Dependabot Files

What's Changed

• Capture offending gem details on bundler registry metadata errors by @kbukum1 in https://github.com/dependabot/dependabot-core/pull/15512
• Bundler: apply empty-checksum metadata patch to the v2 helper by @kbukum1 in https://github.com/dependabot/dependabot-core/pull/15513
• [Update graph] Ensure bystander txt files are removed before parsing for Python by @brrygrdn in https://github.com/dependabot/dependabot-core/pull/15508
• Handle global.json with no SDK version in dotnet_sdk parser by @brettfo in https://github.com/dependabot/dependabot-core/pull/15510
• Type the cargo ecosystem and remove it from the T.untyped burndown by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15492
• Type the conda ecosystem and remove it from the T.untyped burndown by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15493
• Type the docker ecosystem and remove it from the T.untyped burndown by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15495
• Use shared git-tag cooldown in terraform by @robaiken in https://github.com/dependabot/dependabot-core/pull/15472
• Retry corepack once on signature metadata error by @thavaahariharangit with @Copilot in https://github.com/dependabot/dependabot-core/pull/15466
• Type the deno, elm, devcontainers, bazel, and helm ecosystems by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15527
• Add word-separator and lowercase formatting for branch name by @AbhishekBhaskar in https://github.com/dependabot/dependabot-core/pull/15478
• Fix Docker cooldown not respected for multi-arch images missing Last-Modified by @robaiken with @Copilot in https://github.com/dependabot/dependabot-core/pull/15486
• Reduce redundant git-source probes during npm metadata resolution by @thavaahariharangit with @Copilot in https://github.com/dependabot/dependabot-core/pull/15480
• Type the maven ecosystem and remove it from the T.untyped burndown by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15531
• Add branch name config template format support with validation by @AbhishekBhaskar in https://github.com/dependabot/dependabot-core/pull/15535
• fix(gradle): prefer local gradlew for lockfile updates by @thavaahariharangit in https://github.com/dependabot/dependabot-core/pull/15546
• helm: support versioning-strategy (range-preserving updates) by @casey-robertson-paypal in https://github.com/dependabot/dependabot-core/pull/15218
• Bump gradle from 9.4.1-jdk21-ubi to 9.6.1-jdk21-ubi in /gradle by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15498
• [Update graph] Add support for requirements.txt 'layering' instead of compressing to a single file by @brrygrdn in https://github.com/dependabot/dependabot-core/pull/15521
• Allow periods in Helm values file names for Docker ecosystem by @telnet23 in https://github.com/dependabot/dependabot-core/pull/15557
• Match existing group PRs covering a subset of job directories by @IanButterworth in https://github.com/dependabot/dependabot-core/pull/15548
• Bump library/golang from 1.26.1-bookworm to 1.26.5-bookworm in /go_modules by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15562
• Fix npm security updates for transitive dependencies in workspace monorepos by @Swampen in https://github.com/dependabot/dependabot-core/pull/15514
• Add helm to the smoke-test matrix by @casey-robertson-paypal in https://github.com/dependabot/dependabot-core/pull/15554
• v0.386.0 by @dependabot-core-action-automation[bot] in https://github.com/dependabot/dependabot-core/pull/15564

New Contributors

• @telnet23 made their first contribution in https://github.com/dependabot/dependabot-core/pull/15557
• @Swampen made their first contribution in https://github.com/dependabot/dependabot-core/pull/15514

Full Changelog: https://github.com/dependabot/dependabot-core/compare/v0.385.0...v0.386.0