Dependabot Core Versions Save

🤖 Dependabot's core logic for creating update PR's.

v0.257.0

1 day ago

What's Changed

Bump @pnpm/lockfile-file from 9.0.3 to 9.0.5 in /npm_and_yarn/helpers in the pnpm-dependencies group by @dependabot in https://github.com/dependabot/dependabot-core/pull/9707
Bump ossf/scorecard-action from 2.3.1 to 2.3.3 in the all-actions group by @dependabot in https://github.com/dependabot/dependabot-core/pull/9700
Generate TODO file for rubocop rspec rules by @jurre in https://github.com/dependabot/dependabot-core/pull/9709
#6016: Address RSpec/ContextMethod Rubocop violations by @thavaahariharangit in https://github.com/dependabot/dependabot-core/pull/9713
Change dependabot-core license to MIT by @abdulapopoola in https://github.com/dependabot/dependabot-core/pull/9717
Fixed linting error by @tiagodenoronha in https://github.com/dependabot/dependabot-core/pull/9724
v0.257.0 by @dependabot-core-action-automation in https://github.com/dependabot/dependabot-core/pull/9723

New Contributors

@tiagodenoronha made their first contribution in https://github.com/dependabot/dependabot-core/pull/9724

Full Changelog: https://github.com/dependabot/dependabot-core/compare/v0.256.0...v0.257.0

v0.256.0

4 days ago

What's Changed

Bump @npmcli/arborist from 7.4.2 to 7.5.1 in /npm_and_yarn/helpers in the npm-dependencies group across 1 directory by @dependabot in https://github.com/dependabot/dependabot-core/pull/9655
Dependabot core issue npe composer fileparser by @GarryHurleyJr in https://github.com/dependabot/dependabot-core/pull/9643
Use pnpm@9 for lockfile >= 9.0 by @tusbar in https://github.com/dependabot/dependabot-core/pull/9668
Bump eslint from 9.1.1 to 9.2.0 in /npm_and_yarn/helpers in the dev-dependencies group by @dependabot in https://github.com/dependabot/dependabot-core/pull/9674
experimental glob support by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9646
Update bundler module to ruby 3.3.1 by @DuncSmith in https://github.com/dependabot/dependabot-core/pull/9679
Bump library/rust from 1.77.2-bookworm to 1.78.0-bookworm in /cargo by @dependabot in https://github.com/dependabot/dependabot-core/pull/9675
Bump the sorbet group across 2 directories with 3 updates by @dependabot in https://github.com/dependabot/dependabot-core/pull/9686
Bump actions/create-github-app-token from 1.9.3 to 1.10.0 in the all-actions group by @dependabot in https://github.com/dependabot/dependabot-core/pull/9676
allow 4 part version numbers for transitive dependencies by @brettfo in https://github.com/dependabot/dependabot-core/pull/9689
fix exceptions from integration tests due to no metadata finders by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9697
v0.256.0 by @dependabot-core-action-automation in https://github.com/dependabot/dependabot-core/pull/9691

New Contributors

@GarryHurleyJr made their first contribution in https://github.com/dependabot/dependabot-core/pull/9643
@tusbar made their first contribution in https://github.com/dependabot/dependabot-core/pull/9668
@DuncSmith made their first contribution in https://github.com/dependabot/dependabot-core/pull/9679

Full Changelog: https://github.com/dependabot/dependabot-core/compare/v0.255.0...v0.256.0

v0.255.0

1 week ago

What's Changed

Bump composer/composer from 2.7.2 to 2.7.4 in /composer/helpers/v2 in the prod-dependencies group across 1 directory by @dependabot in https://github.com/dependabot/dependabot-core/pull/9590
#5246:removing the leading underscore restriction in the package naming. by @raj-meka in https://github.com/dependabot/dependabot-core/pull/9569
allow updating package without assemblies from packages.config by @brettfo in https://github.com/dependabot/dependabot-core/pull/9542
Bump library/rust from 1.75.0-bookworm to 1.77.2-bookworm in /cargo by @dependabot in https://github.com/dependabot/dependabot-core/pull/9585
chore(python): target latest python versions 3.12.3, 3.11.9 by @nimirium in https://github.com/dependabot/dependabot-core/pull/9526
Fix error thrown when updating dependencies in poetry non-package mode by @ewilliamson-patreon in https://github.com/dependabot/dependabot-core/pull/9400
Update version_resolver to support yarn v4 by @jpandersen87 in https://github.com/dependabot/dependabot-core/pull/9405
#9508: Recreating and Handling "Name contains illegal characters" in package.json by @thavaahariharangit in https://github.com/dependabot/dependabot-core/pull/9611
don't sent dotnet telemetry by @brettfo in https://github.com/dependabot/dependabot-core/pull/9614
Add simplecov to track test coverage by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/9595
Add scorecards analysis by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/9589
#9555:sorbet error fix by @raj-meka in https://github.com/dependabot/dependabot-core/pull/9622
Bump plette from 0.4.4 to 2.0.2 in /python/helpers by @dependabot in https://github.com/dependabot/dependabot-core/pull/9630
Bump the sorbet group across 1 directory with 2 updates by @dependabot in https://github.com/dependabot/dependabot-core/pull/9632
Sign remaining images with cosign by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/9615
Enable Docker content trust by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/9620
Bump Ruby to 3.3.1 by @jurre in https://github.com/dependabot/dependabot-core/pull/9597
Bump toml-rb from 2.2.0 to 3.0.1 by @dependabot in https://github.com/dependabot/dependabot-core/pull/9580
Resolve some Sorbet errors in Terraform by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/9635
Strict type Dependabot::NpmAndYarn::FileUpdater::NpmrcBuilder by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/9637
Specify patch levels for previous Rubies by @landongrindheim in https://github.com/dependabot/dependabot-core/pull/9645
Add support for Cargo private registries by @CodingAnarchy in https://github.com/dependabot/dependabot-core/pull/8719
Allow NuGet dependencies to exist with duplicate names but different dependency types by @DavidBoike in https://github.com/dependabot/dependabot-core/pull/9642
Bump the pnpm-dependencies group in /npm_and_yarn/helpers with 2 updates by @dependabot in https://github.com/dependabot/dependabot-core/pull/9562
Bump the pnpm-dependencies group across 1 directory with 2 updates by @dependabot in https://github.com/dependabot/dependabot-core/pull/9651
Improve handling for hashing unknown packages by @jurre in https://github.com/dependabot/dependabot-core/pull/9556
Enable YJIT for even-numbered update jobs by @landongrindheim in https://github.com/dependabot/dependabot-core/pull/9663
log base commit for easier debugging by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9654
v0.255.0 by @dependabot-core-action-automation in https://github.com/dependabot/dependabot-core/pull/9649

New Contributors

@nimirium made their first contribution in https://github.com/dependabot/dependabot-core/pull/9526
@ewilliamson-patreon made their first contribution in https://github.com/dependabot/dependabot-core/pull/9400
@jpandersen87 made their first contribution in https://github.com/dependabot/dependabot-core/pull/9405
@CodingAnarchy made their first contribution in https://github.com/dependabot/dependabot-core/pull/8719
@DavidBoike made their first contribution in https://github.com/dependabot/dependabot-core/pull/9642

Full Changelog: https://github.com/dependabot/dependabot-core/compare/v0.254.0...v0.255.0

v0.254.0

2 weeks ago

What's Changed

Harry/hh170424 by @thavaahariharangit in https://github.com/dependabot/dependabot-core/pull/9514
hh170424: Fixing the sorbet type errors. by @thavaahariharangit in https://github.com/dependabot/dependabot-core/pull/9517
hh170424: Fixing the sorbet type errors. by @thavaahariharangit in https://github.com/dependabot/dependabot-core/pull/9521
Bump es5-ext from 0.10.53 to 0.10.63 in /npm_and_yarn/helpers/test/yarn/fixtures/conflicting-dependency-parser/nested by @dependabot in https://github.com/dependabot/dependabot-core/pull/9146
Bump @dependabot/yarn-lib from 1.22.19 to 1.22.22 in /npm_and_yarn/helpers in the yarn-dependencies group by @dependabot in https://github.com/dependabot/dependabot-core/pull/9531
Fix global.json being mangled by @martincostello in https://github.com/dependabot/dependabot-core/pull/9413
allow packages.config update when project file doesn't list assembly version by @brettfo in https://github.com/dependabot/dependabot-core/pull/9534
add functionality to ignore comments in .python-version file and fetch minimum Python version successfully by @mohammadalizabihitari in https://github.com/dependabot/dependabot-core/pull/9519
Bump the sorbet group with 2 updates by @dependabot in https://github.com/dependabot/dependabot-core/pull/9512
Request gzip'ed responses from rubygems API by @jurre in https://github.com/dependabot/dependabot-core/pull/9539
Bump the pipenv group in /python/helpers with 1 update by @dependabot in https://github.com/dependabot/dependabot-core/pull/9032
Bump ip and socks in /npm_and_yarn/helpers by @dependabot in https://github.com/dependabot/dependabot-core/pull/9086
Maven: Handle Malformed expressions or Invalid values present in properties section of the pom.xml file by @thavaahariharangit in https://github.com/dependabot/dependabot-core/pull/9538
Bump sorbet from 0.5.11349 to 0.5.11352 in the sorbet group by @dependabot in https://github.com/dependabot/dependabot-core/pull/9552
Bump the dev-dependencies group in /composer/helpers/v2 with 2 updates by @dependabot in https://github.com/dependabot/dependabot-core/pull/9550
Bump eslint from 8.56.0 to 9.1.0 in /npm_and_yarn/helpers by @dependabot in https://github.com/dependabot/dependabot-core/pull/9549
Replace hardcoded "sanitized-package" with the actual package name by @mohammadalizabihitari in https://github.com/dependabot/dependabot-core/pull/9563
fix ignore conditions nil error by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9560
Bump the dev-dependencies group in /updater with 10 updates by @dependabot in https://github.com/dependabot/dependabot-core/pull/9520
use multi-directory config by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9574
fix the directory name in dependabot.yml by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9578
prevent sorbet from bumping in dev-dependencies by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9584
Bump the sorbet group across 2 directories with 2 updates by @dependabot in https://github.com/dependabot/dependabot-core/pull/9586
Bump excon from 0.109.0 to 0.110.0 by @dependabot in https://github.com/dependabot/dependabot-core/pull/9583
Add multi-dir to composer by @abdulapopoola in https://github.com/dependabot/dependabot-core/pull/9588
Bump the dev-dependencies group in /npm_and_yarn/helpers with 2 updates by @dependabot in https://github.com/dependabot/dependabot-core/pull/9575
cache results of the discovery tool by @brettfo in https://github.com/dependabot/dependabot-core/pull/9566
Allow version parameter to be nilable in Dependabot::NpmAndYarn::FileParser.semver_version_for by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/9390
Update bundler to 2.5.9 by @jurre in https://github.com/dependabot/dependabot-core/pull/9596
Sign branch images with cosign by @Nishnha in https://github.com/dependabot/dependabot-core/pull/9571
Bump the sorbet group across 2 directories with 1 update by @dependabot in https://github.com/dependabot/dependabot-core/pull/9591
Ignoring the fixture files in workflow (dependency review and code QL) runs by @thavaahariharangit in https://github.com/dependabot/dependabot-core/pull/9600
fix fragment in suggested_changelog_url causing exceptions by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9604
v0.254.0 by @dependabot-core-action-automation in https://github.com/dependabot/dependabot-core/pull/9607

New Contributors

@mohammadalizabihitari made their first contribution in https://github.com/dependabot/dependabot-core/pull/9519

