v0.390.0

What's Changed

• Add typed requirement source API by @JamieMagee in #15705
• Reland "Cargo: handle crates locked at multiple versions" (#15638) by @p-linnane in #15668
• Preserve original absence of the bundler self-checksum on lockfile updates by @p-linnane in #15669
• Support security updates for vcpkg ports by @JamieMagee in #15676
• Beta support of PNPM 11 by @v-robaiken in #15710
• Remove enable_cooldown_default_days feature flag; make 3-day cooldown default unconditional by @v-robaiken with @Copilot in #15711
• github_actions: integrate gh-actions-lock lockfile relocking by @nodeselector in #15267
• Fix npm ignoring scoped registry issue by @AbhishekBhaskar in #15692
• Fix Gradle lockfile updates for repos with in-repo convention plugins by @thavaahariharangit in #15677
• Bump pytest from 9.0.3 to 9.1.1 in /python/helpers by @dependabot[bot] in #15687
• Feature flag clean up by @v-robaiken in #15724
• Bump pip-tools from 7.5.3 to 7.6.0 in /python/helpers in the pip-tools group across 1 directory by @dependabot[bot] in #15686
• Respect resolutions/overrides and pin Berry wildcard updates to fix spurious NoChangeError by @kbukum1 in #15701
• Revert "Respect resolutions/overrides and pin Berry wildcard updates to fix spurious NoChangeError" by @kbukum1 in #15730
• Type npm_and_yarn requirement access by @JamieMagee in #15706
• Compare full path, not file name, when excluding fetched files by @timdawborn in #15703
• Type bun requirement access by @JamieMagee in #15707
• Type bundler requirement access by @JamieMagee in #15708
• Stop retrying client errors when recording cooldown telemetry by @JamieMagee in #15737
• Bump cython from 3.2.4 to 3.2.9 in /python/helpers in the common group across 1 directory by @dependabot[bot] in #15685
• Stop pinning the resolved js-yaml version in sub-dependency specs by @JamieMagee in #15744
• Preserve .NET SDK prerelease version strings by @theinfosecguy in #15746
• Bump library/rust from 1.97.0-bookworm to 1.97.1-bookworm in /cargo by @dependabot[bot] in #15682
• Bump the prod-dependencies group across 2 directories with 22 updates by @dependabot[bot] in #15605
• v0.390.0 by @dependabot-core-action-automation[bot] in #15752

New Contributors

• @v-robaiken made their first contribution in #15710
• @nodeselector made their first contribution in #15267
• @timdawborn made their first contribution in #15703
• @theinfosecguy made their first contribution in #15746

Full Changelog: v0.389.0...v0.390.0