Hi, has anyone set-up dependabot with pants? How would it work? I see it works without much configuration with poetry lock files. Not sure how it would work with pex generated lockfiles I don’t see any example in pants own repo either. Currently it looks like pants itself has only configured it for rust. https://github.com/pantsbuild/pants/blob/main/.github/dependabot.yml

I haven’t tried it yet, but my thought for how to hack this together is to have a GHA that detects dependabot PRs touching a

requirements.txt

, runs

pants generate-lockfiles

, then pushes the result back to the PR