feat(manager/pip_setup): set currentVersion field for exact dependency versions

[Shegox]

Changes

Adds currentVersion values to extracted dependencies that are specified with an exact version requirement. This change enables vulnerability fix PRs for dependencies located in a pip_setup file.

Before this PR, Renovate would log something like this:

DEBUG: Skipping vulnerability lookup for package requests due to unsupported version ==2.31.0 (repository=xxxxx)

After this PR it correctly looks up the vulnerabilities for this dependency and reports them:

DEBUG: Vulnerability GHSA-9wx4-h78v-vm56 affects requests 2.31.0 (repository=xxxxx)

Context

Similar to #26769, just for pip_setup
Related initial discussion: #20542 (comment)

Documentation (please check one with an [x])

• I have updated the documentation, or
• No documentation update is required

How I've tested my work (please select one)

I have verified these changes via:

• Code inspection only, or
• Newly added/modified unit tests, or
• No unit tests but ran on a real repository, or
• Both unit tests + ran on a real repository (only as a dry run)

[s00hyun]

Thanks a lot for working on this, @Shegox 👍

[renovate-release]

🎉 This issue has been resolved in version 38.54.0 🎉

The release is available on:

• GitHub release
• npm package (@latest dist-tag)
• 38.54.0

Your semantic-release bot 📦🚀