python-update-checker 0.6__tar.gz → 0.8.0__tar.gz

{python_update_checker-0.6 → python_update_checker-0.8.0}/Makefile

@@ -19,8 +19,6 @@ MAKEFLAGS += --no-builtin-rules
 PROJECT:=$(shell egrep "^name[[:space:]]*=" pyproject.toml | cut -d'"' -f2)
 VERSION:=$(shell egrep "^version[[:space:]]*=" pyproject.toml | cut -d'"' -f2)
 
-# exclude packages that are newer than this
-EXCLUDE_NEWER:="7 days"
 # Pytest options:
 # --full-trace: print full stacktrace on errors
 PYTESTOPTS?=--full-trace
@@ -57,10 +55,19 @@ init: ## install python virtual env and required development packages
 	uv sync
 
 
+############ Versioning ############
+
+bumpversion-major: _bumpversion-major   ## bump major version
+bumpversion-minor: _bumpversion-minor   ## bump minor version
+
+_bumpversion-%: ## shortcut target for bumpversion
+	bumpversion $*
+
+
 ############ Linting and syntax checks ############
 
 .PHONY: lint
-lint: lint-py lint-shell
+lint: lint-py lint-shell lint-md
 
 .PHONY: lint-py
 lint-py: ## lint python code
@@ -70,51 +77,61 @@ lint-py: ## lint python code
 lint-shell:
 	shellcheck -x scripts/*.sh
 
+.PHONY: lint-md
+lint-md:        ## lint markdown files
+	rumdl check *.md
+
 .PHONY: audit
 audit: ## run audit checks
+	zizmor --pedantic .github/workflows/python-package.yml
 	uv audit
 
 .PHONY: reformat
 reformat: ## format the python code
 	ruff check --fix $(PY_FILES_DIRS)
 	ruff format $(PY_FILES_DIRS)
+	shfmt -w scripts/
+	tombi format pyproject.toml
 
 .PHONY: checkoutdated checkoutdated-py checkoutdated-gh
 checkoutdated: checkoutdated-py checkoutdated-gh
 
 checkoutdated-py:	## Check for outdated package requirements
 	uv run puc \
-	  --exclude-newer $(EXCLUDE_NEWER) \
-	  --exclude-newer-package "python-update-checker=1 minute" \
 	  check pyproject.toml uv.lock
 
-checkoutdated-gh:	## check for outdated github projects
+checkoutdated-gh: checkratelimit-gh	## check for outdated github projects
 # github-check-outdated is a local tool which compares a given version with the latest available github release version
 # see https://gist.github.com/wummel/ef14989766009effa4e262b01096fc8c for an example implementation
 	@echo "Check for outdated Github tools"
 	github-check-outdated astral-sh uv "$(shell uv --version | cut -f2 -d" ")"
 	github-check-outdated python cpython v$(shell python --version | cut -f2 -d" ") '^v3\.14\.[0-9]+$$'
 
+.PHONY: checkratelimit-gh
+checkratelimit-gh: ## test for rate limiting
+	(
+	  set +e
+	  github-check-outdated astral-sh uv 0 > /dev/null
+	  if [ "$$?" == 2 ]; then exit 1; fi
+	)
+
 
 .PHONY: upgradeoutdated
 upgradeoutdated:	upgradeoutdated-gh upgradeoutdated-py
 
 .PHONY: upgradeoutdated-gh
-upgradeoutdated-gh:
+upgradeoutdated-gh:	checkratelimit-gh
 	sed -i -e 's/uv_version_dev = ".*"/uv_version_dev = "$(shell github-check-outdated astral-sh uv 0 | cut -f4 -d" ")"/' pyproject.toml
+	sed -i -e 's/ version: ".*"/ version: "$(shell github-check-outdated astral-sh uv 0 | cut -f4 -d" ")"/' .github/workflows/python-package.yml
 	sed -i -e 's/python_version_dev = ".*"/python_version_dev = "$(shell github-check-outdated python cpython 0 '^v3\.14\.[0-9]+$$' | cut -f4 -d" " | cut -b2-)"/' pyproject.toml
 	scripts/install_dev.sh
 
