feat(pep621): add support for dependency-groups (PEP 735) (#32148)

Co-authored-by: Sebastian Poxhofer <secustor@users.noreply.github.com>

Author: mkniewallner

lib/modules/manager/pep621/__fixtures__/pyproject_with_pdm.toml

@@ -25,6 +25,11 @@ pytest = [
   "pytest-mock",
 ]
 
+[dependency-groups]
+typing = ["mypy==1.13.0", "types-requests"]
+coverage = ["pytest-cov==5.0.0"]
+all = [{include-group = "typing"}, {include-group = "coverage"}, "click==8.1.7"]
+
 [tool.pdm.dev-dependencies]
 test = [
   "pdm[pytest]",

lib/modules/manager/pep621/extract.spec.ts

@@ -147,6 +147,47 @@ describe('modules/manager/pep621/extract', () => {
         },
       ]);
 
+      const dependenciesFromDependencyGroups = result?.deps.filter(
+        (dep) => dep.depType === 'dependency-groups',
+      );
+      expect(dependenciesFromDependencyGroups).toEqual([
+        {
+          packageName: 'mypy',
+          datasource: 'pypi',
+          depType: 'dependency-groups',
+          currentValue: '==1.13.0',
+          currentVersion: '1.13.0',
+          depName: 'mypy',
+          managerData: { depGroup: 'typing' },
+        },
+        {
+          packageName: 'types-requests',
+          datasource: 'pypi',
+          depType: 'dependency-groups',
+          skipReason: 'unspecified-version',
+          depName: 'types-requests',
+          managerData: { depGroup: 'typing' },
+        },
+        {
+          packageName: 'pytest-cov',
+          datasource: 'pypi',
+          depType: 'dependency-groups',
+          currentValue: '==5.0.0',
+          currentVersion: '5.0.0',
+          depName: 'pytest-cov',
+          managerData: { depGroup: 'coverage' },
+        },
+        {
+          packageName: 'click',
+          datasource: 'pypi',
+          depType: 'dependency-groups',
+          currentValue: '==8.1.7',
+          currentVersion: '8.1.7',
+          depName: 'click',
+          managerData: { depGroup: 'all' },
+        },
+      ]);
+
       const pdmDevDependencies = result?.deps.filter(
         (dep) => dep.depType === 'tool.pdm.dev-dependencies',
       );

lib/modules/manager/pep621/extract.ts

@@ -37,6 +37,12 @@ export async function extractPackageFile(
   deps.push(
     ...parseDependencyList(depTypes.dependencies, def.project?.dependencies),
   );
+  deps.push(
+    ...parseDependencyGroupRecord(
+      depTypes.dependencyGroups,
+      def['dependency-groups'],
+    ),
+  );
   deps.push(
     ...parseDependencyGroupRecord(
       depTypes.optionalDependencies,

lib/modules/manager/pep621/readme.md

@@ -10,6 +10,7 @@ Available `depType`s:
 
 - `project.dependencies`
 - `project.optional-dependencies`
+- `dependency-groups`
 - `build-system.requires`
 - `tool.pdm.dev-dependencies`
 - `tool.uv.dev-dependencies`

lib/modules/manager/pep621/schema.ts

@@ -83,6 +83,13 @@ export const PyProjectSchema = z.object({
       'build-backend': z.string().optional(),
     })
     .optional(),
+  'dependency-groups': z
+    .record(
+      z.string(),
+      // Skip non-string entries, like `{include-group = "typing"}`, as they are not dependencies.
+      LooseArray(z.string()),
+    )
+    .optional(),
   tool: z
     .object({
       pdm: PdmSchema.optional(),

lib/modules/manager/pep621/utils.ts

@@ -16,6 +16,7 @@ const pep508Regex = regEx(
 export const depTypes = {
   dependencies: 'project.dependencies',
   optionalDependencies: 'project.optional-dependencies',
+  dependencyGroups: 'dependency-groups',
   pdmDevDependencies: 'tool.pdm.dev-dependencies',
   uvDevDependencies: 'tool.uv.dev-dependencies',
   uvSources: 'tool.uv.sources',