Is there an existing issue for this?
Package ecosystem
pip, pipenv
Package manager version
No response
Language version
No response
Manifest location and content before the Dependabot update
No response
dependabot.yml content
No response
Updated dependency
No response
What you expected to see, versus what you actually saw
It's becoming ridiculous already how dependabot fight with itself changing python_version to python_full_version and vice versa:
....and so on!
and typically the changes are not even for packages that are being bumped.
the same changes are visible in Pipfile.lock in same commits as well.
Native package manager behavior
No response
Images of the diff or a link to the PR, issue, or logs
No response
Smallest manifest that reproduces the issue
No response
Is there an existing issue for this?
Package ecosystem
pip, pipenv
Package manager version
No response
Language version
No response
Manifest location and content before the Dependabot update
No response
dependabot.yml content
No response
Updated dependency
No response
What you expected to see, versus what you actually saw
It's becoming ridiculous already how dependabot fight with itself changing
python_versiontopython_full_versionand vice versa:python_full_versiontopython_version: Taxel/PlexTraktSync@69dc149python_versiontopython_full_versionTaxel/PlexTraktSync@dc86ef1python_version < '4'topython_version < '4.0', dropspython_version >= '3.6'Taxel/PlexTraktSync@31516d2python_full_version < '4.0.0',python_version >= '3.6'Taxel/PlexTraktSync@bd3501d....and so on!
and typically the changes are not even for packages that are being bumped.
the same changes are visible in
Pipfile.lockin same commits as well.Native package manager behavior
No response
Images of the diff or a link to the PR, issue, or logs
No response
Smallest manifest that reproduces the issue
No response