github dependabot/dependabot-core v0.378.0

4 hours ago

What's Changed

  • fix(opentofu): strip v prefix in cooldown version comparison by @diofeher in #15044
  • Use POM last-modified as Gradle plugin release date fallback by @thavaahariharangit in #15006
  • Add blocked versions support to updater job by @kbukum1 in #14915
  • Add blocked versions support to dry-run script by @kbukum1 in #14916
  • Strip surrounding quotes from go.env values before writing by @yeikel in #15060
  • Require dependabot-deno in updater setup by @markhallen in #15064
  • fix(docker): use manifests endpoint for manifest-list digests by @devantler in #14691
  • Fix NuGet lock file tracking when no lock file exists by @brettfo in #15030
  • chore: Remove group_membership_enforcement experiment flag by @markhallen in #14861
  • redo recursive directory matching with logging by @brettfo in #15072
  • (fix) Handle Poetry group metadata without dependencies table by @julia-thorn in #14689
  • Fix cooldown breaking Docker updates when registry API calls fail by @Copilot in #14149
  • Upgrade Python versions and deprecate Python 3.9 by @kbukum1 in #15058
  • Remove NuGet.Core package dependency by @brettfo in #15037
  • NuGet: Add FindRootDirectory experiment to resolve root entry points by @brettfo in #15021
  • Sync uv Dockerfile Python versions with python ecosystem by @kbukum1 in #15087
  • Detect NoWarn NU1701 in SDK project discovery and warn during report by @brettfo in #15052
  • handle errant whitespace in global.json by @brettfo in #15086
  • fix(github_actions): align SHA updates with cooldown-filtered latest version by @thavaahariharangit in #15078
  • v0.378.0 by @dependabot-core-action-automation[bot] in #15095

New Contributors

Full Changelog: v0.377.0...v0.378.0

Don't miss a new dependabot-core release

NewReleases is sending notifications on new releases.