github dependabot/dependabot-core v0.269.0

latest releases: v0.284.0, v0.283.0, v0.282.0...
2 months ago

What's Changed

  • Fixes Dependabot::SharedHelpers::HelperSubprocessFailed issues by @sachin-sandhu in #10349
  • add directory to existing PR checks, updating tests by @jakecoffman in #10325
  • Add Spec Tests for CreateSecurityUpdatePullRequest by @kbukum1 in #10344
  • Report transitive dependency vulnerability errors for npm, yarn, and pnpm by @kbukum1 in #10282
  • don't waste quota on main since branch was up-to-date by @jakecoffman in #10352
  • fix "no groups" exception, run more jobs through GroupUpdateAllVersions by @jakecoffman in #10348
  • Strict type Dependabot::Updater.Operations::RefreshSecurityUpdatePullRequest by @kbukum1 in #10334
  • allow for wildcards in version requirements by @brettfo in #10353
  • report no new version if a given package doesn't exist on any feed by @brettfo in #10354
  • convert test to not require the network by @brettfo in #10355
  • Add Error Handling for YN0082 in YarnErrorHandler by @kbukum1 in #10374
  • Fixes issues related with Dependabot::NpmAndYarn::UpdateChecker::LatestVersionFinder::RegistryError by @sachin-sandhu in #10378
  • Fixes logger location for Dependabot::NpmAndYarn::UpdateChecker::LatestVersionFinder::RegistryError by @sachin-sandhu in #10380
  • Fixes JSON::ParserError: unexpected token issue by @sachin-sandhu in #10381
  • NPM: fix security update for indirect and direct dependencies by @jakecoffman in #10371

Full Changelog: v0.268.0...v0.269.0

Don't miss a new dependabot-core release

NewReleases is sending notifications on new releases.