Bump dependabot-omnibus from 0.209.0 to 0.216.0

[dependabot]

Bumps dependabot-omnibus from 0.209.0 to 0.216.0.

Changelog

Sourced from dependabot-omnibus's changelog.

v0.216.0, 12 April 2023

• Allow updating gemspecs loaded from a Gemfile #7051
• Update README.md to include link to the public Dependabot Core board #7054
• Fix update checking in Yarn repositories using workspaces #7024
• Don't try to resolve pinned sha's to versions when updating docker images #6150
• [Updater] Inform the backend metric service which operation class is used for each update #7009
• [Updater] Prefer updated_dependencies to dependencies for DependencyChange objects #7005
• [Updater] Introduce a DependencyChangeBuilder class to complete encapsulation of diff generation #7004
• Upgrade ruby to 3.1.4 and ruby-install to 0.9.0 #6998
• Generate proper PR summary table for docker digest updates #6996
• [Updater] Absorb Security Advisory and Ignore Conditions into Job #6989
• [Updater] Move filtering of parsed dependencies by allow rules or job dependencies #6991
• Fix "no files were updated!" errors in workspaces #6950
• Allow updating only the digest when tag is already up to date #6992
• Fix updating some references when having multiple Dockerfiles #6973
• Add OCI header support to Docker #6969
• [Updater] Extract RefreshVersionPullRequest as an Operation class #6939
• Don't propose updates to a more precise version of the same docker tag #6748
• Strip BOM from file contents #6714
• Refactor npm ecosystem lockfile parsing #6944
• [Updater] Stub the upate checker for security ignore tests #6951
• Implement double star glob workspaces for npm & yarn #6932
• [Updater] Update the service's dependency metadata in one place #6934
• Improve dry-run.rb diffs #6946
• Add package manager as a tag in error contexts #6933
• [Updater] Perform Dependency file parsing early, and fail fast if there's a problem #6906
• Add the new grouped bundler smoke test #6907
• Update Bundler to 2.4.10 #6922
• Fix typo: potentials -> potential #6902
• [Updater] Incorporate our first pass at grouped updates as an experiment we can ship #6884
• Don't consider references to catalogs in buildfiles #6878
• Fix updating reusable workflows in .github repos #6875
• Upgrade to Bundler 2.4.9 #6303
• [Updater] Establish the Updater::Operations pattern, Extract UpdateAllVersions as the first strategy class #6866
• [Updater] Break out handler methods for Dependabot::Error classes into a small utility class #6865
• [Updater] Start splitting the Updater by extracting DependencySnapshot as an input class #6847
• Run the common test suite if any ecosystem files change #6856
• build(deps): bump terraform from 1.4.0 to 1.4.2 (@​HorizonNet) #6848
• [Updater] Prefer to use Dependabot::Service directly and as an application error reporter #6846
• Fix the call order when pulling through cred metadata #6844
• Fix retrieval of private registry metadata from the Job definition #6843
• Adjust poetry/pyproject python version to match installed in version resolver #6839
• [Updater] Remove an unused ApiClient method, Make Dependabot::Job an explicit receiver for more parameters #6810
• Add version catalog support for Gradle (@​alcere) #6249
• Bump octokit from 6.0.1 to 6.1.0 in /updater (@​app/dependabot) #6826
• Do not nil out the PR message for jobs updating a PR #6813
• Remove (some) deep nesting from updater specs #6799
• Rely on previously-defined constant #6801
• Extract log helper methods into a Logger::Formatter, Push the job_id into the Job object #6808

... (truncated)

Commits

• bae772f v0.216.0
• 8416e29 Bump rubocop-performance from 1.16.0 to 1.17.1 in /updater (#7063)
• 75d7f46 Bump commonmarker from 0.23.7 to 0.23.9 in /updater (#7056)
• bc2bfc9 Bump nokogiri from 1.14.2 to 1.14.3 in /updater (#7057)
• c9cb1fe Bump faraday-retry from 2.0.0 to 2.1.0 in /updater (#7060)
• be67b41 Merge pull request #7051 from dependabot/update-gemspecs-loaded-from-gemfile
• a2783ad Watching updater should now keep track of everything
• 7629a6e Allow updating gemspecs loaded from a Gemfile
• 8602537 chore(ee): ignore .idea folder (#7055)
• cdef0c1 Merge pull request #7054 from dependabot/abdulapopoola-doc-update
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #912.