What's Changed

• Fix TypeError when processing Poetry dependencies with explicit registry sources by @Copilot in https://github.com/dependabot/dependabot-core/pull/14009
• feat: Add group_by attribute to DependencyGroup for cross-directory grouping by @markhallen in https://github.com/dependabot/dependabot-core/pull/14007
• Fix Bazel FileFetcher for module extensions requiring from_file and missing BUILD files by @Copilot in https://github.com/dependabot/dependabot-core/pull/14023
• Fix npm authentication failure with replaces-base registry when .npmrc absent by @Copilot in https://github.com/dependabot/dependabot-core/pull/14021
• fix: Add missing require for FetchedFiles in DependencySnapshot by @markhallen in https://github.com/dependabot/dependabot-core/pull/14028
• Adding cooldown filtering for Poetry git resource dependencies. by @thavaahariharangit in https://github.com/dependabot/dependabot-core/pull/13989
• feat: Add dynamic subgroup creation in DependencyGroupEngine by @markhallen in https://github.com/dependabot/dependabot-core/pull/14008
• docs: extend documentation for the no-validate-url hack by @yeikel in https://github.com/dependabot/dependabot-core/pull/14037
• v0.359.0 by @dependabot-core-action-automation[bot] in https://github.com/dependabot/dependabot-core/pull/14042

Full Changelog: https://github.com/dependabot/dependabot-core/compare/v0.358.0...v0.359.0