v0.388.0

What's Changed

• Type GitHub release metadata by


• Make GitCommitChecker strongly typed by


• Retry corepack prepare and install on signature metadata errors from private registries by


• Fix UV DependencyGrapher to detect nested uv.lock in monorepos by


• Bump library/rust from 1.95.0-bookworm to 1.97.0-bookworm in /cargo by


• Bump @sigstore/core from 3.1.0 to 3.2.1 in /npm_and_yarn/helpers by


• Bump maven from 3.9.14 to 3.9.16 in /maven by


• Support Bundler source cooldown in Dependabot cooldown flow by


• Type shared release metadata by


• Make Job strongly typed by


• Type Job wire models by


• Type Service and ApiClient by


• Add support for calendar-based versions for Maven and Gradle by


• Type error reporting by


• Type updater dependency helpers by


• ensure proper formatting when patching element attributes by


• Bump ws from 8.18.3 to 8.21.1 in /npm_and_yarn/helpers/test/npm/fixtures/vulnerability-auditor/update-needed-across-two-versions by


• Bump lodash from 4.17.23 to 4.18.1 in /bun/helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested by


• Bump lodash from 4.17.23 to 4.18.1 in /npm_and_yarn/helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested by


• Bump lodash from 4.17.23 to 4.18.1 in /npm_and_yarn/helpers/test/npm6/fixtures/conflicting-dependency-parser/deeply-nested by


• Bump the dev-dependencies group across 1 directory with 2 updates by


• Bump pip from 26.1.1 to 26.1.2 in /python/helpers in the pip group across 1 directory by


• Bump yaml from 2.3.1 to 2.9.0 in /bun/helpers by


• npm_and_yarn: group vulnerability auditor blocking-dependency messages by top-level ancestor by


• Bump ip-address and socks in /bun/helpers by


• Bump brace-expansion from 1.1.13 to 1.1.16 in /bun/helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested by


• Bump brace-expansion from 1.1.13 to 1.1.16 in /npm_and_yarn/helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested by


• Bump sigstore/cosign/cosign from v3.1.1 to v3.1.2 in /docker in the regclient group across 1 directory by


• Bump lodash from 4.17.23 to 4.18.1 in /bun/helpers/test/npm6/fixtures/conflicting-dependency-parser/deeply-nested by


• Bump @tootallnate/once from 2.0.0 to 2.0.1 in /bun/helpers by


• Bump the "uv-ecosystem" group with 1 update across multiple ecosystems by


• Bump ip-address and socks in /npm_and_yarn/helpers by


• Bump yaml from 2.3.1 to 2.9.0 in /npm_and_yarn/helpers by


• Bump golang.org/x/mod from 0.37.0 to 0.38.0 in /go_modules/helpers by


• Bump @sigstore/verify from 3.1.0 to 3.1.1 in /npm_and_yarn/helpers by


• julia: don't propose compat updates for workspace packages or synthesize member compat entries by


• fix: guard against unparseable versions in cooldown fallback by


• Type dependency requirement readers by


• v0.388.0 by @dependabot-core-action-automation[bot] in made their first contribution in
  Vollständiges Original-Advisory

  Ausführliche Details, Exploit-Analyse & Hersteller-Stellungnahme auf github.com.

  ↗ Original-Artikel auf github.com lesen