Full Changelog: https://github.com/dependabot/dependabot-core/compare/v0.253.0...v0.254.0

v0.253.0

3 weeks ago

What's Changed

fix smoke tests not running by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9487
fix pub build not using lockfile by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9491
asynchronously create PRs by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9485
use MSBuild-evaluated property values for TFM by @brettfo in https://github.com/dependabot/dependabot-core/pull/9417
Bump psych from 5.1.1.1 to 5.1.2 in /updater by @dependabot in https://github.com/dependabot/dependabot-core/pull/8854
Bump the npm-dependencies group in /npm_and_yarn/helpers with 3 updates by @dependabot in https://github.com/dependabot/dependabot-core/pull/9499
Bump nokogiri from 1.15.4 to 1.16.4 in /updater by @dependabot in https://github.com/dependabot/dependabot-core/pull/9479
5856: nokogiri stack level is too deep error by @thavaahariharangit in https://github.com/dependabot/dependabot-core/pull/9472
Bump the all-actions group with 2 updates by @dependabot in https://github.com/dependabot/dependabot-core/pull/9488
Bump the dev-dependencies group in /composer/helpers/v2 with 2 updates by @dependabot in https://github.com/dependabot/dependabot-core/pull/9465
fix smoke test download failing by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9510
remove implicit group behavior from the Updater by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9506
handle all instances of global.json when initializing MSBuild by @brettfo in https://github.com/dependabot/dependabot-core/pull/9511
Ensure stackprof is only required once by @jurre in https://github.com/dependabot/dependabot-core/pull/9516
Bump the common group in /python/helpers with 2 updates by @dependabot in https://github.com/dependabot/dependabot-core/pull/9393
Bump es5-ext from 0.10.53 to 0.10.63 in /npm_and_yarn/helpers/test/npm6/fixtures/conflicting-dependency-parser/deeply-nested by @dependabot in https://github.com/dependabot/dependabot-core/pull/9142
update all packages with dependencies on the target package when possible by @brettfo in https://github.com/dependabot/dependabot-core/pull/9507
v0.253.0 by @dependabot-core-action-automation in https://github.com/dependabot/dependabot-core/pull/9525

Full Changelog: https://github.com/dependabot/dependabot-core/compare/v0.252.0...v0.253.0

v0.252.0

1 month ago

What's Changed

Fix Duplicate Dependencies Showing in PR summary table by @honeyankit in https://github.com/dependabot/dependabot-core/pull/9436
automatically download the latest Go when needed by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9435
bundler: avoid reparsing same gemspec by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9458
Bump Swift version from 5.9 to 5.10 by @swiftyfinch in https://github.com/dependabot/dependabot-core/pull/9459
Update how we record Bundler versions by @landongrindheim in https://github.com/dependabot/dependabot-core/pull/9462
build(deps): bump terraform from 1.6.6 to 1.7.5 by @HorizonNet in https://github.com/dependabot/dependabot-core/pull/9013
Bump composer/composer from 2.6.5 to 2.7.2 in /composer/helpers/v2 by @dependabot in https://github.com/dependabot/dependabot-core/pull/9316
Avoid passing empty strings as versions by @bdragon in https://github.com/dependabot/dependabot-core/pull/9461
Bump library/golang from 1.22.1-bookworm to 1.22.2-bookworm in /go_modules by @dependabot in https://github.com/dependabot/dependabot-core/pull/9449
Handle more branch protection errors by @jurre in https://github.com/dependabot/dependabot-core/pull/9454
yarn: replace credentials with dummy creds by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9466
[NuGet] Add NuGetUpdater Discover command by @JoeRobich in https://github.com/dependabot/dependabot-core/pull/9267
Point smoke-test branch back at main by @Nishnha in https://github.com/dependabot/dependabot-core/pull/9473
build(deps): bump Yarn to 3.8.1 by @yeikel in https://github.com/dependabot/dependabot-core/pull/8964
Avoid passing empty strings as versions, part 2 by @bdragon in https://github.com/dependabot/dependabot-core/pull/9471
Gitlab: Properly forward author details by @ylecuyer in https://github.com/dependabot/dependabot-core/pull/9188
Switch VCR record mode to :none by @Nishnha in https://github.com/dependabot/dependabot-core/pull/4822
Treat pep-621 deps as prod if no requirement_type is specified by @jurre in https://github.com/dependabot/dependabot-core/pull/9470
Actions: allow less precise semver updates by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9474

