dependabot/dependabot-core v0.237.0

on GitHub

What's Changed

• Pass user info to Sentry by @deivid-rodriguez in #8188
• Bump the dev-dependencies group in /updater with 1 update by @dependabot in #8282
• Bump psych from 5.1.0 to 5.1.1.1 in /updater by @dependabot in #8236
• Detect Python version from pip-compile generated files by @deivid-rodriguez in #8280
• Bump the pnpm-dependencies group in /npm_and_yarn/helpers with 1 update by @dependabot in #8268
• Bump the npm-dependencies group in /npm_and_yarn/helpers with 2 updates by @dependabot in #8255
• Bump @babel/traverse from 7.23.0 to 7.23.2 in /npm_and_yarn/helpers by @dependabot in #8235
• Handle null dependencies in package.json by @deivid-rodriguez in #8212
• Set Python to always clone by @deivid-rodriguez in #8266
• Add types to git workspace by @JamieMagee in #8285
• Add sigs for errors by @JamieMagee in #8097
• Explicitly add # typed: false for bin files by @JamieMagee in #8287
• Bump the dev-dependencies group in /composer/helpers/v2 with 2 updates by @dependabot in #8294
• Bump the dev-dependencies group in /updater with 1 update by @dependabot in #8291
• Bump the dev-dependencies group in /npm_and_yarn/helpers with 1 update by @dependabot in #8290
• Bump the dev-dependencies group in /composer/helpers/v1 with 1 update by @dependabot in #8256
• Revert python always clone registration by @deivid-rodriguez in #8288
• Fixes for v234 release bugs by @LakSenanayaka in #8218
• Bump cython from 3.0.3 to 3.0.4 in /python/helpers by @dependabot in #8252
• Bump pip from 23.2.1 to 23.3.1 in /python/helpers by @dependabot in #8251
• Enable always clone for Python (take 2) by @deivid-rodriguez in #8301
• Some more types for common by @JamieMagee in #8304
• Type LinkAndMentionSanitizer by @JamieMagee in #8298
• Sorbet types for source by @JamieMagee in #8272
• Type SharedHelpers by @JamieMagee in #8302
• Bump composer/composer from 2.5.8 to 2.6.5 in /composer/helpers/v2 by @dependabot in #8159
• Fix tests broken by racc release by @deivid-rodriguez in #8313
• Raise expected errors when unsupported PNPM versions are used by @deivid-rodriguez in #8147
• Fix illformed requirement error on "workspace:" dependencies by @deivid-rodriguez in #8099
• Fix error when parsing version of some PNPM lockfiles by @deivid-rodriguez in #8315
• Bump excon from 0.102.0 to 0.104.0 in /updater by @dependabot in #8292
• Bump faraday from 2.7.10 to 2.7.11 in /updater by @dependabot in #8059
• Replace pipenv lock with pipenv upgrade by @deivid-rodriguez in #8312
• Type SharedHelpers more thoroughly by @JamieMagee in #8310
• Properly aggregate pipenv upgrade errors in Sentry by @deivid-rodriguez in #8323
• Bump composer/composer from 1.10.26 to 1.10.27 in /composer/helpers/v1 by @dependabot in #8114
• build(deps): bump pNPM to 8.10.2 by @yeikel in #8289
• Add types for setup.rb by @JamieMagee in #8317
• Redact SCP-style git URIs in Sentry by @deivid-rodriguez in #8306
• Catch more 404 PNPM fetch errors and raise them as user errors by @deivid-rodriguez in #8324
• Simplify group updates by dep type test to fix CI by @deivid-rodriguez in #8344
• Fix broken composer CI by @deivid-rodriguez in #8345
• Bump the dev-dependencies group in /composer/helpers/v2 with 2 updates by @dependabot in #8343
• Add types for ExceptionSanitizer by @JamieMagee in #8314
• Fix common CI by @deivid-rodriguez in #8347
• Fix more test failures by @deivid-rodriguez in #8361
• add Dependabot config for Docker at /go_modules by @jakecoffman in #8373
• Bump golang from 1.21.3-bookworm to 1.21.4-bookworm in /go_modules by @dependabot in #8374
• Teach Updater to Invoke fetch files Based on Multi-Dir by @honeyankit in #8309
• Types for FileFetchers::Base by @JamieMagee in #8327
• Remove feature flag gating dependency removal by @mctofu in #8359
• Fix incorrect casing in some Dependabot PR titles by @deivid-rodriguez in #8355
• handle updating manifests across multiple directories by @jakecoffman in #8331
• Fix one more and_call_original-related flaky spec by @deivid-rodriguez in #8392
• Fix more Sorbet + and_call_original issues by @deivid-rodriguez in #8394
• Enforce # typed: true where possible by @JamieMagee in #8385
• Strictly type file by @JamieMagee in #8384
• fix broken updates due to incorrect directory filtering by @jakecoffman in #8405
• Building python is fast now by @deivid-rodriguez in #8407
• Strictly type UpdateConfig by @JamieMagee in #8403
• Strictly type DependencyGroup by @JamieMagee in #8404
• Fix PNPM issues with private registries by @deivid-rodriguez in #8330
• Support updating Package.swift files without a lockfile by @deivid-rodriguez in #8352
• Bump Bundler to 2.4.22 by @deivid-rodriguez in #8224
• Refactor composer error handling and better handle potential errors by @deivid-rodriguez in #8305
• Raise user errors about being unable to reach private git PNPM dependencies by @deivid-rodriguez in #8332
• build(deps): bump Yarn to 3.7.0 by @yeikel in #8399
• build(deps): bump pNPM to 8.10.5 by @yeikel in #8370
• Respect poetry explicit source by @lucemia in #8371
• Update README.md by @sungam3r in #8387
• Strongly type PullRequestCreator::Message by @JamieMagee in #8410
• Strongly type SimpleInstrumentor by @JamieMagee in #8421
• Strongly type VersionFilters by @JamieMagee in #8409
• Clone submodules in CI workflows by @deivid-rodriguez in #8429
• Clone submodules when building images manually by @deivid-rodriguez in #8430
• Fix windows servercore Docker updates by @deivid-rodriguez in #8442
• Fix the new alpine image versions for docker by @honeyankit in #8432
• Bundler native helpers should not run in a frozen context by @deivid-rodriguez in #8419
• Properly capture and re-raise PublicSourceTimedOut errors in Bundler by @deivid-rodriguez in #8420
• v0.237.0 by @dependabot-core-action-automation in #8316

New Contributors

• @LakSenanayaka made their first contribution in #8218
• @lucemia made their first contribution in #8371
• @sungam3r made their first contribution in #8387

Full Changelog: v0.236.0...v0.237.0