Skip to content

chore(deps): lock file maintenance#274

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/lock-file-maintenance-python-dependencies
Open

chore(deps): lock file maintenance#274
renovate[bot] wants to merge 1 commit intomainfrom
renovate/lock-file-maintenance-python-dependencies

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Mar 9, 2026

This PR contains the following updates:

Update Change
lockFileMaintenance All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.


Configuration

📅 Schedule: Branch creation - "before 4am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Mar 9, 2026
@renovate renovate bot force-pushed the renovate/lock-file-maintenance-python-dependencies branch from cf82fb4 to 9e7325d Compare March 13, 2026 11:08
@DhavalGojiya
Copy link

DhavalGojiya commented Mar 18, 2026

@ulgens

This Renovate bot is creating a lot of unnecessary PRs. Even after merging these PRs, we don't get any real benefit since drf-haystack is a package. (End users don't actually get the locked versions anyway.) If the project is a production application, then it makes sense.

Also, I think because this project is a library//package, we generally don’t need any kind of lock file such as Pipfile.lock or uv.lock, These lock files are not used by pip when installing the package .

pip only reads the base dependencies defined in the project metadata.

For local development, we can keep the lock file and add it to .gitignore so it doesn't get pushed to the branch.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant