github dependabot/dependabot-core v0.351.0

5 hours ago

What's Changed

  • Alias Package classes to Python and simplify LatestVersionFinder by @markhallen in #13651
  • uv: Alias NativeHelpers, Language, and LanguageVersionManager to Python by @markhallen in #13653
  • Add npm_and_yarn DependencyGrapher with ephemeral lockfile generation by @jurre in #13657
  • Use NODE_EXTRA_CA_CERTS for all Node package managers by @jeffwidman in #13675
  • Add libcairo2-dev and libgirepository-2.0-dev for PyGObject support by @Copilot in #13630
  • fix(uv): pass target version to uv lock command to respect ignore conditions by @markhallen in #13690
  • use unique annotations to track equivalent nodes by @brettfo in #13679
  • Replace dependabot-script repo with example-cli-usage repo by @jeffwidman in #12417
  • chore(conda): remove beta ecosystem check by @markhallen in #13692
  • Fix npm optional dependency error by @AbhishekBhaskar in #13622
  • Add Cairo build dependencies to UV by @AbhishekBhaskar in #13688
  • Parse private registry details to corepack install command by @thavaahariharangit in #13703
  • Combine corepack commands into a single RUN command in npm_and_yarn Dockerfile by @Copilot in #13683
  • Combine repeated RUN install commands in composer/Dockerfile using HEREDOC syntax by @Copilot in #13682
  • Use openjdk-21-jdk-headless to reduce the image size by @yeikel in #13670
  • Remove usages of unsupported MAVEN_CONFIG environment variable by @yeikel in #13672
  • fix(npm): parse caret constraint with major-only version by @caugner in #13689
  • v0.351.0 by @dependabot-core-action-automation[bot] in #13704

New Contributors

Full Changelog: v0.350.0...v0.351.0

Don't miss a new dependabot-core release

NewReleases is sending notifications on new releases.