1.45.0

What's Changed

• Bump axios from 1.8.3 to 1.8.4 in /extension by @dependabot in #1622
• Bump @types/node from 22.13.10 to 22.13.11 in /extension by @dependabot in #1621
• Retry DevOps API client calls on temporary failure by @rhyskoedijk in #1623
• Added advanced CodeQL workflow by @mburumaxwell in #1624
• Bump @types/semver from 7.5.8 to 7.7.0 in /extension by @dependabot in #1627
• Add workflow permissions by @mburumaxwell in #1629
• Bump @types/node from 22.13.11 to 22.13.14 in /extension by @dependabot in #1626
• Bump ts-jest from 29.2.6 to 29.3.0 in /extension in the jest group across 1 directory by @dependabot in #1625
• Update README.md by @xatlamirco in #1633
• Bump @types/node from 22.13.14 to 22.14.0 in /extension by @dependabot in #1640
• Bump azure-pipelines-task-lib from 5.0.0 to 5.1.0 in /extension by @dependabot in #1639
• Bump typescript from 5.8.2 to 5.8.3 in /extension by @dependabot in #1638
• Bump xunit.v3 from 2.0.0 to 2.0.1 in the xunit group by @dependabot in #1636
• Bump ts-jest from 29.3.0 to 29.3.1 in /extension in the jest group across 1 directory by @dependabot in #1637

New Contributors

• @xatlamirco made their first contribution in #1633

Full Changelog: 1.44.5...1.45.0

1.44.5

What's Changed

• Add dependabotCliApiUrl by @trejjam in #1618

New Contributors

• @trejjam made their first contribution in #1618

Full Changelog: 1.44.4...1.44.5

1.44.4

What's Changed

• Fix for pull requests being incorrectly abdanoned when source branch still exists or when abandonUnwantedPullRequests is disabled by @rhyskoedijk in #1615
• Bump axios from 1.8.2 to 1.8.3 in /extension by @dependabot in #1616
• Bump the microsoft group with 11 updates by @dependabot in #1617

Full Changelog: 1.44.3...1.44.4

1.44.3

What's Changed

• Log task errors immediately when raised; Do not deferring logging till end of task by @rhyskoedijk in #1612
• Fix "invalid_type" error when using pip ecosystem by @rhyskoedijk in #1613
• Abandon pull requests when the source branch has been deleted by @rhyskoedijk in #1614

Full Changelog: 1.44.2...1.44.3

1.44.2

What's Changed

• Restructure v2 task files by @mburumaxwell in #1605
• DevOps task no longer reports Failure when there is a partial success by @rhyskoedijk in #1608
• Improve DependabotDependenciesSchema and make certain fields optional by @mburumaxwell in #1610

Full Changelog: 1.44.1...1.44.2

1.44.1

What's Changed

• Update documentation by @rhyskoedijk in #1602
• Bump cross-spawn from 7.0.3 to 7.0.4 and micromatch from 4.0.7 to 4.0.8; Fix CVE-2024-21538 and CVE-2024-4067 by @rhyskoedijk in #1601
• Update experiment defaults and documentation to match GitHub Dependabot v0.300.0 by @rhyskoedijk in #1599
• No longer storing dependency list in project properties by @mburumaxwell in #1604
• Use project name over ID by @mburumaxwell in #1595

Full Changelog: 1.44.0...1.44.1

1.44.0

What's Changed

• #1596: Use zod to validate data for update_dependency_list and stored deps
• #1597: Make masking of secrets optional via System.Secrets variable (defaults to false). See examples in README files.
• #1598: Move task v2 out of preview

Full Changelog: 1.43.0...1.44.0

1.43.0

What's Changed

• #1592: Add support for proxyCertPath, passed to dependabot-cli
• #1594: Support specifying the project hence multiple projects per pipeline
• #1593: Use the project ID over the Name to allow for easier overriding.
  • If this affects you, by any chance, please raise an issue.

Full Changelog: 1.42.3...1.43.0

1.42.3

What's Changed

• support multiple origins by the same connection by @smiklos in #1580

New Contributors

• @smiklos made their first contribution in #1580

Full Changelog: 1.42.2...1.42.3

1.42.2

What's Changed

• Fix "source branch already exists" and "unknown package ecosystem" errors by @rhyskoedijk in #1578

Full Changelog: 1.42.1...1.42.2