Skip to content
This repository was archived by the owner on May 8, 2025. It is now read-only.

Bump dependabot-omnibus from 0.209.0 to 0.216.1 - #912

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/dependabot-omnibus-0.216.1
Closed

Bump dependabot-omnibus from 0.209.0 to 0.216.1#912
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/dependabot-omnibus-0.216.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 14, 2023

Copy link
Copy Markdown
Contributor

Bumps dependabot-omnibus from 0.209.0 to 0.216.1.

Changelog

Sourced from dependabot-omnibus's changelog.

v0.216.1, 14 April 2023

  • [Updater] Wire up and flesh out branch naming for Grouped Update PRs #7084
  • Fix incorrect detection of top level gemspecs #7085
  • Improve some exception error messages #7068
  • Bundle the updater when bumping versions #7070
  • Bump rubocop from 1.48.0 to 1.50.0 in /updater (@​app/dependabot) #7064

v0.216.0, 12 April 2023

  • Allow updating gemspecs loaded from a Gemfile #7051
  • Update README.md to include link to the public Dependabot Core board #7054
  • Fix update checking in Yarn repositories using workspaces #7024
  • Don't try to resolve pinned sha's to versions when updating docker images #6150
  • [Updater] Inform the backend metric service which operation class is used for each update #7009
  • [Updater] Prefer updated_dependencies to dependencies for DependencyChange objects #7005
  • [Updater] Introduce a DependencyChangeBuilder class to complete encapsulation of diff generation #7004
  • Upgrade ruby to 3.1.4 and ruby-install to 0.9.0 #6998
  • Generate proper PR summary table for docker digest updates #6996
  • [Updater] Absorb Security Advisory and Ignore Conditions into Job #6989
  • [Updater] Move filtering of parsed dependencies by allow rules or job dependencies #6991
  • Fix "no files were updated!" errors in workspaces #6950
  • Allow updating only the digest when tag is already up to date #6992
  • Fix updating some references when having multiple Dockerfiles #6973
  • Add OCI header support to Docker #6969
  • [Updater] Extract RefreshVersionPullRequest as an Operation class #6939
  • Don't propose updates to a more precise version of the same docker tag #6748
  • Strip BOM from file contents #6714
  • Refactor npm ecosystem lockfile parsing #6944
  • [Updater] Stub the upate checker for security ignore tests #6951
  • Implement double star glob workspaces for npm & yarn #6932
  • [Updater] Update the service's dependency metadata in one place #6934
  • Improve dry-run.rb diffs #6946
  • Add package manager as a tag in error contexts #6933
  • [Updater] Perform Dependency file parsing early, and fail fast if there's a problem #6906
  • Add the new grouped bundler smoke test #6907
  • Update Bundler to 2.4.10 #6922
  • Fix typo: potentials -> potential #6902
  • [Updater] Incorporate our first pass at grouped updates as an experiment we can ship #6884
  • Don't consider references to catalogs in buildfiles #6878
  • Fix updating reusable workflows in .github repos #6875
  • Upgrade to Bundler 2.4.9 #6303
  • [Updater] Establish the Updater::Operations pattern, Extract UpdateAllVersions as the first strategy class #6866
  • [Updater] Break out handler methods for Dependabot::Error classes into a small utility class #6865
  • [Updater] Start splitting the Updater by extracting DependencySnapshot as an input class #6847
  • Run the common test suite if any ecosystem files change #6856
  • build(deps): bump terraform from 1.4.0 to 1.4.2 (@​HorizonNet) #6848
  • [Updater] Prefer to use Dependabot::Service directly and as an application error reporter #6846
  • Fix the call order when pulling through cred metadata #6844
  • Fix retrieval of private registry metadata from the Job definition #6843

... (truncated)

Commits
  • 2385c1f v0.216.1
  • 84a53a3 Merge pull request #7084 from dependabot/brrygrdn/finalise-dependency-group-b...
  • 0193c77 Add rules kwarg to DependencyGroup
  • 8b761b6 Suffix PRs with a prototype timestamp
  • 3ee8d28 Prefer positional arguments for Dependabot::DependencyGroup
  • 6672ed3 Wire up dependency_group pass through from the PR builder
  • 6ce5dcf Add prefixing to the dependency group strategy
  • 9f747da Merge pull request #7085 from dependabot/deivid-rodriguez/fix-top-level-gemsp...
  • 8d6278f Fix incorrect detection of top level gemspecs
  • 73222ce Fix superclass mismatches
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [dependabot-omnibus](https://github.com/dependabot/dependabot-core) from 0.209.0 to 0.216.1.
- [Release notes](https://github.com/dependabot/dependabot-core/releases)
- [Changelog](https://github.com/dependabot/dependabot-core/blob/main/CHANGELOG.md)
- [Commits](dependabot/dependabot-core@v0.209.0...v0.216.1)

---
updated-dependencies:
- dependency-name: dependabot-omnibus
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies ruby Pull requests that update Ruby code labels Apr 14, 2023
@dependabot @github

dependabot Bot commented on behalf of github Apr 20, 2023

Copy link
Copy Markdown
Contributor Author

Superseded by #913.

@dependabot dependabot Bot closed this Apr 20, 2023
@dependabot
dependabot Bot deleted the dependabot/bundler/dependabot-omnibus-0.216.1 branch April 20, 2023 20:56
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants