13 Pull requests merged by 5 people

• Update Bundler deprecation unsupported check to use detected version

  #11222 merged Jan 4, 2025

• Adds metric collection support for Docker

  #11217 merged Jan 3, 2025

• Ensure additional commits after approval are rejected

  #11223 merged Jan 3, 2025

• Treat Python Package managers as distinct groups

  #11129 merged Jan 3, 2025

• Skip earlier when run on forks

  #11212 merged Jan 3, 2025

• Prevent forks from trying (and failing) to push latest images to GHCR

  #11213 merged Jan 3, 2025

• [BUG FIX] Only use the major.patch version to check deprecation status

  #11214 merged Jan 3, 2025

• Fix typos

  #11210 merged Jan 3, 2025

• Add Package Manager for GitHub Actions

  #11043 merged Jan 2, 2025

• Metric collection for Dotnet SDK

  #11183 merged Jan 2, 2025

• Add Detected Version to Base Version Manager and Update Ecosystem Package Managers and Languages

  #11190 merged Jan 2, 2025

• Add support for language deprecation notices, warnings and errors

  #11199 merged Jan 2, 2025

• Add @dependabot/azure-dev-ops as owners of dotnet_sdk

  #11189 merged Dec 30, 2024

15 Pull requests opened by 9 people

• Update Rubygems to 3.6.2 and Bundler to 2.6.2

  #11196 opened Dec 30, 2024

• Change to use update rather than install when updating pnpm packages

  #11200 opened Dec 31, 2024

• Selecting the correct requirement based on the given marker condition.

  #11204 opened Jan 2, 2025

• handles build_num as comparable to year_month or year_month_day in docker tags

  #11207 opened Jan 2, 2025

• Support Bun with `bun.lock`

  #11209 opened Jan 3, 2025

• Bump the all-actions group across 1 directory with 4 updates

  #11211 opened Jan 3, 2025

• Bump the common group across 1 directory with 2 updates

  #11220 opened Jan 3, 2025

• Drop warnings from output of `git rev-parse HEAD`

  #11224 opened Jan 3, 2025

• Update Composer deprecation unsupported check to use detected version

  #11225 opened Jan 4, 2025

• Bump pip from 24.0 to 24.3.1 in /python/helpers in the pip group

  #11226 opened Jan 5, 2025

• Bump poetry from 1.8.5 to 2.0.0 in /python/helpers in the poetry group

  #11227 opened Jan 5, 2025

• Bump the dev-dependencies group across 1 directory with 5 updates

  #11228 opened Jan 5, 2025

• Bump the prod-dependencies group across 1 directory with 23 updates

  #11229 opened Jan 5, 2025

• Bump the dev-dependencies group across 1 directory with 2 updates

  #11230 opened Jan 5, 2025

• Use Poetry 1.8.5 for Python 3.8

  #11231 opened Jan 5, 2025

2 Issues closed by 2 people

• Constant dependabot encountered an error on one of our repos

  #11181 closed Jan 2, 2025

• version: 2 updates: - package-ecosystem: bundler directory: "/" # Vendoring Bundler vendor: true schedule: interval: weekly day: saturday open-pull-requests-limit: 10

  #11186 closed Dec 31, 2024

8 Issues opened by 8 people

• Consider bumping pre-installed Go version based on usage

  #11218 opened Jan 3, 2025

• Parse_Helm ERROR: Passed `nil` into T.must

  #11216 opened Jan 3, 2025

• Dependabot fails for Docker updates with multiple tags in the same image

  #11215 opened Jan 3, 2025

• Problem with nested local modules in terraform

  #11203 opened Jan 2, 2025

• Dependabot updater timeout on npm_and_yarn when running git stash show on github runner

  #11202 opened Jan 2, 2025

• Dependabot configured, but shows "Dependabot version updates aren't configured yet"

  #11201 opened Jan 2, 2025

• plain numeric docker tags

  #11198 opened Dec 30, 2024

• Lock files and project references

  #11197 opened Dec 30, 2024

22 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• capture and report job deserialization errors

  #11179 commented on Jan 2, 2025 • 4 new comments

• Fix git add command to handle paths with spaces

  #10866 commented on Jan 3, 2025 • 1 new comment

• Bump composer/composer from 2.7.7 to 2.8.4 in /composer/helpers/v2 in the prod-dependencies group across 1 directory

  #11193 commented on Jan 5, 2025 • 0 new comments

• Bump @npmcli/arborist from 8.0.0 to 9.0.0 in /npm_and_yarn/helpers in the npm-dependencies group

  #11171 commented on Jan 5, 2025 • 0 new comments

• Bump Ruby from 3.3.6 to 3.4.0

  #11162 commented on Jan 3, 2025 • 0 new comments

• Bump eslint from 9.16.0 to 9.17.0 in /npm_and_yarn/helpers in the dev-dependencies group

  #11132 commented on Jan 5, 2025 • 0 new comments

• Bump pipenv from 2024.0.2 to 2024.4.0 in /python/helpers in the pipenv group across 1 directory

  #10920 commented on Jan 5, 2025 • 0 new comments

• Bump the pnpm-dependencies group in /npm_and_yarn/helpers with 2 updates

  #10361 commented on Jan 5, 2025 • 0 new comments

• Support uv compiled requirements files

  #10040 commented on Jan 3, 2025 • 0 new comments

• Dependabot could not find a dependency version

  #11176 commented on Jan 5, 2025 • 0 new comments

• `schedule.interval` support cron expressions

  #6339 commented on Jan 5, 2025 • 0 new comments

• Dependabot ignores "pull-request-branch-name.separator" option

  #4940 commented on Jan 5, 2025 • 0 new comments

• Timeout running job when updating NuGet packages after updater logic was re-written in C#

  #9375 commented on Jan 3, 2025 • 0 new comments

• Update @yarnpkg/sdk

  #8456 commented on Jan 3, 2025 • 0 new comments

• add support for `bun`

  #6528 commented on Jan 3, 2025 • 0 new comments

• Dependabot ignores constraints in .yml and package.json, creating PRs for minor version updates

  #11045 commented on Jan 2, 2025 • 0 new comments

• Dependabot encountered an error performing the update

  #11168 commented on Jan 2, 2025 • 0 new comments

• Support Swift Packages requiring Swift 6.0 only

  #10754 commented on Jan 2, 2025 • 0 new comments

• Update Terraform version at `required_version`

  #8725 commented on Jan 2, 2025 • 0 new comments

• Add support for Rush

  #2270 commented on Jan 2, 2025 • 0 new comments

• Support updating `uv.lock`

  #10478 commented on Dec 31, 2024 • 0 new comments

• PNPM dependabot timeout

  #8008 commented on Dec 30, 2024 • 0 new comments