Dependabot Files

What's Changed

• Add typed requirement source API by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15705
• Reland "Cargo: handle crates locked at multiple versions" (#15638) by @p-linnane in https://github.com/dependabot/dependabot-core/pull/15668
• Preserve original absence of the bundler self-checksum on lockfile updates by @p-linnane in https://github.com/dependabot/dependabot-core/pull/15669
• Support security updates for vcpkg ports by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15676
• Beta support of PNPM 11 by @v-robaiken in https://github.com/dependabot/dependabot-core/pull/15710
• Remove enable_cooldown_default_days feature flag; make 3-day cooldown default unconditional by @v-robaiken with @Copilot in https://github.com/dependabot/dependabot-core/pull/15711
• github_actions: integrate gh-actions-lock lockfile relocking by @nodeselector in https://github.com/dependabot/dependabot-core/pull/15267
• Fix npm ignoring scoped registry issue by @AbhishekBhaskar in https://github.com/dependabot/dependabot-core/pull/15692
• Fix Gradle lockfile updates for repos with in-repo convention plugins by @thavaahariharangit in https://github.com/dependabot/dependabot-core/pull/15677
• Bump pytest from 9.0.3 to 9.1.1 in /python/helpers by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15687
• Feature flag clean up by @v-robaiken in https://github.com/dependabot/dependabot-core/pull/15724
• Bump pip-tools from 7.5.3 to 7.6.0 in /python/helpers in the pip-tools group across 1 directory by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15686
• Respect resolutions/overrides and pin Berry wildcard updates to fix spurious NoChangeError by @kbukum1 in https://github.com/dependabot/dependabot-core/pull/15701
• Revert "Respect resolutions/overrides and pin Berry wildcard updates to fix spurious NoChangeError" by @kbukum1 in https://github.com/dependabot/dependabot-core/pull/15730
• Type npm_and_yarn requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15706
• Compare full path, not file name, when excluding fetched files by @timdawborn in https://github.com/dependabot/dependabot-core/pull/15703
• Type bun requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15707
• Type bundler requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15708
• Stop retrying client errors when recording cooldown telemetry by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15737
• Bump cython from 3.2.4 to 3.2.9 in /python/helpers in the common group across 1 directory by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15685
• Stop pinning the resolved js-yaml version in sub-dependency specs by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15744
• Preserve .NET SDK prerelease version strings by @theinfosecguy in https://github.com/dependabot/dependabot-core/pull/15746
• Bump library/rust from 1.97.0-bookworm to 1.97.1-bookworm in /cargo by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15682
• Bump the prod-dependencies group across 2 directories with 22 updates by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15605
• v0.390.0 by @dependabot-core-action-automation[bot] in https://github.com/dependabot/dependabot-core/pull/15752

New Contributors

• @v-robaiken made their first contribution in https://github.com/dependabot/dependabot-core/pull/15710
• @nodeselector made their first contribution in https://github.com/dependabot/dependabot-core/pull/15267
• @timdawborn made their first contribution in https://github.com/dependabot/dependabot-core/pull/15703
• @theinfosecguy made their first contribution in https://github.com/dependabot/dependabot-core/pull/15746

Full Changelog: https://github.com/dependabot/dependabot-core/compare/v0.389.0...v0.390.0