Dependabot Files

What's Changed

• Remove enable_corepack_for_npm_and_yarn and preserve direct execution by @ruben-pachecocaldera with @Copilot in https://github.com/dependabot/dependabot-core/pull/15945
• Remove enable_private_registry_for_corepack flag and make private-registry corepack env permanent by @ruben-pachecocaldera with @Copilot in https://github.com/dependabot/dependabot-core/pull/15946
• Nix: lock the selected revision by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15984
• Remove allow_refresh_for_existing_pr_dependencies feature flag by @ruben-pachecocaldera with @Copilot in https://github.com/dependabot/dependabot-core/pull/15947
• Remove allow_refresh_group_with_all_dependencies and make group-refresh behavior permanent by @ruben-pachecocaldera with @Copilot in https://github.com/dependabot/dependabot-core/pull/15948
• Remove enhanced updater error details feature flag by @ruben-pachecocaldera with @Copilot in https://github.com/dependabot/dependabot-core/pull/15951
• Remove enable_exclude_paths_subdirectory_manifest_files and make exclude-path filtering unconditional by @ruben-pachecocaldera with @Copilot in https://github.com/dependabot/dependabot-core/pull/15949
• Add typed pyproject wire models by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15986
• Type Python pyproject parsing by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15987
• Type UV pyproject parsing by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/15988
• Skip interpolated Terragrunt sources by @theinfosecguy in https://github.com/dependabot/dependabot-core/pull/15811
• NuGet: fix inverted caseSensitive flag in PathHelper.GetMatchingDirectoriesUnder by @flojon in https://github.com/dependabot/dependabot-core/pull/16024
• Add typed npm registry package model by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/16030
• Classify Maven Wrapper subprocess failures for better observability by @kbukum1 in https://github.com/dependabot/dependabot-core/pull/15934
• Bump the dev-dependencies group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/16038
• Bump nixos/nix in /nix by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/16041
• Type npm registry package details by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/16031
• Bump gradle in /gradle by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/16040
• Bump the "uv-ecosystem" group with 2 updates across multiple ecosystems by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/16010
• docker: skip unparseable YAML files by @brettfo in https://github.com/dependabot/dependabot-core/pull/15961
• Fix NuGet updated file line endings by @brettfo in https://github.com/dependabot/dependabot-core/pull/15863
• Update dependency regex to support multiline requirements by @AbhishekBhaskar in https://github.com/dependabot/dependabot-core/pull/15967
• Handle npm unpublished time metadata by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/16047
• Prefer SHA pins for GitHub Actions by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/16029
• Bump default Bazel version to 8.5.1 by @v-robaiken in https://github.com/dependabot/dependabot-core/pull/15982
• Update SimpleCov to 1.1.1 and refresh RBIs by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/16054
• Type Bun registry package details by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/16032
• Update Parallel to 2.1.0 and refresh its RBI by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/16059
• docker: avoid missing file errors for invalid YAML by @brettfo in https://github.com/dependabot/dependabot-core/pull/16063
• Report NuGet dependency directories by @brettfo in https://github.com/dependabot/dependabot-core/pull/15914
• Ignore non-object npm engines metadata by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/16065
• Change default SMOKE_TEST_BRANCH back to 'main' by @brettfo in https://github.com/dependabot/dependabot-core/pull/16066
• Add typed npm package manager config by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/16067
• Bump pip from 26.1.2 to 26.2.1 in /python/helpers in the pip group across 1 directory by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15751
• Add test for Docker pre-release to stable version update by @seraco in https://github.com/dependabot/dependabot-core/pull/14412
• python: use PEP 691 for private registry metadata by @thavaahariharangit in https://github.com/dependabot/dependabot-core/pull/16035
• Use the registry Last-Modified header as the only Docker cooldown date source by @v-robaiken in https://github.com/dependabot/dependabot-core/pull/16075
• Resolve indirect dependency updates in uv.lock by @v-HaripriyaC in https://github.com/dependabot/dependabot-core/pull/16062
• Bump composer/composer from 2.9.5 to 2.10.2 in /composer/helpers/v2 by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15630
• bundler: read path-dependency locations verbatim from the lockfile by @timdawborn in https://github.com/dependabot/dependabot-core/pull/16051
• Bump Microsoft.Build.Locator from 1.9.1 to 1.11.2 by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15995
• Bump GuiLabs.Language.Xml from 1.2.93 to 1.2.120 by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/15993
• Align vendored NuGet assemblies with the .NET SDK by @brettfo in https://github.com/dependabot/dependabot-core/pull/15985
• Bump library/golang in /go_modules by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/16039
• Bump oras-project/oras from v1.3.3 to v1.3.4 in /helm in the container-tools group across 1 directory by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/16079
• Bump library/rust in /cargo by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/16080
• Bump Microsoft.NET.Test.Sdk from 17.14.1 to 18.9.0 by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/16089
• Bump Microsoft.Extensions.Logging from 10.0.3 to 10.0.11 by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/16088
• Bump Microsoft.Extensions.FileProviders.Abstractions from 10.0.3 to 10.0.11 by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/16086
• Bump Microsoft.Extensions.FileSystemGlobbing from 10.0.3 to 10.0.11 by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/16087
• Bump cython from 3.2.9 to 3.3.0 in /python/helpers in the common group across 1 directory by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/16081
• Bump Microsoft.CodeAnalysis.CSharp from 5.0.0 to 5.9.0 by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/16084
• Bump friendsofphp/php-cs-fixer from 3.95.21 to 3.95.23 in /composer/helpers/v2 in the dev-dependencies group across 1 directory by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/16083
• Bump the all-actions group with 4 updates by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/16101
• Bump packageurl-dotnet from 2.0.0 to 2.0.1 by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/16105
• Bump OpenTelemetry and OpenTelemetry.Exporter.OpenTelemetryProtocol by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/16104
• Bump MSBuild.StructuredLogger from 2.3.17 to 2.3.246 by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/16100
• Bump Microsoft.Web.Xdt from 3.2.3 to 3.2.11 by @dependabot[bot] in https://github.com/dependabot/dependabot-core/pull/16099
• v0.394.0 by @dependabot-core-action-automation[bot] in https://github.com/dependabot/dependabot-core/pull/16106

New Contributors

• @flojon made their first contribution in https://github.com/dependabot/dependabot-core/pull/16024
• @seraco made their first contribution in https://github.com/dependabot/dependabot-core/pull/14412

Full Changelog: https://github.com/dependabot/dependabot-core/compare/v0.393.0...v0.394.0