diff --git a/lib/workers/repository/init/__snapshots__/vulnerability.spec.ts.snap b/lib/workers/repository/init/__snapshots__/vulnerability.spec.ts.snap index 805bb0fb6ecb5f8ef2c37290dcb26c0fbccc58cd..b96003fda5412ae7319dcee18ba3b42fb9ef4987 100644 --- a/lib/workers/repository/init/__snapshots__/vulnerability.spec.ts.snap +++ b/lib/workers/repository/init/__snapshots__/vulnerability.spec.ts.snap @@ -16,7 +16,7 @@ Array [ ], }, Object { - "allowedVersions": "==2.2.0", + "allowedVersions": "==2.2.1.0", "force": Object { "branchTopic": "{{{datasource}}}-{{{depName}}}-vulnerability", "commitMessageSuffix": "[SECURITY]", @@ -27,7 +27,7 @@ Array [ "schedule": Array [], }, "isVulnerabilityAlert": true, - "matchCurrentVersion": "= 1.6.7", + "matchCurrentVersion": "== 1.6.7", "matchDatasources": Array [ "pypi", ], diff --git a/lib/workers/repository/init/vulnerability.ts b/lib/workers/repository/init/vulnerability.ts index 666ce7c5c9cb1ebedfb889f6b8084ae05b308b51..6e63c73e13ffc75c1734c7a610d287a922ef64c8 100644 --- a/lib/workers/repository/init/vulnerability.ts +++ b/lib/workers/repository/init/vulnerability.ts @@ -62,7 +62,7 @@ export async function detectVulnerabilityAlerts( maven: mavenVersioning.id, npm: npmVersioning.id, nuget: semverVersioning.id, - pip_requirements: pep440Versioning.id, + pypi: pep440Versioning.id, rubygems: rubyVersioning.id, }; const combinedAlerts: CombinedAlert = {}; @@ -102,6 +102,9 @@ export async function detectVulnerabilityAlerts( vulnerableRequirements = `< ${firstPatchedVersion}`; } } + if (datasource === datasourcePypi.id) { + vulnerableRequirements = vulnerableRequirements.replace(/^= /, '== '); + } combinedAlerts[fileName] ||= {}; combinedAlerts[fileName][datasource] ||= {}; combinedAlerts[fileName][datasource][depName] ||= {};