New Contributors

@swiftyfinch made their first contribution in https://github.com/dependabot/dependabot-core/pull/9459
@ylecuyer made their first contribution in https://github.com/dependabot/dependabot-core/pull/9188

Full Changelog: https://github.com/dependabot/dependabot-core/compare/v0.251.0...v0.252.0

v0.251.0

1 month ago

What's Changed

Handle requests for review from dependabot by @landongrindheim in https://github.com/dependabot/dependabot-core/pull/9398
only report dependencies whose version numbers can be resolved by @brettfo in https://github.com/dependabot/dependabot-core/pull/9387
Table doesn't properly end for multi-directory GSU by @honeyankit in https://github.com/dependabot/dependabot-core/pull/9364
allow flamegraph gathering by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9423
remove redundant parsing of original files by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9424
Prevent comparison of Integer with String in group update creation by @bdragon in https://github.com/dependabot/dependabot-core/pull/9367
Check for nil Dependency#previous_requirements before passing to T.must by @bdragon in https://github.com/dependabot/dependabot-core/pull/9428
fix multi-version ecosystem security vulnerability failure by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9434
If only 1 dep in group is updated, use solo title by @pavera in https://github.com/dependabot/dependabot-core/pull/9416
Better support around bundler changelogs by @Nishnha in https://github.com/dependabot/dependabot-core/pull/9429
Add a note about assumptions being made by @landongrindheim in https://github.com/dependabot/dependabot-core/pull/9427
Handle force push restrictions from repository rules by @jurre in https://github.com/dependabot/dependabot-core/pull/9439
bundler: avoid repeat lockfile parsing with caching by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9443
speed up bundler updates by parsing gemspecs concurrently by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9425
Explicitly state if dependency was removed in the dependency updates table for grouped updates by @Nishnha in https://github.com/dependabot/dependabot-core/pull/9437
v0.251.0 by @dependabot-core-action-automation in https://github.com/dependabot/dependabot-core/pull/9447

Full Changelog: https://github.com/dependabot/dependabot-core/compare/v0.250.0...v0.251.0

v0.250.0

1 month ago

What's Changed

Update npm sorbet types by @ryanbrandenburg in https://github.com/dependabot/dependabot-core/pull/9343
don't fail loading build files that don't exist by @brettfo in https://github.com/dependabot/dependabot-core/pull/9385
remove unused boolean from input of tests by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9401
fix really long branch names by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9410
v0.250.0 by @dependabot-core-action-automation in https://github.com/dependabot/dependabot-core/pull/9412

Full Changelog: https://github.com/dependabot/dependabot-core/compare/v0.249.0...v0.250.0

