UV workspace dependencies aren't updated

[jaap3]

Is there an existing issue for this?

• I have searched the existing issues

Package ecosystem

uv

Package manager version

0.9.29

Language version

3.12

Manifest location and content before the Dependabot update

./pyproject.toml
./uv.lock

Workspace

./apps/bakery/pyproject.toml
./apps/flowershop/pyproject.toml
./libs/pos_system/pyproject.toml
./libs/testing_tools/pyproject.toml

dependabot.yml content

https://github.com/jaap3/uv-workspace-dependabot/blob/main/.github/dependabot.yml

Updated dependency

psycopg 3.2 -> 3.3
sqlalchemy 2.0.40 -> 2.0.46
pytest-cov 6 -> 7
requests 2.31 -> 2.32

What you expected to see, versus what you actually saw

I expect to see dependency updates for the apps and libs in the workspace. Instead I only get dependabot PR for the top level dev dependency.

Native package manager behavior

Not sure if there is a native way to upgrade dependencies but using uv add --package pos-system 'requests~=2.23.0' form the workspace root works for example.

Images of the diff or a link to the PR, issue, or logs

https://github.com/jaap3/uv-workspace-dependabot/actions/workflows/dependabot/dependabot-updates

Smallest manifest that reproduces the issue

No response

[jaap3]

The test repository reproduces a scenario I am seeing with a real-world (private) monorepo. I altered the configuration a few times to see whether dependabot expects certain things in the root pyproject, but so far nothing has helped.

I am also seeing this issue, where dependabot attempts to resolve workspace members on PyPI. In my case there was a distribution with the same name as a workspace member, causing an unexpected failure as well.