Unexpected differentiation behavior between minor/major with uv

[jvllmr]

How are you running Renovate?

A Mend.io-hosted app

Which platform you running Renovate on?

github.com

Which version of Renovate are you using?

42.59.0

Please tell us more about your question or problem

In my project I have a group that contains all pep621 minor and patch updates: https://github.com/jvllmr/flay/blob/917b2e2921b381c9eb340cb939f9ed1b59ae9c50/.github/renovate.json#L49

However, in the following PR pytest in the pyproject.toml receives a major update within a grouped PR: jvllmr/flay#270 (pytest is upgraded from >=8.4.2 to >=9.0.2).
I would expect that there is a separate PR for the pytest major update.

When looking at the log you can see that uv last locked pytest to version 9.0.1 (probably because I generated that lockfile locally). I think renovate considers this a minor update because of this. Could this be changed so that renovate can resolve such situation? That would be great.

Reproduction repo: https://github.com/jvllmr/renovate-discussion-40166

Logs (if relevant)

Logs

{
            "packageName": "pytest",
            "depName": "pytest",
            "datasource": "pypi",
            "depType": "dependency-groups",
            "currentValue": ">=8.4.2",
            "managerData": {
              "depGroup": "test"
            },
            "lockedVersion": "9.0.1",
            "updates": [
              {
                "bucket": "major",
                "newVersion": "9.0.2",
                "newValue": ">=9.0.2",
                "releaseTimestamp": "2025-12-06T21:30:49.000Z",
                "newVersionAgeInDays": 19,
                "newMajor": 9,
                "newMinor": 0,
                "newPatch": 2,
                "updateType": "patch",
                "isBreaking": false,
                "isRange": true,
                "isBump": true,
                "libYears": 0.2555869165398275,
                "branchName": "renovate/python-minor-patch"
              }
            ],
            "versioning": "pep440",
            "warnings": [],
            "sourceUrl": "https://github.com/pytest-dev/pytest",
            "registryUrl": "https://pypi.org/pypi",
            "changelogUrl": "https://docs.pytest.org/en/stable/changelog.html",
            "mostRecentTimestamp": "2025-12-06T21:30:49.000Z",
            "currentVersion": "9.0.1",
            "currentVersionTimestamp": "2025-09-04T14:34:20.000Z",
            "currentVersionAgeInDays": 113,
            "isSingleVersion": false,
            "fixedVersion": "9.0.1"
          },

[RahulGautamSingh]

Seems valid, we should not be marking this minor change. But, I am also confused about this being a major change. Cause we are changing 2 values for same dep in package file & lockfile, so which one should we choose? 😕

Issue created: #40176

[secustor]

How do you have land in this state that the lockfile version is set to a different value than the one in pyproject.toml?

As the lockfile is normally the "truth", I tend to say this is correct.
That being said we could looking into choosing the bigger version here ( major ) 🤔

[RahulGautamSingh]

How do you have land in this state that the lockfile version is set to a different value than the one in pyproject.toml

The value in package file is a range so it should be okay.

[jvllmr]

To be more elaborate: uv chooses the most recent release that can be installed in the current environment for locking. In my case this can be 9.0.2 since the range is >=8.4.2 and uv creates an environment with the newest python version per default. In my case I want to keep compatibility with python 3.9 and therefore I need to keep the range at >=8.4.2, but uv can lock the version to 9.0.2

Btw I just noticed that uv actually locks pytest twice, but with different resolution markers. Here the extract:

[[package]]
name = "pytest"
version = "8.4.2"
source = { registry = "https://pypi.org/simple" }
resolution-markers = [
    "python_full_version < '3.10'",
]
dependencies = [
    { name = "colorama", marker = "python_full_version < '3.10' and sys_platform == 'win32'" },
    { name = "exceptiongroup", marker = "python_full_version < '3.10'" },
    { name = "iniconfig", version = "2.1.0", source = { registry = "https://pypi.org/simple" }, marker = "python_full_version < '3.10'" },
    { name = "packaging", marker = "python_full_version < '3.10'" },
    { name = "pluggy", marker = "python_full_version < '3.10'" },
    { name = "pygments", marker = "python_full_version < '3.10'" },
    { name = "tomli", marker = "python_full_version < '3.10'" },
]
sdist = { url = "https://files.pythonhosted.org/packages/a3/5c/00a0e072241553e1a7496d638deababa67c5058571567b92a7eaa258397c/pytest-8.4.2.tar.gz", hash = "sha256:86c0d0b93306b961d58d62a4db4879f27fe25513d4b969df351abdddb3c30e01", size = 1519618, upload-time = "2025-09-04T14:34:22.711Z" }
wheels = [
    { url = "https://files.pythonhosted.org/packages/a8/a4/20da314d277121d6534b3a980b29035dcd51e6744bd79075a6ce8fa4eb8d/pytest-8.4.2-py3-none-any.whl", hash = "sha256:872f880de3fc3a5bdc88a11b39c9710c3497a547cfa9320bc3c5e62fbf272e79", size = 365750, upload-time = "2025-09-04T14:34:20.226Z" },
]

[[package]]
name = "pytest"
version = "9.0.2"
source = { registry = "https://pypi.org/simple" }
resolution-markers = [
    "python_full_version >= '3.10'",
]
dependencies = [
    { name = "colorama", marker = "python_full_version >= '3.10' and sys_platform == 'win32'" },
    { name = "exceptiongroup", marker = "python_full_version == '3.10.*'" },
    { name = "iniconfig", version = "2.3.0", source = { registry = "https://pypi.org/simple" }, marker = "python_full_version >= '3.10'" },
    { name = "packaging", marker = "python_full_version >= '3.10'" },
    { name = "pluggy", marker = "python_full_version >= '3.10'" },
    { name = "pygments", marker = "python_full_version >= '3.10'" },
    { name = "tomli", marker = "python_full_version == '3.10.*'" },
]
sdist = { url = "https://files.pythonhosted.org/packages/d1/db/7ef3487e0fb0049ddb5ce41d3a49c235bf9ad299b6a25d5780a89f19230f/pytest-9.0.2.tar.gz", hash = "sha256:75186651a92bd89611d1d9fc20f0b4345fd827c41ccd5c299a868a05d70edf11", size = 1568901, upload-time = "2025-12-06T21:30:51.014Z" }
wheels = [
    { url = "https://files.pythonhosted.org/packages/3b/ab/b3226f0bd7cdcf710fbede2b3548584366da3b19b5021e74f5bde2a8fa3f/pytest-9.0.2-py3-none-any.whl", hash = "sha256:711ffd45bf766d5264d487b917733b453d917afd2b0ad65223959f59089f875b", size = 374801, upload-time = "2025-12-06T21:30:49.154Z" },
]

[jvllmr]

As this discussion is closed I have noted my suggestion for a solution in issue #40176