GitHub Release: dependabot/dependabot-core v0.401.0 (19.10.2026)

What's Changed

• bun: Update catalog dependencies by @fbartho in #16544


• github_actions: pass home hostname to gh-actions-lock by @nodeselector in #16504


• Type common model specs and shared RSpec ancestors by @JamieMagee in #16506


• Type common credential, group, and experiment specs by @JamieMagee in #16552


• Type common cooldown spec fixtures by @JamieMagee in #16551


• Enable Sorbet checking for Git submodule specs by @JamieMagee in #16555


• Enable staged Sorbet checking for .NET SDK specs by @JamieMagee in #16554


• julia: retry juliaup install to handle flaky version-DB fetch by @v-kbukum1 in #16563


• github_actions: relock actions.lock from composite action directories by @nodeselector in #16557


• Enable Sorbet checking for Docker and Compose specs by @JamieMagee in #16561


• Enable staged Sorbet checking for Devcontainers specs by @JamieMagee in #16560


• julia: show the stdlib <0.0.1 note once in a multi-directory PR by @IanButterworth in #16520


• Revise how Dependabot calculates correllators to avoid collisions by @brrygrdn in #16503


• NuGet: validate candidate compatibility lazily by @brettfo in #16453


• NuGet: filter candidates before compatibility checks by @brettfo in #16566


• [Part 1 of 3] NPM upgrade to 12.x.x by @v-sachin-sandhu in #16572


• Enable staged Sorbet checking for Maven specs by @JamieMagee in #16570


• Enable staged Sorbet checking for Gradle specs by @JamieMagee in #16568


• Enable staged Sorbet checking for sbt specs by @JamieMagee in #16569


• Enable staged Sorbet checking for Python specs by @JamieMagee in #16577


• Enable staged Sorbet checking for uv specs by @JamieMagee in #16575


• Enable staged Sorbet checking for Conda specs by @JamieMagee in #16576


• NuGet: tolerate invalid existing pull request versions by @brettfo in #16573


• [Part 2 of 3] NPM upgrade to 12.x.x by @v-sachin-sandhu in #16582


• Enable Sorbet checking for npm, Yarn, and pnpm specs by @JamieMagee in #16586


• Enable Sorbet checking for Bun specs by @JamieMagee in #16584


• Enable Sorbet checking for Deno specs by @JamieMagee in #16585


• Gradle: parse Kotlin DSL and parenthesised dependencySet entries by @skipdegroot-avisi in #16450


• julia: run the helper's Julia tests in CI by @IanButterworth in #16597


• [Part 3 of 3] NPM upgrade to 12.x.x by @v-sachin-sandhu in #16588


• Allow configuring the public key for hex repositories by @mkarnebeek in #16594


• Fix Go toolchain selection when installing Dependabot CLI by @v-thavaahariharangit in #16620


• v0.401.0 by @dependabot-core-action-automation[bot] in #16616

New Contributors

• @fbartho made their first contribution in #16544


• @skipdegroot-avisi made their first contribution in #16450


• @mkarnebeek made their first contribution in #16594

Full Changelog: v0.400.0...v0.401.0