@paklo/core 0.5.0 → 0.6.0

package/dist/{index-Djd8_Qnk.d.mts → index-CcnWCDDV.d.mts}

@@ -1,5 +1,5 @@
-import { p as SecurityVulnerability } from "./index-B5hYujx0.mjs";
-import { z } from "zod/v4";
+import { p as SecurityVulnerability } from "./index-Z81896Ma.mjs";
+import { z } from "zod";
 import { Hono } from "hono";
 
 //#region src/dependabot/author.d.ts
@@ -113,11 +113,11 @@ type DependabotGroup = z.infer<typeof DependabotGroupSchema>;
 declare const DependabotAllowConditionSchema: z.ZodObject<{
   'dependency-name': z.ZodOptional<z.ZodString>;
   'dependency-type': z.ZodOptional<z.ZodEnum<{
+    all: "all";
     development: "development";
     production: "production";
     direct: "direct";
     indirect: "indirect";
-    all: "all";
   }>>;
   'update-type': z.ZodOptional<z.ZodEnum<{
     all: "all";
@@ -209,6 +209,8 @@ declare const PackageEcosystemSchema: z.ZodEnum<{
   vcpkg: "vcpkg";
   helm: "helm";
   julia: "julia";
+  bazel: "bazel";
+  opentofu: "opentofu";
   "docker-compose": "docker-compose";
   "dotnet-sdk": "dotnet-sdk";
   mix: "mix";
@@ -225,10 +227,10 @@ declare const PackageEcosystemSchema: z.ZodEnum<{
 }>;
 type PackageEcosystem = z.infer<typeof PackageEcosystemSchema>;
 declare const VersioningStrategySchema: z.ZodEnum<{
+  "lockfile-only": "lockfile-only";
   auto: "auto";
   increase: "increase";
   "increase-if-necessary": "increase-if-necessary";
-  "lockfile-only": "lockfile-only";
   widen: "widen";
 }>;
 type VersioningStrategy = z.infer<typeof VersioningStrategySchema>;
@@ -252,6 +254,8 @@ declare const DependabotUpdateSchema: z.ZodPipe<z.ZodObject<{
     vcpkg: "vcpkg";
     helm: "helm";
     julia: "julia";
+    bazel: "bazel";
+    opentofu: "opentofu";
     "docker-compose": "docker-compose";
     "dotnet-sdk": "dotnet-sdk";
     mix: "mix";
@@ -272,11 +276,11 @@ declare const DependabotUpdateSchema: z.ZodPipe<z.ZodObject<{
   allow: z.ZodOptional<z.ZodArray<z.ZodObject<{
     'dependency-name': z.ZodOptional<z.ZodString>;
     'dependency-type': z.ZodOptional<z.ZodEnum<{
+      all: "all";
       development: "development";
       production: "production";
       direct: "direct";
       indirect: "indirect";
-      all: "all";
     }>>;
     'update-type': z.ZodOptional<z.ZodEnum<{
       all: "all";
@@ -374,22 +378,22 @@ declare const DependabotUpdateSchema: z.ZodPipe<z.ZodObject<{
   'target-branch': z.ZodOptional<z.ZodString>;
   vendor: z.ZodOptional<z.ZodBoolean>;
   'versioning-strategy': z.ZodOptional<z.ZodEnum<{
+    "lockfile-only": "lockfile-only";
     auto: "auto";
     increase: "increase";
     "increase-if-necessary": "increase-if-necessary";
-    "lockfile-only": "lockfile-only";
     widen: "widen";
   }>>;
   patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
   'multi-ecosystem-group': z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodTransform<{
-  'package-ecosystem': "bundler" | "cargo" | "composer" | "pub" | "docker" | "elm" | "gradle" | "maven" | "nuget" | "pip" | "swift" | "terraform" | "devcontainers" | "bun" | "uv" | "vcpkg" | "helm" | "julia" | "docker-compose" | "dotnet-sdk" | "mix" | "gitsubmodule" | "github-actions" | "gomod" | "npm" | "pip-compile" | "pipenv" | "pnpm" | "poetry" | "rust-toolchain" | "yarn";
+  'package-ecosystem': "bundler" | "cargo" | "composer" | "pub" | "docker" | "elm" | "gradle" | "maven" | "nuget" | "pip" | "swift" | "terraform" | "devcontainers" | "bun" | "uv" | "vcpkg" | "helm" | "julia" | "bazel" | "opentofu" | "docker-compose" | "dotnet-sdk" | "mix" | "gitsubmodule" | "github-actions" | "gomod" | "npm" | "pip-compile" | "pipenv" | "pnpm" | "poetry" | "rust-toolchain" | "yarn";
   directory?: string | undefined;
   directories?: string[] | undefined;
   'exclude-paths'?: string[] | undefined;
   allow?: {
     'dependency-name'?: string | undefined;
-    'dependency-type'?: "development" | "production" | "direct" | "indirect" | "all" | undefined;
+    'dependency-type'?: "all" | "development" | "production" | "direct" | "indirect" | undefined;
     'update-type'?: "all" | "security" | undefined;
   }[] | undefined;
   assignees?: string[] | undefined;
@@ -437,17 +441,17 @@ declare const DependabotUpdateSchema: z.ZodPipe<z.ZodObject<{
   } | undefined;
   'target-branch'?: string | undefined;
   vendor?: boolean | undefined;
-  'versioning-strategy'?: "auto" | "increase" | "increase-if-necessary" | "lockfile-only" | "widen" | undefined;
+  'versioning-strategy'?: "lockfile-only" | "auto" | "increase" | "increase-if-necessary" | "widen" | undefined;
   patterns?: string[] | undefined;
   'multi-ecosystem-group'?: string | undefined;
 }, {
-  'package-ecosystem': "bundler" | "cargo" | "composer" | "pub" | "docker" | "elm" | "gradle" | "maven" | "nuget" | "pip" | "swift" | "terraform" | "devcontainers" | "bun" | "uv" | "vcpkg" | "helm" | "julia" | "docker-compose" | "dotnet-sdk" | "mix" | "gitsubmodule" | "github-actions" | "gomod" | "npm" | "pip-compile" | "pipenv" | "pnpm" | "poetry" | "rust-toolchain" | "yarn";
