Dependabot Files

What's Changed

• Bazel: Fix prerelease filtering with same-release-line scoping by @v-HaripriyaC in https://github.com/dependabot/dependabot-core/pull/15332
• Respect cooldown for Docker digest updates and suppress multi-arch no-ops by @robaiken in https://github.com/dependabot/dependabot-core/pull/15354
• Bypass npmrc min-release-age for transitive npm security updates by @robaiken in https://github.com/dependabot/dependabot-core/pull/15386
• Ratchet the Sorbet T.untyped burndown by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15399
• feat(docker): implement single-platform image detection and optimize manifest fetching logic by @jpinz in https://github.com/dependabot/dependabot-core/pull/15390
• Fix private registry config not found error not being raised issue in npm_and_yarn by @AbhishekBhaskar in https://github.com/dependabot/dependabot-core/pull/15394
• don't fail if nuget cred is missing url by @brettfo in https://github.com/dependabot/dependabot-core/pull/15378
• Type commit_message_options with a value object by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15400
• Type the Dependabot config file parser by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15401
• Fix Terraform registry replacement typing and credential semantics by @thavaahariharangit with @Copilot in https://github.com/dependabot/dependabot-core/pull/15406
• fix: avoid path collisions for SHA-pinned GitHub Actions by @markhallen in https://github.com/dependabot/dependabot-core/pull/14806
• Nix: skip flake inputs pinned to a bare commit SHA by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15412
• Type the vulnerability version-range renderer by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15402
• Add JobCommand enum and Command property to NuGet Job model by @brettfo in https://github.com/dependabot/dependabot-core/pull/15277
• Upgrade Ruby to 4.0.5 by @Bo98 in https://github.com/dependabot/dependabot-core/pull/14830
• Bump updater-core image to RubyGems/Bundler 4.0.13 by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15256
• Fix issue with PrivateRegistryConfigNotFound error incorrectly firing when scope is configured by @AbhishekBhaskar in https://github.com/dependabot/dependabot-core/pull/15416
• Fake MSBuild SolutionDir during NuGet discovery (#13756) by @brettfo in https://github.com/dependabot/dependabot-core/pull/15392
• NuGet: Filter all editable files not present prior to discovery by @brettfo in https://github.com/dependabot/dependabot-core/pull/15358
• Support Central Package Versions updates in XmlFileWriter by @brettfo in https://github.com/dependabot/dependabot-core/pull/15409
• [Update Graph] Report empty manifests as present but empty instead of omitting them by @brrygrdn in https://github.com/dependabot/dependabot-core/pull/15427
• Fix vcpkg empty PRs for up-to-date baselines by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15420
• Nix: update NixOS channel tarball inputs by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15413
• fix(opentofu): accept terraform_registry credentials for OCI registry tags by @thavaahariharangit in https://github.com/dependabot/dependabot-core/pull/15422
• Commit changes to workspace member TOML files by @crabbit-git in https://github.com/dependabot/dependabot-core/pull/15142
• Fix COREPACK_NPM_REGISTRY trailing slash causing pnpm HTTP 404 on private registries by @thavaahariharangit with @Copilot in https://github.com/dependabot/dependabot-core/pull/15444
• Map additional NuGet feed errors to private_source_bad_response by @brettfo in https://github.com/dependabot/dependabot-core/pull/15426
• Support version and security NuGet job commands by @brettfo in https://github.com/dependabot/dependabot-core/pull/15430
• Show the vcpkg release tag instead of master in PR titles by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15433
• Register MSBuild before running the job so early NuGet errors are reported by @brettfo in https://github.com/dependabot/dependabot-core/pull/15431
• Add a baseline to vcpkg projects missing one by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15432
• Fix file updater failed to update for all support files sentry error by @AbhishekBhaskar in https://github.com/dependabot/dependabot-core/pull/15421
• Skip disabled Maven repositories by @adoroszlai in https://github.com/dependabot/dependabot-core/pull/15443
• v0.384.0 by @dependabot-core-action-automation[bot] in https://github.com/dependabot/dependabot-core/pull/15438

New Contributors

• @crabbit-git made their first contribution in https://github.com/dependabot/dependabot-core/pull/15142
• @adoroszlai made their first contribution in https://github.com/dependabot/dependabot-core/pull/15443

Full Changelog: https://github.com/dependabot/dependabot-core/compare/v0.383.0...v0.384.0