Skip to content

Bump dependabot-omnibus from 0.115.0 to 0.124.4

NipaNipa requested to merge dependabot/bundler/dependabot-omnibus-0.124.4 into master

Bumps dependabot-omnibus from 0.115.0 to 0.124.4.

Changelog

Sourced from dependabot-omnibus's changelog.

v0.124.4, 30 October 2020

  • Ignore go files that start with underscore or dot
  • Go mod: handle missing package url meta tags
  • Ignore go files tagged with +build
  • Handle missing VCS when converting git_source path
  • Fix relative dir on mac where tmp is in /private
  • Handle missing directory in cloned repo
  • Improve relative path code in vendor updater
  • Correctly handle vendored updates in nested directory
  • Raise generic DependabotError when all else fails
  • Mark unknown revision errors as DependencyFileNotResolvable
  • Include backtrace from native bundler helpers
  • Mount native bundler helpers in dev shell
  • Bump friendsofphp/php-cs-fixer in /composer/helpers

v0.124.3, 27 October 2020

  • Rename fixes_advisory? to fixed_by? and handle mixed case names
  • dry-run: add security_updates_only
  • Bump eslint from 7.12.0 to 7.12.1 in /npm_and_yarn/helpers

v0.124.2, 26 October 2020

  • Add fixes_advisory? and affects_version? to security advisory
  • Bump jest from 26.6.0 to 26.6.1 in /npm_and_yarn/helpers
  • Bump composer/composer from 1.10.15 to 1.10.16 in /composer/helpers
  • Bump poetry from 1.1.2 to 1.1.4 in /python/helpers
  • Bump eslint from 7.11.0 to 7.12.0 in /npm_and_yarn/helpers

v0.124.1, 22 October 2020

  • Add lowest_security_fix_version method to update checkers

v0.124.0, 20 October 2020

  • Go: Promote experimental go mod tidy support to stable (i.e., always tidy if repo_contents_path is given)
  • Go: Promote experimental go mod vendor support to stable (i.e., always vendor if repo_contents_path is given and vendor/modules.txt is present)
  • Bump jest from 26.5.3 to 26.6.0 in /npm_and_yarn/helpers
  • Bump object-path from 0.11.4 to 0.11.5 in /npm_and_yarn/helpers
  • Bump composer/composer from 1.10.10 to 1.10.15 in /composer/helpers

v0.123.1, 19 October 2020

  • Go mod: Handle cannot find module during go mod tidy
  • Python: Add 3.9.0 and upgrade pyenv to v1.2.21 (@​ulgens)
  • Bundler: Ignore changed .gemspec from vendor/cache folder
... (truncated)
Commits
  • 12de02f Merge pull request #2704 from dependabot/v0.124.4-release-notes
  • dbdd69d v0.124.4
  • ba014eb Merge pull request #2700 from dependabot/jurre/go-build-ignore
  • ec9b788 Ignore go files that start with underscore or dot
  • 7f15b3b Merge pull request #2701 from dependabot/feelepxyz/handle-missing-meta-tags
  • 3194b48 Go mod: handle missing package url meta tags
  • 92e8e19 Ignore go files tagged with +build
  • dd01ca3 Merge pull request #2696 from dependabot/feelepxyz/handle-missing-vcs
  • 398ca82 Merge pull request #2699 from dependabot/feelepxyz/fix-vendor-relative-dir-mac
  • 3fd9902 Handle missing VCS when converting git_source path
  • Additional commits viewable in compare view

Merge request reports