 .PHONY: upgradeoutdated-py
 upgradeoutdated-py:	## upgrade dependencies in pyproject.toml and uv.lock
 	# upgrade pyproject.toml dependencies
-	uv run puc \
-	  --exclude-newer $(EXCLUDE_NEWER) \
-	  update pyproject.toml
+	uv run puc update pyproject.toml
 	# upgrade depencencies in uv lock file
-	uv lock \
-	  --exclude-newer $(EXCLUDE_NEWER) \
-	  --upgrade
+	uv lock --upgrade
 	# install upgraded package versions in virtual environment
 	$(MAKE) init
 

{python_update_checker-0.6 → python_update_checker-0.8.0}/PKG-INFO

@@ -1,10 +1,10 @@
 Metadata-Version: 2.4
 Name: python-update-checker
-Version: 0.6
+Version: 0.8.0
 License-Expression: GPL-3.0-only
+Classifier: Development Status :: 4 - Beta
 Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
-Classifier: Development Status :: 4 - Beta
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python :: 3 :: Only
 Classifier: Programming Language :: Python :: 3.11
@@ -16,21 +16,25 @@ Requires-Dist: packaging>=26.1
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
 
-python-update-checker
-======================
+# python-update-checker
+
 Python-update-checker (puc) checks or updates pinned dependencies
 in `pyproject.toml`, `requirements.txt` or `uv.lock` files.
 
-See https://github.com/astral-sh/uv/issues/6794 for a discussion
-about different pinning strategies.
+If you are developing an application you should pin all dependencies.
+When developing a library, only development dependencies should be pinned.
+Since puc updates pinned dependencies, it is mostly suitable
+when developing applications.
 
+See [https://github.com/astral-sh/uv/issues/6794] for a discussion
+about different pinning strategies.
 
-Features
----------
+## Features
 
 * updates pinned dependencies, ignores unpinned dependencies
 * supports pyproject.toml, uv.lock and requirements.txt formats
-* supports `[project.dependencies]`, `[project.optional-dependencies]` and `[dependency-groups]` in pyproject.toml
+* supports `[project.dependencies]`, `[project.optional-dependencies]`
+  and `[dependency-groups]` in pyproject.toml
 * supports recursive references (-r) in requirements.txt formats
 * can run in check only mode, ie. it checks if updates are available
 * limit updates to specific packages
@@ -39,11 +43,18 @@ Features
 * (limited) support for environment markers, ie. `"pywin32==311; os_name=='nt'"`
 * runs on Linux, MacOS and Windows platforms
 
+## Quickstart
+
+```bash
+
+uvx --from python-update-checker puc --exclude-newer "1 day" update pyproject.toml
+uv sync
+```
 
-Examples
----------
+## Examples
 
 ```bash
+
 $ # check all pinned packages for updates in pyproject.toml
 $ puc check pyproject.toml
 puc INFO: check pyproject file pyproject.toml
@@ -55,6 +66,8 @@ $ puc --exclude-newer="7 days" update pyproject.toml
 puc INFO: update pyproject file pyproject.toml
 puc INFO: updating 'ty==0.0.29' --> 0.0.31
 puc INFO: Wrote 1 updated package version(s) to pyproject.toml
+$ # update the project environment after upgrading pyproject.toml
+$ uv sync
 
 $ # check all pinned packages for updates in requirements.txt
 $ puc check requirements.txt
@@ -65,52 +78,49 @@ puc WARNING: found update 'Django==5.2.0' --> 6.0.4
 $ # update only the django package version in requirements.txt
 $ # limit updates to django versions less than 6
 $ puc --package="Django" --constraints="Django<6" update requirements.txt
-INFO: update requirements file requirements.txt
-INFO: updating 'Django==5.2.0' --> 5.2.13
-INFO: Wrote 1 updated package version(s) to requirements.txt
+puc INFO: update requirements file requirements.txt
+puc INFO: updating 'Django==5.2.0' --> 5.2.13
+puc INFO: Wrote 1 updated package version(s) to requirements.txt
 ```
 
-Script behaviour
------------------
+## Script behaviour
 
 The exit code of `puc check` is non-zero when updates are available.
 
 Checking a `pyproject.toml` or `uv.lock`file with `puc` should be done
 from the directory of the `pyproject.toml` file,
-especially if your project relies on a [project directory](https://docs.astral.sh/uv/concepts/projects/layout/) (for example to define additional package indexes in pyproject.toml).
+especially if your project relies on a [project directory](https://docs.astral.sh/uv/concepts/projects/layout/)
+(for example to define additional package indexes in pyproject.toml).
 
 After updating versions in pyproject.toml, run `uv lock --upgrade` to update
-the transitive dependencies in `uv.lock`.
-
-Pinned dependencies are packages with `==` or `===` constraints and no wildcards in the version.
+the transitive dependencies in `uv.lock` and `uv sync` to update your
+virtual environment.
 
+Pinned dependencies are packages with `==` or `===` constraints
+and no wildcards in the version.
 
-Installation
--------------
+## Installation
 
 1) Install [python uv](https://docs.astral.sh/uv/getting-started/installation/)
-2) Install puc with `uv pip install python-update-checker`.
+2) Install puc with `uv pip install python-update-checker`
+  or run with `uvx --from python-update-checker puc ...`
 
-
-
-Architecture
--------------
+## Architecture
 
 Dependencies are
 
 * [uv](https://docs.astral.sh/uv/):
   The uv binary must be available for the script to call.  
   puc uses `echo "package" | uv pip compile -` to get latest package versions.  
-  puc uses `uv add "package==<version>"` to update pyproject.toml dependencies.
+  puc uses `uv add "package==<version>"` to update pyproject.toml
+  dependencies and `uv lock --upgrade-package` to update uv.lock dependencies.
 
 * [packaging](https://packaging.pypa.io/):
   Parses dependencies with the packaging.requirements.Requirement class.
 
 puc needs Python >= 3.11 since it uses the tomllib Python module.
 
-
-Limitations
-------------
+## Limitations
 
 * No support for custom dependency formats in pyproject.toml
   (eg. `[tool.poetry.dependencies]`).

{python_update_checker-0.6 → python_update_checker-0.8.0}/README.md

@@ -1,18 +1,22 @@
-python-update-checker
-======================
+# python-update-checker
+
 Python-update-checker (puc) checks or updates pinned dependencies
 in `pyproject.toml`, `requirements.txt` or `uv.lock` files.
 
-See https://github.com/astral-sh/uv/issues/6794 for a discussion
-about different pinning strategies.
+If you are developing an application you should pin all dependencies.
+When developing a library, only development dependencies should be pinned.
+Since puc updates pinned dependencies, it is mostly suitable
+when developing applications.
 
+See [https://github.com/astral-sh/uv/issues/6794] for a discussion
+about different pinning strategies.
 
-Features
----------
+## Features
 
 * updates pinned dependencies, ignores unpinned dependencies
 * supports pyproject.toml, uv.lock and requirements.txt formats
-* supports `[project.dependencies]`, `[project.optional-dependencies]` and `[dependency-groups]` in pyproject.toml
+* supports `[project.dependencies]`, `[project.optional-dependencies]`
+  and `[dependency-groups]` in pyproject.toml
 * supports recursive references (-r) in requirements.txt formats
 * can run in check only mode, ie. it checks if updates are available
 * limit updates to specific packages
@@ -21,11 +25,18 @@ Features
 * (limited) support for environment markers, ie. `"pywin32==311; os_name=='nt'"`
 * runs on Linux, MacOS and Windows platforms
 
+## Quickstart
+
+```bash
+
+uvx --from python-update-checker puc --exclude-newer "1 day" update pyproject.toml
+uv sync
+```
 
-Examples
----------
+## Examples
 
 ```bash
+
 $ # check all pinned packages for updates in pyproject.toml
 $ puc check pyproject.toml
 puc INFO: check pyproject file pyproject.toml
@@ -37,6 +48,8 @@ $ puc --exclude-newer="7 days" update pyproject.toml
 puc INFO: update pyproject file pyproject.toml
 puc INFO: updating 'ty==0.0.29' --> 0.0.31
 puc INFO: Wrote 1 updated package version(s) to pyproject.toml
+$ # update the project environment after upgrading pyproject.toml
+$ uv sync
 
 $ # check all pinned packages for updates in requirements.txt
 $ puc check requirements.txt
@@ -47,52 +60,49 @@ puc WARNING: found update 'Django==5.2.0' --> 6.0.4
 $ # update only the django package version in requirements.txt
 $ # limit updates to django versions less than 6
 $ puc --package="Django" --constraints="Django<6" update requirements.txt
-INFO: update requirements file requirements.txt
-INFO: updating 'Django==5.2.0' --> 5.2.13
-INFO: Wrote 1 updated package version(s) to requirements.txt
+puc INFO: update requirements file requirements.txt
+puc INFO: updating 'Django==5.2.0' --> 5.2.13
+puc INFO: Wrote 1 updated package version(s) to requirements.txt
 ```
 
-Script behaviour
------------------
+## Script behaviour
 
 The exit code of `puc check` is non-zero when updates are available.
 
 Checking a `pyproject.toml` or `uv.lock`file with `puc` should be done
 from the directory of the `pyproject.toml` file,
-especially if your project relies on a [project directory](https://docs.astral.sh/uv/concepts/projects/layout/) (for example to define additional package indexes in pyproject.toml).
+especially if your project relies on a [project directory](https://docs.astral.sh/uv/concepts/projects/layout/)
+(for example to define additional package indexes in pyproject.toml).
 
 After updating versions in pyproject.toml, run `uv lock --upgrade` to update
-the transitive dependencies in `uv.lock`.
-
-Pinned dependencies are packages with `==` or `===` constraints and no wildcards in the version.
+the transitive dependencies in `uv.lock` and `uv sync` to update your
+virtual environment.
 
+Pinned dependencies are packages with `==` or `===` constraints
+and no wildcards in the version.
 
-Installation
--------------
+## Installation
 
 1) Install [python uv](https://docs.astral.sh/uv/getting-started/installation/)
-2) Install puc with `uv pip install python-update-checker`.
+2) Install puc with `uv pip install python-update-checker`
+  or run with `uvx --from python-update-checker puc ...`
 
-
-
-Architecture
--------------
+## Architecture
 
 Dependencies are
 
 * [uv](https://docs.astral.sh/uv/):
   The uv binary must be available for the script to call.  
   puc uses `echo "package" | uv pip compile -` to get latest package versions.  
-  puc uses `uv add "package==<version>"` to update pyproject.toml dependencies.
+  puc uses `uv add "package==<version>"` to update pyproject.toml
+  dependencies and `uv lock --upgrade-package` to update uv.lock dependencies.
 
 * [packaging](https://packaging.pypa.io/):
   Parses dependencies with the packaging.requirements.Requirement class.
 
 puc needs Python >= 3.11 since it uses the tomllib Python module.
 
-
-Limitations
-------------
+## Limitations
 
 * No support for custom dependency formats in pyproject.toml
   (eg. `[tool.poetry.dependencies]`).

{python_update_checker-0.6 → python_update_checker-0.8.0}/pyproject.toml

@@ -1,17 +1,13 @@
 [project]
 name = "python-update-checker"
-version = "0.6"
+version = "0.8.0"
+readme = "README.md"
 requires-python = ">=3.11"
 license = "GPL-3.0-only"
-license_files = [
-    "COPYING",
-]
-readme = "README.md"
-# https://pypi.org/classifiers/
 classifiers = [
+    "Development Status :: 4 - Beta",
     "Environment :: Console",
     "Intended Audience :: Developers",
-    "Development Status :: 4 - Beta",
     "Operating System :: OS Independent",
     "Programming Language :: Python :: 3 :: Only",
     "Programming Language :: Python :: 3.11",
@@ -20,40 +16,37 @@ classifiers = [
     "Programming Language :: Python :: 3.14",
     "Topic :: Software Development :: Build Tools",
 ]
-dependencies = [
-  # track compatibility for dependencies, do not pin
-  "packaging>=26.1",
-]
+dependencies = ["packaging>=26.1"]
+license_files = ["COPYING"]
 
 [project.scripts]
 puc = "puc:cli.main"
 
 [dependency-groups]
-# these packages are only needed for development
 dev = [
-  # for python code linting
-  "ruff==0.15.12",
-  # for python type checking
-  "ty==0.0.34",
-  # for testing
-  "pytest==9.0.3",
+    "bump2version==1.0.1",
+    "pytest==9.1.1",
+    "ruff==0.16.4",
+    "rumdl==0.2.61",
+    "tombi==1.4.1",
+    "ty==0.0.75",
+    "zizmor==1.29.0",
 ]
 
 [build-system]
-requires = ["uv_build>=0.11,<0.12"]
+requires = ["uv_build>=0.11.32,<0.13"]
 build-backend = "uv_build"
 
+[tool.project]
+python_version_dev = "3.14.7"
+uv_version_dev = "0.12.9"
+
 [tool.uv.build-backend]
 module-name = "puc"
 source-include = [
-  ".gitignore",
-  ".ruff.toml",
-  "Makefile",
-  "scripts/**",
-  "tests/**",
+    ".gitignore",
+    ".ruff.toml",
+    "Makefile",
+    "scripts/**",
+    "tests/**",
 ]
-
-[tool.project]
-# pin versions of Python and uv for development
-python_version_dev = "3.14.5"
-uv_version_dev = "0.11.14"

python_update_checker-0.8.0/pyproject.toml.orig

@@ -0,0 +1,67 @@
+[project]
+name = "python-update-checker"
+version = "0.8.0"
+readme = "README.md"
+requires-python = ">=3.11"
+license = "GPL-3.0-only"
+# https://pypi.org/classifiers/
+classifiers = [
+  "Development Status :: 4 - Beta",
+  "Environment :: Console",
+  "Intended Audience :: Developers",
+  "Operating System :: OS Independent",
+  "Programming Language :: Python :: 3 :: Only",
+  "Programming Language :: Python :: 3.11",
+  "Programming Language :: Python :: 3.12",
+  "Programming Language :: Python :: 3.13",
+  "Programming Language :: Python :: 3.14",
+  "Topic :: Software Development :: Build Tools",
+]
+dependencies = [
+  # track compatibility for dependencies, do not pin
+  "packaging>=26.1",
+]
+license_files = [
+  "COPYING",
+]
+
+[project.scripts]
+puc = "puc:cli.main"
+
+[dependency-groups]
+# these packages are only needed for development
+dev = [
+  # for upgrading the version number
+  "bump2version==1.0.1",
+  # for testing
+  "pytest==9.1.1",
+  # for python code linting
+  "ruff==0.16.4",
+  # Markdown style checking and formatting
+  "rumdl==0.2.61",
+  # reformat toml files
+  "tombi==1.4.1",
+  # for python type checking
+  "ty==0.0.75",
+  # for auditing github actions
+  "zizmor==1.29.0",
+]
+
+[build-system]
+requires = ["uv_build>=0.11.32,<0.13"]
+build-backend = "uv_build"
+
+[tool.project]
+# pin versions of Python and uv for development
+python_version_dev = "3.14.7"
+uv_version_dev = "0.12.9"
+
+[tool.uv.build-backend]
+module-name = "puc"
+source-include = [
+  ".gitignore",
+  ".ruff.toml",
+  "Makefile",
+  "scripts/**",
+  "tests/**",
+]

{python_update_checker-0.6 → python_update_checker-0.8.0}/scripts/install_dev.sh

@@ -36,15 +36,14 @@ DOWNLOAD_URL_UV=https://github.com/astral-sh/uv/releases/download/${UV_VER}/uv-x
 CURL_OPTS=("--location" "--silent" "--show-error" "--retry" "2" "--fail" "--tlsv1.2" "--proto" "=https")
 REINSTALL_PYTHON=0
 
-
 #### helper functions
 
 # Install a debian package
 install_package() {
   local pkg=$1
-  if ! dpkg --status "${pkg}" >/dev/null 2>&1; then
+  if ! dpkg --status "${pkg}" > /dev/null 2>&1; then
     echo "Installing ${pkg}"
-    sudo apt-get install "${pkg}"
+    sudo apt-get install --assume-yes "${pkg}"
   fi
 }
 
@@ -58,6 +57,8 @@ install_package curl
 install_package direnv
 # lint shell
 install_package shellcheck
+# for formatting shell scripts (used by make reformat)
+install_package shfmt
 
