From 210bed89a5081b4b4bc8b5b5ab84aec39c9e29b4 Mon Sep 17 00:00:00 2001 From: Anne-Marie <102995847+am-stead@users.noreply.github.com> Date: Mon, 24 Oct 2022 22:21:35 +0200 Subject: [PATCH] [2022-10-24]: Dependabot updates for Python PEP 621 - [GA] #8324 (#31517) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com> Co-authored-by: David Rodríguez Co-authored-by: Laurenzo Co-authored-by: Siara <108543037+SiaraMist@users.noreply.github.com> --- data/features/dependabot-PEP621-support.yml | 8 ++++++++ .../dependabot/supported-package-managers.md | 13 +++++++++---- 2 files changed, 17 insertions(+), 4 deletions(-) create mode 100644 data/features/dependabot-PEP621-support.yml diff --git a/data/features/dependabot-PEP621-support.yml b/data/features/dependabot-PEP621-support.yml new file mode 100644 index 0000000000..f1d4d502a6 --- /dev/null +++ b/data/features/dependabot-PEP621-support.yml @@ -0,0 +1,8 @@ +# Reference: Issue #8324 +# Title: Dependabot updates for Python PEP 621 + +versions: + fpt: '*' + ghec: '*' + ghes: '>= 3.8' + ghae: '>= 3.8' diff --git a/data/reusables/dependabot/supported-package-managers.md b/data/reusables/dependabot/supported-package-managers.md index 3e651d2f5e..f190735717 100644 --- a/data/reusables/dependabot/supported-package-managers.md +++ b/data/reusables/dependabot/supported-package-managers.md @@ -19,13 +19,13 @@ Gradle | `gradle` | N/A (no version)[1] | **✓** | Maven | `maven` | N/A (no version)[2] | **✓** | **✓** | | npm | `npm` | v6, v7, v8 | **✓** | **✓** | | NuGet | `nuget` | <= 4.8[3] | **✓** | **✓** | | -pip | `pip` | v21.1.2 | | **✓** | | +pip{% ifversion dependabot-PEP621-support %}[5]{% endif %} | `pip` | v21.1.2 | | **✓** | | pipenv | `pip` | <= 2021-05-29 | | **✓** | | -pip-compile | `pip` | 6.1.0 | | **✓** | | +pip-compile{% ifversion dependabot-PEP621-support %}[5]{% endif %} | `pip` | 6.1.0 | | **✓** | | poetry | `pip` | v1 | | **✓** | |{% ifversion fpt or ghec or ghes > 3.4 %} pub | `pub` | v2 [4] | | | |{% endif %} Terraform | `terraform` | >= 0.13, <= 1.2.x | **✓** | **✓** | | -{% ifversion dependabot-yarn-v3-update %}yarn | `npm` | v1, v2, v3 | **✓** | **✓** | **✓**[5] |{% else %}yarn | `npm` | v1 | **✓** | **✓** | | +{% ifversion dependabot-yarn-v3-update %}yarn | `npm` | v1, v2, v3 | **✓** | **✓** | **✓**[6] |{% else %}yarn | `npm` | v1 | **✓** | **✓** | | {% endif %} {% tip %} @@ -49,5 +49,10 @@ Terraform | `terraform` | >= 0.13, <= 1.2.x | **✓** | **✓** | | {%- else %}{% data variables.product.prodname_dependabot %} won't perform an update for `pub` when the version that it tries to update to is ignored, even if an earlier version is available.{% endif %} {% endif %} + +{% ifversion dependabot-PEP621-support %} +[5] In addition to supporting updates to `requirements.txt` files, {% data variables.product.prodname_dependabot %} supports updates to `pyproject.toml` files if they follow the PEP 621 standard. {% endif %} + {% ifversion dependabot-yarn-v3-update %} -[5] Dependabot supports vendored dependencies for v2 onwards.{% endif %} +[6] Dependabot supports vendored dependencies for v2 onwards.{% endif %} +