Skip to content

Bump dependabot-core from v0.75.36 to v0.75.39

NipaNipa requested to merge dependabot/bundler/dependabot-core-v0.75.39 into master

Bumps dependabot-core from v0.75.36 to v0.75.39.

Changelog

Sourced from dependabot-core's changelog.

v0.75.39, 14 November 2018

  • Python: Bump poetry from 0.12.7 to 0.12.8
  • Python: Bump hashin from 0.13.4 to 0.14.0

v0.75.38, 13 November 2018

  • JS: Support updating npm sub-dependencies
  • Python: Handle transition from a single hash to multiple in requirements file updater
  • JS: Handle unmet peer dependency warnings in yarn

v0.75.37, 12 November 2018

  • JS: Add npm-shrinkwrap to list of files updated by file updater
  • Python: More careful requirement file updating (handle no-binary flags)
Commits
  • f740439 v0.75.39
  • 96117bf Merge pull request #776 from dependabot/dependabot/pip/helpers/python/hashin-...
  • 1678e60 Update hash order
  • ad38b4a Bump hashin from 0.13.4 to 0.14.0 in /helpers/python
  • 614e448 Merge pull request #777 from dependabot/dependabot/pip/helpers/python/poetry-...
  • 4155f5d Bump poetry from 0.12.7 to 0.12.8 in /helpers/python
  • 43e3fa0 v0.75.38
  • 761c52a Merge pull request #773 from dependabot/npm-subdependency-resolution
  • 86f58aa Support updating npm sub-dependencies
  • 9c275b2 Python: Handle transition from a single hash to multiple in requirements file...
  • Additional commits viewable in compare view

Merge request reports