Dependabot does not work

[jku]

Several months ago we replaced setup.py with setup.cfg. This seems to have immediately broken dependabot, which has since then been complaining about missing setup.py -- it does not complain in an issue as you might have expected but in the easily discoverable location of Insights -> Dependency graph -> Dependabot -> "requirements-dev.txt Last checked ..."

I'm sending a PR of manual dependency updates soon but this issue is specifically for either fixing dependabot or jumping through whatever hoops we need to jump through to get dependabot working.

Related: dependabot/dependabot-core#4483

[jku]

From setuptools:

If setup.py is missing from the project directory when a PEP 517 build is invoked, setuptools emulates a dummy setup.py file containing only a setuptools.setup() call.

So I suppose the easiest workaround is to re-add a setup.py with this content:

from setuptools import setup
setup()

[jku]

jku closed this in #43 1 hour ago

that happened in a completely different repository!?!

[lukpueh]

that happened in a completely different repository!?!

Interesting, so you can link with keywords across forks.

[jku]

seems to be working now: https://github.com/theupdateframework/python-tuf/network/updates/276791557