+  'package-ecosystem': "bundler" | "cargo" | "composer" | "pub" | "docker" | "elm" | "gradle" | "maven" | "nuget" | "pip" | "swift" | "terraform" | "devcontainers" | "bun" | "uv" | "vcpkg" | "helm" | "julia" | "bazel" | "opentofu" | "docker-compose" | "dotnet-sdk" | "mix" | "gitsubmodule" | "github-actions" | "gomod" | "npm" | "pip-compile" | "pipenv" | "pnpm" | "poetry" | "rust-toolchain" | "yarn";
   directory?: string | undefined;
   directories?: string[] | undefined;
   'exclude-paths'?: string[] | undefined;
   allow?: {
     'dependency-name'?: string | undefined;
-    'dependency-type'?: "development" | "production" | "direct" | "indirect" | "all" | undefined;
+    'dependency-type'?: "all" | "development" | "production" | "direct" | "indirect" | undefined;
     'update-type'?: "all" | "security" | undefined;
   }[] | undefined;
   assignees?: string[] | undefined;
@@ -495,7 +499,7 @@ declare const DependabotUpdateSchema: z.ZodPipe<z.ZodObject<{
   } | undefined;
   'target-branch'?: string | undefined;
   vendor?: boolean | undefined;
-  'versioning-strategy'?: "auto" | "increase" | "increase-if-necessary" | "lockfile-only" | "widen" | undefined;
+  'versioning-strategy'?: "lockfile-only" | "auto" | "increase" | "increase-if-necessary" | "widen" | undefined;
   patterns?: string[] | undefined;
   'multi-ecosystem-group'?: string | undefined;
 }>>;
@@ -625,6 +629,8 @@ declare const DependabotConfigSchema: z.ZodPipe<z.ZodObject<{
       vcpkg: "vcpkg";
       helm: "helm";
       julia: "julia";
+      bazel: "bazel";
+      opentofu: "opentofu";
       "docker-compose": "docker-compose";
       "dotnet-sdk": "dotnet-sdk";
       mix: "mix";
@@ -645,11 +651,11 @@ declare const DependabotConfigSchema: z.ZodPipe<z.ZodObject<{
     allow: z.ZodOptional<z.ZodArray<z.ZodObject<{
       'dependency-name': z.ZodOptional<z.ZodString>;
       'dependency-type': z.ZodOptional<z.ZodEnum<{
+        all: "all";
         development: "development";
         production: "production";
         direct: "direct";
         indirect: "indirect";
-        all: "all";
       }>>;
       'update-type': z.ZodOptional<z.ZodEnum<{
         all: "all";
@@ -747,22 +753,22 @@ declare const DependabotConfigSchema: z.ZodPipe<z.ZodObject<{
     'target-branch': z.ZodOptional<z.ZodString>;
     vendor: z.ZodOptional<z.ZodBoolean>;
     'versioning-strategy': z.ZodOptional<z.ZodEnum<{
+      "lockfile-only": "lockfile-only";
       auto: "auto";
       increase: "increase";
       "increase-if-necessary": "increase-if-necessary";
-      "lockfile-only": "lockfile-only";
       widen: "widen";
     }>>;
     patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
     'multi-ecosystem-group': z.ZodOptional<z.ZodString>;
   }, z.core.$strip>, z.ZodTransform<{
-    'package-ecosystem': "bundler" | "cargo" | "composer" | "pub" | "docker" | "elm" | "gradle" | "maven" | "nuget" | "pip" | "swift" | "terraform" | "devcontainers" | "bun" | "uv" | "vcpkg" | "helm" | "julia" | "docker-compose" | "dotnet-sdk" | "mix" | "gitsubmodule" | "github-actions" | "gomod" | "npm" | "pip-compile" | "pipenv" | "pnpm" | "poetry" | "rust-toolchain" | "yarn";
+    'package-ecosystem': "bundler" | "cargo" | "composer" | "pub" | "docker" | "elm" | "gradle" | "maven" | "nuget" | "pip" | "swift" | "terraform" | "devcontainers" | "bun" | "uv" | "vcpkg" | "helm" | "julia" | "bazel" | "opentofu" | "docker-compose" | "dotnet-sdk" | "mix" | "gitsubmodule" | "github-actions" | "gomod" | "npm" | "pip-compile" | "pipenv" | "pnpm" | "poetry" | "rust-toolchain" | "yarn";
     directory?: string | undefined;
     directories?: string[] | undefined;
     'exclude-paths'?: string[] | undefined;
     allow?: {
       'dependency-name'?: string | undefined;
-      'dependency-type'?: "development" | "production" | "direct" | "indirect" | "all" | undefined;
+      'dependency-type'?: "all" | "development" | "production" | "direct" | "indirect" | undefined;
       'update-type'?: "all" | "security" | undefined;
     }[] | undefined;
     assignees?: string[] | undefined;
@@ -810,17 +816,17 @@ declare const DependabotConfigSchema: z.ZodPipe<z.ZodObject<{
     } | undefined;
     'target-branch'?: string | undefined;
     vendor?: boolean | undefined;
-    'versioning-strategy'?: "auto" | "increase" | "increase-if-necessary" | "lockfile-only" | "widen" | undefined;
+    'versioning-strategy'?: "lockfile-only" | "auto" | "increase" | "increase-if-necessary" | "widen" | undefined;
     patterns?: string[] | undefined;
     'multi-ecosystem-group'?: string | undefined;
   }, {
-    'package-ecosystem': "bundler" | "cargo" | "composer" | "pub" | "docker" | "elm" | "gradle" | "maven" | "nuget" | "pip" | "swift" | "terraform" | "devcontainers" | "bun" | "uv" | "vcpkg" | "helm" | "julia" | "docker-compose" | "dotnet-sdk" | "mix" | "gitsubmodule" | "github-actions" | "gomod" | "npm" | "pip-compile" | "pipenv" | "pnpm" | "poetry" | "rust-toolchain" | "yarn";
