GitHub: v0.389.0

What's Changed

• Rescue errors in metadata_cascades_for_dep to prevent PR message loss by


• Bump sigstore from 4.1.0 to 4.1.1 in /npm_and_yarn/helpers by


• Bump handlebars from 4.7.8 to 4.7.9 in /npm_and_yarn/helpers by


• Bump lodash from 4.17.23 to 4.18.1 in /npm_and_yarn/helpers by


• fix: use canonical LOCKFILE_ENTRY_REGEX in replace-lockfile-declaration.ts by


• Prevent update job crash when a pinned GitHub Actions SHA is missing by


• feat(npm_and_yarn): enhance downgrade conflict messages with detailed blocking dependencies by


• Cargo: handle crates locked at multiple versions by


• Revert "Cargo: handle crates locked at multiple versions" by


• Paginate Docker tag listing and classify registry error responses by


• fix: Import proxy CA certificate into Java truststore for Java package managers by


• Bump gradle from 4a253a2 to 2a6880c in /gradle by


• Fix security update jobs failing with dependency_file_not_found for single-directory manifests by


• Make Dependency strongly typed by


• v0.389.0 by @dependabot-core-action-automation[bot] in made their first contribution in