dependabot / dependabot/dependabot-core

Support PDM: https://github.com/frostming/pdm

Open
#3,190 15 comments 83 reactions 0 assignees View on GitHub
Keep L: python:poetry python T: feature-request T: new-ecosystem
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

I'd like to get Dependabot support for Python projects managed by [PDM](https://github.com/frostming/pdm).

PDM is very similar in usage to Poetry, and also uses `pyproject.toml`, so it could be in conflict with the Poetry file updater 😕
It also has its own `pdm.lock` file.

Just opening for visibility, to see if others are interested 🙂

Contributor guide

Open the contributing guide

Research direction

Start by comparing the existing Poetry file updater with PDM's pyproject.toml and pdm.lock files, as described in the issue. Check how the current updater detects Poetry projects and handles lockfiles; done means Dependabot recognizes PDM projects, avoids conflicting with Poetry support, and updates pdm.lock correctly.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
tooling
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.