dependabot-core icon indicating copy to clipboard operation
dependabot-core copied to clipboard

requirements.txt is ignored when Pipfile exists

Open CorralPeltzer opened this issue 5 years ago • 0 comments

Package manage/ecosystem pip What you expected to see, versus what you actually saw My repo (https://github.com/CorralPeltzer/newTrackon) has both requirements.txt and Pipfile with only top level dependencies.

According to the configuration, Dependabot is monitoring both files. However, on PRs it only updates Pipfile, see https://github.com/CorralPeltzer/newTrackon/pull/106.

This was reported in https://github.com/dependabot/feedback/issues/435, but the proposed solution (generating requirements.txt, with Pipenv, which adds all transitive dependencies) is not what I'd like to have.

CorralPeltzer avatar Jun 28 '20 15:06 CorralPeltzer