PEP 751 pylock.toml support

[groodt]

Is there an existing issue for this?

• I have searched the existing issues

Feature description

PEP 751 is a new standard lockfile format. It has been Accepted and the community is rallying to support it. It would be great if Dependabot can support it. It might eventually simplify certain aspects of having to support the universe of pip, piptools, PDM, poetry, uv, hatch, etc

https://pydevtools.com/handbook/explanation/what-is-pep-751/
https://peps.python.org/pep-0751/

[anentropic]

This will 'unlock' support for other tools besides pip and uv, e.g. pdm, and is clearly the correct approach going forward

[webknjaz]

Pip-tools' tracking issue: jazzband/pip-tools#2124

[notatallshaw]

Now pip supports installing from a pylock.toml we at pip are looking at replacing our hashed requirement files with pylock.toml files: pypa/pip#13997