chore(deps): update all non-major bundler dependencies#1226
Open
renovate[bot] wants to merge 1 commit intostagingfrom
Open
chore(deps): update all non-major bundler dependencies#1226renovate[bot] wants to merge 1 commit intostagingfrom
renovate[bot] wants to merge 1 commit intostagingfrom
Conversation
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the
Comment |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## staging #1226 +/- ##
========================================
Coverage 77.59% 77.59%
========================================
Files 54 54
Lines 1406 1406
========================================
Hits 1091 1091
Misses 315 315 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
6 times, most recently
from
798ae9a to
87d76d0
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
9 times, most recently
from
354ff24 to
5635ee4
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
3 times, most recently
from
4782a50 to
5ce8e84
Compare
Contributor
Author
|
renovate
bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
4 times, most recently
from
a2ffd1b to
17a6987
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
3 times, most recently
from
220dace to
b2a9253
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
4 times, most recently
from
2c80ec3 to
6738ebb
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
5 times, most recently
from
17a1876 to
699f3df
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
from
699f3df to
cb8f603
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
'~> 3.1.21'→'~> 3.1.22''~> 1.21.1'→'~> 1.23.0''~> 8.0.1'→'~> 8.0.4''~> 2.1.1'→'~> 2.1.3''~>5.0.0'→'~>5.0.3''~>1.15.0'→'~>1.16.0''~> 3.6.0'→'~> 3.6.1''~> 1.2.6'→'~> 1.2.9''~> 4.18.0'→'~> 4.19.0''~> 0.6.2'→'~> 0.6.3''~> 7.2.3'→'~> 7.2.3', '>= 7.2.3.1''~> 8.0.2'→'~> 8.0.4''~> 1.84.0'→'~> 1.86.0''~> 6.3'→'~> 6.5''~> 6.3'→'~> 6.5''~> 6.3'→'~> 6.5''~> 8.0.10'→'~> 8.1.2''~> 4.4.0'→'~> 4.4.2''~> 4.2.1'→'~> 4.3.0'Release Notes
presidentbeef/brakeman (brakeman)
v8.0.4Compare Source
--ensure-latestv8.0.3Compare Source
polymorphic_nameSQLi false positive (Fredrico Franco)--ensure-latestv8.0.2Compare Source
djezzzl/database_consistency (database_consistency)
v2.1.3Compare Source
MissingDependentDestroyCheckerto support composite keys. Thanks Andy Allan for reporting this!v2.1.2Compare Source
ForeignKeyTypeCheckerto support composite keys. Thanks Quentin de Metz for reporting this!MissingUniqueIndexCheckerto support composite keys. Thanks Andy Allan for reporting this!heartcombo/devise (devise)
v5.0.3Compare Source
v5.0.2Compare Source
sign_in_after_change_passwordbehaviour. #5825sign_in_after_reset_password?check hook to passwords controller, to allow it to be customized by users. #5826v5.0.1Compare Source
E-Mailon invalid authentication messages caused by previous fix for incorrect grammar #5822devise-i18n/devise-i18n (devise-i18n)
v1.16.0Compare Source
d13ef8941003bf. Translations of this string are unaffected.faker-ruby/faker (faker)
v3.6.1Compare Source
It's almost Spring time in the Northern hemisphere 🌸
Security, performance improvements and bug fixes
ja/address.ymlwith a 7-digit format by @thdaraujo in #3201Update development dependencies
New Contributors
Full Changelog: faker-ruby/faker@v3.6.0...v3.6.1
Studiosity/grover (grover)
v1.2.9Compare Source
Added
v1.2.8Compare Source
Added
v1.2.7Compare Source
Added
mollie/mollie-api-ruby (mollie-api-ruby)
v4.19.0Compare Source
c61808e) Allow bigdecimal 4.xruby/net-imap (net-imap)
v0.6.3Compare Source
What's Changed
Added
#detailed_messagetoResponseParseErrorby @nevans in #599TERMandFORCE_COLORby @nevans in #607NO_COLOR) by @nevans in #609Config#overrides?(opposite of#inherited?) by @nevans in #610Config#inherits_defaults?by @nevans in #611Fixed
resp-textwith invalidresp-text-codeby @nevans in #601Config.version_defaultsshould be read only by @nevans in #594Other Changes
Config::AttrAccessorsa little by @nevans in #606Fixes for unreleased code:
resp-textfallback by @nevans in #605Miscellaneous
Full Changelog: ruby/net-imap@v0.6.2...v0.6.3
rails/rails (rails)
v7.2.3.1: 7.2.3.1Compare Source
Active Support
Reject scientific notation in NumberConverter
[CVE-2026-33176]
Jean Boussier
Fix
SafeBuffer#%to preserve unsafe status[CVE-2026-33170]
Jean Boussier
Improve performance of NumberToDelimitedConverter
[CVE-2026-33169]
Jean Boussier
Active Model
Active Record
Action View
Skip blank attribute names in tag helpers to avoid generating invalid HTML.
[CVE-2026-33168]
Mike Dalessio
Action Pack
Active Job
Action Mailer
Action Cable
Active Storage
Filter user supplied metadata in DirectUploadController
[CVE-2026-33173]
Jean Boussier
Configurable maxmimum streaming chunk size
Makes sure that byte ranges for blobs don't exceed 100mb by default.
Content ranges that are too big can result in denial of service.
[CVE-2026-33174]
Gannon McGibbon
Limit range requests to a single range
[CVE-2026-33658]
Jean Boussier
Prevent path traversal in
DiskService.DiskService#path_fornow raises anInvalidKeyErrorwhen passed keys with dot segments (".",".."), or if the resolved path is outside the storage root directory.
#path_foralso now consistently raisesInvalidKeyErrorif the key is invalid in any way, forexample containing null bytes or having an incompatible encoding. Previously, the exception
raised may have been
ArgumentErrororEncoding::CompatibilityError.DiskControllernow explicitly rescuesInvalidKeyErrorwith appropriate HTTP status codes.[CVE-2026-33195]
Mike Dalessio
Prevent glob injection in
DiskService#delete_prefixed.Escape glob metacharacters in the resolved path before passing to
Dir.glob.Note that this change breaks any existing code that is relying on
delete_prefixedto expandglob metacharacters. This change presumes that is unintended behavior (as other storage services
do not respect these metacharacters).
[CVE-2026-33202]
Mike Dalessio
Action Mailbox
Action Text
Railties
Guides
rspec/rspec-rails (rspec-rails)
v8.0.4Compare Source
Full Changelog
Released to relax version constraint for rspec to allow 4.0.0.beta1.
v8.0.3Compare Source
Full Changelog
Bug Fixes:
lookup_context. (Stephen Nelson, #2749)rails statslooks for specs using application root rather than working directory.(Marvin Tangpos, #2879)
rubocop/rubocop (rubocop)
v1.86.0Compare Source
New features
AllowedParentClassesoption toStyle/EmptyClassDefinition. ([@hammadkhan][])AllowedReceiversforStyle/HashLookupMethod. ([@koic][])Bug fixes
Style/ConcatArrayLiteralsautocorrect deleting code for percent literals with interpolation. ([@bbatsov][])Lint/ConstantReassignment. ([@ydakuka][])Lint/DuplicateMethodswhen duplicate methods are defined in anonymous classes and modules not assigned to a constant. ([@Darhazer][])Style/RedundantParentheseswhen redundant parentheses around range literals in block body. ([@koic][])Layout/MultilineMethodCallIndentationwhen method chain is inside a hash pair value passed to a multiline chained method call. ([@ydakuka][])Lint/DuplicateMethodswhen modules blocks are passed as method arguments. ([@5hun-s][])Lint/DuplicateMethodswhen the same method is defined in different anonymous module blocks passed to a no-receiver call (e.g.stub_const). ([@Darhazer][])Layout/EmptyLineAfterGuardClausewhen using a guard clause followed by a multi-line guard clause withraise,fail,return,break, ornext. ([@koic][])Layout/RedundantLineBreakwhen settingInspectBlocks: trueand usingrescueorensurein the block. ([@koic][])Style/FileOpenwhen assigningFile.opento an instance variable, class variable, global variable, or constant. ([@koic][])Lint/DuplicateMethodswhen the same method is defined in anonymous module blocks passed to different receivers. ([@koic][])Style/IfWithSemicolonwhenreturnwith value is in theelsebranch. ([@koic][])Style/IfUnlessModifierwhen multipleif/unlessmodifier forms are on the same line inside a collection. ([@ydakuka][])Lint/SafeNavigationChainwhen chaining a method call after safe navigation in the if branch of a ternary. ([@koic][])Layout/EndAlignmentwhenendis followed by||or&&. ([@koic][])Safe/SafeAutoCorrectparameter" when those parameters are set for cops that don't have them in their default configuration. ([@dduugg][])Lint/UselessDefaultValueArgumentwhenfetchwithout a receiver is inside afetchblock. ([@koic][])Style/IfWithSemicolonwhen using single-lineunless/;/end. ([@koic][])Style/NonNilCheckautocorrect