github dependabot/dependabot-core v0.359.0

7 hours ago

What's Changed

  • Fix TypeError when processing Poetry dependencies with explicit registry sources by @Copilot in #14009
  • feat: Add group_by attribute to DependencyGroup for cross-directory grouping by @markhallen in #14007
  • Fix Bazel FileFetcher for module extensions requiring from_file and missing BUILD files by @Copilot in #14023
  • Fix npm authentication failure with replaces-base registry when .npmrc absent by @Copilot in #14021
  • fix: Add missing require for FetchedFiles in DependencySnapshot by @markhallen in #14028
  • Adding cooldown filtering for Poetry git resource dependencies. by @thavaahariharangit in #13989
  • feat: Add dynamic subgroup creation in DependencyGroupEngine by @markhallen in #14008
  • docs: extend documentation for the no-validate-url hack by @yeikel in #14037
  • v0.359.0 by @dependabot-core-action-automation[bot] in #14042

Full Changelog: v0.358.0...v0.359.0

Don't miss a new dependabot-core release

NewReleases is sending notifications on new releases.