Dependabot Files

What's Changed

• Julia: filter yanked versions from get_available_versions by @IanButterworth in https://github.com/dependabot/dependabot-core/pull/14939
• Add blob_oid metadata to manifests in dependency snapshots by @juxtin in https://github.com/dependabot/dependabot-core/pull/14857
• Fix Maven released? check for non-jar packaging types (e.g., aar) by @kbukum1 in https://github.com/dependabot/dependabot-core/pull/14886
• (Python): Move Pip file filtering to grapher by @Copilot in https://github.com/dependabot/dependabot-core/pull/14856
• detect central package version scheme by @brettfo in https://github.com/dependabot/dependabot-core/pull/14927
• allow insecure feeds if explicitly requested by @brettfo in https://github.com/dependabot/dependabot-core/pull/14891
• don't warn on deprecated framework by @brettfo in https://github.com/dependabot/dependabot-core/pull/14936
• migrate sln to slnx by @brettfo in https://github.com/dependabot/dependabot-core/pull/14943
• fix(maven): parse Artifactory-style HTML listings for cooldown release dates by @thavaahariharangit in https://github.com/dependabot/dependabot-core/pull/14949
• Fix Maven "No files changed!" error for externally managed dependency versions by @kbukum1 in https://github.com/dependabot/dependabot-core/pull/14885
• Fix shell operator escaping in uv run_in_parsed_context by @kbukum1 in https://github.com/dependabot/dependabot-core/pull/14979
• Add trailing slash when listing directories for Maven repositories by @apupier in https://github.com/dependabot/dependabot-core/pull/14870
• opentofu: accept terraform_registry credentials for private registries by @diofeher in https://github.com/dependabot/dependabot-core/pull/14865
• Update all lockfiles in multi-module Gradle projects by @v-HaripriyaC in https://github.com/dependabot/dependabot-core/pull/14879
• Handle pub workspace resolution errors gracefully by @AbhishekBhaskar in https://github.com/dependabot/dependabot-core/pull/14940
• Bump the prod-dependencies group across 2 directories with 16 updates by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/14878
• Bump nix from 2.34.5 to 2.34.7 by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/14993
• Upgrade swift to 6.3.1 by @yeikel in https://github.com/dependabot/dependabot-core/pull/14972
• Nix: reject input names Nix's CLI can't parse by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/14992
• Enable pipe-operators, fetch-closure, and parse-toml-timestamps for Nix by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/14994
• Cache image builds with Buildx GHA cache backend by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/14996
• feat(bundler): enable Bundler 4 runtime support in helper flow by @thavaahariharangit in https://github.com/dependabot/dependabot-core/pull/14988
• fix: do not cache EOF-backed Excon socket errors in RegistryClient by @thavaahariharangit in https://github.com/dependabot/dependabot-core/pull/15002
• uv: don't parse non-requirements .txt support files as Python requirements by @Copilot in https://github.com/dependabot/dependabot-core/pull/14986
• Implement sbt file updater and fix issues in file parser by @AbhishekBhaskar in https://github.com/dependabot/dependabot-core/pull/14999
• Fix Composer V1 helper invocation: always return V2 from composer_version by @Copilot in https://github.com/dependabot/dependabot-core/pull/14712
• Handle pubspec validation errors gracefully by @AbhishekBhaskar in https://github.com/dependabot/dependabot-core/pull/15000
• npm_and_yarn: handle pnpm no-change lockfile updates by @thavaahariharangit in https://github.com/dependabot/dependabot-core/pull/15017
• v0.376.0 by @dependabot-core-action-automation[bot] in https://github.com/dependabot/dependabot-core/pull/15014

New Contributors

• @juxtin made their first contribution in https://github.com/dependabot/dependabot-core/pull/14857
• @apupier made their first contribution in https://github.com/dependabot/dependabot-core/pull/14870

Full Changelog: https://github.com/dependabot/dependabot-core/compare/v0.375.0...v0.376.0