+    'package-ecosystem': "bundler" | "cargo" | "composer" | "pub" | "docker" | "elm" | "gradle" | "maven" | "nuget" | "pip" | "swift" | "terraform" | "devcontainers" | "bun" | "uv" | "vcpkg" | "helm" | "julia" | "bazel" | "opentofu" | "docker-compose" | "dotnet-sdk" | "mix" | "gitsubmodule" | "github-actions" | "gomod" | "npm" | "pip-compile" | "pipenv" | "pnpm" | "poetry" | "rust-toolchain" | "yarn";
     directory?: string | undefined;
     directories?: string[] | undefined;
     'exclude-paths'?: string[] | undefined;
     allow?: {
       'dependency-name'?: string | undefined;
-      'dependency-type'?: "development" | "production" | "direct" | "indirect" | "all" | undefined;
+      'dependency-type'?: "all" | "development" | "production" | "direct" | "indirect" | undefined;
       'update-type'?: "all" | "security" | undefined;
     }[] | undefined;
     assignees?: string[] | undefined;
@@ -868,7 +874,7 @@ declare const DependabotConfigSchema: z.ZodPipe<z.ZodObject<{
     } | undefined;
     'target-branch'?: string | undefined;
     vendor?: boolean | undefined;
-    'versioning-strategy'?: "auto" | "increase" | "increase-if-necessary" | "lockfile-only" | "widen" | undefined;
+    'versioning-strategy'?: "lockfile-only" | "auto" | "increase" | "increase-if-necessary" | "widen" | undefined;
     patterns?: string[] | undefined;
     'multi-ecosystem-group'?: string | undefined;
   }>>>;
@@ -944,13 +950,13 @@ declare const DependabotConfigSchema: z.ZodPipe<z.ZodObject<{
 }, z.core.$strip>, z.ZodTransform<{
   version: number;
   updates: {
-    'package-ecosystem': "bundler" | "cargo" | "composer" | "pub" | "docker" | "elm" | "gradle" | "maven" | "nuget" | "pip" | "swift" | "terraform" | "devcontainers" | "bun" | "uv" | "vcpkg" | "helm" | "julia" | "docker-compose" | "dotnet-sdk" | "mix" | "gitsubmodule" | "github-actions" | "gomod" | "npm" | "pip-compile" | "pipenv" | "pnpm" | "poetry" | "rust-toolchain" | "yarn";
+    'package-ecosystem': "bundler" | "cargo" | "composer" | "pub" | "docker" | "elm" | "gradle" | "maven" | "nuget" | "pip" | "swift" | "terraform" | "devcontainers" | "bun" | "uv" | "vcpkg" | "helm" | "julia" | "bazel" | "opentofu" | "docker-compose" | "dotnet-sdk" | "mix" | "gitsubmodule" | "github-actions" | "gomod" | "npm" | "pip-compile" | "pipenv" | "pnpm" | "poetry" | "rust-toolchain" | "yarn";
     directory?: string | undefined;
     directories?: string[] | undefined;
     'exclude-paths'?: string[] | undefined;
     allow?: {
       'dependency-name'?: string | undefined;
-      'dependency-type'?: "development" | "production" | "direct" | "indirect" | "all" | undefined;
+      'dependency-type'?: "all" | "development" | "production" | "direct" | "indirect" | undefined;
       'update-type'?: "all" | "security" | undefined;
     }[] | undefined;
     assignees?: string[] | undefined;
@@ -998,7 +1004,7 @@ declare const DependabotConfigSchema: z.ZodPipe<z.ZodObject<{
     } | undefined;
     'target-branch'?: string | undefined;
     vendor?: boolean | undefined;
-    'versioning-strategy'?: "auto" | "increase" | "increase-if-necessary" | "lockfile-only" | "widen" | undefined;
+    'versioning-strategy'?: "lockfile-only" | "auto" | "increase" | "increase-if-necessary" | "widen" | undefined;
     patterns?: string[] | undefined;
     'multi-ecosystem-group'?: string | undefined;
   }[];
@@ -1045,13 +1051,13 @@ declare const DependabotConfigSchema: z.ZodPipe<z.ZodObject<{
 }, {
   version: number;
   updates: {
-    'package-ecosystem': "bundler" | "cargo" | "composer" | "pub" | "docker" | "elm" | "gradle" | "maven" | "nuget" | "pip" | "swift" | "terraform" | "devcontainers" | "bun" | "uv" | "vcpkg" | "helm" | "julia" | "docker-compose" | "dotnet-sdk" | "mix" | "gitsubmodule" | "github-actions" | "gomod" | "npm" | "pip-compile" | "pipenv" | "pnpm" | "poetry" | "rust-toolchain" | "yarn";
+    'package-ecosystem': "bundler" | "cargo" | "composer" | "pub" | "docker" | "elm" | "gradle" | "maven" | "nuget" | "pip" | "swift" | "terraform" | "devcontainers" | "bun" | "uv" | "vcpkg" | "helm" | "julia" | "bazel" | "opentofu" | "docker-compose" | "dotnet-sdk" | "mix" | "gitsubmodule" | "github-actions" | "gomod" | "npm" | "pip-compile" | "pipenv" | "pnpm" | "poetry" | "rust-toolchain" | "yarn";
     directory?: string | undefined;
     directories?: string[] | undefined;
     'exclude-paths'?: string[] | undefined;
     allow?: {
       'dependency-name'?: string | undefined;
-      'dependency-type'?: "development" | "production" | "direct" | "indirect" | "all" | undefined;
+      'dependency-type'?: "all" | "development" | "production" | "direct" | "indirect" | undefined;
       'update-type'?: "all" | "security" | undefined;
     }[] | undefined;
     assignees?: string[] | undefined;
@@ -1099,7 +1105,7 @@ declare const DependabotConfigSchema: z.ZodPipe<z.ZodObject<{
     } | undefined;
     'target-branch'?: string | undefined;
     vendor?: boolean | undefined;
-    'versioning-strategy'?: "auto" | "increase" | "increase-if-necessary" | "lockfile-only" | "widen" | undefined;
+    'versioning-strategy'?: "lockfile-only" | "auto" | "increase" | "increase-if-necessary" | "widen" | undefined;
     patterns?: string[] | undefined;
     'multi-ecosystem-group'?: string | undefined;
   }[];
@@ -1185,11 +1191,15 @@ declare const DependabotProxyConfigSchema: z.ZodObject<{
 type DependabotProxyConfig = z.infer<typeof DependabotProxyConfigSchema>;
 declare const DependabotSourceProviderSchema: z.ZodEnum<{
   azure: "azure";
+  gitlab: "gitlab";
+  bitbucket: "bitbucket";
 }>;
 type DependabotSourceProvider = z.infer<typeof DependabotSourceProviderSchema>;
 declare const DependabotSourceSchema: z.ZodObject<{
   provider: z.ZodEnum<{
     azure: "azure";
+    gitlab: "gitlab";
+    bitbucket: "bitbucket";
   }>;
   repo: z.ZodString;
   directory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -1332,6 +1342,8 @@ declare const DependabotPackageManagerSchema: z.ZodEnum<{
   vcpkg: "vcpkg";
   helm: "helm";
   julia: "julia";
+  bazel: "bazel";
+  opentofu: "opentofu";
 }>;
 type DependabotPackageManager = z.infer<typeof DependabotPackageManagerSchema>;
 declare const DependabotCommandSchema: z.ZodEnum<{
@@ -1341,7 +1353,7 @@ declare const DependabotCommandSchema: z.ZodEnum<{
 }>;
 type DependabotCommand = z.infer<typeof DependabotCommandSchema>;
 declare const DependabotJobConfigSchema: z.ZodObject<{
-  id: z.ZodOptional<z.ZodNumber>;
+  id: z.ZodString;
   command: z.ZodOptional<z.ZodEnum<{
     version: "version";
     graph: "graph";
@@ -1374,6 +1386,8 @@ declare const DependabotJobConfigSchema: z.ZodObject<{
     vcpkg: "vcpkg";
     helm: "helm";
     julia: "julia";
+    bazel: "bazel";
+    opentofu: "opentofu";
   }>;
   'allowed-updates': z.ZodArray<z.ZodObject<{
     'dependency-name': z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -1431,6 +1445,8 @@ declare const DependabotJobConfigSchema: z.ZodObject<{
   source: z.ZodObject<{
     provider: z.ZodEnum<{
       azure: "azure";
+      gitlab: "gitlab";
+      bitbucket: "bitbucket";
     }>;
     repo: z.ZodString;
     directory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -1468,7 +1484,7 @@ declare const DependabotJobConfigSchema: z.ZodObject<{
 type DependabotJobConfig = z.infer<typeof DependabotJobConfigSchema>;
 declare const DependabotJobFileSchema: z.ZodObject<{
   job: z.ZodObject<{
-    id: z.ZodOptional<z.ZodNumber>;
+    id: z.ZodString;
     command: z.ZodOptional<z.ZodEnum<{
       version: "version";
       graph: "graph";
@@ -1501,6 +1517,8 @@ declare const DependabotJobFileSchema: z.ZodObject<{
       vcpkg: "vcpkg";
       helm: "helm";
       julia: "julia";
+      bazel: "bazel";
+      opentofu: "opentofu";
     }>;
     'allowed-updates': z.ZodArray<z.ZodObject<{
       'dependency-name': z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -1558,6 +1576,8 @@ declare const DependabotJobFileSchema: z.ZodObject<{
     source: z.ZodObject<{
       provider: z.ZodEnum<{
         azure: "azure";
+        gitlab: "gitlab";
+        bitbucket: "bitbucket";
       }>;
       repo: z.ZodString;
       directory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -1610,6 +1630,62 @@ type FileUpdaterInput = FetchedFiles & {
 declare function getBranchNameForUpdate(packageEcosystem: PackageEcosystem, targetBranchName: string | undefined, directory: string | undefined, dependencyGroupName: string | undefined, dependencies: DependabotExistingPR[], separator?: string): string;
 declare function sanitizeRef(refParts: (string | undefined)[], separator: string): string;
 //#endregion
+//#region src/dependabot/directory-key.d.ts
+/**
+ * Options for creating a directory key that supports both naming conventions:
+ * - `ecosystem` (standard format)
+ * - `package-ecosystem` (alternative format for compatibility)
+ *
+ * Either a single `directory` or multiple `directories` can be specified.
+ */
+type MakeDirectoryKeyOptions = {
+  /** The package ecosystem (e.g., 'npm', 'pip', 'bundler') */
+  ecosystem: string;
+  /** Single directory path (optional if directories is provided) */
+  directory?: string | null;
+  /** Multiple directory paths (optional if directory is provided) */
+  directories?: string[];
+} | {
+  /** The package ecosystem using alternative naming convention */
+  'package-ecosystem': string;
+  /** Single directory path (optional if directories is provided) */
+  directory?: string | null;
+  /** Multiple directory paths (optional if directory is provided) */
+  directories?: string[];
+};
+/**
+ * Creates a unique directory key by combining the ecosystem and directory information.
