Bump dependabot-core from v0.73.82 to v0.74.11

Bumps dependabot-core from v0.73.82 to v0.74.11.

Changelog

Sourced from dependabot-core's changelog.

v0.74.11, 26 October 2018

• Python: Raise a DependencyFileNotResolvable error for yanked dependencies

v0.74.10, 26 October 2018

• Rust: Handle invalid names in manifest files (assuming no lockfile)

v0.74.9, 26 October 2018

• Ignore merge commits when determining whether conventional commits are in use

v0.74.8, 25 October 2018

• Go: Add method to look up Go paths without using Go (for environments where we don't have the binaries)

v0.74.7, 25 October 2018

• dep: rewrite vcs remote lookup in go using native library
• Paginate through long lists of labels

v0.74.6, 25 October 2018

• JS: Don't update the attribute for git dependencies in npm6 lockfiles
• Rust: Guard against trying to update dependencies with multiple source types

v0.74.5, 25 October 2018

• Go (modules): Update the go.sum if present
• JS: Use lockfile to determine global registry if a .yarnrc exists but doesn't specify it

v0.74.4, 25 October 2018

• Python: Use pip-tools' --allow-unsafe option when required

v0.74.3, 25 October 2018

• Python: Fix typo

v0.74.2, 24 October 2018

• Python: Handle Pipenv updates that need Python two

v0.74.1, 24 October 2018

• Go: Add go_modules into the metadata finders map

v0.74.0, 24 October 2018

... (truncated)

Commits

• 3e90f7d v0.74.11
• 699b8cf Python: Raise a DependencyFileNotResolvable error for yanked dependencies
• e905414 v0.74.10
• 4dc5e6a Rust: Handle invalid names in manifest files (assuming no lockfile)
• 9f4da24 Bump eslint from 5.7.0 to 5.8.0 in /helpers/npm
• d0cb24d Properly fix rust specs. Sorry guys!
• a48a9a3 v0.74.9
• 34533f0 Ignore merge commits when determining whether conventional commits are in use
• 5fb5b46 Merge pull request #723 from ygnoh/improve-js-logic
• fd5dc58 Move Rust nightly spec to be pending
• Additional commits viewable in compare view