Dependabot Files

What's Changed

• Type GitHub release metadata by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15597
• Make GitCommitChecker strongly typed by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15598
• Retry corepack prepare and install on signature metadata errors from private registries by @kbukum1 in https://github.com/dependabot/dependabot-core/pull/15606
• Fix UV DependencyGrapher to detect nested uv.lock in monorepos by @thavaahariharangit with @Copilot in https://github.com/dependabot/dependabot-core/pull/15520
• Bump library/rust from 1.95.0-bookworm to 1.97.0-bookworm in /cargo by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15560
• Bump @sigstore/core from 3.1.0 to 3.2.1 in /npm_and_yarn/helpers by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15455
• Bump maven from 3.9.14 to 3.9.16 in /maven by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15127
• Support Bundler source cooldown in Dependabot cooldown flow by @robaiken in https://github.com/dependabot/dependabot-core/pull/15517
• Type shared release metadata by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15607
• Make Job strongly typed by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15608
• Type Job wire models by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15610
• Type Service and ApiClient by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15614
• Add support for calendar-based versions for Maven and Gradle by @yeikel in https://github.com/dependabot/dependabot-core/pull/14114
• Type error reporting by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15615
• Type updater dependency helpers by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15617
• ensure proper formatting when patching element attributes by @brettfo in https://github.com/dependabot/dependabot-core/pull/15629
• Bump ws from 8.18.3 to 8.21.1 in /npm_and_yarn/helpers/test/npm/fixtures/vulnerability-auditor/update-needed-across-two-versions by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15329
• Bump lodash from 4.17.23 to 4.18.1 in /bun/helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/14608
• Bump lodash from 4.17.23 to 4.18.1 in /npm_and_yarn/helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/14609
• Bump lodash from 4.17.23 to 4.18.1 in /npm_and_yarn/helpers/test/npm6/fixtures/conflicting-dependency-parser/deeply-nested by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/14610
• Bump the dev-dependencies group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/14694
• Bump pip from 26.1.1 to 26.1.2 in /python/helpers in the pip group across 1 directory by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/11830
• Bump yaml from 2.3.1 to 2.9.0 in /bun/helpers by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/14535
• npm_and_yarn: group vulnerability auditor blocking-dependency messages by top-level ancestor by @thavaahariharangit in https://github.com/dependabot/dependabot-core/pull/15627
• Bump ip-address and socks in /bun/helpers by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/14924
• Bump brace-expansion from 1.1.13 to 1.1.16 in /bun/helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15634
• Bump brace-expansion from 1.1.13 to 1.1.16 in /npm_and_yarn/helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15633
• Bump sigstore/cosign/cosign from v3.1.1 to v3.1.2 in /docker in the regclient group across 1 directory by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15621
• Bump lodash from 4.17.23 to 4.18.1 in /bun/helpers/test/npm6/fixtures/conflicting-dependency-parser/deeply-nested by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/14606
• Bump @tootallnate/once from 2.0.0 to 2.0.1 in /bun/helpers by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15107
• Bump the "uv-ecosystem" group with 1 update across multiple ecosystems by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/14969
• Bump ip-address and socks in /npm_and_yarn/helpers by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/14923
• Bump yaml from 2.3.1 to 2.9.0 in /npm_and_yarn/helpers by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/14533
• Bump golang.org/x/mod from 0.37.0 to 0.38.0 in /go_modules/helpers by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15559
• Bump @sigstore/verify from 3.1.0 to 3.1.1 in /npm_and_yarn/helpers by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15477
• julia: don't propose compat updates for workspace packages or synthesize member compat entries by @IanButterworth in https://github.com/dependabot/dependabot-core/pull/15643
• fix: guard against unparseable versions in cooldown fallback by @currantw in https://github.com/dependabot/dependabot-core/pull/15632
• Type dependency requirement readers by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15646
• v0.388.0 by @dependabot-core-action-automation[bot] in https://github.com/dependabot/dependabot-core/pull/15623

New Contributors

• @currantw made their first contribution in https://github.com/dependabot/dependabot-core/pull/15632

Full Changelog: https://github.com/dependabot/dependabot-core/compare/v0.387.0...v0.388.0