+ *
+ * The key format is: `{ecosystem}::{directory_info}`
+ * - For single directory: `npm::/src/frontend`
+ * - For multiple directories: `npm::/src/frontend,/src/backend`
+ *
+ * @param options - Configuration object containing ecosystem and directory information
+ * @returns A unique string key in the format `{ecosystem}::{directories}`
+ *
+ * @example
+ * ```typescript
+ * // Single directory
+ * const key1 = makeDirectoryKey({ ecosystem: 'npm', directory: '/src' });
+ * // Returns: "npm::/src"
+ *
+ * // Multiple directories
+ * const key2 = makeDirectoryKey({
+ *   ecosystem: 'pip',
+ *   directories: ['/backend', '/scripts']
+ * });
+ * // Returns: "pip::/backend,/scripts"
+ *
+ * // Using alternative naming convention
+ * const key3 = makeDirectoryKey({
+ *   'package-ecosystem': 'bundler',
+ *   directory: '/app'
+ * });
+ * // Returns: "bundler::/app"
+ * ```
+ */
+declare function makeDirectoryKey(options: MakeDirectoryKeyOptions): string;
+//#endregion
 //#region src/dependabot/experiments.d.ts
 declare const DEFAULT_EXPERIMENTS: DependabotExperiments;
 /**
@@ -1627,7 +1703,6 @@ type DependabotSourceInfo = {
   'repository-slug': string;
 };
 type DependabotJobBuilderOutput = {
-  jobId: number;
   job: DependabotJobConfig;
   credentials: DependabotCredential[];
 };
@@ -1669,7 +1744,7 @@ declare class DependabotJobBuilder {
     id,
     command
   }: {
-    id?: number;
+    id?: string;
     command: DependabotJobConfig['command'];
   }): DependabotJobBuilderOutput;
   /**
@@ -1683,7 +1758,7 @@ declare class DependabotJobBuilder {
     pullRequestToUpdate,
     securityVulnerabilities
   }: {
-    id?: number;
+    id?: string;
     command: DependabotJobConfig['command'];
     dependencyNamesToUpdate?: string[];
     existingPullRequests: (DependabotExistingPR[] | DependabotExistingGroupPR)[];
@@ -1712,7 +1787,7 @@ declare function mapCredentials({
   githubToken?: string;
   registries?: Record<string, DependabotRegistry>;
 }): DependabotCredential[];
-declare function makeRandomJobId(): number;
+declare function makeRandomJobId(): string;
 //#endregion
 //#region src/dependabot/server.d.ts
 declare const DependabotRequestTypeSchema: z.ZodEnum<{
@@ -1904,14 +1979,26 @@ type DependabotTokenType = 'job' | 'credentials';
  * @param value - The authentication value (e.g., API key).
  * @returns A promise that resolves to a boolean indicating whether the authentication was successful.
  */
-type AuthenticatorFunc = (type: DependabotTokenType, id: number, value: string) => Promise<boolean>;
+type AuthenticatorFunc = (type: DependabotTokenType, id: string, value: string) => Promise<boolean>;
 /**
  * Handler function for processing dependabot requests.
  * @param id - The ID of the dependabot job.
  * @param request - The dependabot request to handle.
  * @returns A promise that resolves to the result of handling the request.
  */
-type HandlerFunc = (id: number, request: DependabotRequest) => Promise<boolean>;
+type HandlerFunc = (id: string, request: DependabotRequest) => Promise<boolean>;
+/**
+ * Function for getting a dependabot job config by ID.
+ * @param id - The ID of the dependabot job.
+ * @returns A promise that resolves to the dependabot job config, or undefined if not found.
+ */
+type GetJobFunc = (id: string) => Promise<DependabotJobConfig | undefined>;
+/**
+ * Function for getting dependabot credentials by job ID.
+ * @param id - The ID of the dependabot job.
+ * @returns A promise that resolves to an array of dependabot credentials, or undefined if not found.
+ */
+type GetCredentialsFunc = (id: string) => Promise<DependabotCredential[] | undefined>;
 type CreateApiServerAppOptions = {
   /**
    * Base path for the endpoints.
@@ -1921,9 +2008,9 @@ type CreateApiServerAppOptions = {
   /** Handler function for authenticating requests. */
   authenticate: AuthenticatorFunc;
   /** Function for getting a dependabot job by ID. */
-  getJob: (id: number) => Promise<DependabotJobConfig | undefined>;
+  getJob: GetJobFunc;
   /** Function for getting dependabot credentials by job ID. */
-  getCredentials: (id: number) => Promise<DependabotCredential[] | undefined>;
+  getCredentials: GetCredentialsFunc;
   /** Handler function for processing the operations. */
   handle: HandlerFunc;
 };
@@ -2139,5 +2226,5 @@ declare const DependabotMetricSchema: z.ZodObject<{
 }, z.core.$strip>;
 type DependabotMetric = z.infer<typeof DependabotMetricSchema>;
 //#endregion
