Skip to content

fix(deps): keep library dependency ranges and requires-python out of Renovate pins - #15

Merged
ExtraToast merged 2 commits into
mainfrom
fix/renovate-library-ranges
Nov 10, 2026
Merged

ExtraToast merged 2 commits into
mainfrom
fix/renovate-library-ranges

Conversation

@ExtraToast

Copy link
Copy Markdown
Contributor

What changed

Renovate's shared preset pins every range. In this library that rewrote requires-python to ==3.15.2 and cryptography>=44 to ==50.0.2 (PR #6), which makes the lockfile update fail (renovate/artifacts) and would force consumers onto one interpreter and one cryptography release.

  • runtime dependency ranges are no longer pinned (lockfile still updates)
  • requires-python is no longer touched
  • the build backend (hatchling) is still pinned

How it was checked

The rule set was read against the Renovate pep621 manager's dep types (project.dependencies, requires-python). The effect shows on the next Renovate run, which should recreate #6 with only the hatchling pin.

@ExtraToast ExtraToast added type: bug Something is broken or behaving incorrectly. component: dependencies Dependency update or dependency policy. labels Nov 10, 2026
@ExtraToast
ExtraToast merged commit 4b57032 into main Nov 10, 2026
3 checks passed
@ExtraToast
ExtraToast deleted the fix/renovate-library-ranges branch November 10, 2026 11:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

component: dependencies Dependency update or dependency policy. type: bug Something is broken or behaving incorrectly.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant