python-update-checker 0.5__tar.gz → 0.7__tar.gz

{python_update_checker-0.5 → python_update_checker-0.7}/Makefile

@@ -16,8 +16,8 @@ MAKEFLAGS += --no-builtin-rules
 
 
 ############ Configuration ############
-PROJECT:=$(shell egrep "name[[:space:]]*=" pyproject.toml | cut -d'"' -f2)
-VERSION:=$(shell egrep "version[[:space:]]*=" pyproject.toml | cut -d'"' -f2)
+PROJECT:=$(shell egrep "^name[[:space:]]*=" pyproject.toml | cut -d'"' -f2)
+VERSION:=$(shell egrep "^version[[:space:]]*=" pyproject.toml | cut -d'"' -f2)
 
 # exclude packages that are newer than this
 EXCLUDE_NEWER:="7 days"
@@ -60,7 +60,7 @@ init: ## install python virtual env and required development packages
 ############ Linting and syntax checks ############
 
 .PHONY: lint
-lint: lint-py lint-shell
+lint: lint-py lint-shell lint-md
 
 .PHONY: lint-py
 lint-py: ## lint python code
@@ -70,44 +70,67 @@ lint-py: ## lint python code
 lint-shell:
 	shellcheck -x scripts/*.sh
 
+.PHONY: lint-md
+lint-md:        ## lint markdown files
+	rumdl check *.md
+
 .PHONY: audit
 audit: ## run audit checks
+	zizmor --pedantic .github/workflows/python-package.yml
 	uv audit
 
 .PHONY: reformat
 reformat: ## format the python code
 	ruff check --fix $(PY_FILES_DIRS)
 	ruff format $(PY_FILES_DIRS)
+	shfmt -w scripts/
+	tombi format pyproject.toml
 
 .PHONY: checkoutdated checkoutdated-py checkoutdated-gh
 checkoutdated: checkoutdated-py checkoutdated-gh
 
 checkoutdated-py:	## Check for outdated package requirements
-	uv run puc --exclude-newer=$(EXCLUDE_NEWER) check pyproject.toml
+	uv run puc \
+	  --exclude-newer $(EXCLUDE_NEWER) \
+	  --exclude-newer-package "python-update-checker=1 minute" \
+	  check pyproject.toml uv.lock
 
-checkoutdated-gh:	## check for outdated github projects
+checkoutdated-gh: checkratelimit-gh	## check for outdated github projects
 # github-check-outdated is a local tool which compares a given version with the latest available github release version
 # see https://gist.github.com/wummel/ef14989766009effa4e262b01096fc8c for an example implementation
 	@echo "Check for outdated Github tools"
 	github-check-outdated astral-sh uv "$(shell uv --version | cut -f2 -d" ")"
 	github-check-outdated python cpython v$(shell python --version | cut -f2 -d" ") '^v3\.14\.[0-9]+$$'
 
+.PHONY: checkratelimit-gh
+checkratelimit-gh: ## test for rate limiting
+	(
+	  set +e
+	  github-check-outdated astral-sh uv 0 > /dev/null
+	  if [ "$$?" == 2 ]; then exit 1; fi
+	)
+
 
 .PHONY: upgradeoutdated
 upgradeoutdated:	upgradeoutdated-gh upgradeoutdated-py
 
 .PHONY: upgradeoutdated-gh
-upgradeoutdated-gh:
+upgradeoutdated-gh:	checkratelimit-gh
 	sed -i -e 's/uv_version_dev = ".*"/uv_version_dev = "$(shell github-check-outdated astral-sh uv 0 | cut -f4 -d" ")"/' pyproject.toml
+	sed -i -e 's/ version: ".*"/ version: "$(shell github-check-outdated astral-sh uv 0 | cut -f4 -d" ")"/' .github/workflows/python-package.yml
 	sed -i -e 's/python_version_dev = ".*"/python_version_dev = "$(shell github-check-outdated python cpython 0 '^v3\.14\.[0-9]+$$' | cut -f4 -d" " | cut -b2-)"/' pyproject.toml
 	scripts/install_dev.sh
 
 .PHONY: upgradeoutdated-py
 upgradeoutdated-py:	## upgrade dependencies in pyproject.toml and uv.lock
 	# upgrade pyproject.toml dependencies
-	uv run puc --exclude-newer=$(EXCLUDE_NEWER) update pyproject.toml
+	uv run puc \
+	  --exclude-newer $(EXCLUDE_NEWER) \
+	  update pyproject.toml
 	# upgrade depencencies in uv lock file
-	uv lock --exclude-newer=$(EXCLUDE_NEWER) --upgrade
+	uv lock \
+	  --exclude-newer $(EXCLUDE_NEWER) \
+	  --upgrade
 	# install upgraded package versions in virtual environment
 	$(MAKE) init
 
@@ -155,7 +178,8 @@ release-gh:	## upload a new release to github
 	  --prerelease=false \
 	  --verify-tag \
 	  "$(RELEASE_TAG)" \
-	  dist/$(RELEASE_SOURCE)
+	  dist/$(RELEASE_SOURCE) \
+	  dist/$(RELEASE_WHEEL)
 
 .PHONY: release-pypi
 release-pypi: ## upload a new release to pypi

{python_update_checker-0.5 → python_update_checker-0.7}/PKG-INFO

@@ -1,10 +1,10 @@
 Metadata-Version: 2.4
 Name: python-update-checker
-Version: 0.5
+Version: 0.7
 License-Expression: GPL-3.0-only
+Classifier: Development Status :: 4 - Beta
 Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
-Classifier: Development Status :: 4 - Beta
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python :: 3 :: Only
 Classifier: Programming Language :: Python :: 3.11
@@ -16,21 +16,25 @@ Requires-Dist: packaging>=26.1
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
 
-python-update-checker
-======================
+# python-update-checker
+
 Python-update-checker (puc) checks or updates pinned dependencies
 in `pyproject.toml`, `requirements.txt` or `uv.lock` files.
 
-See https://github.com/astral-sh/uv/issues/6794 for a discussion
-about different pinning strategies.
+If you are developing an application you should pin all dependencies.
+When developing a library, only development dependencies should be pinned.
+Since puc updates pinned dependencies, it is mostly suitable
+when developing applications.
 
+See [https://github.com/astral-sh/uv/issues/6794] for a discussion
+about different pinning strategies.
 
-Features
----------
+## Features
 
 * updates pinned dependencies, ignores unpinned dependencies
 * supports pyproject.toml, uv.lock and requirements.txt formats
-* supports `[project.dependencies]`, `[project.optional-dependencies]` and `[dependency-groups]` in pyproject.toml
+* supports `[project.dependencies]`, `[project.optional-dependencies]`
+  and `[dependency-groups]` in pyproject.toml
 * supports recursive references (-r) in requirements.txt formats
 * can run in check only mode, ie. it checks if updates are available
 * limit updates to specific packages
@@ -39,11 +43,18 @@ Features
 * (limited) support for environment markers, ie. `"pywin32==311; os_name=='nt'"`
 * runs on Linux, MacOS and Windows platforms
 
+## Quickstart
+
+```bash
 
-Examples
----------
+uvx --from python-update-checker puc --exclude-newer "1 day" update pyproject.toml
+uv sync
+```
+
+## Examples
 
 ```bash
+
 $ # check all pinned packages for updates in pyproject.toml
 $ puc check pyproject.toml
 puc INFO: check pyproject file pyproject.toml
@@ -55,6 +66,8 @@ $ puc --exclude-newer="7 days" update pyproject.toml
 puc INFO: update pyproject file pyproject.toml
 puc INFO: updating 'ty==0.0.29' --> 0.0.31
 puc INFO: Wrote 1 updated package version(s) to pyproject.toml
+$ # update the project environment after upgrading pyproject.toml
+$ uv sync
 
 $ # check all pinned packages for updates in requirements.txt
 $ puc check requirements.txt
@@ -65,55 +78,49 @@ puc WARNING: found update 'Django==5.2.0' --> 6.0.4
 $ # update only the django package version in requirements.txt
 $ # limit updates to django versions less than 6
 $ puc --package="Django" --constraints="Django<6" update requirements.txt
-INFO: update requirements file requirements.txt
-INFO: updating 'Django==5.2.0' --> 5.2.13
-INFO: Wrote 1 updated package version(s) to requirements.txt
+puc INFO: update requirements file requirements.txt
+puc INFO: updating 'Django==5.2.0' --> 5.2.13
+puc INFO: Wrote 1 updated package version(s) to requirements.txt
 ```
 
-Script behaviour
------------------
+## Script behaviour
 
 The exit code of `puc check` is non-zero when updates are available.
 
 Checking a `pyproject.toml` or `uv.lock`file with `puc` should be done
-from the project of the `pyproject.toml` file,
-especially if your project relies on a [project directory](https://docs.astral.sh/uv/concepts/projects/layout/) (for example to define additional packages index in pyproject.toml).
+from the directory of the `pyproject.toml` file,
+especially if your project relies on a [project directory](https://docs.astral.sh/uv/concepts/projects/layout/)
+(for example to define additional package indexes in pyproject.toml).
 
 After updating versions in pyproject.toml, run `uv lock --upgrade` to update
-the transitive dependencies in `uv.lock`.
+the transitive dependencies in `uv.lock` and `uv sync` to update your
+virtual environment.
 
-Pinned dependencies are packages with `==` or `===` constraints and no wildcards in the version.
+Pinned dependencies are packages with `==` or `===` constraints
+and no wildcards in the version.
 
-
-Installation
--------------
+## Installation
 
 1) Install [python uv](https://docs.astral.sh/uv/getting-started/installation/)
-2) Install puc with `uv pip install python-update-checker`.
-
+2) Install puc with `uv pip install python-update-checker`
+  or run with `uvx --from python-update-checker puc ...`
 
-
-Architecture
--------------
+## Architecture
 
 Dependencies are
 
 * [uv](https://docs.astral.sh/uv/):
   The uv binary must be available for the script to call.  
   puc uses `echo "package" | uv pip compile -` to get latest package versions.  
-  puc uses `uv add "package==<version>"` to update pyproject.toml dependencies.
+  puc uses `uv add "package==<version>"` to update pyproject.toml
+  dependencies and `uv lock --upgrade-package` to update uv.lock dependencies.
 
 * [packaging](https://packaging.pypa.io/):
   Parses dependencies with the packaging.requirements.Requirement class.
 
 puc needs Python >= 3.11 since it uses the tomllib Python module.
 
-puc consists of a single python script. The script uses [inline script metadata](https://peps.python.org/pep-0723/) to be executed directly with `uv run --script`.  
-This enables simple packaging and installation.
-
-
-Limitations
-------------
+## Limitations
 
 * No support for custom dependency formats in pyproject.toml
   (eg. `[tool.poetry.dependencies]`).

{python_update_checker-0.5 → python_update_checker-0.7}/README.md

@@ -1,18 +1,22 @@
-python-update-checker
-======================
+# python-update-checker
+
 Python-update-checker (puc) checks or updates pinned dependencies
 in `pyproject.toml`, `requirements.txt` or `uv.lock` files.
 
-See https://github.com/astral-sh/uv/issues/6794 for a discussion
-about different pinning strategies.
+If you are developing an application you should pin all dependencies.
+When developing a library, only development dependencies should be pinned.
+Since puc updates pinned dependencies, it is mostly suitable
+when developing applications.
 
+See [https://github.com/astral-sh/uv/issues/6794] for a discussion
+about different pinning strategies.
 
-Features
----------
+## Features
 
 * updates pinned dependencies, ignores unpinned dependencies
 * supports pyproject.toml, uv.lock and requirements.txt formats
-* supports `[project.dependencies]`, `[project.optional-dependencies]` and `[dependency-groups]` in pyproject.toml
+* supports `[project.dependencies]`, `[project.optional-dependencies]`
+  and `[dependency-groups]` in pyproject.toml
 * supports recursive references (-r) in requirements.txt formats
 * can run in check only mode, ie. it checks if updates are available
 * limit updates to specific packages
@@ -21,11 +25,18 @@ Features
 * (limited) support for environment markers, ie. `"pywin32==311; os_name=='nt'"`
 * runs on Linux, MacOS and Windows platforms
 
+## Quickstart
+
+```bash
+
+uvx --from python-update-checker puc --exclude-newer "1 day" update pyproject.toml
+uv sync
+```
 
-Examples
----------
+## Examples
 
 ```bash
+
 $ # check all pinned packages for updates in pyproject.toml
 $ puc check pyproject.toml
 puc INFO: check pyproject file pyproject.toml
@@ -37,6 +48,8 @@ $ puc --exclude-newer="7 days" update pyproject.toml
 puc INFO: update pyproject file pyproject.toml
 puc INFO: updating 'ty==0.0.29' --> 0.0.31
 puc INFO: Wrote 1 updated package version(s) to pyproject.toml
+$ # update the project environment after upgrading pyproject.toml
+$ uv sync
 
 $ # check all pinned packages for updates in requirements.txt
 $ puc check requirements.txt
@@ -47,55 +60,49 @@ puc WARNING: found update 'Django==5.2.0' --> 6.0.4
 $ # update only the django package version in requirements.txt
 $ # limit updates to django versions less than 6
 $ puc --package="Django" --constraints="Django<6" update requirements.txt
-INFO: update requirements file requirements.txt
-INFO: updating 'Django==5.2.0' --> 5.2.13
-INFO: Wrote 1 updated package version(s) to requirements.txt
+puc INFO: update requirements file requirements.txt
+puc INFO: updating 'Django==5.2.0' --> 5.2.13
+puc INFO: Wrote 1 updated package version(s) to requirements.txt
 ```
 
-Script behaviour
------------------
+## Script behaviour
 
 The exit code of `puc check` is non-zero when updates are available.
 
 Checking a `pyproject.toml` or `uv.lock`file with `puc` should be done
-from the project of the `pyproject.toml` file,
-especially if your project relies on a [project directory](https://docs.astral.sh/uv/concepts/projects/layout/) (for example to define additional packages index in pyproject.toml).
+from the directory of the `pyproject.toml` file,
+especially if your project relies on a [project directory](https://docs.astral.sh/uv/concepts/projects/layout/)
+(for example to define additional package indexes in pyproject.toml).
 
 After updating versions in pyproject.toml, run `uv lock --upgrade` to update
-the transitive dependencies in `uv.lock`.
-
-Pinned dependencies are packages with `==` or `===` constraints and no wildcards in the version.
+the transitive dependencies in `uv.lock` and `uv sync` to update your
+virtual environment.
 
+Pinned dependencies are packages with `==` or `===` constraints
+and no wildcards in the version.
 
-Installation
--------------
+## Installation
 
 1) Install [python uv](https://docs.astral.sh/uv/getting-started/installation/)
-2) Install puc with `uv pip install python-update-checker`.
-
+2) Install puc with `uv pip install python-update-checker`
+  or run with `uvx --from python-update-checker puc ...`
 
-
-Architecture
--------------
+## Architecture
 
 Dependencies are
 
 * [uv](https://docs.astral.sh/uv/):
   The uv binary must be available for the script to call.  
   puc uses `echo "package" | uv pip compile -` to get latest package versions.  
-  puc uses `uv add "package==<version>"` to update pyproject.toml dependencies.
+  puc uses `uv add "package==<version>"` to update pyproject.toml
+  dependencies and `uv lock --upgrade-package` to update uv.lock dependencies.
 
 * [packaging](https://packaging.pypa.io/):
   Parses dependencies with the packaging.requirements.Requirement class.
 
 puc needs Python >= 3.11 since it uses the tomllib Python module.
 
-puc consists of a single python script. The script uses [inline script metadata](https://peps.python.org/pep-0723/) to be executed directly with `uv run --script`.  
-This enables simple packaging and installation.
-
-
-Limitations
-------------
+## Limitations
 
 * No support for custom dependency formats in pyproject.toml
   (eg. `[tool.poetry.dependencies]`).

{python_update_checker-0.5 → python_update_checker-0.7}/pyproject.toml

@@ -1,17 +1,13 @@
 [project]
 name = "python-update-checker"
-version = "0.5"
+version = "0.7"
+readme = "README.md"
 requires-python = ">=3.11"
 license = "GPL-3.0-only"
-license_files = [
-    "COPYING",
-]
-readme = "README.md"
-# https://pypi.org/classifiers/
 classifiers = [
+    "Development Status :: 4 - Beta",
     "Environment :: Console",
     "Intended Audience :: Developers",
-    "Development Status :: 4 - Beta",
     "Operating System :: OS Independent",
     "Programming Language :: Python :: 3 :: Only",
     "Programming Language :: Python :: 3.11",
@@ -20,40 +16,36 @@ classifiers = [
     "Programming Language :: Python :: 3.14",
     "Topic :: Software Development :: Build Tools",
 ]
-dependencies = [
-  # track compatibility for dependencies, do not pin
-  "packaging>=26.1",
-]
+dependencies = ["packaging>=26.1"]
+license_files = ["COPYING"]
 
 [project.scripts]
 puc = "puc:cli.main"
 
 [dependency-groups]
-# these packages are only needed for development
 dev = [
-  # for python code linting
-  "ruff==0.15.12",
-  # for python type checking
-  "ty==0.0.34",
-  # for testing
-  "pytest==9.0.3",
+    "pytest==9.1.1",
+    "ruff==0.16.4",
+    "rumdl==0.2.61",
+    "tombi==1.4.1",
+    "ty==0.0.75",
+    "zizmor==1.29.0",
 ]
 
 [build-system]
-requires = ["uv_build>=0.11,<0.12"]
+requires = ["uv_build>=0.11.32,<0.13"]
 build-backend = "uv_build"
 
+[tool.project]
+python_version_dev = "3.14.7"
+uv_version_dev = "0.12.9"
+
 [tool.uv.build-backend]
 module-name = "puc"
 source-include = [
-  ".gitignore",
-  ".ruff.toml",
-  "Makefile",
-  "scripts/**",
-  "tests/**",
+    ".gitignore",
+    ".ruff.toml",
+    "Makefile",
+    "scripts/**",
+    "tests/**",
 ]
-
-[tool.project]
-# pin versions of Python and uv for development
-python_version_dev = "3.14.4"
-uv_version_dev = "0.11.11"

python_update_checker-0.7/pyproject.toml.orig

@@ -0,0 +1,65 @@
+[project]
+name = "python-update-checker"
+version = "0.7"
+readme = "README.md"
+requires-python = ">=3.11"
+license = "GPL-3.0-only"
+# https://pypi.org/classifiers/
+classifiers = [
+  "Development Status :: 4 - Beta",
+  "Environment :: Console",
+  "Intended Audience :: Developers",
+  "Operating System :: OS Independent",
+  "Programming Language :: Python :: 3 :: Only",
+  "Programming Language :: Python :: 3.11",
+  "Programming Language :: Python :: 3.12",
+  "Programming Language :: Python :: 3.13",
+  "Programming Language :: Python :: 3.14",
+  "Topic :: Software Development :: Build Tools",
+]
+dependencies = [
+  # track compatibility for dependencies, do not pin
+  "packaging>=26.1",
+]
+license_files = [
+  "COPYING",
+]
+
+[project.scripts]
+puc = "puc:cli.main"
+
+[dependency-groups]
+# these packages are only needed for development
+dev = [
+  # for testing
+  "pytest==9.1.1",
+  # for python code linting
+  "ruff==0.16.4",
+  # Markdown style checking and formatting
+  "rumdl==0.2.61",
+  # reformat toml files
+  "tombi==1.4.1",
+  # for python type checking
+  "ty==0.0.75",
+  # for auditing github actions
+  "zizmor==1.29.0",
+]
+
+[build-system]
+requires = ["uv_build>=0.11.32,<0.13"]
+build-backend = "uv_build"
+
+[tool.project]
+# pin versions of Python and uv for development
+python_version_dev = "3.14.7"
+uv_version_dev = "0.12.9"
+
+[tool.uv.build-backend]
+module-name = "puc"
+source-include = [
+  ".gitignore",
+  ".ruff.toml",
+  "Makefile",
+  "scripts/**",
+  "tests/**",
+]

{python_update_checker-0.5 → python_update_checker-0.7}/scripts/install_dev.sh

@@ -44,7 +44,7 @@ install_package() {
   local pkg=$1
   if ! dpkg --status "${pkg}" >/dev/null 2>&1; then
     echo "Installing ${pkg}"
-    sudo apt-get install "${pkg}"
+    sudo apt-get install --assume-yes "${pkg}"
   fi
 }
 
@@ -58,6 +58,8 @@ install_package curl
 install_package direnv
 # lint shell
 install_package shellcheck
+# for formatting shell scripts (used by make reformat)
+install_package shfmt
 
 # the rest of this scripts relies on being in the project directory
 cd "${PROJECTDIR}"

{python_update_checker-0.5 → python_update_checker-0.7}/src/puc/cli.py

@@ -9,6 +9,7 @@ import argparse
 import sys
 import logging
 import os
+import shlex
 import tempfile
 from packaging.utils import canonicalize_name
 from typing import TextIO, Any
@@ -63,6 +64,11 @@ def get_option_parser() -> argparse.ArgumentParser:
         dest="exclude_newer",
         help="Limit package versions to those that were uploaded prior to the given date",
     )
+    parser.add_argument(
+        "--exclude-newer-package",
+        dest="exclude_newer_package",
+        help="Limit candidate packages for specific packages to those that were uploaded prior to the given date. Accepts package-date pairs in the format PACKAGE=DATE.",
+    )
     parser.add_argument(
         "--constraints",
         dest="constraints",
@@ -133,6 +139,7 @@ def handle_dependency_file(dep_file: str, optargs, constraint_file):
             packages=packages,
             command=optargs.command,
             exclude_newer=optargs.exclude_newer,
+            exclude_newer_package=optargs.exclude_newer_package,
             constraint_file=constraint_file,
             color=optargs.color,
         )
@@ -143,6 +150,7 @@ def handle_dependency_file(dep_file: str, optargs, constraint_file):
             packages=packages,
             command=optargs.command,
             exclude_newer=optargs.exclude_newer,
+            exclude_newer_package=optargs.exclude_newer_package,
             constraint_file=constraint_file,
             color=optargs.color,
         )
@@ -153,6 +161,7 @@ def handle_dependency_file(dep_file: str, optargs, constraint_file):
             packages=packages,
             command=optargs.command,
             exclude_newer=optargs.exclude_newer,
+            exclude_newer_package=optargs.exclude_newer_package,
             constraint_file=constraint_file,
             color=optargs.color,
         )
@@ -165,6 +174,7 @@ def handle_dependency_file(dep_file: str, optargs, constraint_file):
 
 def main() -> int:
     """Parse options and check or update dependencies."""
+    logger.info(f"{shlex.join(sys.argv)}")
     # parse options
     try:
         optargs = get_option_parser().parse_args(sys.argv[1:])
@@ -208,7 +218,3 @@ def main() -> int:
             os.unlink(constraint_file)
     # check command returns non-zero exit code when updates are available
     return 1 if optargs.command == "check" and updatable > 0 else 0
-
-
-# if __name__ == "__main__":
-#    sys.exit(main(sys.argv[1:]))

{python_update_checker-0.5 → python_update_checker-0.7}/src/puc/dependencies.py

@@ -4,6 +4,7 @@
 
 import subprocess
 import re
+import logging
 from packaging.requirements import Requirement
 from packaging.markers import Variable, MarkerList
 from packaging.version import parse as parse_version
@@ -12,8 +13,9 @@ from .logging import logger
 
 def get_latest_version(
     package: str,
-    exclude_newer: None | str = None,
-    constraint_file: None | str = None,
+    exclude_newer: str | None = None,
+    exclude_newer_package: str | None = None,
+    constraint_file: str | None = None,
     python_platform: str | None = None,
     python_version: str | None = None,
 ) -> str:
@@ -27,14 +29,19 @@ def get_latest_version(
         "compile",
         "-",
         "--color=never",
-        "--quiet",
         "--no-deps",
         "--no-header",
         "--no-annotate",
         "--no-progress",
     ]
+    if logger.getEffectiveLevel() <= logging.DEBUG:
+        cmd.append("--verbose")
+    else:
+        cmd.append("--quiet")
     if exclude_newer:
         cmd.extend(("--exclude-newer", exclude_newer))
+    if exclude_newer_package:
+        cmd.extend(("--exclude-newer-package", exclude_newer_package))
     if constraint_file:
         cmd.extend(("--constraints", constraint_file))
     if python_platform:
@@ -119,9 +126,9 @@ def get_min_python_version_from_req(pkg_req: Requirement) -> str | None:
 
 def parse_requirement(
     line: str,
-    exclude_newer: None | str = None,
-    constraint_file: None | str = None,
-) -> None | str | Requirement:
+    exclude_newer: str | None = None,
+    constraint_file: str | None = None,
+) -> str | Requirement | None:
     """Parse one line of a requirements.txt file."""
     line = line.strip()
     if not line or line.startswith("#"):

{python_update_checker-0.5 → python_update_checker-0.7}/src/puc/pyprojecttoml.py

@@ -5,6 +5,7 @@
 import subprocess
 import os
 import tomllib
+import logging
 from packaging.utils import canonicalize_name
 from packaging.requirements import Requirement
 
@@ -14,15 +15,17 @@ from .dependencies import (
     get_python_platform_from_req,
     get_min_python_version_from_req,
     check_requirement,
+    is_newer_version,
 )
 
 
 def handle_pyproject_toml(
     pyproject_path: str,
-    command: None | str = None,
+    command: str | None = None,
     packages=None,
-    exclude_newer: None | str = None,
-    constraint_file: None | str = None,
+    exclude_newer: str | None = None,
+    exclude_newer_package: str | None = None,
+    constraint_file: str | None = None,
     color: bool = True,
 ) -> int:
     """Check or update pinned dependencies of a pyproject.toml file.
@@ -53,6 +56,7 @@ def handle_pyproject_toml(
                 command=command,
                 packages=packages,
                 exclude_newer=exclude_newer,
+                exclude_newer_package=exclude_newer_package,
                 constraint_file=constraint_file,
                 color=color,
             )
@@ -67,6 +71,7 @@ def handle_pyproject_toml(
                 command=command,
                 packages=packages,
                 exclude_newer=exclude_newer,
+                exclude_newer_package=exclude_newer_package,
                 constraint_file=constraint_file,
                 color=color,
             )
@@ -80,6 +85,7 @@ def handle_pyproject_toml(
                 command=command,
                 packages=packages,
                 exclude_newer=exclude_newer,
+                exclude_newer_package=exclude_newer_package,
                 constraint_file=constraint_file,
                 color=color,
             )
@@ -92,12 +98,13 @@ def update_pyproject_dependencies(
     dependencies: list[str | dict],
     project_dir: str,
     projectname: str,
-    group: None | str = None,
+    group: str | None = None,
     optional=False,
-    command: None | str = None,
+    command: str | None = None,
     packages=None,
-    exclude_newer: None | str = None,
-    constraint_file: None | str = None,
+    exclude_newer: str | None = None,
+    exclude_newer_package: str | None = None,
+    constraint_file: str | None = None,
     color: bool = True,
 ) -> int:
     """Update given dependency list of a pyproject.toml file."""
@@ -122,6 +129,7 @@ def update_pyproject_dependencies(
             latest_version = get_latest_version(
                 pkg_req.name,
                 exclude_newer=exclude_newer,
+                exclude_newer_package=exclude_newer_package,
                 constraint_file=constraint_file,
                 python_platform=get_python_platform_from_req(pkg_req),
                 python_version=get_min_python_version_from_req(pkg_req),
@@ -134,6 +142,10 @@ def update_pyproject_dependencies(
         spec = next(s for s in pkg_req.specifier)
         if latest_version is not None and latest_version != spec.version:
             updatable += 1
+            if not is_newer_version(spec.version, latest_version):
+                logger.warning(
+                    f"{pkg_req.name} latest version {latest_version} is older than specified version {spec.version}"
+                )
             version = (
                 colorize_updated_version(spec.version, latest_version)
                 if color
@@ -154,7 +166,7 @@ def update_pyproject_pkg(
     dependency: str,
     package: str,
     projectdir: str,
-    group: None | str = None,
+    group: str | None = None,
     optional: bool = False,
 ) -> None:
     """Update one package in pyproject.toml."""
@@ -163,11 +175,15 @@ def update_pyproject_pkg(
         "add",
         "--project",
         projectdir,
-        "--quiet",
         "--frozen",
         "--color=never",
-        f"--upgrade-package={package}",
+        "--upgrade-package",
+        package,
     ]
+    if logger.getEffectiveLevel() <= logging.DEBUG:
+        command.append("--verbose")
+    else:
+        command.append("--quiet")
     if optional and group:
         command.append("--optional")
         command.append(group)

{python_update_checker-0.5 → python_update_checker-0.7}/src/puc/requirementstxt.py

@@ -14,6 +14,7 @@ from .dependencies import (
     get_python_platform_from_req,
     get_min_python_version_from_req,
     parse_requirement,
+    is_newer_version,
 )
 
 
@@ -23,10 +24,11 @@ max_rec_level = 5
 
 def handle_requirements_txt(
     requirements_txt_path: str,
-    command: None | str = None,
+    command: str | None = None,
     packages=None,
-    exclude_newer: None | str = None,
-    constraint_file: None | str = None,
+    exclude_newer: str | None = None,
+    exclude_newer_package: str | None = None,
+    constraint_file: str | None = None,
     color: bool = True,
     rec_level: int = 0,
     handled_files: list[str] | None = None,
@@ -62,6 +64,7 @@ def handle_requirements_txt(
                         command,
                         packages=packages,
                         exclude_newer=exclude_newer,
+                        exclude_newer_package=exclude_newer_package,
                         constraint_file=constraint_file,
                         color=color,
                         rec_level=rec_level + 1,
@@ -72,6 +75,7 @@ def handle_requirements_txt(
                     latest_version = get_latest_version(
                         pkg_req.name,
                         exclude_newer=exclude_newer,
+                        exclude_newer_package=exclude_newer_package,
                         constraint_file=constraint_file,
                         python_platform=get_python_platform_from_req(pkg_req),
                         python_version=get_min_python_version_from_req(pkg_req),
@@ -88,6 +92,10 @@ def handle_requirements_txt(
                     output.write(line)
                 elif latest_version is not None and latest_version != spec.version:
                     updatable += 1
+                    if not is_newer_version(spec.version, latest_version):
+                        logger.warning(
+                            f"{pkg_req.name} latest version {latest_version} is older than specified version {spec.version}"
+                        )
                     version = (
                         colorize_updated_version(spec.version, latest_version)
                         if color

{python_update_checker-0.5 → python_update_checker-0.7}/src/puc/uvlock.py

@@ -16,10 +16,11 @@ from .dependencies import (
 
 def handle_uv_lock(
     uvlock_path: str,
-    command: None | str = None,
+    command: str | None = None,
     packages=None,
-    exclude_newer: None | str = None,
-    constraint_file: None | str = None,
+    exclude_newer: str | None = None,
+    exclude_newer_package: str | None = None,
+    constraint_file: str | None = None,
     color: bool = True,
 ) -> int:
     """Check or update pinned dependencies of a uv.lock file."""
@@ -55,6 +56,7 @@ def handle_uv_lock(
             command=command,
             packages=packages,
             exclude_newer=exclude_newer,
+            exclude_newer_package=exclude_newer_package,
             constraint_file=constraint_file,
             color=color,
         )
@@ -67,10 +69,11 @@ def update_uvlock_dependency(
     package,
     version,
     project_dir: str,
-    command: None | str = None,
+    command: str | None = None,
     packages=None,
-    exclude_newer: None | str = None,
-    constraint_file: None | str = None,
+    exclude_newer: str | None = None,
+    exclude_newer_package: str | None = None,
+    constraint_file: str | None = None,
     color: bool = True,
 ) -> int:
     """Update uv lock dependency."""
@@ -82,6 +85,7 @@ def update_uvlock_dependency(
         latest_version = get_latest_version(
             package,
             exclude_newer=exclude_newer,
+            exclude_newer_package=exclude_newer_package,
             constraint_file=constraint_file,
         )
     except subprocess.CalledProcessError as exc:
@@ -110,7 +114,7 @@ def update_uvlock_dependency(
 def update_uvlock_pkg(
     package: str,
     projectdir: str,
-    exclude_newer: None | str = None,
+    exclude_newer: str | None = None,
 ) -> None:
     """Update one package in pyproject.toml."""
     command = [
@@ -120,7 +124,8 @@ def update_uvlock_pkg(
         projectdir,
         "--quiet",
         "--color=never",
-        f"--upgrade-package={package}",
+        "--upgrade-package",
+        package,
     ]
     if exclude_newer:
         command.extend(