dependabot-uv 0.310.0 → 0.311.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: e1a229a18223375121cc0e6b137a673c7ffd5d1c0ce304f26aac7836a18538c3
4
- data.tar.gz: 8a5e19d5bd17dfea80d8d62a8c9d3b1c8b317b4b110360263d1defcb49918e6b
3
+ metadata.gz: 6a64861cb499fcd0ee73011f77ba2b95fc83beb3f0c198145acf32eefb02a379
4
+ data.tar.gz: b24bf22ffecc34c99148c9abb5b9fdbd0d03ecbf265d5e8f7296deec9e69a661
5
5
  SHA512:
6
- metadata.gz: fe5fc696dbf39caa307c89c4267dc2e9e781ef7727f4825f054dec10af75c0cb2042c4bd32a1788d3723c417c93f31e16e61128b22519e6b49a1578b648af2d1
7
- data.tar.gz: a986a41d601fd75ed65d725b24965324ca64ee9a625eebfcea9f1137ac942b3b2992a8791d508afad80b63869cf8735a90cc93f2b4784707da22ad45a124dcd4
6
+ metadata.gz: 9208291e57db41389d7e84e33cd5ca308fa3452a1fcf7c21b263d65db563df1f32689f0a7506061fff81e0f0753f683c55f83154a7026a9a6f67c6d55a40cba7
7
+ data.tar.gz: 6fdfa9e15a44ce4668deb56a7eca7c8626f7d388dcf92bb417a3d934bfe71dbe93bd49243337e60585efb6fc2ec7377d40e24e6cca4fe91a17ba6d75a3298005
@@ -7,7 +7,7 @@ plette==2.1.0
7
7
  poetry==1.8.5
8
8
  # TODO: Replace 3p package `tomli` with 3.11's new stdlib `tomllib` once we drop support for Python 3.10.
9
9
  tomli==2.0.1
10
- uv==0.6.13
10
+ uv==0.7.1
11
11
 
12
12
  # Some dependencies will only install if Cython is present
13
13
  Cython==3.0.10
@@ -43,16 +43,6 @@ module Dependabot
43
43
  sig { returns(Dependabot::FileParsers::Base::DependencySet) }
44
44
  def pyproject_dependencies
45
45
  if using_poetry?
46
- missing_keys = missing_poetry_keys
47
-
48
- if missing_keys.any?
49
- raise DependencyFileNotParseable.new(
50
- T.must(pyproject).path,
51
- "#{T.must(pyproject).path} is missing the following sections:\n" \
52
- " * #{missing_keys.map { |key| "tool.poetry.#{key}" }.join("\n * ")}\n"
53
- )
54
- end
55
-
56
46
  poetry_dependencies
57
47
  else
58
48
  pep621_dependencies
@@ -175,13 +165,6 @@ module Dependabot
175
165
  !poetry_root.nil?
176
166
  end
177
167
 
178
- sig { returns(T::Array[String]) }
179
- def missing_poetry_keys
180
- package_mode = T.must(poetry_root).fetch("package-mode", true)
181
- required_keys = package_mode ? %w(name version description authors) : []
182
- required_keys.reject { |key| T.must(poetry_root).key?(key) }
183
- end
184
-
185
168
  sig { returns(T::Boolean) }
186
169
  def using_pep621?
187
170
  !parsed_pyproject.dig("project", "dependencies").nil? ||
metadata CHANGED
@@ -1,13 +1,13 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-uv
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.310.0
4
+ version: 0.311.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  bindir: bin
9
9
  cert_chain: []
10
- date: 2025-04-24 00:00:00.000000000 Z
10
+ date: 2025-05-01 00:00:00.000000000 Z
11
11
  dependencies:
12
12
  - !ruby/object:Gem::Dependency
13
13
  name: dependabot-common
@@ -15,14 +15,14 @@ dependencies:
15
15
  requirements:
16
16
  - - '='
17
17
  - !ruby/object:Gem::Version
18
- version: 0.310.0
18
+ version: 0.311.0
19
19
  type: :runtime
20
20
  prerelease: false
21
21
  version_requirements: !ruby/object:Gem::Requirement
22
22
  requirements:
23
23
  - - '='
24
24
  - !ruby/object:Gem::Version
25
- version: 0.310.0
25
+ version: 0.311.0
26
26
  - !ruby/object:Gem::Dependency
27
27
  name: debug
28
28
  requirement: !ruby/object:Gem::Requirement
@@ -223,16 +223,16 @@ dependencies:
223
223
  name: webrick
224
224
  requirement: !ruby/object:Gem::Requirement
225
225
  requirements:
226
- - - ">="
226
+ - - "~>"
227
227
  - !ruby/object:Gem::Version
228
- version: '1.7'
228
+ version: '1.9'
229
229
  type: :development
230
230
  prerelease: false
231
231
  version_requirements: !ruby/object:Gem::Requirement
232
232
  requirements:
233
- - - ">="
233
+ - - "~>"
234
234
  - !ruby/object:Gem::Version
235
- version: '1.7'
235
+ version: '1.9'
236
236
  description: Dependabot-uv provides support for bumping Python packages via Dependabot.
237
237
  If you want support for multiple package managers, you probably want the meta-gem
238
238
  dependabot-omnibus.
@@ -284,7 +284,7 @@ licenses:
284
284
  - MIT
285
285
  metadata:
286
286
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
287
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.310.0
287
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.311.0
288
288
  rdoc_options: []
289
289
  require_paths:
290
290
  - lib