Problem 😮

We use pip-compile on a project which uses Python 3.6.

When dependabot creates pull requests, it can miss a dependency if that project has conditional dependencies based on python version.

For example, aiohttp declares that idna-ssl>1.0 is required for Python versions <3.7
https://github.com/aio-libs/aiohttp/blob/a89fff941fb8a9a185cf071409f90f0666fd3c9b/setup.py#L59

Therefore, it subsequently removes this pinned dependency from our requirements.txt, again, because it would have been marked as a dependency if ran in a Python 3.6 environment.

Solution ❓

Perhaps I'm missing it, but couldn't spot where I could configure the Python version dependabot uses.