Skip to content

Bump dependabot-omnibus from 0.112.9 to 0.112.11

NipaNipa requested to merge dependabot/bundler/dependabot-omnibus-0.112.11 into master

Bumps dependabot-omnibus from 0.112.9 to 0.112.11.

Changelog

Sourced from dependabot-omnibus's changelog.

v0.112.11, 22 August 2019

  • Yarn: Ignore dependencies with npm registry alias in the name (alias@npm:package)

v0.112.10, 22 August 2019

  • Handle git dependencies that pin to a tag in ReleaseFinder
  • GitHub Actions: Update commit SHA pins to version pins when possible
  • Add GitCommitChecker#pinned_ref_looks_like_commit_sha? method
Commits
  • 904072e v0.112.11
  • 48d66b7 Merge pull request #1336 from dependabot/feelepxyz/yarn-support-alised-depend...
  • 8dffd1a v0.112.10
  • 6657331 Handle git dependencies that pin to a tag in ReleaseFinder
  • 17eb39f GitHub Actions: Update commit SHA pins to version pins when possible
  • bbca558 Add GitCommitChecker#pinned_ref_looks_like_commit_sha? method
  • bee89c1 GitHub Actions: Add tests for no-update in case of a git commit SHA
  • 8da6074 Additional tests for GitHub Actions support
  • 74c06c7 Yarn: Ignore dependencies with alias in name
  • See full diff in compare view

Merge request reports