v0.249.0

1 month ago

What's Changed

Set Style/AccessorGrouping to separated by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/9336
Start strict typing gradle by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/9346
Cover parts of go_modules code with Sorbet by @ByAgenT in https://github.com/dependabot/dependabot-core/pull/9338
Strict type remainder of NuGet by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/9337
Fix Invalid .yarnrc.yml File due to Missing Double Quotes by @honeyankit in https://github.com/dependabot/dependabot-core/pull/9322
Switch from pipfile to plette lib by @jeffwidman in https://github.com/dependabot/dependabot-core/pull/8627
@target_version can be String or Dependabot::Nuget::Version by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/9352
Bump the poetry group in /python/helpers with 2 updates by @dependabot in https://github.com/dependabot/dependabot-core/pull/9291
Support Poetry non-package mode by @onlined in https://github.com/dependabot/dependabot-core/pull/9323
add and update tests around group update failures by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9363
swap language when closing group refresh PR to be less specific by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9371
fix: parse plugin artifactItem dependencies by @yeikel in https://github.com/dependabot/dependabot-core/pull/9313
Prevent NoMethodError in group update creation by @bdragon in https://github.com/dependabot/dependabot-core/pull/9366
only report dependencies from project files that have a target framework by @brettfo in https://github.com/dependabot/dependabot-core/pull/9347
Fix CodeCommit 'fetch_repo_contents' strict type enforcement from Aws::CodeCommit::Types::GetFolderOutput to Seahorse::Client::Response by @dwc0011 in https://github.com/dependabot/dependabot-core/pull/9334
test for exclude patterns by @jakecoffman in https://github.com/dependabot/dependabot-core/pull/9377
package_version may be nil by @bdragon in https://github.com/dependabot/dependabot-core/pull/9365
don't allow global.json from repo to affect MSBuild discovery by @brettfo in https://github.com/dependabot/dependabot-core/pull/9374
Add require 'sorbet-runtime' where missing by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/9379
honor packageSourceMapping from NuGet.Config by @brettfo in https://github.com/dependabot/dependabot-core/pull/9381
Avoid including group in PR titles twice by @jurre in https://github.com/dependabot/dependabot-core/pull/9384
v0.249.0 by @dependabot-core-action-automation in https://github.com/dependabot/dependabot-core/pull/9382

New Contributors

@ByAgenT made their first contribution in https://github.com/dependabot/dependabot-core/pull/9338
@onlined made their first contribution in https://github.com/dependabot/dependabot-core/pull/9323

Full Changelog: https://github.com/dependabot/dependabot-core/compare/v0.248.0...v0.249.0

v0.248.0

1 month ago

What's Changed

Strict type Dependabot::Nuget::UpdateChecker::VersionFinder by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/9284
Type more classes by @ryanbrandenburg in https://github.com/dependabot/dependabot-core/pull/9275
Make toml an explicit requirement by @jeffwidman in https://github.com/dependabot/dependabot-core/pull/8626
Update stalebot.yml by @jonjanego in https://github.com/dependabot/dependabot-core/pull/9295
Update stalebot.yml by @jonjanego in https://github.com/dependabot/dependabot-core/pull/9298
make dependency file not found message more specific by @brettfo in https://github.com/dependabot/dependabot-core/pull/9294
Strict type some more nuget by @JamieMagee in https://github.com/dependabot/dependabot-core/pull/9293
Update stalebot.yml by @jonjanego in https://github.com/dependabot/dependabot-core/pull/9302
Bump the sorbet group with 1 update by @dependabot in https://github.com/dependabot/dependabot-core/pull/9274
Create issue-labeler.yml by @abdulapopoola in https://github.com/dependabot/dependabot-core/pull/9305
Create add-to-core-project.yml by @abdulapopoola in https://github.com/dependabot/dependabot-core/pull/9307
Update add-to-core-project.yml by @abdulapopoola in https://github.com/dependabot/dependabot-core/pull/9310
Update PNPM to 8.15.5 by @abdulapopoola in https://github.com/dependabot/dependabot-core/pull/9320
report discovered dependencies and requirement metadata by @brettfo in https://github.com/dependabot/dependabot-core/pull/9303
chore(python): target latest python versions 3.12.2, 3.11.8 by @sileht in https://github.com/dependabot/dependabot-core/pull/9328
Switch to official GitHub action for managing app tokens by @jeffwidman in https://github.com/dependabot/dependabot-core/pull/9340
v0.248.0 by @dependabot-core-action-automation in https://github.com/dependabot/dependabot-core/pull/9339

New Contributors

@sileht made their first contribution in https://github.com/dependabot/dependabot-core/pull/9328

Full Changelog: https://github.com/dependabot/dependabot-core/compare/v0.247.0...v0.248.0