v0.379.0

What's Changed

• Fix duplicate updated dependencies in multi-directory group refresh by


• Recategorise lockfile generation errors as known types by


• [Graph Job] Do not treat Dependabot::UnexpectedExternalCode as a hard failure by


• [Graph] Fix handling of multiple version resolution by


• Bun: Upgrade to Node JS 24 by


• Add API integration to fetch blocked versions at job construction by


• Fix go modules error in package details fetcher due to subpath issue by


• add common pattern for directory specification by


• raise generic error without path information by


• Add HasNoWarnNU1701 merge logic in project discovery by


• NuGet: Auto-patch NuGet.Config to allow insecure HTTP feeds by


• NuGet: Filter out submodule paths during discovery by


• Implement a "dealias_packages" flag for npm file parsing by


• fix(docker_compose): support folded scalar and docker.io-prefixed image values by


• Suppress Docker digest-only updates when tag version is unchanged by


• generate and submit dependency graphs by


• Revert "Add API integration to fetch blocked versions at job construction" by


• change test for file path to account for empty string by


• NuGet: Add circular dependency detection to MSBuildHelper.ThrowOnError by


• Catch FatalProtocolException from source repository initialization by


• NuGet: Remove redundant GetPackageGraphForDependencies and use discovery DependencyGraph by


• Add API integration to fetch blocked versions at job updates by


• Fix yarn berry security updates resolving to latest instead of target version by


• Fix misleading Terraform registry error when TLS certificate verification fails by


• Fix cooldown ignored in additional_dependencies issue by


• Remove beta ecosystems feature flag for sbt by


• NuGet: Fix binding redirect XML parse error to report unparseable file by


• fix(npm_and_yarn): handle engines OR constraints and split caret-expanded bounds by


• Pass --min-release-age=0 for npm security updates to bypass .npmrc by


• Add deno lockfile support by


• NuGet: Fix version range double-wrapping in temp project creation by


• Check ProjectAssetsFile exists before reading by


• fix: use configured github source when checking GitHub Actions pre-release status by


• ERR_PNPM_INVALID_DEPENDENCY_NAME handler in PnpmLockfileUpdater by @Copilot in in

Special Thanks

Big thanks to