v0.266.0
版本发布时间: 2024-07-18 23:21:19
dependabot/dependabot-core最新发布版本:v0.278.0(2024-09-26 23:26:21)
What's Changed
- Adds socket hang up error capture by @sachin-sandhu in https://github.com/dependabot/dependabot-core/pull/10179
- Revert PR #10060: Fix Versioning Strategy for Python Dependencies by @kbukum1 in https://github.com/dependabot/dependabot-core/pull/10194
- Bump the pnpm-dependencies group in /npm_and_yarn/helpers with 2 updates by @dependabot in https://github.com/dependabot/dependabot-core/pull/10163
- Adds error handling for registry auth failures by @sachin-sandhu in https://github.com/dependabot/dependabot-core/pull/10196
- Sorbet for environment by @ryanbrandenburg in https://github.com/dependabot/dependabot-core/pull/10204
- Bump the dev-dependencies group across 1 directory with 4 updates by @dependabot in https://github.com/dependabot/dependabot-core/pull/10191
- Bump @npmcli/arborist from 7.5.3 to 7.5.4 in /npm_and_yarn/helpers in the npm-dependencies group by @dependabot in https://github.com/dependabot/dependabot-core/pull/10208
- Support Go modules with LFS committed files by @danielorbach in https://github.com/dependabot/dependabot-core/pull/10052
- Treat
-pre
version suffix as prerelease. by @dbrant in https://github.com/dependabot/dependabot-core/pull/10207 - ensure
Dependency::source::source_url
can be populated from.nuspec
uRL by @brettfo in https://github.com/dependabot/dependabot-core/pull/10217 - Improve Yarn Helper Error Handling by @kbukum1 in https://github.com/dependabot/dependabot-core/pull/10177
- fix PR matching code for both directory and no directory cases by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/10224
- Handles GitHub package authentication errors by @sachin-sandhu in https://github.com/dependabot/dependabot-core/pull/10223
- handle 404 from nuget sources by @brettfo in https://github.com/dependabot/dependabot-core/pull/10225
- Bump the all-actions group with 4 updates by @dependabot in https://github.com/dependabot/dependabot-core/pull/10211
- Prevent
remove_lockfile_packages_name_attribute
from being called withnil
by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/10158 - revert changes to DependencyGroupChangeBatch by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/10228
- surface authentication errors from native tool by @brettfo in https://github.com/dependabot/dependabot-core/pull/10197
- ensure every project is compatible with the
Any,Version=v0.0
framework by @brettfo in https://github.com/dependabot/dependabot-core/pull/10230 - Add support for versioning with tags for npm other then latest. by @kbukum1 in https://github.com/dependabot/dependabot-core/pull/10231
- trim whitespace from package names by @brettfo in https://github.com/dependabot/dependabot-core/pull/10232
- write dependency info JSON to log by @brettfo in https://github.com/dependabot/dependabot-core/pull/10235
- Fix malformed version number error for terraform and github actions by @amazimbe in https://github.com/dependabot/dependabot-core/pull/10222
- remove glob experiment since glob support is released by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/10239
- v0.266.0 by @dependabot-core-action-automation in https://github.com/dependabot/dependabot-core/pull/10236
New Contributors
- @danielorbach made their first contribution in https://github.com/dependabot/dependabot-core/pull/10052
- @dbrant made their first contribution in https://github.com/dependabot/dependabot-core/pull/10207
- @amazimbe made their first contribution in https://github.com/dependabot/dependabot-core/pull/10222
Full Changelog: https://github.com/dependabot/dependabot-core/compare/v0.265.0...v0.266.0