Skip to content

build(pip): pin dependencies#530

Open
renovate[bot] wants to merge 1 commit intodevfrom
renovate/pin-dependencies
Open

build(pip): pin dependencies#530
renovate[bot] wants to merge 1 commit intodevfrom
renovate/pin-dependencies

Conversation

@renovate
Copy link
Copy Markdown

@renovate renovate Bot commented Apr 29, 2026

This PR contains the following updates:

Package Type Update Change
bandit (source, changelog) dependency-groups pin >=1.7.5==1.9.4
bcrypt dependency-groups pin >=5.0.0==5.0.0
github-backup project.dependencies pin >=0.50.3==0.61.5
hatchling (source, changelog) dependency-groups pin >=1.25==1.29.0
ipykernel project.optional-dependencies pin >=6.0==7.2.0
jinja2 (changelog) project.dependencies pin >=3.1.0==3.1.6
jupyter project.optional-dependencies pin >=1.0==1.1.1
matplotlib project.optional-dependencies pin >=3.9==3.10.9
numpy (changelog) project.optional-dependencies pin >=2.0==2.4.4
pandas project.optional-dependencies pin >=2.2==3.0.2
pexpect (source, changelog) dependency-groups pin >=4.8.0==4.9.0
pexpect (source, changelog) project.dependencies pin >=4.9.0==4.9.0
pip-licenses (changelog) dependency-groups pin >=5.0.0==5.5.1
pre-commit dependency-groups pin >=4.3.0==4.5.1
pre-commit project.dependencies pin >=4.3.0==4.5.1
pytest-cov (changelog) dependency-groups pin >=6.0==7.0.0
pytest-cov (changelog) project.optional-dependencies pin >=4.0==7.0.0
pytest-docker dependency-groups pin >=3.2.3==3.2.5
pytest-testinfra dependency-groups pin >=10.2.2==10.2.2
python (source) requires-python pin >=3.10==3.14.4
python (source) requires-python pin >=3.12==3.14.4
pyyaml (source) project.dependencies pin >=6.0.3==6.0.3
rich dependency-groups pin >=13.0.0==14.3.3
ruff (source, changelog) dependency-groups pin >=0.14.3==0.15.5
scipy project.optional-dependencies pin >=1.14==1.17.1
testcontainers dependency-groups pin >=4.9.0==4.14.1
testinfra project.dependencies pin >=6.0.0==6.0.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.


Configuration

📅 Schedule: (in timezone Etc/UTC)

  • Branch creation
    • "before 9am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Copy Markdown
Author

renovate Bot commented Apr 29, 2026

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: uv.lock
Command failed: uv lock --upgrade-package hatchling --upgrade-package ipykernel --upgrade-package jupyter --upgrade-package matplotlib --upgrade-package numpy --upgrade-package pandas --upgrade-package pytest-cov --upgrade-package python --upgrade-package rich --upgrade-package scipy
error: Failed to parse: `pyproject.toml`
  Caused by: TOML parse error at line 2, column 8
  |
2 | name = "{{SHORT_NAME}}"
  |        ^^^^^^^^^^^^^^^^
Not a valid package or extra name: "{{SHORT_NAME}}". Names must start and end with a letter or digit and may only contain -, _, ., and alphanumeric characters.

File name: uv.lock
Command failed: uv lock --upgrade-package bandit --upgrade-package bandit --upgrade-package bcrypt --upgrade-package github-backup --upgrade-package jinja2 --upgrade-package pexpect --upgrade-package pexpect --upgrade-package pip-licenses --upgrade-package pip-licenses --upgrade-package pre-commit --upgrade-package pre-commit --upgrade-package pre-commit --upgrade-package pytest-cov --upgrade-package pytest-docker --upgrade-package pytest-testinfra --upgrade-package pyyaml --upgrade-package rich --upgrade-package ruff --upgrade-package ruff --upgrade-package testcontainers --upgrade-package testinfra
Using CPython 3.12.10 interpreter at: /opt/containerbase/tools/python/3.12.10/bin/python3
  × No solution found when resolving dependencies:
  ╰─▶ Because the requested Python version (==3.12.10) does not satisfy
      Python==3.14.4 and vig-utils==0.1.0 depends on Python==3.14.4, we can
      conclude that vig-utils==0.1.0 cannot be used.
      And because only vig-utils==0.1.0 is available, we can conclude that all
      versions of vig-utils cannot be used.
      And because devcontainer:dev depends on vig-utils and your project
      requires devcontainer:dev, we can conclude that your project's
      requirements are unsatisfiable.

      hint: The `requires-python` value (==3.12.10) includes Python versions
      that are not supported by your dependencies (e.g., vig-utils==0.1.0 only
      supports ==3.14.4). Consider using a more restrictive `requires-python`
      value (like ==3.14.4).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants