variables(env_sources)
-
           sources_to_check =
             pipfile_sources.reject { |h| h["url"].include?("${") } +
             config_variable_sources
@@ -534,24 +530,8 @@ module Dependabot
           error_message.include?('Command "python setup.py egg_info" failed')
         end
 
-        def check_env_sources_included_in_config_variables(env_sources)
-          config_variable_source_urls =
-            config_variable_sources.map { |s| s["url"] }
-
-          env_sources.each do |source|
-            url = source["url"]
-            known_parts = url.split(/\$\{.*?\}/).reject(&:empty?).compact
-
-            # If the whole URL is an environment variable we can't do a check
-            next if known_parts.none?
-
-            regex = known_parts.map { |p| Regexp.quote(p) }.join(".*?")
-            next if config_variable_source_urls.any? { |s| s.match?(regex) }
-
-            raise PrivateSourceAuthenticationFailure, url
-          end
-        end
-
+        # Has test that it works without username / password.
+        # TODO: Test with proxy
         def config_variable_sources
           @config_variable_sources ||=
             credentials.

data/lib/dependabot/python/update_checker/poetry_version_resolver.rb

@@ -337,6 +337,8 @@ module Dependabot
           name.downcase.gsub(/[-_.]+/, "-")
         end
 
+        # Has test that it works without username / password.
+        # TODO: Test with proxy
         def config_variable_sources
           @config_variable_sources ||=
             credentials.

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.98.31
+  version: 0.98.32
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-03-22 00:00:00.000000000 Z
+date: 2019-03-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.98.31
+        version: 0.98.32
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.98.31
+        version: 0.98.32
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement