What's Changed
- v0.220.0 by @dependabot-core-action-automation in #7428
- Target latest Python versions - 3.11.4, 3.10.12, 3.9.17, 3.8.17, 3.7.17 by @phillipuniverse in #7412
- exclude patterns for grouped updates by @Nishnha in #7402
- Add a newline after the group intro by @Nishnha in #7401
- Use ruby:3.1.4-bullseye by @Nishnha in #7442
- Fix edge case when updating Actions with mixed versions by @deivid-rodriguez in #7410
- [Grouped Updates] Cleaner management of the update dependency list by @brrygrdn in #7414
- [Grouped Updates] The VendorUpdater class watermarks DependencyFile objects it creates by @brrygrdn in #7433
- [Updater] Extract creation of new group Pull Requests into a discrete class by @brrygrdn in #7354
- [Updater] Avoid mis-representing a Dependency Group as a Dependency in error handling by @brrygrdn in #7359
- build(deps): bump Terraform to 1.5.0 by @HorizonNet in #7439
- Remove pnpm experiment flag by @mctofu in #7453
- Roll pub. Use dart 3 for running helpers. by @sigurdm in #7417
- Look in parent directories for nuget.config files by @jmarolf in #7342
- Remove
persistent_gems_after_cleanworkaround by @jurre in #7296 - Add
DEPENDABOTenvironment variable for users by @shu-mutou in #7407 - Bump debug from 1.7.2 to 1.8.0 in /updater by @dependabot in #7316
- Add workspace experiment to maintain state between updates and capture success/failure of each by @bdragon in #6693
- Add missing final EOL by @deivid-rodriguez in #7456
- Add sanitization to BranchNamer::DependencyGroupStrategy by @TomNaessens in #7452
- Remove duplicated ENV by @deivid-rodriguez in #7455
- Instantiate less dependencies by @deivid-rodriguez in #7459
- Fix actions updates when inconsistent casing is used by @deivid-rodriguez in #7462
- Revert "Pin CodeQL version (#7275)" by @deivid-rodriguez in #7465
- Update Bundler to 2.4.14 by @deivid-rodriguez in #7429
- Configure git with ENV by @deivid-rodriguez in #7467
- Update ecosystem READMEs with recommended setup by @deivid-rodriguez in #7472
- Fix flaky spec by @deivid-rodriguez in #7474
- NPM: fix GitHub registry not working when path is specified by @jakecoffman in #7468
- Remove simplecov by @deivid-rodriguez in #7473
- [Grouped Updates] Avoid passing non-manifest file changes between group updates by @brrygrdn in #7404
- build(deps): bump PNPM from 8.3.1 to 8.6.4 by @yeikel in #7330
- Add support for Directory.Packages.props file as entrypoint by @TobiasLaving in #7086
- Add smoke tests for go, npm and bundler+vendoring by @brrygrdn in #7486
- Use table summary for large groups of dependencies by @bdragon in #7463
- build(deps): bump Terraform from 1.5.0 to 1.5.2 by @yeikel in #7493
- Stop recording the
ecosystemparam by @jeffwidman in #7492 - Only record ecosystem versions when flag set by @jeffwidman in #7516
- Update the
hex.pm/orgs/dependabottoken by @jeffwidman in #7532 - Stop exposing real account tokens in plaintext by @jeffwidman in #7533
- Switch to using the new
record_ecosystem_versionsendpoint. by @jeffwidman in #7517 - Fix CodeQL warning by @deivid-rodriguez in #7531
- Use the new
inputsAPI by @jeffwidman in #7550 - v0.221.0 by @dependabot-core-action-automation in #7554
New Contributors
- @jmarolf made their first contribution in #7342
- @shu-mutou made their first contribution in #7407
- @TobiasLaving made their first contribution in #7086
Full Changelog: v0.220.0...v0.221.0