v0.386.0

What's Changed

• Capture offending gem details on bundler registry metadata errors by


• Bundler: apply empty-checksum metadata patch to the v2 helper by


• [Update graph] Ensure bystander txt files are removed before parsing for Python by


• Handle global.json with no SDK version in dotnet_sdk parser by


• Type the cargo ecosystem and remove it from the T.untyped burndown by


• Type the conda ecosystem and remove it from the T.untyped burndown by


• Type the docker ecosystem and remove it from the T.untyped burndown by


• Use shared git-tag cooldown in terraform by


• Retry corepack once on signature metadata error by


• Type the deno, elm, devcontainers, bazel, and helm ecosystems by


• Add word-separator and lowercase formatting for branch name by


• Fix Docker cooldown not respected for multi-arch images missing Last-Modified by


• Reduce redundant git-source probes during npm metadata resolution by


• Type the maven ecosystem and remove it from the T.untyped burndown by


• Add branch name config template format support with validation by


• fix(gradle): prefer local gradlew for lockfile updates by


• helm: support versioning-strategy (range-preserving updates) by


• Bump gradle from 9.4.1-jdk21-ubi to 9.6.1-jdk21-ubi in /gradle by


• [Update graph] Add support for requirements.txt 'layering' instead of compressing to a single file by


• Allow periods in Helm values file names for Docker ecosystem by


• Match existing group PRs covering a subset of job directories by


• Bump library/golang from 1.26.1-bookworm to 1.26.5-bookworm in /go_modules by


• Fix npm security updates for transitive dependencies in workspace monorepos by


• Add helm to the smoke-test matrix by


• v0.386.0 by @dependabot-core-action-automation[bot] in made their first contribution in made their first contribution in
  Vollständiges Original-Advisory

  Ausführliche Details, Exploit-Analyse & Hersteller-Stellungnahme auf github.com.

  ↗ Original-Artikel auf github.com lesen