-export { CertificateAuthority as $, DependabotGroupSchema as $t, DependabotRequest as A, DependabotProxyConfigSchema as At, mapAllowedUpdatesFromDependabotConfigToJobConfig as B, DependabotSourceSchema as Bt, DependabotRecordUpdateJobUnknownError as C, DEPENDABOT_DEFAULT_AUTHOR_EMAIL as Cn, DependabotJobConfig as Ct, DependabotUpdatePullRequest as D, DependabotPackageManager as Dt, DependabotUpdateDependencyListSchema as E, DependabotJobFileSchema as Et, createApiServerApp as F, DependabotSecurityAdvisory as Ft, mapPackageEcosystemToPackageManager as G, DependabotAllowConditionSchema as Gt, mapExperiments as H, FileFetcherInput as Ht, DependabotJobBuilder as I, DependabotSecurityAdvisorySchema as It, mapVersionStrategyToRequirementsUpdateStrategy as J, DependabotConfig as Jt, mapSecurityAdvisories as K, DependabotCommitMessage as Kt, DependabotJobBuilderOutput as L, DependabotSource as Lt, DependabotRequestType as M, DependabotRequirementSchema as Mt, DependabotRequestTypeSchema as N, DependabotRequirementSource as Nt, DependabotUpdatePullRequestSchema as O, DependabotPackageManagerSchema as Ot, DependabotTokenType as P, DependabotRequirementSourceSchema as Pt, sanitizeRef as Q, DependabotGroup as Qt, DependabotSourceInfo as R, DependabotSourceProvider as Rt, DependabotRecordUpdateJobErrorSchema as S, extractPlaceholder as Sn, DependabotGroupRuleJobSchema as St, DependabotUpdateDependencyList as T, GitAuthor as Tn, DependabotJobFile as Tt, mapGroupsFromDependabotConfigToJobConfig as U, FileUpdaterInput as Ut, mapCredentials as V, FetchedFiles as Vt, mapIgnoreConditionsFromDependabotConfigToJobConfig as W, DependabotAllowCondition as Wt, parseExperiments as X, DependabotCooldown as Xt, DEFAULT_EXPERIMENTS as Y, DependabotConfigSchema as Yt, getBranchNameForUpdate as Z, DependabotCooldownSchema as Zt, DependabotRecordEcosystemMeta as _, parseRegistries as _n, DependabotExperiments as _t, DependabotDependencyFile as a, DependabotRegistry as an, DependabotCommitOptions as at, DependabotRecordEcosystemVersionsSchema as b, VariableFinderFn as bn, DependabotGroupJobSchema as bt, DependabotEcosystemMetaSchema as c, DependabotScheduleSchema as cn, DependabotConditionSchema as ct, DependabotIncrementMetric as d, POSSIBLE_CONFIG_FILE_PATHS as dn, DependabotDependency as dt, DependabotIgnoreCondition as en, CertificateAuthoritySchema as et, DependabotIncrementMetricSchema as f, PackageEcosystem as fn, DependabotDependencySchema as ft, DependabotMetricSchema as g, parseDependabotConfig as gn, DependabotExistingPRSchema as gt, DependabotMetric as h, VersioningStrategySchema as hn, DependabotExistingPR as ht, DependabotCreatePullRequestSchema as i, DependabotPullRequestBranchName as in, DependabotCommandSchema as it, DependabotRequestSchema as j, DependabotRequirement as jt, CreateApiServerAppOptions as k, DependabotProxyConfig as kt, DependabotEcosystemVersionManager as l, DependabotUpdate as ln, DependabotCredential as lt, DependabotMarkAsProcessedSchema as m, VersioningStrategy as mn, DependabotExistingGroupPRSchema as mt, DependabotClosePullRequestSchema as n, DependabotMultiEcosystemGroup as nn, DependabotAllowedSchema as nt, DependabotDependencyFileSchema as o, DependabotRegistrySchema as on, DependabotCommitOptionsSchema as ot, DependabotMarkAsProcessed as p, PackageEcosystemSchema as pn, DependabotExistingGroupPR as pt, mapSourceFromDependabotConfigToJobConfig as q, DependabotCommitMessageSchema as qt, DependabotCreatePullRequest as r, DependabotMultiEcosystemGroupSchema as rn, DependabotCommand as rt, DependabotEcosystemMeta as s, DependabotSchedule as sn, DependabotCondition as st, DependabotClosePullRequest as t, DependabotIgnoreConditionSchema as tn, DependabotAllowed as tt, DependabotEcosystemVersionManagerSchema as u, DependabotUpdateSchema as un, DependabotCredentialSchema as ut, DependabotRecordEcosystemMetaSchema as v, parseUpdates as vn, DependabotExperimentsSchema as vt, DependabotRecordUpdateJobUnknownErrorSchema as w, DEPENDABOT_DEFAULT_AUTHOR_NAME as wn, DependabotJobConfigSchema as wt, DependabotRecordUpdateJobError as x, convertPlaceholder as xn, DependabotGroupRuleJob as xt, DependabotRecordEcosystemVersions as y, validateConfiguration as yn, DependabotGroupJob as yt, makeRandomJobId as z, DependabotSourceProviderSchema as zt };
-//# sourceMappingURL=index-Djd8_Qnk.d.mts.map
+export { sanitizeRef as $, DependabotGroup as $t, DependabotRequest as A, DependabotProxyConfig as At, mapAllowedUpdatesFromDependabotConfigToJobConfig as B, DependabotSourceProviderSchema as Bt, DependabotRecordUpdateJobUnknownError as C, extractPlaceholder as Cn, DependabotGroupRuleJobSchema as Ct, DependabotUpdatePullRequest as D, DependabotJobFileSchema as Dt, DependabotUpdateDependencyListSchema as E, GitAuthor as En, DependabotJobFile as Et, createApiServerApp as F, DependabotRequirementSourceSchema as Ft, mapPackageEcosystemToPackageManager as G, DependabotAllowCondition as Gt, mapExperiments as H, FetchedFiles as Ht, DependabotJobBuilder as I, DependabotSecurityAdvisory as It, mapVersionStrategyToRequirementsUpdateStrategy as J, DependabotCommitMessageSchema as Jt, mapSecurityAdvisories as K, DependabotAllowConditionSchema as Kt, DependabotJobBuilderOutput as L, DependabotSecurityAdvisorySchema as Lt, DependabotRequestType as M, DependabotRequirement as Mt, DependabotRequestTypeSchema as N, DependabotRequirementSchema as Nt, DependabotUpdatePullRequestSchema as O, DependabotPackageManager as Ot, DependabotTokenType as P, DependabotRequirementSource as Pt, getBranchNameForUpdate as Q, DependabotCooldownSchema as Qt, DependabotSourceInfo as R, DependabotSource as Rt, DependabotRecordUpdateJobErrorSchema as S, convertPlaceholder as Sn, DependabotGroupRuleJob as St, DependabotUpdateDependencyList as T, DEPENDABOT_DEFAULT_AUTHOR_NAME as Tn, DependabotJobConfigSchema as Tt, mapGroupsFromDependabotConfigToJobConfig as U, FileFetcherInput as Ut, mapCredentials as V, DependabotSourceSchema as Vt, mapIgnoreConditionsFromDependabotConfigToJobConfig as W, FileUpdaterInput as Wt, parseExperiments as X, DependabotConfigSchema as Xt, DEFAULT_EXPERIMENTS as Y, DependabotConfig as Yt, makeDirectoryKey as Z, DependabotCooldown as Zt, DependabotRecordEcosystemMeta as _, parseDependabotConfig as _n, DependabotExistingPRSchema as _t, DependabotDependencyFile as a, DependabotPullRequestBranchName as an, DependabotCommandSchema as at, DependabotRecordEcosystemVersionsSchema as b, validateConfiguration as bn, DependabotGroupJob as bt, DependabotEcosystemMetaSchema as c, DependabotSchedule as cn, DependabotCondition as ct, DependabotIncrementMetric as d, DependabotUpdateSchema as dn, DependabotCredentialSchema as dt, DependabotGroupSchema as en, CertificateAuthority as et, DependabotIncrementMetricSchema as f, POSSIBLE_CONFIG_FILE_PATHS as fn, DependabotDependency as ft, DependabotMetricSchema as g, VersioningStrategySchema as gn, DependabotExistingPR as gt, DependabotMetric as h, VersioningStrategy as hn, DependabotExistingGroupPRSchema as ht, DependabotCreatePullRequestSchema as i, DependabotMultiEcosystemGroupSchema as in, DependabotCommand as it, DependabotRequestSchema as j, DependabotProxyConfigSchema as jt, CreateApiServerAppOptions as k, DependabotPackageManagerSchema as kt, DependabotEcosystemVersionManager as l, DependabotScheduleSchema as ln, DependabotConditionSchema as lt, DependabotMarkAsProcessedSchema as m, PackageEcosystemSchema as mn, DependabotExistingGroupPR as mt, DependabotClosePullRequestSchema as n, DependabotIgnoreConditionSchema as nn, DependabotAllowed as nt, DependabotDependencyFileSchema as o, DependabotRegistry as on, DependabotCommitOptions as ot, DependabotMarkAsProcessed as p, PackageEcosystem as pn, DependabotDependencySchema as pt, mapSourceFromDependabotConfigToJobConfig as q, DependabotCommitMessage as qt, DependabotCreatePullRequest as r, DependabotMultiEcosystemGroup as rn, DependabotAllowedSchema as rt, DependabotEcosystemMeta as s, DependabotRegistrySchema as sn, DependabotCommitOptionsSchema as st, DependabotClosePullRequest as t, DependabotIgnoreCondition as tn, CertificateAuthoritySchema as tt, DependabotEcosystemVersionManagerSchema as u, DependabotUpdate as un, DependabotCredential as ut, DependabotRecordEcosystemMetaSchema as v, parseRegistries as vn, DependabotExperiments as vt, DependabotRecordUpdateJobUnknownErrorSchema as w, DEPENDABOT_DEFAULT_AUTHOR_EMAIL as wn, DependabotJobConfig as wt, DependabotRecordUpdateJobError as x, VariableFinderFn as xn, DependabotGroupJobSchema as xt, DependabotRecordEcosystemVersions as y, parseUpdates as yn, DependabotExperimentsSchema as yt, makeRandomJobId as z, DependabotSourceProvider as zt };
+//# sourceMappingURL=index-CcnWCDDV.d.mts.map

package/dist/{index-B5hYujx0.d.mts → index-Z81896Ma.d.mts}

@@ -1,4 +1,4 @@
-import { z } from "zod/v4";
+import { z } from "zod";
 import { Octokit } from "octokit";
 
 //#region src/github/client.d.ts
@@ -166,4 +166,4 @@ declare class GitHubSecurityAdvisoryClient {
 declare function filterVulnerabilities(securityVulnerabilities: SecurityVulnerability[]): SecurityVulnerability[];
 //#endregion
 export { createGitHubClient as _, PackageEcosystemSchema as a, SecurityAdvisoryIdentifierSchema as c, SecurityAdvisorySeverity as d, SecurityAdvisorySeveritySchema as f, getGhsaPackageEcosystemFromDependabotPackageManager as g, filterVulnerabilities as h, PackageEcosystem as i, SecurityAdvisoryIdentifierType as l, SecurityVulnerabilitySchema as m, GitHubSecurityAdvisoryClient as n, PackageSchema as o, SecurityVulnerability as p, Package as r, SecurityAdvisory as s, FirstPatchedVersion as t, SecurityAdvisorySchema as u };
-//# sourceMappingURL=index-B5hYujx0.d.mts.map
+//# sourceMappingURL=index-Z81896Ma.d.mts.map

package/dist/{job-CYxNnXAx.mjs → job-N2pOBjBO.mjs}

@@ -1,6 +1,43 @@
-import { z } from "zod/v4";
+import { z } from "zod";
 import * as yaml from "js-yaml";
 
+//#region src/dependabot/directory-key.ts
+/**
+* Creates a unique directory key by combining the ecosystem and directory information.
+*
+* The key format is: `{ecosystem}::{directory_info}`
+* - For single directory: `npm::/src/frontend`
+* - For multiple directories: `npm::/src/frontend,/src/backend`
+*
+* @param options - Configuration object containing ecosystem and directory information
+* @returns A unique string key in the format `{ecosystem}::{directories}`
+*
+* @example
+* ```typescript
+* // Single directory
+* const key1 = makeDirectoryKey({ ecosystem: 'npm', directory: '/src' });
+* // Returns: "npm::/src"
+*
+* // Multiple directories
+* const key2 = makeDirectoryKey({
+*   ecosystem: 'pip',
+*   directories: ['/backend', '/scripts']
+* });
+* // Returns: "pip::/backend,/scripts"
+*
+* // Using alternative naming convention
+* const key3 = makeDirectoryKey({
+*   'package-ecosystem': 'bundler',
+*   directory: '/app'
+* });
+* // Returns: "bundler::/app"
+* ```
+*/
+function makeDirectoryKey(options) {
+	return `${"ecosystem" in options ? options.ecosystem : options["package-ecosystem"]}::${options.directory ?? options.directories.join(",")}`;
+}
+
+//#endregion
 //#region src/dependabot/placeholder.ts
 async function convertPlaceholder({ input, variableFinder }) {
 	if (!input) return void 0;
@@ -145,6 +182,7 @@ const DependabotCooldownSchema = z.object({
 });
 const DependabotPullRequestBranchNameSchema = z.object({ separator: z.string().optional() });
 const PackageEcosystemSchema = z.enum([
+	"bazel",
 	"bun",
 	"bundler",
 	"cargo",
@@ -164,6 +202,7 @@ const PackageEcosystemSchema = z.enum([
 	"maven",
 	"npm",
 	"nuget",
+	"opentofu",
 	"pip",
 	"pip-compile",
 	"pipenv",
@@ -246,10 +285,14 @@ const DependabotConfigSchema = z.object({
 	}
 	const seen = /* @__PURE__ */ new Set();
 	for (const update of value.updates) {
-		const key = `${update["package-ecosystem"]}:${update.directory ?? update.directories?.join(",")}`;
+		const key = makeDirectoryKey(update);
 		if (seen.has(key)) addIssue(`Duplicate update configuration found for '${update["package-ecosystem"]}' and directory: '${update.directory ?? update.directories?.join(",")}'`);
 		seen.add(key);
 	}
+	const betaEcosystems = ["bazel", "opentofu"];
+	if (!value["enable-beta-ecosystems"]) {
+		for (const update of value.updates) if (betaEcosystems.includes(update["package-ecosystem"])) addIssue(`The package ecosystem '${update["package-ecosystem"]}' is currently in beta. To use it, set 'enable-beta-ecosystems' to true in the dependabot configuration.`);
+	}
 	return value;
 });
 function parseUpdates(config, configPath) {
@@ -349,7 +392,11 @@ const DependabotProxyConfigSchema = z.object({
 	all_credentials: DependabotCredentialSchema.array(),
 	ca: CertificateAuthoritySchema
 });
-const DependabotSourceProviderSchema = z.enum(["azure"]);
+const DependabotSourceProviderSchema = z.enum([
+	"azure",
+	"gitlab",
+	"bitbucket"
+]);
 const DependabotSourceSchema = z.object({
 	provider: DependabotSourceProviderSchema,
 	repo: z.string(),
@@ -450,7 +497,9 @@ const DependabotPackageManagerSchema = z.enum([
 	"uv",
 	"vcpkg",
 	"helm",
-	"julia"
+	"julia",
+	"bazel",
+	"opentofu"
 ]);
 const DependabotCommandSchema = z.enum([
 	"graph",
@@ -458,7 +507,7 @@ const DependabotCommandSchema = z.enum([
 	"recreate"
 ]);
 const DependabotJobConfigSchema = z.object({
-	id: z.number().optional(),
+	id: z.string(),
 	command: DependabotCommandSchema.optional(),
 	"package-manager": DependabotPackageManagerSchema,
 	"allowed-updates": DependabotAllowedSchema.array(),
@@ -492,5 +541,5 @@ const DependabotJobConfigSchema = z.object({
 const DependabotJobFileSchema = z.object({ job: DependabotJobConfigSchema });
 
 //#endregion
-export { DependabotScheduleSchema as A, extractPlaceholder as B, DependabotCommitMessageSchema as C, DependabotIgnoreConditionSchema as D, DependabotGroupSchema as E, parseDependabotConfig as F, parseRegistries as I, parseUpdates as L, POSSIBLE_CONFIG_FILE_PATHS as M, PackageEcosystemSchema as N, DependabotMultiEcosystemGroupSchema as O, VersioningStrategySchema as P, validateConfiguration as R, DependabotAllowConditionSchema as S, DependabotCooldownSchema as T, DependabotRequirementSchema as _, DependabotConditionSchema as a, DependabotSourceProviderSchema as b, DependabotExistingGroupPRSchema as c, DependabotGroupJobSchema as d, DependabotGroupRuleJobSchema as f, DependabotProxyConfigSchema as g, DependabotPackageManagerSchema as h, DependabotCommitOptionsSchema as i, DependabotUpdateSchema as j, DependabotRegistrySchema as k, DependabotExistingPRSchema as l, DependabotJobFileSchema as m, DependabotAllowedSchema as n, DependabotCredentialSchema as o, DependabotJobConfigSchema as p, DependabotCommandSchema as r, DependabotDependencySchema as s, CertificateAuthoritySchema as t, DependabotExperimentsSchema as u, DependabotRequirementSourceSchema as v, DependabotConfigSchema as w, DependabotSourceSchema as x, DependabotSecurityAdvisorySchema as y, convertPlaceholder as z };
-//# sourceMappingURL=job-CYxNnXAx.mjs.map
+export { DependabotScheduleSchema as A, extractPlaceholder as B, DependabotCommitMessageSchema as C, DependabotIgnoreConditionSchema as D, DependabotGroupSchema as E, parseDependabotConfig as F, parseRegistries as I, parseUpdates as L, POSSIBLE_CONFIG_FILE_PATHS as M, PackageEcosystemSchema as N, DependabotMultiEcosystemGroupSchema as O, VersioningStrategySchema as P, validateConfiguration as R, DependabotAllowConditionSchema as S, DependabotCooldownSchema as T, makeDirectoryKey as V, DependabotRequirementSchema as _, DependabotConditionSchema as a, DependabotSourceProviderSchema as b, DependabotExistingGroupPRSchema as c, DependabotGroupJobSchema as d, DependabotGroupRuleJobSchema as f, DependabotProxyConfigSchema as g, DependabotPackageManagerSchema as h, DependabotCommitOptionsSchema as i, DependabotUpdateSchema as j, DependabotRegistrySchema as k, DependabotExistingPRSchema as l, DependabotJobFileSchema as m, DependabotAllowedSchema as n, DependabotCredentialSchema as o, DependabotJobConfigSchema as p, DependabotCommandSchema as r, DependabotDependencySchema as s, CertificateAuthoritySchema as t, DependabotExperimentsSchema as u, DependabotRequirementSourceSchema as v, DependabotConfigSchema as w, DependabotSourceSchema as x, DependabotSecurityAdvisorySchema as y, convertPlaceholder as z };
+//# sourceMappingURL=job-N2pOBjBO.mjs.map