chore(deps): update all non-major bundler dependencies#1226
Open
renovate[bot] wants to merge 1 commit into
Open
chore(deps): update all non-major bundler dependencies#1226renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the
Comment |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## staging #1226 +/- ##
========================================
Coverage 77.59% 77.59%
========================================
Files 54 54
Lines 1406 1406
========================================
Hits 1091 1091
Misses 315 315 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
6 times, most recently
from
798ae9a to
87d76d0
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
9 times, most recently
from
354ff24 to
5635ee4
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
3 times, most recently
from
4782a50 to
5ce8e84
Compare
Contributor
Author
|
renovate
Bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
4 times, most recently
from
a2ffd1b to
17a6987
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
3 times, most recently
from
220dace to
b2a9253
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
2 times, most recently
from
b6e6914 to
d495e2f
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
5 times, most recently
from
e247aa9 to
ca69050
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
6 times, most recently
from
1f83c9b to
7771100
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
4 times, most recently
from
cb74aca to
af714f9
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
4 times, most recently
from
2eae179 to
dd0716e
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
3 times, most recently
from
b479dfd to
af052e7
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
4 times, most recently
from
d46c752 to
cfcdbca
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch-bundler
branch
from
cfcdbca to
02d1898
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
'~> 1.21.1'→'~> 1.24.5''~> 8.0.1'→'~> 8.0.4''~> 8.1'→'~> 8.1', '>= 8.1.2''~> 2.1.1'→'~> 2.1.3''~>1.15.0'→'~>1.16.0''~> 3.6.0'→'~> 3.8.0''~> 1.2.6'→'~> 1.2.10''~> 2.14.1'→'~> 2.15.1''~> 4.18.0'→'~> 4.19.0''~> 7.2.0'→'~> 7.2.1''~> 7.2.3'→'~> 7.2.3', '>= 7.2.3.1''~> 8.0.2'→'~> 8.0.4''~> 1.84.0'→'~> 1.87.0''~> 2.34', '>= 2.34.3'→'~> 2.35', '>= 2.35.3''~> 6.3'→'~> 6.5''~> 6.3'→'~> 6.5''~> 6.3'→'~> 6.5''~> 8.0.10'→'~> 8.1.6''~> 6.0.1'→'~> 6.0.2''~> 4.4.0'→'~> 4.6.0''~> 0.9.10'→'~> 0.9.11''~> 4.2.1'→'~> 4.3.0'Release Notes
presidentbeef/brakeman (brakeman)
v8.0.4Compare Source
--ensure-latestv8.0.3Compare Source
polymorphic_nameSQLi false positive (Fredrico Franco)--ensure-latestv8.0.2Compare Source
flyerhzm/bullet (bullet)
v8.1.2Compare Source
belongs_towhose*_typecolumn is nil. ActiveRecord short-circuits the reader to nil without issuing SQL, so the access cannot represent an N+1 query and preloading would be a no-op.Set#<<corruption inUnusedEagerLoading#add_eager_loadingssplit branchv8.1.1Compare Source
djezzzl/database_consistency (database_consistency)
v2.1.3Compare Source
MissingDependentDestroyCheckerto support composite keys. Thanks Andy Allan for reporting this!v2.1.2Compare Source
ForeignKeyTypeCheckerto support composite keys. Thanks Quentin de Metz for reporting this!MissingUniqueIndexCheckerto support composite keys. Thanks Andy Allan for reporting this!devise-i18n/devise-i18n (devise-i18n)
v1.16.0Compare Source
d13ef8941003bf. Translations of this string are unaffected.faker-ruby/faker (faker)
v3.8.0Compare Source
Enabling lazy load
This version introduces lazy loading. It means users will only pay for what they use. Faker loads 2x faster when it's enabled.
Lazy loading the generators is disabled by default. To enable it, choose one of the configuration options below:
1 - Set lazy load as a Faker Config
Faker::Config.lazy_loading = true2 - Set lazy load as an environment variable
FAKER_LAZY_LOAD = 1We hope you get to see the improvement by enabling it. Please file a bug report for any issues!
Thanks to @jeremyevans for the mentoring, and to @thdaraujo for pairing and code reviews.
Full Changelog: faker-ruby/faker@v3.7.1...v3.8.0
v3.7.1Compare Source
Enabling lazy load
This version introduces lazy loading. It means users will only pay for what they use. Faker loads 2x faster when it's enabled.
Lazy loading the generators is disabled by default. To enable it, choose one of the configuration options below:
1 - Set lazy load as a Faker Config
Faker::Config.lazy_loading = true2 - Set lazy load as an environment variable
FAKER_LAZY_LOAD = 1We hope you get to see the improvement by enabling it. Please file a bug report for any issues!
Thanks to @jeremyevans for the mentoring, and to @thdaraujo for pairing and code reviews.
Full Changelog: faker-ruby/faker@v3.7.1...v3.8.0
v3.6.1Compare Source
It's almost Spring time in the Northern hemisphere 🌸
Security, performance improvements and bug fixes
ja/address.ymlwith a 7-digit format by @thdaraujo in #3201Update development dependencies
New Contributors
Full Changelog: faker-ruby/faker@v3.6.0...v3.6.1
Studiosity/grover (grover)
v1.2.10Compare Source
Fixed
v1.2.9Compare Source
Added
v1.2.8Compare Source
Added
v1.2.7Compare Source
Added
rails/jbuilder (jbuilder)
v2.15.1Compare Source
What's Changed
New Contributors
Full Changelog: rails/jbuilder@v2.15.0...v2.15.1
v2.15.0Compare Source
What's Changed
KeyFormatteron cache hits by @moberegger in #607array!andset!by @moberegger in #604:unprocessable_contentfor scaffolds with Rack 3.1 or higher by @taketo1113 in #603_map_collectionby @moberegger in #612New Contributors
Full Changelog: rails/jbuilder@v2.14.1...v2.15.0
mollie/mollie-api-ruby (mollie-api-ruby)
v4.19.0Compare Source
c61808e) Allow bigdecimal 4.xrails/rails (rails)
v7.2.3.1: 7.2.3.1Compare Source
Active Support
Reject scientific notation in NumberConverter
[CVE-2026-33176]
Jean Boussier
Fix
SafeBuffer#%to preserve unsafe status[CVE-2026-33170]
Jean Boussier
Improve performance of NumberToDelimitedConverter
[CVE-2026-33169]
Jean Boussier
Active Model
Active Record
Action View
Skip blank attribute names in tag helpers to avoid generating invalid HTML.
[CVE-2026-33168]
Mike Dalessio
Action Pack
Active Job
Action Mailer
Action Cable
Active Storage
Filter user supplied metadata in DirectUploadController
[CVE-2026-33173]
Jean Boussier
Configurable maxmimum streaming chunk size
Makes sure that byte ranges for blobs don't exceed 100mb by default.
Content ranges that are too big can result in denial of service.
[CVE-2026-33174]
Gannon McGibbon
Limit range requests to a single range
[CVE-2026-33658]
Jean Boussier
Prevent path traversal in
DiskService.DiskService#path_fornow raises anInvalidKeyErrorwhen passed keys with dot segments (".",".."), or if the resolved path is outside the storage root directory.
#path_foralso now consistently raisesInvalidKeyErrorif the key is invalid in any way, forexample containing null bytes or having an incompatible encoding. Previously, the exception
raised may have been
ArgumentErrororEncoding::CompatibilityError.DiskControllernow explicitly rescuesInvalidKeyErrorwith appropriate HTTP status codes.[CVE-2026-33195]
Mike Dalessio
Prevent glob injection in
DiskService#delete_prefixed.Escape glob metacharacters in the resolved path before passing to
Dir.glob.Note that this change breaks any existing code that is relying on
delete_prefixedto expandglob metacharacters. This change presumes that is unintended behavior (as other storage services
do not respect these metacharacters).
[CVE-2026-33202]
Mike Dalessio
Action Mailbox
Action Text
Railties
Guides
rspec/rspec-rails (rspec-rails)
v8.0.4Compare Source
Full Changelog
Released to relax version constraint for rspec to allow 4.0.0.beta1.
v8.0.3Compare Source
Full Changelog
Bug Fixes:
lookup_context. (Stephen Nelson, #2749)rails statslooks for specs using application root rather than working directory.(Marvin Tangpos, #2879)
rubocop/rubocop (rubocop)
v1.87.0Compare Source
New features
--enable-all-copsand--disable-all-copscommand line options that overrideAllCops/EnabledByDefaultandAllCops/DisabledByDefaultin configuration files. ([@koic][])Layout/EmptyLineAfterGuardClauseaccept the new# simplecov:disableand# simplecov:enabledirective comments. ([@koic][])AllCops/UseProjectIndexto enable cross-file detection inLint/ConstantReassignment(experimental). ([@koic][])Bug fixes
Lint/ParenthesesAsGroupedExpressionwhen the first argument is a call-like expression with its own parentheses, such asyield(...). ([@koic][])Style/YodaConditionwhen one side is an array or hash literal containing non-literal elements. ([@koic][])Style/Aliascausing a syntax error when the return value ofalias_methodis used, such as an argument topublic,private,protected, ormodule_function, or the right-hand side of an assignment. ([@koic][])Style/ClassAndModuleChildrencausing a syntax error when the namespace contains a method call (e.g.,class self.class::Foo; end). ([@koic][])Style/FileWritecausing a syntax error when the written heredoc is chained with another method call. ([@koic][])Style/HashConversioncausing a syntax error whenHash[...]is passed an anonymous splat (*). ([@koic][])Style/StructInheritancecausing a syntax error when the inheritedStruct.newis called without parentheses. ([@koic][])Layout/RedundantLineBreakwhen a single-line block is chained with a safe navigation method call. ([@koic][])Layout/IndentationWidthto indent block bodies relative to the method selector for trailing-dot multi-line method chains whenEnforcedStyleAlignWithisrelative_to_receiver. ([@ddbrendan][])Style/RedundantParenthesesthat swallowed chained method calls into a trailing inline comment on the line above the closing parenthesis. ([@hammadxcm][])Changes
FilePatterns#match?results per path so cops sharing the sameInclude/Excludeconfiguration do not each repeatFile.fnmatch?work on every file. ([@Darhazer][])v1.86.2Compare Source
New features
Bug fixes
Style/HashLookupMethodwhen chainingfetch(or[]) calls on the same expression. ([@koic][])Style/ReduceToHashwhen nestedeach_with_object/inject/reducecalls would build hashes. ([@koic][])Style/SoleNestedConditionalwhen autocorrecting nested conditionals containing comments. ([@koic][])constantsfromStyle/ModuleMemberExistenceCheck. ([@t-daisuke][])Style/RedundantSelfwhen an explicitselfreceiver in one scope matches the LHS of an||=,&&=, orop_asgnin another scope. ([@koic][])Lint/RequireRelativeSelfPathwhen a non-.rbfile usesrequire_relativewith its own basename. ([@koic][])Layout/ClosingParenthesisIndentationandLayout/CommentIndentation. ([@koic][])Lint/RedundantSafeNavigationwhen safe navigation appears inrescueorensurebodies. ([@koic][])Lint/RedundantSafeNavigationwhen safe navigation appears in the body ofunless. ([@koic][])Style/CopyrightwhenNoticepattern starts with\A#, uses\smetacharacters, or has multiple spaces after#. ([@koic][])Style/DocumentDynamicEvalDefinitionwhen the heredoc contains an escaped interpolation (\#{...}). ([@eyupcanakman][])--outdisables parallelization. ([@deivid-rodriguez][])TargetFinderto work correctly inside hidden parent directories. ([@alpaca-tc][])FrozenErrorinDisabledConfigFormatterfor frozen array config parameters. ([@koic][])Gemspec/RequireMFAcausing an infinite loop whenrubygems_mfa_requiredmetadata uses a symbol key. ([@koic][])--disable-uncorrectableand offense near heredoc. ([@jonas054][])Layout/MultilineMethodCallIndentationwhen a dot-aligned method chain is inside a hash pair value. ([@nicolas-finary][])Lint/MissingCopEnableDirectivewhen# rubocop:disableis wrapped in a# rubocop:push/# rubocop:popblock. ([@koic][])Style/RegexpLiteralwhen the regexp contains unbalanced braces that conflict with the preferred%rdelimiters. ([@koic][])Style/CopyrightwhenAutocorrectNoticelacks a#prefix orNoticepattern starts with^#. ([@koic][])Style/IfInsideElseautocorrect moving comments into the wrong branch when a comment precedes the nestedifin anelse. ([@hammadxcm][])Style/WhileUntilModifierwhen the body is a conditional. ([@fujitanisora][])v1.86.1Compare Source
Bug fixes
Style/AccessModifierDeclarationsinline autocorrect dropping comments between the access modifier and the following method definition. ([@dduugg][])Lint/DuplicateMethodsfalse positives for anonymous classes in constant assignments and method return values. ([@eugeneius][])Lint/DuplicateMethodsfalse positives with anonymous classes inside blocks (e.g. RSpeclet,describe). ([@ShkumbinDelija][])included_modulesfromStyle/ModuleMemberExistenceCheck. ([@koic][])Style/RedundantLineContinuationwhen using interpolated string literals. ([@koic][])file_to_include?when a relativeIncludepattern matches a parent directory name in the absolute file path. ([@jonas054][])Layout/EmptyLineAfterGuardClausewhen consecutive guard clauses useand return. ([@eugeneius][])Lint/RedundantSafeNavigationwhen chained safe navigation is used in a conditional expression withInferNonNilReceiverenabled. ([@koic][])Style/RedundantParentheseswhen using parentheses around an endless range in assignment. ([@koic][])Style/RedundantParentheseshandling of beginless ranges. ([@oggy][])Lint/Syntaxzero-length diagnostic range for syntax errors at EOF. ([@55728][])Includepath adjustment when local config overrides an inheritedInclude. ([@jonas054][])Layout/EndAlignmentcop error on an emptybegin. ([@viralpraxis][])Layout/LineLengthwhenSplitStringsoption is enabled and__FILE__is used. ([@jeromedalbert][])Lint/UnusedMethodArgumentfalse positive when block argument is used viayield. ([@dduugg][])Changes
Style/OneClassPerFileexcludespec/**/*andtest/**/*by default. ([@koic][])paralleldependency to>= 1.10. ([@koic][])Style/RedundantStructKeywordInitcop by default. ([@koic][])v1.86.0Compare Source
New features
AllowedParentClassesoption toStyle/EmptyClassDefinition. ([@hammadkhan][])AllowedReceiversforStyle/HashLookupMethod. ([@koic][])Bug fixes
Style/ConcatArrayLiteralsautocorrect deleting code for percent literals with interpolation. ([@bbatsov][])Lint/ConstantReassignment. ([@ydakuka][])Lint/DuplicateMethodswhen duplicate methods are defined in anonymous classes and modules not assigned to a constant. ([@Darhazer][])Style/RedundantParentheseswhen redundant parentheses around range literals in block body. ([@koic][])Layout/MultilineMethodCallIndentationwhen method chain is inside a hash pair value passed to a multiline chained method call. ([@ydakuka][])Lint/DuplicateMethodswhen modules blocks are passed as method arguments. ([@5hun-s][])Lint/DuplicateMethodswhen the same method is defined in different anonymous module blocks passed to a no-receiver call (e.g.stub_const). ([@Darhazer][])Layout/EmptyLineAfterGuardClausewhen using a guard clause followed by a multi-line guard clause withraise,fail,return,break, ornext. ([@koic][])Layout/RedundantLineBreakwhen settingInspectBlocks: trueand usingrescueorensurein the block. ([@koic][])Style/FileOpenwhen assigningFile.opento an instance variable, class variable, global variable, or constant. ([@koic][])Lint/DuplicateMethodswhen the same method is defined in anonymous module blocks passed to different receivers. ([@koic][])Style/IfWithSemicolonwhenreturnwith value is in theelsebranch. ([@koic][])Style/IfUnlessModifierwhen multipleif/unlessmodifier forms are on the same line inside a collection. ([@ydakuka][])Lint/SafeNavigationChainwhen chaining a method call after safe navigation in the if branch of a ternary. ([@koic][])Layout/EndAlignmentwhenendis followed by||or&&. ([@koic][])Safe/SafeAutoCorrectparameter" when those parameters are set for cops that don't have them in their default configuration. ([@dduugg][])Lint/UselessDefaultValueArgumentwhenfetchwithout a receiver is inside afetchblock. ([@koic][])Style/IfWithSemicolonwhen using single-lineunless/;/end. ([@koic][])Style/NonNilCheckautocorrect for receivers containing spaces. ([@bbatsov][])Style/RaiseArgsto allow anonymous keyword forwarding (raise Ex.new(**)). ([@bbatsov][])Lint/RedundantCopDisableDirectivewhen arubocop:disablecomment is used to suppressLint/EmptyWhen,Lint/EmptyConditionalBody,Lint/EmptyInPattern, orStyle/SymbolProc. ([@eugeneius][])Style/RedundantPercentQfor%qstrings with interpolation-like syntax. ([@bbatsov][])Style/AndOradding unnecessary parentheses aroundreturnwithout arguments. ([@eugeneius][])Lint/UselessConstantScoping. ([@h-lame][])Style/TrailingMethodEndStatementto detect singleton methods (def self.foo). ([@bbatsov][])Changes
MaxFilesInCachetofalseto entirely disable cache pruning. ([@byroot][])Lint/RedundantSafeNavigationaware of safe navigation in conditional true branch. ([@koic][])mcpgem from runtime dependencies. ([@koic][])v1.85.1Compare Source
Bug fixes
Style/FileOpenwhenFile.openis passed as an argument or returned from a method. ([@sferik][])Style/ReduceToHashfalse positive when accumulator is read in key/value. ([@sferik][])Style/RedundantParentheseswhen parenthesizing a range in a block body. ([@koic][])Changes
v1.85.0Compare Source
New features
mise.tomlas source for TargetRubyVersion. ([@kitsane][])Lint/UnreachablePatternBranchcop. ([@sferik][])Style/FileOpencop. ([@sferik][])Style/MapJoincop. ([@sferik][])Style/OneClassPerFilecop. ([@sferik][])Style/PartitionInsteadOfDoubleSelectcop. ([@sferik][])Style/PredicateWithKindcop. ([@sferik][])Style/ReduceToHashcop. ([@sferik][])Style/RedundantMinMaxBycop. ([@sferik][])Style/RedundantStructKeywordInitcop. ([@koic][])Style/SelectByKindcop. ([@sferik][])Style/SelectByRangecop. ([@sferik][])Style/TallyMethodcop. ([@sferik][])Lint/DataDefineOverridecop. ([@bbatsov][])InternalAffairs/ItblockHandlercop. ([@bbatsov][])Bug fixes
Style/EmptyClassDefinition. ([@koic][])Style/NegatedWhilewhen the last expression of anuntilcondition is negated. ([@koic][])Style/EmptyClassDefinitionmessage wording. ([@bbatsov][])Lint/Voidwhennilis used incasebranch. ([@5hun-s][])Style/IfUnlessModifierwhen modifier forms are used inside string interpolations. ([@koic][])Style/HashTransformKeysandStyle/HashTransformValues. ([@sferik][])Lint/Voidforeachblocks where the return value may be meaningful (e.g.,Enumerator#each). ([[@sferik](https://redirect.github.comConfiguration
📅 Schedule: (in timezone Europe/Amsterdam)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.