 # the rest of this scripts relies on being in the project directory
 cd "${PROJECTDIR}"
@@ -68,16 +69,22 @@ if [ ! -d bin ]; then
 fi
 if [ ! -f bin/uv ]; then
     echo "Install uv ${UV_VER} from ${DOWNLOAD_URL_UV}"
-    (cd bin; curl "${CURL_OPTS[@]}" "${DOWNLOAD_URL_UV}" | tar xzv --strip-components 1)
+    (
+     cd bin
+             curl "${CURL_OPTS[@]}" "${DOWNLOAD_URL_UV}" | tar xzv --strip-components 1
+  )
 elif [ "$(bin/uv --version | cut -d" " -f2)" != "${UV_VER}" ]; then
     echo "Updating $(bin/uv --version) to ${UV_VER} from ${DOWNLOAD_URL_UV}"
-    (cd bin; curl "${CURL_OPTS[@]}" "${DOWNLOAD_URL_UV}" | tar xzv --strip-components 1)
+    (
+     cd bin
+             curl "${CURL_OPTS[@]}" "${DOWNLOAD_URL_UV}" | tar xzv --strip-components 1
+  )
     # new uv versions might use new versions from python-build-standalone
     REINSTALL_PYTHON=1
 fi
 
 # add local development environment for direnv
-if ! declare -F _direnv_hook >/dev/null; then
+if ! declare -F _direnv_hook > /dev/null; then
     eval "$(direnv hook bash)"
 fi
 if [ ! -f .envrc ]; then
@@ -85,7 +92,7 @@ if [ ! -f .envrc ]; then
     echo "# to find local tools"
     echo "export PATH=${PROJECTDIR}/bin\${PATH:+:\$PATH}"
     echo "export PATH=${PROJECTDIR}/.venv/bin\${PATH:+:\$PATH}"
-    ) > .envrc
+  )   > .envrc
     direnv allow .
     source .envrc
 fi
@@ -95,7 +102,7 @@ if [ ! -f .python-version ]; then
   echo "Generating $PROJECTDIR/.python-version"
   echo "${PY_VER}" > .python-version
 else
-  PROJ_PY_VER=$(<.python-version)
+  PROJ_PY_VER=$(< .python-version)
   if [ ".$PROJ_PY_VER" != ".$PY_VER" ]; then
     echo "Updating $PROJECTDIR/.python-version (${PROJ_PY_VER} -> ${PY_VER})"
     echo "${PY_VER}" >| .python-version

{python_update_checker-0.6 → python_update_checker-0.8.0}/src/puc/dependencies.py

@@ -4,6 +4,7 @@
 
 import subprocess
 import re
+import logging
 from packaging.requirements import Requirement
 from packaging.markers import Variable, MarkerList
 from packaging.version import parse as parse_version
@@ -12,9 +13,9 @@ from .logging import logger
 
 def get_latest_version(
     package: str,
-    exclude_newer: None | str = None,
-    exclude_newer_package: None | str = None,
-    constraint_file: None | str = None,
+    exclude_newer: str | None = None,
+    exclude_newer_package: str | None = None,
+    constraint_file: str | None = None,
     python_platform: str | None = None,
     python_version: str | None = None,
 ) -> str:
@@ -28,12 +29,15 @@ def get_latest_version(
         "compile",
         "-",
         "--color=never",
-        "--quiet",
         "--no-deps",
         "--no-header",
         "--no-annotate",
         "--no-progress",
     ]
+    if logger.getEffectiveLevel() <= logging.DEBUG:
+        cmd.append("--verbose")
+    else:
+        cmd.append("--quiet")
     if exclude_newer:
         cmd.extend(("--exclude-newer", exclude_newer))
     if exclude_newer_package:
@@ -122,9 +126,9 @@ def get_min_python_version_from_req(pkg_req: Requirement) -> str | None:
 
 def parse_requirement(
     line: str,
-    exclude_newer: None | str = None,
-    constraint_file: None | str = None,
-) -> None | str | Requirement:
+    exclude_newer: str | None = None,
+    constraint_file: str | None = None,
+) -> str | Requirement | None:
     """Parse one line of a requirements.txt file."""
     line = line.strip()
     if not line or line.startswith("#"):

