GitHub Release: dependabot/dependabot-core v0.393.0 (24.08.2026)

$ git clone https://github.com/dependabot/dependabot-core.git Clone

What's Changed

• Type common runtime boundaries by


• Type common provider clients by


• Type common repository fetching by


• Type common metadata boundaries by


• Type common pull request reads by


• Type common pull request writes by


• Bump erb from 6.0.1 to 6.0.1.1 in /updater by


• Bump erb from 6.0.1 to 6.0.1.1 by


• Terraform: skip interpolated module sources instead of crashing the parse by


• Fix uv library detection for projects not published on PyPI by


• Bump nuget/helpers/lib/NuGet.Client from f56d053 to 4344d15 by


• Bump the helm group across 1 directory with 4 updates by


• Type provider response boundaries by


• npm: preserve directory on generated .npmrc files by


• Fix npm/pnpm/yarn native release-age gates rejecting Dependabot's own updates by


• Bump pip-tools from 7.6.0 to 7.6.1 in /python/helpers in the pip-tools group across 1 directory by


• github_actions: fix regression on allowing less precise semver updates by


• Type version resolution boundaries by


• Type helper payloads by


• Enforce zero T.unsafe with RuboCop by


• Fix(uv): stop editing editable path deps outside the update directory by


• Use POM dates for Maven cooldowns by


• Prefer scm url for source url in maven ( in in in in in in [bot] in [bot] in [bot] in in [bot] in [bot] in [bot] in [bot] in

New Contributors

Full Changelog: v0.392.0...v0.393.0