Overview

3 Releases published by2 people

• v0.321.2

  publishedJul 14, 2025

• v0.321.3

  publishedJul 15, 2025

• v0.322.0

  publishedJul 17, 2025

33 Pull requests merged by11 people

• Disable ecosystems from rakefile to fix gem release

  #12656 mergedJul 17, 2025

• v0.322.0

  #12654 mergedJul 17, 2025

• Bump System.CommandLine, xunit.runner.visualstudio and xunit.v3

  #12651 mergedJul 16, 2025

• classify additional error shapes

  #12652 mergedJul 16, 2025

• Bump golang.org/x/mod from 0.19.0 to 0.26.0 in /go_modules/helpers

  #12617 mergedJul 16, 2025

• check output for timeouts

  #12650 mergedJul 16, 2025

• Bump nuget/helpers/lib/NuGet.Client from42bfb45 to2948e02

  #12618 mergedJul 16, 2025

• Bump dotnet-sdk from 9.0.203 to 9.0.302 in /nuget/helpers/lib/NuGetUpdater

  #12620 mergedJul 16, 2025

• refactor method

  #12649 mergedJul 16, 2025

• Bump DiffPlex and 21 others

  #12622 mergedJul 16, 2025

• reset smoke test branch to main

  #12646 mergedJul 16, 2025

• Don't let unsupported sdk version inglobal.json fail an update job

  #12638 mergedJul 16, 2025

• ensure project is supported file

  #12644 mergedJul 16, 2025

• Use common variable for PHP version

  #12642 mergedJul 16, 2025

• Remove the fallback"master" hardcoded branch name from the npmFileParser

  #7131 mergedJul 16, 2025

• Skip sigstore attestions if publishing the RubyGems manually

  #12639 mergedJul 15, 2025

• Installvcpkg cli invcpkg ecosystem container image

  #12636 mergedJul 15, 2025

• Update labels fordotnet-sdk,rust-toolchain, andvcpkg

  #12637 mergedJul 15, 2025

• use initial project directory when computing updated file paths from project discovery

  #12635 mergedJul 15, 2025

• Remove deprecated cooldown feature flag for JavaScript ecosystems: npm_and_yarn, bun

  #12582 mergedJul 15, 2025

• fix: update the file extensions that indicate and archive for http url module sources

  #12610 mergedJul 15, 2025

• Downgrade pip to 24.2 due to issue in >25

  #12634 mergedJul 15, 2025

• Remove cooldown feature flag forvcpkg andrust_toolchain

  #12631 mergedJul 15, 2025

• cleanup nuget pr body text

  #12627 mergedJul 15, 2025

• v0.321.3

  #12630 mergedJul 15, 2025

• add experimental nuget file writer

  #12600 mergedJul 15, 2025

• v0.321.2

  #12629 mergedJul 14, 2025

• Create MAINTENANCE_STANDARDS.md

  #10709 mergedJul 14, 2025

• UV update to version 0.7.20

  #12626 mergedJul 14, 2025

• Upgrade uv version to 0.7.20

  #12625 mergedJul 14, 2025

• remove unnecessary test fixtures

  #12586 mergedJul 14, 2025

• Upgrade PIP to 25.0.1

  #12624 mergedJul 14, 2025

• Sorbet type check added to cargo helper class.

  #12605 mergedJul 14, 2025

11 Pull requests opened by10 people

• Bump nuget/helpers/lib/dotnet-core from `218ef74` to `4156c64`

  #12619 openedJul 13, 2025

• Bump the dev-dependencies group across 1 directory with 7 updates

  #12621 openedJul 13, 2025

• Composer v1 deprecation clean up

  #12641 openedJul 16, 2025

• Engines package.json: support special characters >=, ~, ^ (npm_and_yarn)