for receivers containing spaces. ([@bbatsov][])Style/RaiseArgsto allow anonymous keyword forwarding (raise Ex.new(**)). ([@bbatsov][])Lint/RedundantCopDisableDirectivewhen arubocop:disablecomment is used to suppressLint/EmptyWhen,Lint/EmptyConditionalBody,Lint/EmptyInPattern, orStyle/SymbolProc. ([@eugeneius][])Style/RedundantPercentQfor%qstrings with interpolation-like syntax. ([@bbatsov][])Style/AndOradding unnecessary parentheses aroundreturnwithout arguments. ([@eugeneius][])Lint/UselessConstantScoping. ([@h-lame][])Style/TrailingMethodEndStatementto detect singleton methods (def self.foo). ([@bbatsov][])Changes
MaxFilesInCachetofalseto entirely disable cache pruning. ([@byroot][])Lint/RedundantSafeNavigationaware of safe navigation in conditional true branch. ([@koic][])mcpgem from runtime dependencies. ([@koic][])v1.85.1Compare Source
Bug fixes
Style/FileOpenwhenFile.openis passed as an argument or returned from a method. ([@sferik][])Style/ReduceToHashfalse positive when accumulator is read in key/value. ([@sferik][])Style/RedundantParentheseswhen parenthesizing a range in a block body. ([@koic][])Changes
v1.85.0Compare Source
New features
mise.tomlas source for TargetRubyVersion. ([@kitsane][])Lint/UnreachablePatternBranchcop. ([@sferik][])Style/FileOpencop. ([@sferik][])Style/MapJoincop. ([@sferik][])Style/OneClassPerFilecop. ([@sferik][])Style/PartitionInsteadOfDoubleSelectcop. ([@sferik][])Style/PredicateWithKindcop. ([@sferik][])Style/ReduceToHashcop. ([@sferik][])Style/RedundantMinMaxBycop. ([@sferik][])Style/RedundantStructKeywordInitcop. ([@koic][])Style/SelectByKindcop. ([@sferik][])Style/SelectByRangecop. ([@sferik][])Style/TallyMethodcop. ([@sferik][])Lint/DataDefineOverridecop. ([@bbatsov][])InternalAffairs/ItblockHandlercop. ([@bbatsov][])Bug fixes
Style/EmptyClassDefinition. ([@koic][])Style/NegatedWhilewhen the last expression of anuntilcondition is negated. ([@koic][])Style/EmptyClassDefinitionmessage wording. ([@bbatsov][])Lint/Voidwhennilis used incasebranch. ([@5hun-s][])Style/IfUnlessModifierwhen modifier forms are used inside string interpolations. ([@koic][])Style/HashTransformKeysandStyle/HashTransformValues. ([@sferik][])Lint/Voidforeachblocks where the return value may be meaningful (e.g.,Enumerator#each). ([@sferik][])Layout/IndentationWidthfalse positive for chained method blocks whenEnforcedStyleAlignWithisstart_of_line. ([@krororo][])Lint/Voidto detect void expressions incase/whenbranches. ([@bbatsov][])Parser::ClobberingErrorinLint/UselessAssignmentwhen autocorrecting a useless assignment that wraps a block containing another useless assignment. ([@koic][])Layout/MultilineAssignmentLayoutwhen usingnumblockoritblockwithSupportedTypes: ['block']. ([@bbatsov][])Layout/FirstHashElementIndentation. ([@ydakuka][])Layout/MultilineAssignmentLayout. ([@sanfrecce-osaka][])Lint/RedundantSafeNavigationwhen using&.respond_to?with methods defined onObject(e.g.,:class). ([@bbatsov][])Lint/SafeNavigationConsistencyautocorrect as unsafe. ([@bbatsov][])SyntaxErrorinLint/InterpolationCheckwhen single quoted string contains double quotes with invalid interpolation. ([@ydakuka][])Changes
Style/HashAsLastArrayItemwhen multiline hash elements. ([@koic][])Style/EndlessMethodcop to consider receivers. ([@fatkodima][])class_definitiontoclass_keywordinEnforcedStyleofStyle/EmptyClassDefinition. ([@koic][])String.newwith interpolated strings toStyle/RedundantInterpolationUnfreeze. ([@lovro-bikic][])Style/RedundantParentheses. ([@lovro-bikic][])v1.84.2Compare Source
Bug fixes
