gitlab dependabot-gitlab/dependabot v5.2.0-alpha.1

latest releases: v5.4.0-alpha.1, v5.3.0-alpha.1
5 days ago

5.2.0-alpha.1 (2026-04-01)

⚠️ Security updates (4 changes)

  • [Security] Bump yaml from 2.8.2 to 2.8.3 by @dependabot. See merge request dependabot-gitlab/dependabot!4553
  • [Security] Bump fast-xml-parser and @aws-sdk/xml-builder by @dependabot. See merge request dependabot-gitlab/dependabot!4540
  • [Security] Bump picomatch by @dependabot. See merge request dependabot-gitlab/dependabot!4539
  • [Security] Bump bcrypt from 3.1.21 to 3.1.22 by @dependabot. See merge request dependabot-gitlab/dependabot!4533

🚀 New features (4 changes)

  • Add ability to automatically rebase update mr with a failed pipeline by @andrcuns. See merge request dependabot-gitlab/dependabot!4570
  • UI: Implement project global enable/disable toggle by @andrcuns. See merge request dependabot-gitlab/dependabot!4565
  • Implement outdated project configuration and merge request state sync by @andrcuns. See merge request dependabot-gitlab/dependabot!4560
  • UI: Add ability to view status of all recent update runs by @andrcuns. See merge request dependabot-gitlab/dependabot!4556

🔬 Improvements (7 changes)

  • UI: Add empty state icon for empty run log page by @andrcuns. See merge request dependabot-gitlab/dependabot!4573
  • UI: Update project sync and delete buttons by @andrcuns. See merge request dependabot-gitlab/dependabot!4551
  • UI: Add ecosystem icon mappings in jobs page by @andrcuns. See merge request dependabot-gitlab/dependabot!4551
  • UI: Add list of monitored dependency files in jobs page by @andrcuns. See merge request dependabot-gitlab/dependabot!4551
  • UI: Redesign update jobs page by @andrcuns. See merge request dependabot-gitlab/dependabot!4551
  • UI: Add project sorting by last job status by @andrcuns. See merge request dependabot-gitlab/dependabot!4546
  • Align main project page design with GitLab by @andrcuns. See merge request dependabot-gitlab/dependabot!4542

🐞 Bug Fixes (10 changes)

  • Correctly fetch last pipeline status for rebase functionality by @andrcuns. See merge request dependabot-gitlab/dependabot!4575
  • UI: Correctly render loading icon on logs page while fetching logs by @andrcuns.
  • Fix affected mrs dropdown placement by @andrcuns.
  • Correctly run obsolete mr cleanup even when open mr limit has been reached by @andrcuns. See merge request dependabot-gitlab/dependabot!4568
  • Correctly handle webhooks creation/update for projects without configuration by @andrcuns. See merge request dependabot-gitlab/dependabot!4561
  • UI: Remove admin check for recent runs page by @andrcuns. See merge request dependabot-gitlab/dependabot!4557
  • UI: Fix toggle component causing issues with outer scrollbar by @andrcuns. See merge request dependabot-gitlab/dependabot!4554
  • UI: Fix JobsPage producing 2 scrollbars by @andrcuns. See merge request dependabot-gitlab/dependabot!4552
  • Use consistent ordering in projects detail page by @andrcuns. See merge request dependabot-gitlab/dependabot!4547
  • Raise meaningful error when no configuration entry matches by @andrcuns. See merge request dependabot-gitlab/dependabot!4544

📦 Dependency updates (7 changes)

  • Bump vite-plugin-ruby from 5.2.0 to 5.2.1 by @dependabot. See merge request dependabot-gitlab/dependabot!4571
  • Bump rails from 8.1.2.1 to 8.1.3 by @dependabot. See merge request dependabot-gitlab/dependabot!4574
  • Bump vue from 3.5.30 to 3.5.31 by @dependabot. See merge request dependabot-gitlab/dependabot!4572
  • Bump vite from 8.0.1 to 8.0.2 by @dependabot. See merge request dependabot-gitlab/dependabot!4562
  • Update docker Docker tag to v29.3.1 by @dependabot. See merge request dependabot-gitlab/dependabot!4541
  • Bump vue-router from 4.6.4 to 5.0.4 by @dependabot. See merge request dependabot-gitlab/dependabot!4538
  • Bump vite from 8.0.0 to 8.0.1 by @dependabot. See merge request dependabot-gitlab/dependabot!4537

📦🔧 Development dependency updates (3 changes)

  • Bump typescript from 5.9.3 to 6.0.2 by @andrcuns. See merge request dependabot-gitlab/dependabot!4520
  • Bump allure-report-publisher from 5.2.0 to 5.2.1 by @dependabot. See merge request dependabot-gitlab/dependabot!4566
  • Bump typescript-eslint from 8.57.1 to 8.57.2 by @dependabot. See merge request dependabot-gitlab/dependabot!4563

🔧 CI changes (1 change)

  • Run e2e tests with parallel workers by @andrcuns. See merge request dependabot-gitlab/dependabot!4543

🧰 Maintenance (19 changes)

  • Add tooling to run ecosystem updates end to end by @andrcuns. See merge request dependabot-gitlab/dependabot!4575
  • Add additional log message for skipping rebase based on pipeline status by @andrcuns.
  • Implement background migrations and add association between a job and merge request by @andrcuns. See merge request dependabot-gitlab/dependabot!4569
  • Do not store leading slash in tracked dependency files by @andrcuns. See merge request dependabot-gitlab/dependabot!4559
  • UI: Remove redundant custom job data caching at browser level by @andrcuns. See merge request dependabot-gitlab/dependabot!4558
  • UI: Add job details caching and remove redundant request on recent runs by @andrcuns. See merge request dependabot-gitlab/dependabot!4557
  • UI: Remove redundant Projects section from breadcrumbs by @andrcuns. See merge request dependabot-gitlab/dependabot!4556
  • UI: Add empty folder icon for no jobs configured by @andrcuns. See merge request dependabot-gitlab/dependabot!4555
  • Add setup for local restore of prod db by @andrcuns. See merge request dependabot-gitlab/dependabot!4554
  • Add association between update runs and mrs it affects by @andrcuns. See merge request dependabot-gitlab/dependabot!4550
  • Add merge request icon in jobs page by @andrcuns. See merge request dependabot-gitlab/dependabot!4549
  • Use action_view helpers for time to words conversion by @andrcuns. See merge request dependabot-gitlab/dependabot!4548
  • UI: Preserve newlines in log messages on Run page by @andrcuns. See merge request dependabot-gitlab/dependabot!4546
  • UI: Add botton border for last project item on main page by @andrcuns. See merge request dependabot-gitlab/dependabot!4546
  • UI: Remove max width for outer box in pages by @andrcuns. See merge request dependabot-gitlab/dependabot!4546
  • Rename Run Now button to Execute by @andrcuns.
  • Sync UI component implementation with upstream gitlab by @andrcuns. See merge request dependabot-gitlab/dependabot!4536
  • Revert "Force fips compliant ssl settings" by @andrcuns. See merge request dependabot-gitlab/dependabot!4535
  • Migrate to single page application using vue-router by @andrcuns. See merge request dependabot-gitlab/dependabot!4534

📄 Documentation updates (1 change)

  • Add design doc for grouped updates feature by @andrcuns. See merge request dependabot-gitlab/dependabot!4564

🚀 Deployment changes (2 changes)

  • Bump gitlab-org/cluster-integration/gitlab-agent/agentk in /deploy/agent by @dependabot. See merge request dependabot-gitlab/dependabot!4545
  • Update dependency terraform to v1.14.8 by @dependabot. See merge request dependabot-gitlab/dependabot!4532

Don't miss a new dependabot release

NewReleases is sending notifications on new releases.