Ask your question here
The current setup of dependabot is not working. The pip ecosystem supports:
Dependabot supports updates to any .txt file.
In addition, Dependabot supports updates to pyproject.toml files if they follow the PEP 621 standard.
And neither of these are in place.
I propose we move dependency handling to pyproject.toml which would also be a step along the way of allowing a migration from pip towards uv for package management.