v0.221.0

What's Changed

• v0.220.0 by @dependabot-core-action-automation in #7428
• Target latest Python versions - 3.11.4, 3.10.12, 3.9.17, 3.8.17, 3.7.17 by @phillipuniverse in #7412
• exclude patterns for grouped updates by @Nishnha in #7402
• Add a newline after the group intro by @Nishnha in #7401
• Use ruby:3.1.4-bullseye by @Nishnha in #7442
• Fix edge case when updating Actions with mixed versions by @deivid-rodriguez in #7410
• [Grouped Updates] Cleaner management of the update dependency list by @brrygrdn in #7414
• [Grouped Updates] The VendorUpdater class watermarks DependencyFile objects it creates by @brrygrdn in #7433
• [Updater] Extract creation of new group Pull Requests into a discrete class by @brrygrdn in #7354
• [Updater] Avoid mis-representing a Dependency Group as a Dependency in error handling by @brrygrdn in #7359
• build(deps): bump Terraform to 1.5.0 by @HorizonNet in #7439
• Remove pnpm experiment flag by @mctofu in #7453
• Roll pub. Use dart 3 for running helpers. by @sigurdm in #7417
• Look in parent directories for nuget.config files by @jmarolf in #7342
• Remove persistent_gems_after_clean workaround by @jurre in #7296
• Add DEPENDABOT environment variable for users by @shu-mutou in #7407
• Bump debug from 1.7.2 to 1.8.0 in /updater by @dependabot in #7316
• Add workspace experiment to maintain state between updates and capture success/failure of each by @bdragon in #6693
• Add missing final EOL by @deivid-rodriguez in #7456
• Add sanitization to BranchNamer::DependencyGroupStrategy by @TomNaessens in #7452
• Remove duplicated ENV by @deivid-rodriguez in #7455
• Instantiate less dependencies by @deivid-rodriguez in #7459
• Fix actions updates when inconsistent casing is used by @deivid-rodriguez in #7462
• Revert "Pin CodeQL version (#7275)" by @deivid-rodriguez in #7465
• Update Bundler to 2.4.14 by @deivid-rodriguez in #7429
• Configure git with ENV by @deivid-rodriguez in #7467
• Update ecosystem READMEs with recommended setup by @deivid-rodriguez in #7472
• Fix flaky spec by @deivid-rodriguez in #7474
• NPM: fix GitHub registry not working when path is specified by @jakecoffman in #7468
• Remove simplecov by @deivid-rodriguez in #7473
• [Grouped Updates] Avoid passing non-manifest file changes between group updates by @brrygrdn in #7404
• build(deps): bump PNPM from 8.3.1 to 8.6.4 by @yeikel in #7330
• Add support for Directory.Packages.props file as entrypoint by @TobiasLaving in #7086
• Add smoke tests for go, npm and bundler+vendoring by @brrygrdn in #7486
• Use table summary for large groups of dependencies by @bdragon in #7463
• build(deps): bump Terraform from 1.5.0 to 1.5.2 by @yeikel in #7493
• Stop recording the ecosystem param by @jeffwidman in #7492
• Only record ecosystem versions when flag set by @jeffwidman in #7516
• Update the hex.pm/orgs/dependabot token by @jeffwidman in #7532
• Stop exposing real account tokens in plaintext by @jeffwidman in #7533
• Switch to using the new record_ecosystem_versions endpoint. by @jeffwidman in #7517
• Fix CodeQL warning by @deivid-rodriguez in #7531
• Use the new inputs API by @jeffwidman in #7550
• v0.221.0 by @dependabot-core-action-automation in #7554

New Contributors

• @jmarolf made their first contribution in #7342
• @shu-mutou made their first contribution in #7407
• @TobiasLaving made their first contribution in #7086

Full Changelog: v0.220.0...v0.221.0