gitlab dependabot-gitlab/dependabot v3.50.0-alpha.1

4 months ago

3.50.0-alpha.1 (2025-04-24)

⚠️ Security updates (1 change)

  • [Security] Bump nokogiri from 1.18.7 to 1.18.8 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3593

🚀 New features (2 changes)

  • Add last run runtime to UI by @andrcuns. See merge request dependabot-gitlab/dependabot!3599
  • Add custom labels to vulnerability alert issues by @andrcuns. See merge request dependabot-gitlab/dependabot!3579

🔬 Improvements (6 changes)

  • Improve runtime display format by @andrcuns. See merge request dependabot-gitlab/dependabot!3600
  • Add worker log entries to update run log page by @andrcuns. See merge request dependabot-gitlab/dependabot!3592
  • Do not create duplicated Container::Failure errors in sentry by @andrcuns. See merge request dependabot-gitlab/dependabot!3591
  • Add job duration metrics by @andrcuns. See merge request dependabot-gitlab/dependabot!3584
  • Add vulnerabilities by status to metrics output by @andrcuns. See merge request dependabot-gitlab/dependabot!3584
  • Add additional vulnerability metrics by @andrcuns. See merge request dependabot-gitlab/dependabot!3582

🐞 Bug Fixes (4 changes)

  • Add missing container failure error message in UI by @andrcuns. See merge request dependabot-gitlab/dependabot!3598
  • Correctly sort log entries by timestamp in UI by @andrcuns. See merge request dependabot-gitlab/dependabot!3598
  • Add missing running status for update run instance by @andrcuns. See merge request dependabot-gitlab/dependabot!3594
  • Correctly set update status when updater container fails to start by @andrcuns. See merge request dependabot-gitlab/dependabot!3590

📦 Dependency updates (1 change)

  • Update docker Docker tag to v28.1.1 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3580

📦🔧 Development dependency updates (3 changes)

  • Bump bootstrap from 5.3.3 to 5.3.5 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3585
  • Bump vite from 5.4.14 to 5.4.18 by @andrcuns. See merge request dependabot-gitlab/dependabot!3577
  • Bump @playwright/test from 1.51.1 to 1.52.0 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3576

🔧 CI changes (2 changes)

  • Ensure release script failure on image copy fialure by @andrcuns.
  • Use inputs to control web triggered pipeline parameters by @andrcuns. See merge request dependabot-gitlab/dependabot!3578

🧰 Maintenance (9 changes)

  • Fix query for fetching vulnerability merge requests by @andrcuns.
  • Squash migrations for metrics improvements by @andrcuns. See merge request dependabot-gitlab/dependabot!3589
  • Do not collect sidekiq cluster metrics by default by @andrcuns. See merge request dependabot-gitlab/dependabot!3588
  • Reduce amount of queries for vulnerability metrics fetching by @andrcuns. See merge request dependabot-gitlab/dependabot!3588
  • Improve performance for last run data metrics retreival by @andrcuns. See merge request dependabot-gitlab/dependabot!3587
  • Add supported platforms to lockfile by @andrcuns. See merge request dependabot-gitlab/dependabot!3586
  • Add missing migration for vulnerability issue severity by @andrcuns. See merge request dependabot-gitlab/dependabot!3583
  • Regenerage binstubs by @andrcuns. See merge request dependabot-gitlab/dependabot!3583
  • Remove solargraph-rails gem by @andrcuns.

🚀 Deployment changes (2 changes)

  • Reduce cpu requests for updater container by @andrcuns.
  • Increase updater container startup deadline by @andrcuns.

Don't miss a new dependabot release

NewReleases is sending notifications on new releases.