Bot is updating unpinned deps when configured to ignore them

[benjaoming]

Please LMK if I'm doing something wrong, but this didn't use to happen IIRC...

Example PR:

https://github.com/learningequality/kolibri/pull/4145/files

Configuration:

https://github.com/learningequality/kolibri/blob/develop/.pyup.yml#L29

[Jwomers]

@benjaoming this does seem incorrect, let me look into it

[benjaoming]

This also relates to the following PR:

https://github.com/learningequality/kolibri/pull/4146

Which should not have occurred since it was configured not to:

  - requirements/pipeline.txt:
      # This is only used on buildkite for some build stuff
      # so not very important
      update: False
      pin: False

[Jwomers]

@benjaoming I'm still looking into this, sorry for the delay

[benjaoming]

Hi @Jwomers - I'm sorry about this missing perhaps important info: All the PRs got opened after we closed a combined+biweekly PR: https://github.com/learningequality/kolibri/pull/4109

Here is a convenient PR history: https://github.com/learningequality/kolibri/pulls?utf8=%E2%9C%93&q=author%3Apyup-bot+