dependabot-python 0.98.76 → 0.98.77

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: ece925900b8fc0558b46b977e9b840e43915d146e102cfd8f49f13c89449de7d
4
- data.tar.gz: '0329cd4718d6813ad1e5616385848fe577178a40943051a1cbabb008307fa855'
3
+ metadata.gz: 8fb70e8b9b5d2ecb3f84280bed63cd17c40e5e763199ea38055e41d142c0fc0a
4
+ data.tar.gz: 0b570bd977f96852942a8c742cad72a8e4d89a480a0cdcf4e913410700989f45
5
5
  SHA512:
6
- metadata.gz: 644295e4f9bd127606d00c1c2197a8378f4b6aa3be306b52929e5d9daaf5de8e39e54cb1a34027d36a5f37bbe3ac2ca623788b97b3ab69c41584c50da3f38d6e
7
- data.tar.gz: 2ab66b5a474a99b230f588f3451973ba5c4ddadf145a18ed86fdcd7fd1eb46aadbfcb492ab6ce8faad5fe5c9293752968710028dadc23f513a438549a5e96a3b
6
+ metadata.gz: e32d17fec709fcecc0be255cb91b73d423ec15f7944dcf4c1a10f8ad177dae71976f0b43fb92684e2c4ae18eebc28e89a5b486b9207d16bccc87c48de3b55cb0
7
+ data.tar.gz: 91844caf09909572dbd0e945492623ede909e50648bf5a1cf105e4b0e8b2578c2b44e8b424155eaefd520d5dbfe0402b6b7fc5bea432ef69669e7b16549e56e0
@@ -1,5 +1,5 @@
1
1
  pip==19.0.3
2
- pip-tools==3.5.0
2
+ pip-tools==3.6.0
3
3
  hashin==0.14.5
4
4
  pipenv==2018.11.26
5
5
  pipfile==0.0.2
@@ -5,6 +5,7 @@ require "toml-rb"
5
5
  require "dependabot/dependency"
6
6
  require "dependabot/file_parsers/base/dependency_set"
7
7
  require "dependabot/python/file_parser"
8
+ require "dependabot/python/requirement"
8
9
  require "dependabot/errors"
9
10
 
10
11
  module Dependabot
@@ -40,6 +41,8 @@ module Dependabot
40
41
  next if normalise(name) == "python"
41
42
  next if req.is_a?(Hash) && req.key?("git")
42
43
 
44
+ check_requirements(req)
45
+
43
46
  dependencies <<
44
47
  Dependency.new(
45
48
  name: normalise(name),
@@ -87,6 +90,13 @@ module Dependabot
87
90
  fetch("verison", nil)
88
91
  end
89
92
 
93
+ def check_requirements(req)
94
+ requirement = req.is_a?(String) ? req : req["version"]
95
+ Python::Requirement.requirements_array(requirement)
96
+ rescue Gem::Requirement::BadRequirementError => error
97
+ raise Dependabot::DependencyFileNotEvaluatable, error.message
98
+ end
99
+
90
100
  # See https://www.python.org/dev/peps/pep-0503/#normalized-names
91
101
  def normalise(name)
92
102
  name.downcase.gsub(/[-_.]+/, "-")
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-python
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.98.76
4
+ version: 0.98.77
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2019-04-04 00:00:00.000000000 Z
11
+ date: 2019-04-05 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.98.76
19
+ version: 0.98.77
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.98.76
26
+ version: 0.98.77
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement