Bump the bundler group across 1 directory with 9 updates #1
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the bundler group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [rake](https://github.com/ruby/rake) | `0.9.2` | `12.3.3` | | [rack](https://github.com/rack/rack) | `1.3.2` | `2.2.20` | | [json](https://github.com/ruby/json) | `1.5.3` | `2.3.0` | | [nokogiri](https://github.com/sparklemotion/nokogiri) | `1.4.7` | `1.18.9` | | [ffi](https://github.com/ffi/ffi) | `1.0.9` | `1.9.24` | | [i18n](https://github.com/ruby-i18n/i18n) | `0.6.0` | `0.8.0` | | [mail](https://github.com/mikel/mail) | `2.3.0` | `2.4.4` | | [rubyzip](https://github.com/rubyzip/rubyzip) | `0.9.4` | `1.3.0` | Updates `rake` from 0.9.2 to 12.3.3 - [Release notes](https://github.com/ruby/rake/releases) - [Changelog](https://github.com/ruby/rake/blob/master/History.rdoc) - [Commits](ruby/rake@rake-0.9.2...v12.3.3) Updates `rack` from 1.3.2 to 2.2.20 - [Release notes](https://github.com/rack/rack/releases) - [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md) - [Commits](rack/rack@1.3.2...v2.2.20) Updates `sinatra` from 1.2.6 to 3.2.0 - [Changelog](https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md) - [Commits](sinatra/sinatra@1.2.6...v3.2.0) Updates `json` from 1.5.3 to 2.3.0 - [Release notes](https://github.com/ruby/json/releases) - [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md) - [Commits](ruby/json@v1.5.3...v2.3.0) Updates `nokogiri` from 1.4.7 to 1.18.9 - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md) - [Commits](sparklemotion/nokogiri@v1.4.7...v1.18.9) Updates `ffi` from 1.0.9 to 1.9.24 - [Changelog](https://github.com/ffi/ffi/blob/master/CHANGELOG.md) - [Commits](ffi/ffi@1.0.9...1.9.24) Updates `i18n` from 0.6.0 to 0.8.0 - [Release notes](https://github.com/ruby-i18n/i18n/releases) - [Changelog](https://github.com/ruby-i18n/i18n/blob/master/CHANGELOG.md) - [Commits](ruby-i18n/i18n@v0.6.0...v0.8.0) Updates `mail` from 2.3.0 to 2.4.4 - [Release notes](https://github.com/mikel/mail/releases) - [Changelog](https://github.com/mikel/mail/blob/2.4.4/CHANGELOG.rdoc) - [Commits](mikel/mail@2.3.0...2.4.4) Updates `rubyzip` from 0.9.4 to 1.3.0 - [Release notes](https://github.com/rubyzip/rubyzip/releases) - [Changelog](https://github.com/rubyzip/rubyzip/blob/main/Changelog.md) - [Commits](https://github.com/rubyzip/rubyzip/commits/v1.3.0) --- updated-dependencies: - dependency-name: rake dependency-version: 12.3.3 dependency-type: direct:production dependency-group: bundler - dependency-name: rack dependency-version: 2.2.20 dependency-type: direct:production dependency-group: bundler - dependency-name: sinatra dependency-version: 3.2.0 dependency-type: direct:production dependency-group: bundler - dependency-name: json dependency-version: 2.3.0 dependency-type: direct:production dependency-group: bundler - dependency-name: nokogiri dependency-version: 1.18.9 dependency-type: direct:development dependency-group: bundler - dependency-name: ffi dependency-version: 1.9.24 dependency-type: indirect dependency-group: bundler - dependency-name: i18n dependency-version: 0.8.0 dependency-type: indirect dependency-group: bundler - dependency-name: mail dependency-version: 2.4.4 dependency-type: indirect dependency-group: bundler - dependency-name: rubyzip dependency-version: 1.3.0 dependency-type: indirect dependency-group: bundler ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the bundler group with 8 updates in the / directory:
0.9.212.3.31.3.22.2.201.5.32.3.01.4.71.18.91.0.91.9.240.6.00.8.02.3.02.4.40.9.41.3.0Updates
rakefrom 0.9.2 to 12.3.3Release notes
Sourced from rake's releases.
... (truncated)
Changelog
Sourced from rake's changelog.
... (truncated)
Commits
5c87c46Bump version to 12.3.3.5b8f8fcUse File.open explicitly.6497ba4Merge pull request #317 from ruby/ignore-gitignorebe62efbRemoved gitignore from gemspec files.1c22b49Merge pull request #309 from RDIL/patch-1496944aRemove deprecated travis ci option489c7d8Merge pull request #307 from ruby/azure-pipelines77eb6d8Only enabled macOS environment72ffa2euse realpath7744872Do not specify ruby version of macOSUpdates
rackfrom 1.3.2 to 2.2.20Release notes
Sourced from rack's releases.
Changelog
Sourced from rack's changelog.
... (truncated)
Commits
6ef5915Bump patch version.4e2c903Unbounded read inRack::Requestform parsing can lead to memory exhaustion.fba2c8bImproper handling of proxy headers inRack::Sendfilemay allow proxy bypass.ed3d834Normalize adivsories links.4c4ea29Bump patch version.c370dcdLimit amount of retained data when parsing multipart requestsd869fedFix denial of service vulnerbilties in multipart parsing0f76d43Bump patch version.493a411Fix thin integration.54e4ffdUnbounded parameter parsing inRack::QueryParser.Updates
sinatrafrom 1.2.6 to 3.2.0Changelog
Sourced from sinatra's changelog.
... (truncated)
Commits
4e8fdb53.2.0 release (#1977)3b75657Revert "ShorterSinatra::Runnertimeout" (#1976)1551ef7Ruby 3.3 + Bundler 2.5 compatibilityca6b71cHelpful message whenSinatra::Runnertimes out0e43702ShorterSinatra::RunnertimeoutcadbeddCI: move rack-protection to its own job (#1974)5d844eeAdd workflow for Trusted Publishing to RubyGems (#1970)11119a8CI: use latest rack-test release, not trunk (#1969)2b89659CI: avoid rdiscount >= 2.2.7.2 on trufflerubydcdebe9CI: remove sinatra from rack-protection bundleUpdates
jsonfrom 1.5.3 to 2.3.0Release notes
Sourced from json's releases.
... (truncated)
Changelog
Sourced from json's changelog.
... (truncated)
Commits
92cf5c4v2.3.0579ae85Add some more recent jrubyacabfebMake tests green on jrubyc194360Update travis config49317c1Ignore log filesd84439fMerge pull request #391 from headius/prep_2.3.038f68d1Bump versions for 2.3.0.40524a9Merge pull request #390 from flori/relax-test-unit87379e6relax test-unit version for old ruby05de02fMerge branch 'zenspider-zenspider/ruby-2.7'Updates
nokogirifrom 1.4.7 to 1.18.9Release notes
Sourced from nokogiri's releases.
... (truncated)
Changelog
Sourced from nokogiri's changelog.
... (truncated)
Commits
1dcd8ceversion bump to v1.18.9a05d2b4Apply upstream patches to address multiple vulnerabilities (#3526)947a55eApply upstream patches to address multiple vulnerabilities9187f4aversion bump to v1.18.81deea04dep: libxml2 to v2.13.8 (branchv1.18.x) (#3509)6457fe6dep: libxml2 to v2.13.813e8aa4version bump to v1.18.7605699ddep: bump libxml2 to 2.13.7 (v1.18.x backport) (#3495)804e590dep: bump libxml2 to 2.13.752bf15bdep(dev): drop Rubocop from JRuby depsUpdates
ffifrom 1.0.9 to 1.9.24Changelog
Sourced from ffi's changelog.
... (truncated)
Commits
4e1051aRun rspec with dots output onlye70b13dFix integer parameter range specs55ae232Fix several specs where raise_error was called without class8821d4fSpecify error class for several raise_error callsbf48d44Fix missing C declarations causing compiler warningsf569788Replace symlinks for mips r6 with plain filesfedbae0Update CHANGELOGa4d4d19Merge branch 'master' of github.com:ffi/ffi45d8803Add a CHANGELOG file2ff1d8fBump VERSION to 1.9.24Updates
i18nfrom 0.6.0 to 0.8.0Release notes
Sourced from i18n's releases.
Commits
529fc5bBump to 0.8.0d5fb5ddfix references to i18n in Gemfiles5cd5c9fAdd link to i18n guide to README27d7ab7Remove Gemfile.lock from source control4f0331dBump dependencies210feb6Update bundler7b205f2Add issue template6f3a5bbBump to 0.8.0.beta15e1af91Merge pull request #252 from Chipairon/fix-tests-for-stored-procse532e61Merge pull request #216 from bogdan/interpolate-rails-safe-bufferUpdates
mailfrom 2.3.0 to 2.4.4Changelog
Sourced from mail's changelog.
Commits
36b7fa2Fix security vulnerability allowing command line exploit when using file deli...29aca25Preventing file system traversal in file_delivery method9beb079Version bump to 2.4.339b590dMaking sure that destinations are also properly escaped in all version of ruby0a940f4Version bump to 2.4.2ac56f03Fix security vulnerability allowing command line exploit when using exim or s...47e288eUpdating changeloge917ca8Merge pull request #339 from janv/mastercb1df03Encodings.value_decode(str): Treat lines with mixed encoding correctly when t...f856208Adding pledgie button back inUpdates
rubyzipfrom 0.9.4 to 1.3.0Release notes
Sourced from rubyzip's releases.