  #12648 openedJul 16, 2025

• Don't have a fallback on `"master"` as default

  #12655 openedJul 17, 2025

• v0.323.0

  #12657 openedJul 17, 2025

• Pin dependency plugin version when running dependency tree in Maven

  #12658 openedJul 17, 2025

• Complete checkout of vcpkg repository

  #12659 openedJul 17, 2025

• Fix rust_toolchain and vcpkg dependency versions in omnibus build

  #12660 openedJul 17, 2025

• generate detailed pr body

  #12661 openedJul 17, 2025

• Remove enable_cooldown_for_bundler feature flag check

  #12664 openedJul 18, 2025

8 Issues closed by5 people

• DependencyFileNotFound when using Directory.Packages.props without a project file

  #5635 closedJul 18, 2025

• Dependabot still creating PRs after yml has been deleted

  #12475 closedJul 17, 2025

• NuGet updater doesn't handle versions like `8.0.x` in `global.json`

  #12396 closedJul 16, 2025

• Not working properly if project includes Maui

  #12633 closedJul 15, 2025

• Publish new ecosystems dependabot-rust_toolchain and depenadbot-vcpkg on rubygems.org

  #12581 closedJul 15, 2025

• Dependabot ignores centrally pinned transitive version with `VersionOverride` and `CentralPackageTransitivePinningEnabled`

  #12493 closedJul 15, 2025

• Dependency auto-submission for NuGet failing

  #12546 closedJul 14, 2025

• Dependabot uses Node.js v20.19.3 and NPM 10.8.2. Due to the engine-strict setting, the update will not succeed

  #12535 closedJul 12, 2025

7 Issues opened by5 people

• Upgrade pip to >25

  #12663 openedJul 18, 2025

• Dependabot started dropping xml header

  #12662 openedJul 17, 2025

• NuGet update analysis should consider ignored versions for transitive dependencies

  #12653 openedJul 16, 2025

• Swift updater not properly honoring ignore conditions

  #12647 openedJul 16, 2025

• Set MSBuild property `NuGetAudit=false` when scanning for dependencies

  #12645 openedJul 16, 2025

• Pnpm 10.12.1 - Dependabot does not support your pnpm version

  #12643 openedJul 16, 2025

• Files included relatively in `requirements.in` file gets converted to absolute paths because of pip 25 upgrade

  #12632 openedJul 15, 2025

45 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• To Implement Cooldown feature for Helm ecosystem

  #12520 commented onJul 18, 2025 • 23 new comments

• Make Dependabot recursively check folders for Dockerfiles / Helm Charts / K8s files

  #6047 commented onJul 12, 2025 • 0 new comments

• [cargo] error when Dependabot attempts to update wildcard dependency

  #7568 commented onJul 18, 2025 • 0 new comments

• Failure to install `gpgme` using GCC 15

  #12545 commented onJul 18, 2025 • 0 new comments

• This project requires Poetry 2.1.2, but you are using Poetry 2.1.1

  #12048 commented onJul 18, 2025 • 0 new comments

• You can disable all labels using labels: [ ]

  #11783 commented onJul 18, 2025 • 0 new comments

• dependabot does not add 'license' key to package-lock.json on dependency update

  #12578 commented onJul 18, 2025 • 0 new comments

• Gradle dependabot updates failing with "unknown_error" and RuntimeError "no files changed" when update detected after 20 June

  #12559 commented onJul 18, 2025 • 0 new comments

• Dependabot Fails with update_not_possible for a package Despite No Configuration Changes

