ܖi_dZddlZddlmZddlmZddlZddlmZddl m Z m Z m Z ddl mZddlmZmZdd lmZej(eZGd d e ZGd d e ZGdde Zy)z0 Collect dependencies from `pylock.toml` files. N)Iterator)Path)Version)DependencyFixErrorDependencySourceDependencySourceError)ResolvedFixVersion) DependencyResolvedDependency)SkippedDependencyczeZdZdZdeeddfdZdeefdZ dedeefdZ d ee deefd Z d e ddfd Zy) PyLockSourcezM Wraps `pylock.*.toml` dependency collection as a dependency source. filenamesreturnNc||_y)zv Create a new `PyLockSource`. `filenames` provides a list of `pylock.*.toml` files to parse. N) _filenames)selfrs g/var/www/html/content-pipeline/venv/lib/python3.12/site-packages/pip_audit/_dependency_source/pylock.py__init__zPyLockSource.__init__s $c#dK|jD]}|j|Ed{y7w)z Collect all of the dependencies discovered by this `PyLockSource`. Raises a `PyLockSourceError` on any errors. N)r_collect_from_file)rfilenames rcollectzPyLockSource.collect"s2  9H..x8 8 8 9 8s $0.0rc#0K |jd5}tj|}dddj d}|st |dt |}|jdk7rt |d|d |j d }|st |d  |j|Ed{y#1swYxYw#tj$r}t |d|d}~wwxYw7;#t$r}t |d ||d}~wwxYww) z Collect dependencies from a single `pylock.*.toml` file. Raises a `PyLockSourceError` on any errors. rb)modeNz: invalid TOML in lockfilez lock-versionz": missing lock-version in lockfilez: lockfile version z is not supportedpackagesz: missing packages in lockfilez: ) opentomliloadTOMLDecodeErrorPyLockSourceErrorgetrmajor_collect_from_packages)rrfpylocke lock_versionrs rrzPyLockSource._collect_from_file+s,  TD) 'QA ' zz.1 #xj0R$ST T|,    "#xj0CL>Qb$cd d::j)#xj0N$OP P ?228< < <% ' '$$ T#xj0J$KLRS S T =  ?#xj1#$67Q > ?stDCB<CA-D"C46C27C4;D<CCC/C**C//D2C44 D=DDDrc#Kt|D]`\}}|jd}|std|d|jd}|rt|t |St |dbyw)zt Collect dependencies from a list of packages. Raises a `PyLockSourceError` on any errors. namezinvalid package #z : no nameversionzno version specifiedN) enumerater%r$r rr )rridxpackager-r.s rr'z#PyLockSource._collect_from_packagesHs{ &h/ FLC;;v&D'*;C5 (JKKkk),G(ww/?@@(.DEE FsA0A2 fix_versionctd)z Raises `NotImplementedError` if called. We don't support fixing dependencies in lockfiles, since lockfiles should be managed/updated by their packaging tool. zOlockfiles cannot be fixed directly; use your packaging tool to perform upgrades)NotImplementedError)rr2s rfixzPyLockSource.fix[s" ]  r)__name__ __module__ __qualname____doc__listrrrr rrdictr'r r5rrrrsz$$t*$$9*-9?4?HZ4H?:FtDzFhz>RF&  1  d  rrceZdZdZy)r$z2A pylock-parsing specific `DependencySourceError`.Nr6r7r8r9r<rrr$r$hs<rr$ceZdZdZy)PyLockFixErrorz.A pylock-fizing specific `DependencyFixError`.Nr>r<rrr@r@ns8rr@)r9loggingcollections.abcrpathlibrr!packaging.versionrpip_audit._dependency_sourcerrrpip_audit._fixr pip_audit._servicer r pip_audit._service.interfacer getLoggerr6loggerrr$r@r<rrrKsf$ %dd-=:   8 $Q #Q h -  ' r