dependabot-python 0.98.6 → 0.98.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5021ae3ec6d59cb80ac712a45edeafff72ffa161309797bc92e44197bbeef846
-  data.tar.gz: bd9b0f48d45b7ede30619c406852d2c8c8dc7fee6d79e0e238c5cd0f600b80be
+  metadata.gz: 6d309884fb08b759885ec446fcd51a1527a21cdc43a6aa1d1a647adfd67be5d4
+  data.tar.gz: c4a011bad8bece6a1caf78952af0c667962319056dfa8f082b3b95d5c39a6992
 SHA512:
-  metadata.gz: 1cdc76ea46f73b5db86cbdf4fe26bc2581d5dc1aa7cd8aacb7097187035cb10439533dc754447e8eee66eb1920bc94e91448aaafe93b22152839abdb6b0ac7d3
-  data.tar.gz: 2e3e18758e33bfadd4f9375054ddc0d6a1be9160e1131dde8edfca5e63793590cc17fc119feb590dddc2fdb2ea00b697617ebad10084207a5863550c5cc10e66
+  metadata.gz: 5b03d21b2f4f6f7d9b943878477a9db2c9f4ff7972e50ef599689fb04150a358320213a2ec0598ad7e1f13eafab445d512b134d09a00c7d80cdfbd35c12aa1d2
+  data.tar.gz: eb9ef187a794d4c437f3a970c3da0172e44e32ab438326bb3f6eed32ba8352561e21ce903d4c8ff22116989e7e552819b7c190cde3f14846aa3514b74a48deb4

data/lib/dependabot/python/file_fetcher.rb

@@ -304,16 +304,12 @@ module Dependabot
       def requirements_file?(file)
         return true if file.name.match?(/requirements/x)
 
-        content = file.content.
-                  gsub(CONSTRAINT_REGEX, "").
-                  gsub(CHILD_REQUIREMENT_REGEX, "")
+        file.content.lines.all? do |line|
+          next true if line.strip.empty?
+          next true if line.start_with?("-r ", "-c ", "-e ")
 
-        matches = []
-
-        regex = RequirementParser::VALID_REQ_TXT_REQUIREMENT
-        content.scan(regex) { matches << Regexp.last_match }
-
-        matches.any?
+          line.match?(RequirementParser::VALID_REQ_TXT_REQUIREMENT)
+        end
       end
 
       def path_setup_file_paths

data/lib/dependabot/python/update_checker/pip_compile_version_resolver.rb

@@ -82,14 +82,6 @@ module Dependabot
           Python::Version.new(@latest_resolvable_version_string)
         end
 
-        def parse_requirements_from_cwd_files
-          SharedHelpers.run_helper_subprocess(
-            command: "pyenv exec python #{NativeHelpers.python_helper_path}",
-            function: "parse_requirements",
-            args: [Dir.pwd]
-          )
-        end
-
         def handle_pip_compile_errors(error)
           if error.message.include?("Could not find a version")
             check_original_requirements_resolvable

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.98.6
+  version: 0.98.7
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.98.6
+        version: 0.98.7
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.98.6
+        version: 0.98.7
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement