What's Changed
- Add typed requirement source API by @JamieMagee in #15705
- Reland "Cargo: handle crates locked at multiple versions" (#15638) by @p-linnane in #15668
- Preserve original absence of the bundler self-checksum on lockfile updates by @p-linnane in #15669
- Support security updates for vcpkg ports by @JamieMagee in #15676
- Beta support of PNPM 11 by @v-robaiken in #15710
- Remove
enable_cooldown_default_daysfeature flag; make 3-day cooldown default unconditional by @v-robaiken with @Copilot in #15711 - github_actions: integrate gh-actions-lock lockfile relocking by @nodeselector in #15267
- Fix npm ignoring scoped registry issue by @AbhishekBhaskar in #15692
- Fix Gradle lockfile updates for repos with in-repo convention plugins by @thavaahariharangit in #15677
- Bump pytest from 9.0.3 to 9.1.1 in /python/helpers by @dependabot[bot] in #15687
- Feature flag clean up by @v-robaiken in #15724
- Bump pip-tools from 7.5.3 to 7.6.0 in /python/helpers in the pip-tools group across 1 directory by @dependabot[bot] in #15686
- Respect resolutions/overrides and pin Berry wildcard updates to fix spurious NoChangeError by @kbukum1 in #15701
- Revert "Respect resolutions/overrides and pin Berry wildcard updates to fix spurious NoChangeError" by @kbukum1 in #15730
- Type npm_and_yarn requirement access by @JamieMagee in #15706
- Compare full path, not file name, when excluding fetched files by @timdawborn in #15703
- Type bun requirement access by @JamieMagee in #15707
- Type bundler requirement access by @JamieMagee in #15708
- Stop retrying client errors when recording cooldown telemetry by @JamieMagee in #15737
- Bump cython from 3.2.4 to 3.2.9 in /python/helpers in the common group across 1 directory by @dependabot[bot] in #15685
- Stop pinning the resolved js-yaml version in sub-dependency specs by @JamieMagee in #15744
- Preserve .NET SDK prerelease version strings by @theinfosecguy in #15746
- Bump library/rust from 1.97.0-bookworm to 1.97.1-bookworm in /cargo by @dependabot[bot] in #15682
- Bump the prod-dependencies group across 2 directories with 22 updates by @dependabot[bot] in #15605
- v0.390.0 by @dependabot-core-action-automation[bot] in #15752
New Contributors
- @v-robaiken made their first contribution in #15710
- @nodeselector made their first contribution in #15267
- @timdawborn made their first contribution in #15703
- @theinfosecguy made their first contribution in #15746
Full Changelog: v0.389.0...v0.390.0