Dependabot-core: [Python] Doesn't handle well poetry dependencies depending on Python version

Created on 4 Sep 2020 · 7Comments · Source: dependabot/dependabot-core

Package manager/ecosystem

Python Poetry.

https://github.com/alexpdp7/caw/blob/master/pyproject.toml#L14

My project supports Python 3.6, 3.7 and 3.8, hence:

python = ">=3.6, <3.8"

The project uses dataclasses, so on 3.6 I install a backport:

dataclasses = { version = "0.7", python = ">=3.6,<3.7" }

I think this worked OK, but recently Dependabot started spamming me with issues:

https://github.com/alexpdp7/caw/issues/41

, which seem to complain about this issue.

bug 🐞

Source

alexpdp7

All 7 comments

Dependabot has also recently started failing with

[SolverProblemError]
The current project's Python requirement (^3.6) is not compatible with some of the required packages Python requirement:
  - dataclasses requires Python >=3.6, <3.7

on one of my repos too ( https://github.com/chris48s/mark-sideways ), although it is caused by effectively the same condition in one of my transitive dependencies: https://github.com/willmcgugan/rich/blob/a424fafc5654346b5d6e2db28ad19aad10040581/pyproject.toml#L27

I guess this is a manifestation of https://github.com/python-poetry/poetry/issues/2386 as opposed to a bug in dependabot itself.

Strangely, I'm unable to reproduce this locally with python 3.8/poetry 1.0.10 (although the last post in that linked issue says this is still an issue in that build, apparently)

What version of poetry does dependabot use? (I don't think the error log on my repo tells me)