dependabot/dependabot-core v0.289.0

on GitHub

What's Changed

• Remove dedup_branch_names ff and existing_branches array by @Nishnha in #10976
• Add Dependabot configuration for NuGet and git submodule by @JamieMagee in #10984
• Set Default npm Version to 10 Under enable_corepack_for_npm_and_yarn Feature Flag by @kbukum1 in #10985
• Bump MSBuildPackageVersion from 17.5.0 to 17.12.6 in /nuget/helpers/lib/NuGetUpdater by @dependabot in #10989
• Bump Microsoft.VisualStudio.Setup.Configuration.Interop from 3.4.2244 to 3.12.2149 in /nuget/helpers/lib/NuGetUpdater by @dependabot in #10990
• Bump Microsoft.Extensions.FileSystemGlobbing from 6.0.0 to 9.0.0 in /nuget/helpers/lib/NuGetUpdater by @dependabot in #10991
• Bump Microsoft.CodeAnalysis.CSharp from 4.9.2 to 4.11.0 in /nuget/helpers/lib/NuGetUpdater by @dependabot in #10992
• Bump Newtonsoft.Json from 13.0.1 to 13.0.3 in /nuget/helpers/lib/NuGetUpdater by @dependabot in #10993
• project discovery reports its own imported and additional files by @brettfo in #10994
• Bump NuGet.Core from 2.14.0-rtm-832 to 2.14.0 in /nuget/helpers/lib/NuGetUpdater by @dependabot in #10996
• Fix: Ensure Compatibility with npm >= 8 to Prevent Lockfile Downgrades by @kbukum1 in #11001
• Bump System.ComponentModel.Composition from 7.0.0 to 9.0.0 in /nuget/helpers/lib/NuGetUpdater by @dependabot in #10998
• Bump System.Security.Cryptography.ProtectedData from 8.0.0 to 9.0.0 in /nuget/helpers/lib/NuGetUpdater by @dependabot in #10999
• gracefully exit if we can't solve an issue with peer dependencies by @brettfo in #11000
• Enables python ecosystem metric collection by @sachin-sandhu in #10986
• Add support for cargo ecosystem metrics collection by @amazimbe in #11009
• Bump xunit from 2.4.2 to 2.9.2 in /nuget/helpers/lib/NuGetUpdater by @dependabot in #10997
• Bump Microsoft.CSharp from 4.3.0 to 4.7.0 in /nuget/helpers/lib/NuGetUpdater by @dependabot in #11002
• Bump Microsoft.Extensions.FileProviders.Abstractions from 6.0.0 to 9.0.0 in /nuget/helpers/lib/NuGetUpdater by @dependabot in #11003
• Handle paths with multiple case-insenstive matches on disk. by @sebasgomez238 in #10980
• Bump Microsoft.Web.Xdt from 3.0.0 to 3.1.0 in /nuget/helpers/lib/NuGetUpdater by @dependabot in #11004
• Add npm_and_yarn package managers' requirements to ecosystem metrics by @kbukum1 in #10977
• Store Language Name, Version, and Requirements for npm, pnpm, and yarn by @kbukum1 in #11017
• Bump xunit.runner.visualstudio from 2.4.5 to 2.8.2 in /nuget/helpers/lib/NuGetUpdater by @dependabot in #11005
• Bump DiffPlex from 1.7.1 to 1.7.2 in /nuget/helpers/lib/NuGetUpdater by @dependabot in #11014
• Bump Microsoft.NET.Test.Sdk from 17.5.0 to 17.12.0 in /nuget/helpers/lib/NuGetUpdater by @dependabot in #11015
• Bump System.Threading.Tasks.Dataflow from 6.0.0 to 9.0.0 in /nuget/helpers/lib/NuGetUpdater by @dependabot in #11016
• Bump nuget/helpers/lib/NuGet.Client from 1975634 to c097388 by @dependabot in #11007
• Refactor Composer: Code Cleanup, Constants, and Helper Functions by @kbukum1 in #11021
• Running yarn install before running the update checkoer by @thavaahariharangit in #11011
• Python metric collection by @sachin-sandhu in #11013
• Add support for hex ecosystem metrics collection by @amazimbe in #11023
• Add support for gradle ecosystem metrics collection by @amazimbe in #11030
• build(deps): bump terraform from 1.9.1 to 1.10.0 by @HorizonNet in #11029
• Reorders package managers for python ecosystem metric collection by @sachin-sandhu in #11040
• Try to find pnpm-lock.yaml file upwards on tree structure by @Yurickh in #10806
• Update System.Security.Cryptography.Pkcs from 5.0.0 to 9.0.0 by @JamieMagee in #11039
• Add support for devcontainers ecosystem metrics collection by @amazimbe in #11047
• use content of discovery JSON to report dependency files by @brettfo in #11026
• Add Metrics Collection for Composer Ecosystem: Package Manager and Language Details by @kbukum1 in #11025
• Add Package Manager and Language Version Detection for Elm by @kbukum1 in #11041
• remove duplicate Directory.Packages.props by @brettfo in #11042
• align C# log messages with Ruby by @brettfo in #11044
• filter out invalid requirement strings from array by @brettfo in #11049
• Adding retries interval to registry client by @robaiken in #11048
• Add support for git-submodules ecosystem metrics collection by @amazimbe in #11053
• store discovery files under $HOME so they're not cleaned up by the OS by @brettfo in #11054
• allow discovery to re-run if files are missing; log errors by @brettfo in #11055
• Cleaning up lfs environment variable as it is not being used by @thavaahariharangit in #11058
• v0.289.0 by @dependabot-core-action-automation in #11027

New Contributors

• @Yurickh made their first contribution in #10806

Full Changelog: v0.288.0...v0.289.0