What's Changed
- Remove fully rolled out feature flags by @ruben-pachecocaldera in #16046
- build(deps): bump hcl2json to v0.6.9 by @JamieMagee in #16188
- build(deps): bump PowerShell to 7.6.5 by @JamieMagee in #16189
- build(deps): bump Yarn to 4.18.0 by @JamieMagee in #16187
- build(deps): bump git-shim to v1.5.0 by @JamieMagee in #16186
- Add shared delivery for unavailable cooldown warnings by @v-robaiken in #16142
- Bump library/golang in /go_modules by @dependabot[bot] in #16097
- Bump the all-actions group across 1 directory with 2 updates by @dependabot[bot] in #16198
- Give the security refresh operation a directory to work with by @casey-robertson-paypal in #16130
- Bump composer/composer from 2.10.2 to 2.10.3 in /composer/helpers/v2 in the prod-dependencies group across 1 directory by @dependabot[bot] in #16096
- Bump regclient/regctl in /docker by @dependabot[bot] in #16196
- Add a typed package.json reader by @JamieMagee in #16179
- Use typed package.json reads in npm and Yarn by @JamieMagee in #16180
- Use typed package.json reads in Bun by @JamieMagee in #16181
- Separate grouped security update diagnosis from reporting by @v-robaiken in #16238
- Fix Pipenv graphing for local path dependencies by @v-sachin-sandhu in #16240
- julia: support Pkg 1.13's
registry_infoand pin the image to Julia 1.13 by @IanButterworth in #16249 - Use typed requirements helper results in Python and UV by @JamieMagee in #16241
- docker: fix repeated image update and regex metacharacter matching by @v-sachin-sandhu in #16251
- Surface unavailable cooldown dates in package finders by @v-robaiken in #16211
- Skip uv dependencies pinned to a source that can never be updated by @Dichotomia in #16132
- Use typed npm lockfile lookup results by @JamieMagee in #16252
- Decode pnpm lockfile helper output into typed records by @JamieMagee in #16253
- Use typed npm JSON lockfile records by @JamieMagee in #16254
- Log filtered package versions by @v-sachin-sandhu in #16269
- Use typed Yarn lockfile records and relationships by @JamieMagee in #16255
- Use typed Bun lockfile records and graph reads by @JamieMagee in #16256
- Bump baseline-browser-mapping from 2.9.6 to 2.11.21 in /npm_and_yarn/helpers by @dependabot[bot] in #16235
- v0.396.0 by @dependabot-core-action-automation[bot] in #16288
New Contributors
- @ruben-pachecocaldera made their first contribution in #16046
- @Dichotomia made their first contribution in #16132
Full Changelog: v0.395.0...v0.396.0