dependabot-python 0.98.39 → 0.98.40

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7f72cc32a0fa744bc24bf0fc273116cf4803ded44e617c7d76d96425b8eca596
-  data.tar.gz: a1a5306b74333826c060cc3c6e860ce5b99d411926247a5800bb0ec64a343df6
+  metadata.gz: f2149254c88cad4a314ed5079edc0f4404f277b805b96655bd84318f489d26c6
+  data.tar.gz: 8a6f319934bf0838fe1cf07118080f784c39e7e0895ed1a79144baef3b8775d7
 SHA512:
-  metadata.gz: e818c8cb4ad6801d74dd8fc202751d764e889fdd2460523fcda280f363e6b32f6fb507216233a79d384bff1884aa8dcb5a296807e4e3f0b9355b9bb028da1ba8
-  data.tar.gz: 0ae787c798f0eaf861dc88b41cd39edc6cf3ac0f2d89d1d1dee1de23092cb9ae753d97c038f46937bfec696e44faad4f89b501401c2162b4b444b8fd2e0564f8
+  metadata.gz: 22949505d1565c1369b42f2b157631483171ee87f9b8a03459a04b1b98e9b4ebc299612b00010fcd94f6fba24f2b51419fa1b572edd7a2cdf0f5ef02748d3af1
+  data.tar.gz: 2e27c9d438ab873b0ec6541af22a5f94bf4368adcbc90beb42b82079c420b7a77df084b9345ffa0d3ed0b49a6f12d70de71c965efc912e127829aa5bf2170090

data/lib/dependabot/python/update_checker/latest_version_finder.rb

@@ -212,23 +212,17 @@ module Dependabot
 
         def clean_check_and_remove_environment_variables(url)
           url = url.strip.gsub(%r{/*$}, "") + "/"
-          return url unless url.match?(ENVIRONMENT_VARIABLE_REGEX)
-
-          config_variable_urls =
-            [
-              config_variable_index_urls[:main],
-              *config_variable_index_urls[:extra]
-            ].
-            compact.
-            map { |u| u.strip.gsub(%r{/*$}, "") + "/" }
-
-          regexp = url.split(ENVIRONMENT_VARIABLE_REGEX).
-                   map { |part| Regexp.quote(part) }.
-                   join(".+")
-          authed_url = config_variable_urls.find { |u| u.match?(regexp) }
-          return authed_url if authed_url
-
-          raise PrivateSourceAuthenticationFailure, url
+          url = url.gsub(%r{#{ENVIRONMENT_VARIABLE_REGEX}/?}, "")
+          authed_base_url(url)
+        end
+
+        def authed_base_url(base_url)
+          cred = credentials.
+                  select { |c| c["type"] == "python_index" }.
+                  find { |c| c.fetch("index-url").include?(base_url) }
+          return base_url unless cred
+
+          AuthedUrlBuilder.authed_url(credential: cred)
         end
 
         def ignore_reqs

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.98.39
+  version: 0.98.40
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.98.39
+        version: 0.98.40
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.98.39
+        version: 0.98.40
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement