dependencies

Describe the bug

When using an image URL like https://bundlephobia.com/api/stats-image?name=convert&version=1.0.1&wide=true for a version that isn't published the image returns a placeholder, but the placeholder gets cached. After the version is published the placeholder image stays cached.

To Reproduce

Visit an image URL for a version that didn't exist at image generation time.

What would you like Renovate to be able to do?

Respect pinned versions and don't update them.
Here is a discussion where it all started: renovatebot/renovate#10970

In case of such setup:

  "devDependencies": {
    "packageA": "7.14.8",
    "packageB": "^7.14.5"
}

We would like renovate to respect pinned version of packageA and don't up

Is your feature request related to a problem? Please describe.

Not related to a problem

Describe the solution you'd like

We opened #808 to discuss how we might use GitHub actions. At the time, this repo didn't have actions enabled. Now that it does, we should try them out for some of the things in that thread.

_Edit from @arschles - we have focused this issue to just the twitte

Description

These files need some review as there are some weird licenses detected:

• https://raw.githubusercontent.com/twbs/bootstrap/v3.3.6/docs/dist/css/bootstrap.min.css.map
• https://raw.githubusercontent.com/twbs/bootstrap/v3.3.6/dist/css/bootstrap-theme.min.css.map
• https://raw.githubusercontent.com/eclipse/org.aspectj/V1_8_7/weaver/src/aspectj_1_5_0.dtd
• https://raw.githubuserco

Scalafix commits are currently attributed in the Git history to the Scala Steward user although it only did the easy part of running the rule. The hard part of writing the rule is done by someone else who's currently not attributed in any way. Wouldn't it be nice if we append Co-authored-by attributions to the Scalafix commit if the rule author(s) opts into i

It's very common for people to create a venv or .venv folder, using virtualenv or python -m venv, alongside the requirements.txt file for Python

    'venv requirements.txt'       # virtualenv (python)
    '.venv requirements.txt'      # virtualenv (python)

If CPM_SOURCE_CACHE is set to an empty string, CPM fails with file DOWNLOAD error: cannot create directory '/cpm' - Specify file by full.

Description
This task is contingent on merging task #995 into main. Now that we have a list of tests to invoke, we will implement invoking them.

To Do

1. Modify the file ci/release_tests.py to invoke each of the tests in the list tests.

import subprocess  # nosec

tests = [...] <-- changes to be included in #995 

for t in tests:
    subprocess.check_output(t, shell=Tr

The code at

https://github.com/oss-review-toolkit/ort/blob/fd1b62a799523b55871cd04001ddfe1e6262da0f/analyzer/src/main/kotlin/managers/Stack.kt#L113-L140

can be simplified now that Stack 2.3.1 supports ls dependencies json.

Package and Environment Details (include every applicable attribute)

• Package Name/Version: openssl/1.1.1d
• Operating System+version: Linux CentOS 7.7.1908
• Compiler+version: GCC 7.3.1 (devtoolset-7)
• Docker image: **centos:7.7.190