Zanie Blue
Zanie Blue
It looks like somehow the `requires-python` range is being changed from `>=3.9` to `>=3.13` and we're dropping the old wheels. Are you changing the Python version range? If so, why?
It seems like this occurs at https://github.com/dependabot/dependabot-core/blob/59943c098d9a28736a2f3ac2945faf3048e662ed/uv/lib/dependabot/uv/file_updater/lock_file_updater.rb#L166-L170 You don't need to do that. The project metadata needs to be preserved for a correct lock.
That's a question for GitHub and the Dependabot team.
If I have a spare bit I'll do it, in the meantime anyone should feel free to do so :)
I think it's important for this to be scoped to the project to avoid different resolutions for a project per developer.
Mind if I keep this open? We should add some documentation around this, I've seen it a couple times.
Thanks for following up!
(to the OP: if your problem persists and you can get full logs, please let us know and we can help. I think these cases are mostly part of the...
I'm not sure I agree with the premise that > It's quite odd that file = "a/b" would work but file = "a/*" won't. In the former, you've explicitly requested...
I think I'm in favor of the opt-in `***` syntax. I think it'll overlap with the conversation at https://github.com/astral-sh/uv/pull/13469#issuecomment-2913017907 though.