github dependabot/dependabot-core v0.300.0

2 days ago

What's Changed

  • Bump library/rust from 1.82.0-bookworm to 1.85.0-bookworm in /cargo by @dependabot in #11662
  • use $.job.credentials-metadata if $.credentials isn't given by @brettfo in #11704
  • Added sorbet type strict for the metadata_finder by @randhircs in #11660
  • Simplify the "version already exists" check by using RubyGems v2 API by @jeffwidman in #11712
  • Use Poetry v2 by @edgarrmondragon in #11642
  • Add Generic Cooldown Filtering and Enable for Python Package Manager by @kbukum1 in #11693
  • use different values for $(TargetPlatformVersion) for TFM and dependency discovery by @brettfo in #11718
  • Bump pipenv from 2024.0.2 to 2024.4.1 in /python/helpers in the pipenv group across 1 directory by @dependabot in #11409
  • Add strict typing for the elm update checker by @markhallen in #11716
  • Document why bundler-cache: true isn't needed by @jeffwidman in #11711
  • detect dependencies with restore property to work around NuGet bug by @brettfo in #11727
  • Downgrade Rust Docker image from 1.85.0-bookworm to 1.84.0-bookworm to restore missing dependencies by @kbukum1 in #11738
  • Fix passing cooldown options into Python Latest Version Finder by @kbukum1 in #11743
  • Better: Prepend .gitconfig with random hash to allow concurrency by @ylecuyer in #9219
  • Handle uv pyproject.toml without a requirements.txt lock file by @markhallen in #11735
  • Remove FF and tests for npm6 deprecation and unsupported error by @amazimbe in #11622
  • v0.300.0 by @dependabot-core-action-automation in #11744

New Contributors

Full Changelog: v0.299.1...v0.300.0

Don't miss a new dependabot-core release

NewReleases is sending notifications on new releases.