Skip to content

Automated Dependency Updates for PEP 621

Categories: python

Renovate supports updating PEP 621 dependencies.

File Matching

By default, Renovate will check any files matching the following regular expression: /(^|/)pyproject\.toml$/.

For details on how to extend a manager's managerFilePatterns value, please follow this link.

Supported datasources

This manager supports extracting the following datasources: pypi.

Default config

{
  "managerFilePatterns": [
    "/(^|/)pyproject\\.toml$/"
  ]
}

Additional Information

This manager supports updating dependencies inside pyproject.toml files.

In addition to standard dependencies, these toolsets are also supported:

  • pdm (including pdm.lock files)
  • uv (including uv.lock files and uv workspaces)
  • hatch

Available depTypes:

  • project.dependencies
  • project.optional-dependencies
  • dependency-groups
  • build-system.requires
  • tool.pdm.dev-dependencies
  • tool.uv.dev-dependencies
  • tool.uv.sources
  • tool.hatch.envs.<env-name>

Private Modules Authentication

Before running the pdm or uv commands to update the pdm.lock or uv.lock respectively, Renovate exports git insteadOf directives in environment variables.

Renovate uses this logic before it updates any "artifacts":

The token from the hostRules entry matching hostType=github and matchHost=api.github.com is added as the default authentication for github.com. For those running against github.com, this token will be the default platform token.

Next, all hostRules with both a token or username/password and matchHost will be fetched, except for any github.com one from above.

Rules from this list are converted to environment variable directives if they match any of these characteristics:

  • No hostType is defined, or
  • hostType is pep621, or
  • hostType is a platform (github, gitlab, azure, etc.)