Style/BlockDelimiterswhen autocorrecting nested multi-line blocks with adjacent curly braces. ([@koic][])Style/IfUnlessModifierwhen the first value uses a normalifand the others use modifierif. ([@koic][])Layout/FirstArgumentIndentationwhen first arguments are over-indented in nested method calls. ([@koic][])Layout/MultilineMethodCallIndentationwhen a multiline method call follows a hash access. ([@koic][])Layout/MultilineMethodCallIndentationwhen a multiline method call includes a keyword argument whose value is a method call with a block. ([@koic][])Layout/EmptyLinesAfterModuleInclusionwhenincludeis nested inside an array. ([@eugeneius][])Style/FormatStringTokento not autocorrect strings outside of format method context in aggressive mode. ([@ydakuka][])Style/HashAsLastArrayItemwhen an array contains only a single hash element. ([@koic][])Style/MethodDefParentheseswhen using splat or forwarding arguments without parentheses. ([@koic][])Layout/MultilineMethodCallIndentationwhen a multi-dot method chain is inside a hash pair value. ([@ydakuka][])Layout/MultilineMethodCallIndentationwhen a method is chained after a single-line block. ([@ydakuka][])Offense#highlighted_areaforPseudoSourceRangelocations. ([@rafaelfranca][])Style/IfUnlessModifierwhen the first value uses a normalifand the others use ternary operator. ([@koic][])v1.84.1Compare Source
Bug fixes
Layout/IndentationWidthcop. ([@viralpraxis][])Style/NegativeArrayIndexwhen usingselfas array with implicitselfreceiver. ([@koic][])Style/GuardClausewhen using heredoc as an argument of method call in raise inelsebranch. ([@koic][])Style/IfUnlessModifierwhen multipleif/unlessstatements share the same line in arrays, method arguments, or hash values. ([@ydakuka][])Layout/FirstArgumentIndentationandLayout/LineLengthwhen correcting method chains. ([@ydakuka][])Layout/MultilineMethodCallIndentationto properly handle method chains inside hash pair values. ([@ydakuka][])Changes
infinite?method to the allowlists forNaming/PredicateMethod,Style/IfWithBooleanLiteralBranches, andStyle/RedundantCondition, in addition to the existingnonzero?. ([@koic][])getsentry/sentry-ruby (sentry-rails)
v6.5.0Compare Source
New Features ✨
Bug Fixes 🐛
trilogydatabase adapter tomysqlfor Query Insights compatibility by @krismichalski in #2656Internal Changes 🔧
v6.4.1Compare Source
Bug Fixes 🐛
v6.4.0Compare Source
Features
Add support for OTLP ingestion in
sentry-opentelemetry(#2853)Sentry now has first class OTLP ingestion capabilities.
Under the hood, this will setup:
OpenTelemetry::Exporterthat will automatically set up the OTLP ingestion endpoint from your DSNconfig.otlp.setup_otlp_traces_exporter = falseto setup your own exporterOTLPPropagatorthat ensures Distributed Tracing worksconfig.otlp.setup_propagator = falseIf you were using the
SpanProcessorbefore, we recommend migrating over toconfig.otlpsince it's a much simpler setup.Treat Sidekiq nil retry as true (#2864)
Queue time capture for Rack (#2838)
Bug Fixes
MetricEventtimestamp serialization to float (#2862)v6.3.1Compare Source
Bug Fixes
ActionDispatch::ExceptionWrapperfor correct HTTP status code (#2850)Internal
sidekiq/sidekiq (sidekiq)
v8.1.2Compare Source
kiq, Sidekiq's official terminal UI:Use REDIS_URL or REDIS_PROVIDER to point
kiqto Redis.SortedSet#eachcaused it to miss half of the jobs [#6936]v8.1.1Compare Source
require 'sidekiq/testing'andrequire 'sidekiq/testing/inline'.Add new
Sidekiq.testing!(mode)API [#6931]Requiring code should not enable process-wide changes.
v8.1.0Compare Source
retry_forandretryare now mutually exclusive [#6878, Saidbek]perform_inlinenow enforcesstrict_args![#6718, Saidbek]Sec-Fetch-Siteheader [#6874, deve1212]assets_pathfor CDN purposes [#6865, stanhu]You can activate this beta feature like below.
Feedback requested: is this feature stable and useful for you in production?
This feature may or may not be enabled by default in Sidekiq 9.0.
rails/spring (spring)
v4.4.2: 4.4.2Compare Source
What's Changed
New Contributors
Full Changelog: rails/spring@v4.4.1...v4.4.2
v4.4.1: 4.4.1[Compare Source](https://redirect.github.com
Configuration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone Europe/Amsterdam, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.