`_bump_with_regex` function changes dependencies if they have same version number

[be8312e4b036]

https://github.com/commitizen-tools/commitizen/blob/75a97e56bddac011e0d0eca3018fc0f873edbe4c/commitizen/bump.py#L131C4-L142C5

In a pyproject.toml of the form:

[project]
name = "myproject"
version = "1.2.3"
dependencies = [
    "package-a==5.0.0",
    "package-b==1.2.3"
]

[tool.commitizen]
name = "cz_conventional_commits"
version_files = ["pyproject.toml"]
tag_format = "v$version"
version_scheme = "pep440"
version_provider = "pep621"

[tool.uv.sources]
mygitpackage = { git = "...", rev = "v1.2.3" }

the packages package-b and mygitpackage get bumped as well as myproject (when running cz bump) because the regex is just matching on the version number. These shouldn't be bumped and leads to errors when they are.

[bearomorphism]

checking this one

[bearomorphism]

I think we need to change the mechanism here. A regex contains too little information.

[bearomorphism]

I want to do some cleanup before moving on. See #1594.

[be8312e4b036]

@bearomorphism Just seen that #1594 has been merged now. Where is this fix in the timeline please?

[bearomorphism]

@Lee-W I just found this file and you are the only author.

https://github.com/commitizen-tools/commitizen/blob/v4-10-1/tests/data/repeated_version_number.json

Shouldn't the case described in this issue be tested 🤔

[bearomorphism]

@be8312e4b036 This documentation may solve your issue:
https://commitizen-tools.github.io/commitizen/commands/bump/#version_files

In your case, you can try adding "pyproject.toml:version" to your version files setting.

I agree the source code is a bit misleading...

[bearomorphism]

Hi @be8312e4b036, is this still an issue?

Thanks!

[mronidk]

Hi @be8312e4b036, is this still an issue?

Thanks!

I have experienced this issue as well. Dependencies with the same version as the pyproject.toml gets bumped.

EDIT: Specifying the version in version files seems to resolve the issue, as you suggested @bearomorphism

[bearomorphism]

Np

[Lee-W]

Looks like it resolved. I'm going to close this. Feel free to reopen it if I misunderstood. Thanks!