All pull requests

Pull requests

• docker: Allow suffix to start with a number

  L: docker
  #15626·JonasAlfredsson opened Jul 20, 2026Contributor·4 of 5 tasks·

  ·
  7

• cargo: update the root package's own dependencies in a workspace root manifest

  L: rust:cargo
  #15622·nh13 opened Jul 19, 2026·5 tasks done·

  ·
  1

• fix(npm_and_yarn): ignore non-blocking advisory ranges in vulnerability auditor

  L: javascript
  #15611·v-thavaahariharangit opened Jul 17, 2026Contributor·5 tasks done·

  ·
  55

• Fix grouped security updates not respecting @dependabot ignore commands

  #15601·v-thavaahariharangit with CopilotAI opened Jul 16, 2026·5 tasks done·

  ·
  

• Fix cooldown filtering for Rust toolchains

  L: rust:rust-toolchain
  #15596·eitsupi opened Jul 16, 2026·3 tasks done·

  ·
  8

  

• Add support to bazel for BuildBuddy

  #15586·jonstacks opened Jul 15, 2026·5 tasks done·

  ·
  9

• Swift: support updating revision: (commit SHA) pinned dependencies

  L: swift
  #15579·frugoman opened Jul 14, 2026·

  ·
  1

  17

• fix(github-actions): update untagged SHA-pinned actions to branch head

  L: github:actions
  #15578·lorengordon opened Jul 14, 2026Contributor·5 tasks done·

  ·
  1

  2

• Use shared CooldownCalculation window check in helm

  L: helm
  #15538·robaiken opened Jul 8, 2026Contributor·5 tasks done·

  ·
  1

• Handler for ERR_PNPM_STRICT_MIN_RELEASE_AGE_REQUIRES_SAVE error type

  L: javascript
  #15532·v-sachin-sandhu opened Jul 8, 2026Contributor·5 tasks done·

  ·
  5

  

• Add nub package manager ecosystem (nub.lock)

  L: javascript
  #15524·colinhacks opened Jul 7, 2026·5 tasks done·

  ·
  84

• github_actions: apply cooldown using the proposed commit's date for commit-pinned updates

  L: github:actions
  #15518·robaiken with CopilotAI opened Jul 7, 2026·5 tasks done·

  ·
  1

  4

  

• Fix: replaces-base credential incorrectly applied when Gemfile has explicit global source

  #15509·v-sachin-sandhu with CopilotAI opened Jul 6, 2026·5 tasks·

  ·
  

• Fix combined_version to prefer higher version when merging duplicate dependencies

  L: github:actionsL: java:gradleL: java:mavenL: javascriptL: python
  #15507·v-thavaahariharangit with CopilotAI opened Jul 6, 2026·3 tasks done·

  ·
  9

  

• pre-commit: track raw SHAs for bare (unfrozen) SHA pins

  #15506·robaiken opened Jul 6, 2026Contributor·

  ·
  1

• Use shared git-tag cooldown in github_actions

  L: github:actions
  #15488·robaiken opened Jul 3, 2026Contributor·5 tasks done·

  ·
  1

• Use shared git-tag cooldown in pre_commit

  #15487·robaiken opened Jul 3, 2026Contributor·5 tasks done·

  ·
  2

• Bump sigstore and @npmcli/arborist in /bun/helpers

  dependenciesjavascriptL: javascript
  #15479·dependabot[bot] opened Jul 2, 2026Bot·

  ·

• Fail open when git-tag cooldown date fetch errors

  #15475·robaiken opened Jul 1, 2026Contributor·5 tasks done·

  ·
  3

• Use shared git-tag cooldown in opentofu

  L: opentofu
  #15471·robaiken opened Jul 1, 2026Contributor·5 tasks done·

  ·
  1

  

• Fix grouped existing PR number parsing from job payload - "Detected existing pull request # "

  #15456·felickz opened Jun 30, 2026·4 of 5 tasks·

  ·
  4

• Bump @sigstore/core and @npmcli/arborist in /bun/helpers

  dependenciesjavascriptL: javascript
  #15454·dependabot[bot] opened Jun 30, 2026Bot·

  ·
  1

• Fix pre-commit SHA updates to occur regardless of frozen comment presence

  #15450·v-thavaahariharangit with CopilotAI opened Jun 30, 2026·5 tasks done·

  ·
  11

  

• Add devbox ecosystem support

  #15440·andoniaf opened Jun 29, 2026·5 tasks done·

  ·
  1

• Add per-dependency prerelease opt-in for NuGet

  L: dotnet:nuget
  #15393·atehrani-statrad opened Jun 23, 2026·5 tasks·

  ·
  4