  #12554 commented onJul 18, 2025 • 0 new comments

• helm - Error fetching chart releases: Error: no repositories configured

  #12549 commented onJul 18, 2025 • 0 new comments

• No PRs created

  #12270 commented onJul 18, 2025 • 0 new comments

• Bump the pnpm-dependencies group in /npm_and_yarn/helpers with 2 updates

  #10361 commented onJul 13, 2025 • 0 new comments

• Bump rubocop-rspec from 2.29.1 to 3.2.0 in /updater

  #10851 commented onJul 17, 2025 • 0 new comments

• Bump the npm-dependencies group across 1 directory with 3 updates

  #11769 commented onJul 13, 2025 • 0 new comments

• Bump pip from 24.0 to 25.0.1 in /python/helpers in the pip group

  #11830 commented onJul 13, 2025 • 0 new comments

• Bump pipenv from 2024.4.1 to 2025.0.1 in /python/helpers in the pipenv group

  #12151 commented onJul 13, 2025 • 0 new comments

• Bump poetry from 2.1.1 to 2.1.3 in /python/helpers in the poetry group

  #12413 commented onJul 15, 2025 • 0 new comments

• Bump the all-actions group across 1 directory with 3 updates

  #12485 commented onJul 17, 2025 • 0 new comments

• Bump the prod-dependencies group across 1 directory with 22 updates

  #12494 commented onJul 17, 2025 • 0 new comments

• Bump the dev-dependencies group across 1 directory with 3 updates

  #12527 commented onJul 13, 2025 • 0 new comments

• Add exclude-paths option to dependabot.yml

  #12532 commented onJul 16, 2025 • 0 new comments

• Bump friendsofphp/php-cs-fixer from 3.75.0 to 3.78.1 in /composer/helpers/v2 in the dev-dependencies group across 1 directory

  #12565 commented onJul 13, 2025 • 0 new comments

• filter out non-version tags in Helm update checker

  #12612 commented onJul 17, 2025 • 0 new comments

• New command `Dependabot revert`

  #7546 commented onJul 12, 2025 • 0 new comments

• Composer update fail with akeneo/pim-community-dev dependency

  #7551 commented onJul 12, 2025 • 0 new comments

• Dependabot removes catalog/catalogs field with bun

  #12522 commented onJul 12, 2025 • 0 new comments

• NPM-level updatePolicy support

  #7555 commented onJul 13, 2025 • 0 new comments

• Make the private registry URL templatable in `dependabot.yaml`

  #5750 commented onJul 14, 2025 • 0 new comments

• Option to enable release candidates/beta versions of dependencies

  #2250 commented onJul 14, 2025 • 0 new comments

• Bump Node.js version to 22

  #12024 commented onJul 14, 2025 • 0 new comments

• Unknown error when using nested relative paths in `package.json` workspaces (when `package-lock.json` is present)

  #7556 commented onJul 15, 2025 • 0 new comments

• add vcpkg ecosystem

  #7644 commented onJul 15, 2025 • 0 new comments

• Update rust-toolchain

  #1702 commented onJul 15, 2025 • 0 new comments

• Dependabot Groups include Unexpected Dependencies when Updating Existing PR

  #10487 commented onJul 16, 2025 • 0 new comments

• Terraform update returns error "dependency_file_not_resolvable" dispiite the file beeing there

  #12071 commented onJul 16, 2025 • 0 new comments

• Support for uv workspaces

  #12072 commented onJul 16, 2025 • 0 new comments

• Dependabot reformatting entire `Directory.Packages.props` file

  #10463 commented onJul 16, 2025 • 0 new comments

• Dependabot have stopped monitoring manifest-files named `constraints.txt`

  #7253 commented onJul 17, 2025 • 0 new comments

• Set defaults for the max length of PR branch names

  #7564 commented onJul 17, 2025 • 0 new comments

• Fix dependency from vulnerable ghostscript library

  #7573 commented onJul 17, 2025 • 0 new comments

• Dependabot has stopped providing the changelog of updated dependencies

  #12531 commented onJul 17, 2025 • 0 new comments

• Dependabot can't resolve your JavaScript dependency files - @types/node

  #11697 commented onJul 17, 2025 • 0 new comments

• Remove / fix remaining hardcoded branch reference to `"master"`

  #6202 commented onJul 17, 2025 • 0 new comments

• Dependency updated between original PR and rebase has old commit message and PR title not updated

  #4821 commented onJul 17, 2025 • 0 new comments

• Support for using PAT to grant private repository access instead of granting via adding to repo for gomod

  #7583 commented onJul 18, 2025 • 0 new comments