Is there any way we could plug in a Dependabot-type service to the pinned plugin versions in Pants? Just to let us know when there are minor/major version updates of stuff like

pyright

pytest

black

etc?

It's a good idea, but not sure how

Maybe point at a lockfile?

Totally doable. Ping me again in a while after I'm done with the ucrrent release automation 😛

We generate the lockfiles here. We could use something similar to generate a requirements.txt to point dependabot at or something.

Reading some pyright issues, and the idea that VSCode is updating pyright along the way, but ours would be out of date

Or, does dependabot have an API?

No dependabot closed a while ago