Dependabot Files

What's Changed

• Type shared Python requirement boundaries by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15837
• Type Python requirement consumers by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15838
• Type UV requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15839
• Type Conda requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15840
• Roll pub. Fix flutter/dart sdk constraint rewritten in lockfile by @svartalfheim in https://github.com/dependabot/dependabot-core/pull/15654
• Use GitHub Artifact Attestations for container image signing by @codysoyland in https://github.com/dependabot/dependabot-core/pull/12116
• Add artifact metadata permission by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15859
• Bump the all-actions group across 1 directory with 8 updates by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15860
• Bump sigstore/cosign/cosign from v3.1.2 to v3.1.3 in /docker in the regclient group by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15833
• Bump gradle from 2a6880c to 44b577a in /gradle by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15832
• Bump phpstan/phpstan from 2.2.7 to 2.2.8 in /composer/helpers/v2 in the dev-dependencies group across 1 directory by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15831
• Add support for the Maven Wrapper by @yeikel in https://github.com/dependabot/dependabot-core/pull/14812
• Type Terraform requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15853
• Type OpenTofu requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15854
• Remove unused updater timeout field by @jeffwidman in https://github.com/dependabot/dependabot-core/pull/15864
• Type Cargo requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15867
• Type Hex requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15868
• Type Composer requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15869
• Type Swift requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15870
• Bump uv to 0.12.1 by @minev-dev in https://github.com/dependabot/dependabot-core/pull/15770
• Handle refresh operation assertion error for individual pull requests with multiple directories gracefully by @AbhishekBhaskar in https://github.com/dependabot/dependabot-core/pull/15872
• Use metadata sources when sanitizing mentions by @jeffwidman in https://github.com/dependabot/dependabot-core/pull/15805
• Use GitLab issue paths in metadata links by @jeffwidman in https://github.com/dependabot/dependabot-core/pull/15806
• Use metadata sources for qualified issue links by @jeffwidman in https://github.com/dependabot/dependabot-core/pull/15807
• Type Bazel requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15878
• Use Docker Bake and artifact attestations for published images by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15861
• Automate dependency upgrades for the helm ecosystem by @yeikel in https://github.com/dependabot/dependabot-core/pull/13515
• Update .NET 10 SDK to 10.0.400 by @brettfo in https://github.com/dependabot/dependabot-core/pull/15877
• Fix git add command to handle paths with spaces by @Laptop765 in https://github.com/dependabot/dependabot-core/pull/10866
• Type pre-commit requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15879
• Type Nix requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15880
• Type Pub requirement sources by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15881
• Type GitHub Actions requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15882
• Type Deno requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15883
• Type Elm requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15884
• Type Silent requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15885
• Type Julia requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15886
• Type git-submodule requirement source by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15887
• Type devcontainer requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15888
• bun: reject bun.lock lockfileVersion the bundled bun can't parse by @markhallen in https://github.com/dependabot/dependabot-core/pull/15896
• Type Maven wrapper requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15907
• Type vcpkg requirement access by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15908
• Type dependency requirement hash values by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15909
• update preinstalled 8 and 9 .NET SDKs to latest by @brettfo in https://github.com/dependabot/dependabot-core/pull/15905
• Scan all global.json files for NuGet SDKs by @brettfo in https://github.com/dependabot/dependabot-core/pull/15903
• Add branch name formatting error type to updater_error_details by @AbhishekBhaskar in https://github.com/dependabot/dependabot-core/pull/15836
• Bump golang.org/x/mod from 0.38.0 to 0.39.0 in /go_modules/helpers by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15901
• Bump the all-actions group with 4 updates by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15928
• Bump gradle from 9.6.1-jdk21-ubi to 9.7.0-jdk21-ubi in /gradle by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15927
• fix local builds using latest Docker by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/15915
• Apply cooldown to transitive npm/pnpm/yarn deps via native release-age gates by @robaiken in https://github.com/dependabot/dependabot-core/pull/15485
• Fix Maven wrapper subprocess failure from double shell-escaping by @kbukum1 in https://github.com/dependabot/dependabot-core/pull/15932
• v0.392.0 by @dependabot-core-action-automation[bot] in https://github.com/dependabot/dependabot-core/pull/15929

New Contributors

• @svartalfheim made their first contribution in https://github.com/dependabot/dependabot-core/pull/15654
• @codysoyland made their first contribution in https://github.com/dependabot/dependabot-core/pull/12116
• @minev-dev made their first contribution in https://github.com/dependabot/dependabot-core/pull/15770
• @Laptop765 made their first contribution in https://github.com/dependabot/dependabot-core/pull/10866

Full Changelog: https://github.com/dependabot/dependabot-core/compare/v0.391.0...v0.392.0