dependabot-uv 0.344.1 → 0.346.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e0b432bd3dd612994234b5a7c488e987f9151491fcf0282eca559d7185a2d6dd
-  data.tar.gz: 4fd4431aa08154b567b3b51b40672d02e703c4d062d5b078464035337352a042
+  metadata.gz: bd324866800eaff108d045f243b404590ac6e20e1429cf8731be5bf9bfdee060
+  data.tar.gz: 902ae6d7f0042bda65cab499aa8accbecc8280959fd2f478c427fcfaad3056e2
 SHA512:
-  metadata.gz: c1b96995c33766477e208dafd5b6e3ae5684d92fba171abbdac93db463c25e69874fd874c8fd7bed99a44e9c953152d083daaba0bbd83a832988f6d98a6c5fcb
-  data.tar.gz: 6341336703ad5a8c1779fc9371cc4c51992f5ea0acb7d3d4413467a801752c2fa8ad14e4c1bb0029b0a08b6020c36ace349ae72c272451bf1399caf2b38ca0c8
+  metadata.gz: 5e4e1bf5db3c269503def24ed8ae3cdbcd59a66965c6122bc7bf321ff3e635893f114a23d96490e7bf62bba78c664774645f3627ba7795f0920dd680bddf2d76
+  data.tar.gz: 9cd14b2fab76a7821496d52c7f7ab7a3ca293e0f232e61b54d652df953d536015dd6b7fd1140449e5873511c794d982c7b7ab7fb86816aceebc5187f763c6ec1

data/helpers/lib/hasher.py

@@ -1,7 +1,9 @@
 import hashin
 import json
 import plette
+import ssl
 import traceback
+from urllib.error import URLError
 from poetry.factory import Factory
 
 
@@ -21,6 +23,17 @@ def get_dependency_hash(dependency_name, dependency_version, algorithm,
             "error_class:": e.__class__.__name__,
             "trace:": ''.join(traceback.format_stack())
         })
+    except (URLError, ssl.SSLError) as e:
+        # Handle SSL certificate verification errors
+        error_msg = str(e)
+        if "CERTIFICATE_VERIFY_FAILED" in error_msg:
+            return json.dumps({
+                "error": "CERTIFICATE_VERIFY_FAILED: " + error_msg,
+                "error_class:": e.__class__.__name__,
+                "trace:": ''.join(traceback.format_stack())
+            })
+        # Re-raise if it's not a certificate verification error
+        raise
 
 
 def get_pipfile_hash(directory):

data/lib/dependabot/uv/file_parser/pyproject_files_parser.rb

@@ -84,10 +84,10 @@ module Dependabot
           parse_pep621_pep735_dependencies.each do |dep|
             # If a requirement has a `<` or `<=` marker then updating it is
             # probably blocked. Ignore it.
-            next if dep["markers"].include?("<")
+            next if dep["markers"]&.include?("<")
 
             # In uv no constraint means any version is acceptable
-            requirement_value = dep["requirement"].empty? ? "*" : dep["requirement"]
+            requirement_value = dep["requirement"] && dep["requirement"].empty? ? "*" : dep["requirement"]
 
             dependencies <<
               Dependency.new(

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-uv
 version: !ruby/object:Gem::Version
-  version: 0.344.1
+  version: 0.346.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.344.1
+        version: 0.346.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.344.1
+        version: 0.346.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -284,7 +284,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.344.1
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.346.0
 rdoc_options: []
 require_paths:
 - lib