Handle uv pyproject.toml without a requirements.txt lock file

[markhallen]

What are you trying to accomplish?

This PR fixes the error Passed nil into T.must:

... Passed nil into T.must
... /home/dependabot/uv/lib/dependabot/uv/file_parser.rb:99:in detected_package_manager
+--------------------+
|       Errors       |
+--------------------+
| update_files_error |
+--------------------+

Contributes to #10478

Fixes beta bugs:

• Support updating uv.lock #10478 (comment), @gobbledygook88
• Support updating uv.lock #10478 (comment), @abkfenris
• Support updating uv.lock #10478 (comment), @alex
• Support updating uv.lock #10478 (comment), @ulgens
• Support updating uv.lock #10478 (comment), @MusicalNinjaDad only "Passed nil into T.must"
• Support updating uv.lock #10478 (comment), @christianplatta1012
• Support updating uv.lock #10478 (comment), @mikicz

Anything you want to highlight for special attention from reviewers?

To fix the issue reported in the beta where pyproject.toml files were not processed in the absence of a requirements.txt file:

• We removed the if pipcompile_in_file check on line 105 of uv/lib/dependabot/uv/file_parser.rb
• And, removed the pipcompile_in_file method

The pip compile implementation that we borrowed from required pyproject.toml to have an accompanying lock file requirements.txt, however uv does not have this limitation.

This PR also includes some code tidy-up after the initial port from the python folder.

There are two commits:

• Fix pyproject.toml handling and tidy up
• Remove unused fixtures that were carried over from the python directory

How will you know you've accomplished your goal?

We replicated the error and tested the fix against https://github.com/gulfofmaine/buoy_barn using script/dependabot:

script/dependabot update uv gulfofmaine/buoy_barn -d "/app"

Reponse

updater | 2025/03/05 14:11:19 INFO Finished job processing
updater | 2025/03/05 14:11:19 INFO Results:
updater | +---------------------------------------------------+
updater | |        Changes to Dependabot Pull Requests        |
updater | +---------+-----------------------------------------+
updater | | created | django-debug-toolbar ( from  to 5.0.1 ) |
updater | | created | geojson ( from  to 3.2.0 )              |
updater | | created | pystac ( from  to 1.12.2 )              |
updater | | created | sentry-sdk ( from  to 2.22.0 )          |
updater | | created | slack-sdk ( from  to 3.34.0 )           |
updater | | created | vcrpy ( from  to 7.0.0 )                |
updater | | created | xarray ( from  to 2025.1.2 )            |
updater | +---------+-----------------------------------------+

cc @abkfenris

Checklist

• I have run the complete test suite to ensure all tests and linters pass.
• I have thoroughly tested my code changes to ensure they work as expected, including adding additional tests for new functionality.
• I have written clear and descriptive commit messages.
• I have provided a detailed description of the changes in the pull request, including the problem it addresses, how it fixes the problem, and any relevant details about the implementation.
• I have ensured that the code is well-documented and easy to understand.

[alex]

Thanks!

[kbukum1]

LGTM

[abkfenris]

That looks like it matches up with some of the known outdated dependencies I've got (I didn't check everything).

I did notice that the output doesn't include the current version, but I don't know about enough of the workings of Dependabot to know where those will come from.

Also, I couldn't figure out how to quickly get things spun up to test against Buoy Barn myself, or against the private repo that I also had fail.

[markhallen]

I successfully tested this to generate a PR from a pyproject.toml without a requirements.txt file. This config was failing (line 13) before the changes in this PR.

[MusicalNinjaDad]

Thanks! - I can also confirm this runs without error now on the repo referenced in my comment to #10478