Dependabot: Pipfile.lock but I don't have one?

I have a python project with a Pipfile checked in but no Pipfile.lock checked in; Dependabot is complaining about a dependency that it says is in my Pipfile.lock; is it generating that and then complaining about its contents? I’m trying to understand how to fix it when the dependency doesn’t even appear on pipenv graph.

Just a bump to see if anyone has any thoughts. :wink: