feat(python): use minimum version for pip packages

[afdesk]

Description

This PR adds a minimum version detection for Compatible release and Inclusive ordered comparison clauses inside pip packages.

It works only with --detection-priority comprehensive.

Refs

• Python version specifiers: https://packaging.python.org/en/latest/specifications/version-specifiers/#id5

Related issues

• Close feat(pip): use minimum version in range #7300

Checklist

• I've read the guidelines for contributing to this repository.
• I've followed the conventions in the PR title.
• I've added tests that prove my fix is effective or that my feature works.
• I've updated the documentation with the relevant information (if needed).
• I've added usage information (if the PR introduces new options)
• I've included a "before" and "after" example to the description (if the PR is a user interface change).

[DmitriyLewen]

@afdesk I left couple comments.

Can you also update python page in docs?

[DmitriyLewen]

I thought about *.

== 3.1.*: any version that starts with 3.1. Equivalent to the ~=3.1.0 compatible release clause.

We show minimal version, so it looks like we can replace * to 0.
wdyt?

[knqyf263]

Agree!

[afdesk]

replacing a trailing * is added.

[DmitriyLewen]

wdyt?

Suggested change

	func splitLine(line string) []string {
	result := strings.Split(line, "~=")
	if len(result) == 2 {
	return result
	}
	result = strings.Split(line, ">=")
	if len(result) == 2 {
	return result
	}
	return strings.Split(line, "==")
	}
	func (p *Parser) splitLine(line string) []string {
	separators := []string{"~=", ">=", "=="}
	// Without useMinVersion check only `==`
	if !p.useMinVersion {
	separators = []string{"=="}
	}
	for _, sep := range separators {
	if result := strings.Split(line, sep); len(result) == 2 {
	return result
	}
	}
	return nil
	}

[afdesk]

done

[DmitriyLewen]

IIUC we can check .* as suffix:

root@5c86285e4f39:/app# pip install django==5.*.*
ERROR: Invalid requirement: 'django==5.*.*': .* suffix can only be used with `==` or `!=` operators
    django==5.*.*
          ~~~~~~^
root@5c86285e4f39:/app# pip install django==4.*.1
ERROR: Invalid requirement: 'django==4.*.1': Expected end or semicolon (after version specifier)
    django==4.*.1
          ~~~~~^
root@5c86285e4f39:/app# pip install django==5.*
Collecting django==5.*
  Downloading Django-5.1-py3-none-any.whl.metadata (4.2 kB)

[DmitriyLewen]

Do we need this check (I mean strings.Index(s[1], ".*") > -1)?
It seems like we can always replace the .* suffix if p.useMinVersion==true.
Or am I missing something?

[afdesk]

@DmitriyLewen ok, removed this check

[afdesk]

no, it doesn't work correctly. updating.

[DmitriyLewen]

LGTM