dependabot / dependabot/dependabot-core

Dependabot removes version suffix in requirements.txt

Open
#7,777 3 comments 3 reactions 1 assignee Assigned to @Copilot View on GitHub
L: python:pip T: bug 🐞
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

### Is there an existing issue for this?

- [X] I have searched the existing issues

### Package ecosystem

pip

### Package manager version

Not applicable, but pip `21.1.1` on my local machine

### Language version

Not applicable, but Python `3.8` on my local machine

### Manifest location and content before the Dependabot update

`/requirements.lambda.txt`:
```
deskew==0.10.37
opencv-python-headless==4.5.3.56
shapely==1.8.0
numpy==1.24.4

-f https://download.pytorch.org/whl/torch_stable.html
Pillow==9.3.0
torch==1.9.1+cpu
torchvision==0.10.1+cpu

-f https://dl.fbaipublicfiles.com/detectron2/wheels/cpu/torch1.9/index.html
detectron2==0.6

python-dotenv==0.15.0
python-multipart==0.0.6
fastapi==0.70.0
mangum==0.17.0
```

### dependabot.yml content

Probably unrelated but I'll still provide it:
```yaml
version: 2

updates:
- package-ecosystem: github-actions
directory: /
schedule:
interval: daily
time: '11:00'
timezone: Europe/Vienna
```

### Updated dependency

`torch` from `1.9.1+cpu` to `1.13.1`

### What you expected to see, versus what you actually saw

The line for `torch` in `requirements.lambda.txt` should turn from this:
```
torch==1.9.1+cpu
```
into this:
```
torch==1.13.1+cpu
```
but it instead turned into this:
```
torch==1.13.1
```

### Native package manager behavior

Not applicable, since `pip` does not have this feature

### Images of the diff or a link to the PR, issue, or logs

![diff](https://github.com/dependabot/dependabot-core/assets/10259118/e6f99f9f-e6b4-400d-94a7-b75a10a54cdd)

### Smallest manifest that reproduces the issue

```
-f https://download.pytorch.org/whl/torch_stable.html
torch==1.9.1+cpu
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.