Bump dependabot-omnibus from 0.115.0 to 0.124.4
Bumps dependabot-omnibus from 0.115.0 to 0.124.4.
Changelog
Sourced from dependabot-omnibus's changelog.
v0.124.4, 30 October 2020
- Ignore go files that start with underscore or dot
- Go mod: handle missing package url meta tags
- Ignore go files tagged with
+build
- Handle missing VCS when converting git_source path
- Fix relative dir on mac where tmp is in /private
- Handle missing directory in cloned repo
- Improve relative path code in vendor updater
- Correctly handle vendored updates in nested directory
- Raise generic DependabotError when all else fails
- Mark unknown revision errors as DependencyFileNotResolvable
- Include backtrace from native bundler helpers
- Mount native bundler helpers in dev shell
- Bump friendsofphp/php-cs-fixer in /composer/helpers
v0.124.3, 27 October 2020
- Rename fixes_advisory? to fixed_by? and handle mixed case names
- dry-run: add security_updates_only
- Bump eslint from 7.12.0 to 7.12.1 in /npm_and_yarn/helpers
v0.124.2, 26 October 2020
- Add fixes_advisory? and affects_version? to security advisory
- Bump jest from 26.6.0 to 26.6.1 in /npm_and_yarn/helpers
- Bump composer/composer from 1.10.15 to 1.10.16 in /composer/helpers
- Bump poetry from 1.1.2 to 1.1.4 in /python/helpers
- Bump eslint from 7.11.0 to 7.12.0 in /npm_and_yarn/helpers
v0.124.1, 22 October 2020
- Add lowest_security_fix_version method to update checkers
v0.124.0, 20 October 2020
- Go: Promote experimental
go mod tidy
support to stable (i.e., always tidy if repo_contents_path is given)- Go: Promote experimental
go mod vendor
support to stable (i.e., always vendor if repo_contents_path is given and vendor/modules.txt is present)- Bump jest from 26.5.3 to 26.6.0 in /npm_and_yarn/helpers
- Bump object-path from 0.11.4 to 0.11.5 in /npm_and_yarn/helpers
- Bump composer/composer from 1.10.10 to 1.10.15 in /composer/helpers
v0.123.1, 19 October 2020
... (truncated)
- Go mod: Handle
cannot find module
during go mod tidy- Python: Add 3.9.0 and upgrade pyenv to v1.2.21 (@ulgens)
- Bundler: Ignore changed .gemspec from vendor/cache folder
Commits
-
12de02f
Merge pull request #2704 from dependabot/v0.124.4-release-notes -
dbdd69d
v0.124.4 -
ba014eb
Merge pull request #2700 from dependabot/jurre/go-build-ignore -
ec9b788
Ignore go files that start with underscore or dot -
7f15b3b
Merge pull request #2701 from dependabot/feelepxyz/handle-missing-meta-tags -
3194b48
Go mod: handle missing package url meta tags -
92e8e19
Ignore go files tagged with+build
-
dd01ca3
Merge pull request #2696 from dependabot/feelepxyz/handle-missing-vcs -
398ca82
Merge pull request #2699 from dependabot/feelepxyz/fix-vendor-relative-dir-mac -
3fd9902
Handle missing VCS when converting git_source path - Additional commits viewable in compare view