{python_update_checker-0.6 → python_update_checker-0.8.0}/src/puc/pyprojecttoml.py

@@ -5,6 +5,7 @@
 import subprocess
 import os
 import tomllib
+import logging
 from packaging.utils import canonicalize_name
 from packaging.requirements import Requirement
 
@@ -14,16 +15,17 @@ from .dependencies import (
     get_python_platform_from_req,
     get_min_python_version_from_req,
     check_requirement,
+    is_newer_version,
 )
 
 
 def handle_pyproject_toml(
     pyproject_path: str,
-    command: None | str = None,
+    command: str | None = None,
     packages=None,
-    exclude_newer: None | str = None,
-    exclude_newer_package: None | str = None,
-    constraint_file: None | str = None,
+    exclude_newer: str | None = None,
+    exclude_newer_package: str | None = None,
+    constraint_file: str | None = None,
     color: bool = True,
 ) -> int:
     """Check or update pinned dependencies of a pyproject.toml file.
@@ -96,13 +98,13 @@ def update_pyproject_dependencies(
     dependencies: list[str | dict],
     project_dir: str,
     projectname: str,
-    group: None | str = None,
+    group: str | None = None,
     optional=False,
-    command: None | str = None,
+    command: str | None = None,
     packages=None,
-    exclude_newer: None | str = None,
-    exclude_newer_package: None | str = None,
-    constraint_file: None | str = None,
+    exclude_newer: str | None = None,
+    exclude_newer_package: str | None = None,
+    constraint_file: str | None = None,
     color: bool = True,
 ) -> int:
     """Update given dependency list of a pyproject.toml file."""
@@ -140,6 +142,10 @@ def update_pyproject_dependencies(
         spec = next(s for s in pkg_req.specifier)
         if latest_version is not None and latest_version != spec.version:
             updatable += 1
+            if not is_newer_version(spec.version, latest_version):
+                logger.warning(
+                    f"{pkg_req.name} latest version {latest_version} is older than specified version {spec.version}"
+                )
             version = (
                 colorize_updated_version(spec.version, latest_version)
                 if color
@@ -160,7 +166,7 @@ def update_pyproject_pkg(
     dependency: str,
     package: str,
     projectdir: str,
-    group: None | str = None,
+    group: str | None = None,
     optional: bool = False,
 ) -> None:
     """Update one package in pyproject.toml."""
@@ -169,11 +175,15 @@ def update_pyproject_pkg(
         "add",
         "--project",
         projectdir,
-        "--quiet",
         "--frozen",
         "--color=never",
-        f"--upgrade-package={package}",
+        "--upgrade-package",
+        package,
     ]
+    if logger.getEffectiveLevel() <= logging.DEBUG:
+        command.append("--verbose")
+    else:
+        command.append("--quiet")
     if optional and group:
         command.append("--optional")
         command.append(group)

{python_update_checker-0.6 → python_update_checker-0.8.0}/src/puc/requirementstxt.py

@@ -14,6 +14,7 @@ from .dependencies import (
     get_python_platform_from_req,
     get_min_python_version_from_req,
     parse_requirement,
+    is_newer_version,
 )
 
 
@@ -23,11 +24,11 @@ max_rec_level = 5
 
 def handle_requirements_txt(
     requirements_txt_path: str,
-    command: None | str = None,
+    command: str | None = None,
     packages=None,
-    exclude_newer: None | str = None,
-    exclude_newer_package: None | str = None,
-    constraint_file: None | str = None,
+    exclude_newer: str | None = None,
+    exclude_newer_package: str | None = None,
+    constraint_file: str | None = None,
     color: bool = True,
     rec_level: int = 0,
     handled_files: list[str] | None = None,
@@ -91,6 +92,10 @@ def handle_requirements_txt(
                     output.write(line)
                 elif latest_version is not None and latest_version != spec.version:
                     updatable += 1
+                    if not is_newer_version(spec.version, latest_version):
+                        logger.warning(
+                            f"{pkg_req.name} latest version {latest_version} is older than specified version {spec.version}"
+                        )
                     version = (
                         colorize_updated_version(spec.version, latest_version)
                         if color

