v1.2.2

Update dependabot-core to v0.215.0 (merged with upstream at 2013-01-11)

v1.2.1

• Schedules a reminder to open security update issues if they have not been updated for two weeks
• Schedules a reminder to open merge request if they have not been updated for two weeks (including non-dependabot)

v1.2.0

• Breaking change: Use IGNORE to ignore specific versions instead of IGNORE_VERSION
• More compact logs on dependency checks
• Approximate match for ignored dependency names
• Add prefix to vulnerable dependencies commits
• Submit an issue for vulnerable dependencies that can not be updated
• Refactor to keep a cleaner main script

v1.1.0

• Dry run mode (DRY_RUN)
• Add more log info
• Exclusion of specified dependencies (IGNORE)
• Exclusion of specified ranges of versions (IGNORE_VERSIONS)
• Customizations for docker environment
• Add label SECURITY-UPDATE to PRs for vulnerable dependencies