{python_update_checker-0.6 → python_update_checker-0.8.0}/src/puc/uvlock.py

@@ -16,11 +16,11 @@ from .dependencies import (
 
 def handle_uv_lock(
     uvlock_path: str,
-    command: None | str = None,
+    command: str | None = None,
     packages=None,
-    exclude_newer: None | str = None,
-    exclude_newer_package: None | str = None,
-    constraint_file: None | str = None,
+    exclude_newer: str | None = None,
+    exclude_newer_package: str | None = None,
+    constraint_file: str | None = None,
     color: bool = True,
 ) -> int:
     """Check or update pinned dependencies of a uv.lock file."""
@@ -49,12 +49,20 @@ def handle_uv_lock(
         if version is None:
             logger.warning(f"missing version in package {uvpackage}")
             continue
+        # respect package filter
+        if packages and canonicalize_name(name) not in packages:
+            logger.info(f"skip package {name} due to package filter")
+            continue
+        # skip virtual packages (ie. the project itself)
+        source = uvpackage.get("source", {})
+        if "virtual" in source:
+            logger.info(f"skip virtual package {name}")
+            continue
         updatable += update_uvlock_dependency(
             name,
             version,
             project_dir,
             command=command,
-            packages=packages,
             exclude_newer=exclude_newer,
             exclude_newer_package=exclude_newer_package,
             constraint_file=constraint_file,
@@ -69,18 +77,13 @@ def update_uvlock_dependency(
     package,
     version,
     project_dir: str,
-    command: None | str = None,
-    packages=None,
-    exclude_newer: None | str = None,
-    exclude_newer_package: None | str = None,
-    constraint_file: None | str = None,
+    command: str | None = None,
+    exclude_newer: str | None = None,
+    exclude_newer_package: str | None = None,
+    constraint_file: str | None = None,
     color: bool = True,
 ) -> int:
     """Update uv lock dependency."""
-    # respect optional package filter
-    if packages and canonicalize_name(package) not in packages:
-        return 0
-
     try:
         latest_version = get_latest_version(
             package,
@@ -114,7 +117,7 @@ def update_uvlock_dependency(
 def update_uvlock_pkg(
     package: str,
     projectdir: str,
-    exclude_newer: None | str = None,
+    exclude_newer: str | None = None,
 ) -> None:
     """Update one package in pyproject.toml."""
     command = [
@@ -124,7 +127,8 @@ def update_uvlock_pkg(
         projectdir,
         "--quiet",
         "--color=never",
-        f"--upgrade-package={package}",
+        "--upgrade-package",
+        package,
     ]
     if exclude_newer:
         command.extend(

{python_update_checker-0.6 → python_update_checker-0.8.0}/tests/data/uv.lock

@@ -50,3 +50,8 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/d2/ef/3ef01c17785ff9a69378465c7d0faccd48a07b163554db0995e5d65a5a23/ty-0.0.29-py3-none-win_amd64.whl", hash = "sha256:fc1294200226b91615acbf34e0a9ad81caf98c081e9c6a912a31b0a7b603bc3f", size = 11023644, upload-time = "2026-04-05T15:01:04.432Z" },
     { url = "https://files.pythonhosted.org/packages/2c/55/87280a994d6a2d2647c65e12abbc997ed49835794366153c04c4d9304d76/ty-0.0.29-py3-none-win_arm64.whl", hash = "sha256:f9794bbd1bb3ce13f78c191d0c89ae4c63f52c12b6daa0c6fe220b90d019d12c", size = 10428165, upload-time = "2026-04-05T15:01:34.665Z" },
 ]
+
+[[package]]
+name = "imadoofus"
+version = "1.1.1"
+source = { virtual = "." }

{python_update_checker-0.6 → python_update_checker-0.8.0}/tests/test_uv_lock.py

@@ -34,6 +34,7 @@ class UvLockTest(unittest.TestCase):
         self.assertTrue(result.returncode > 0)
         self.assertIn("found update 'ty==", output)
         self.assertIn("found update 'ruff==", output)
+        self.assertIn("skip virtual package imadoofus", output)
 
     @needs_program('uv')
     def test_uvlock_check_package(self):