chore(deps): bump the bundler group across 4 directories with 4 updates - #755
Open
dependabot[bot] wants to merge 1 commit into
Open
chore(deps): bump the bundler group across 4 directories with 4 updates#755dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the bundler group with 4 updates in the /e2e/ruby/rails/api-only directory: [sqlite3](https://github.com/sparklemotion/sqlite3-ruby), [json](https://github.com/ruby/json), [mail](https://github.com/mikel/mail) and [msgpack](https://github.com/msgpack/msgpack-ruby). Bumps the bundler group with 4 updates in the /e2e/ruby/rails/demo directory: [sqlite3](https://github.com/sparklemotion/sqlite3-ruby), [json](https://github.com/ruby/json), [mail](https://github.com/mikel/mail) and [msgpack](https://github.com/msgpack/msgpack-ruby). Bumps the bundler group with 1 update in the /e2e/ruby/rails/demo-rails70 directory: [sqlite3](https://github.com/sparklemotion/sqlite3-ruby). Bumps the bundler group with 1 update in the /sdk/highlight-ruby/highlight directory: [json](https://github.com/ruby/json). Updates `sqlite3` from 1.7.3 to 2.9.5 - [Release notes](https://github.com/sparklemotion/sqlite3-ruby/releases) - [Changelog](https://github.com/sparklemotion/sqlite3-ruby/blob/main/CHANGELOG.md) - [Commits](sparklemotion/sqlite3-ruby@v1.7.3...v2.9.5) Updates `json` from 2.19.5 to 2.19.9 - [Release notes](https://github.com/ruby/json/releases) - [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md) - [Commits](ruby/json@v2.19.5...v2.19.9) Updates `mail` from 2.9.0 to 2.9.1 - [Release notes](https://github.com/mikel/mail/releases) - [Changelog](https://github.com/mikel/mail/blob/master/CHANGELOG.rdoc) - [Commits](mikel/mail@2.9.0...2.9.1) Updates `msgpack` from 1.8.0 to 1.8.2 - [Changelog](https://github.com/msgpack/msgpack-ruby/blob/master/ChangeLog) - [Commits](msgpack/msgpack-ruby@v1.8.0...v1.8.2) Updates `sqlite3` from 1.7.3 to 2.9.5 - [Release notes](https://github.com/sparklemotion/sqlite3-ruby/releases) - [Changelog](https://github.com/sparklemotion/sqlite3-ruby/blob/main/CHANGELOG.md) - [Commits](sparklemotion/sqlite3-ruby@v1.7.3...v2.9.5) Updates `json` from 2.19.5 to 2.19.9 - [Release notes](https://github.com/ruby/json/releases) - [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md) - [Commits](ruby/json@v2.19.5...v2.19.9) Updates `mail` from 2.9.0 to 2.9.1 - [Release notes](https://github.com/mikel/mail/releases) - [Changelog](https://github.com/mikel/mail/blob/master/CHANGELOG.rdoc) - [Commits](mikel/mail@2.9.0...2.9.1) Updates `msgpack` from 1.8.0 to 1.8.2 - [Changelog](https://github.com/msgpack/msgpack-ruby/blob/master/ChangeLog) - [Commits](msgpack/msgpack-ruby@v1.8.0...v1.8.2) Updates `sqlite3` from 1.7.3 to 2.9.5 - [Release notes](https://github.com/sparklemotion/sqlite3-ruby/releases) - [Changelog](https://github.com/sparklemotion/sqlite3-ruby/blob/main/CHANGELOG.md) - [Commits](sparklemotion/sqlite3-ruby@v1.7.3...v2.9.5) Updates `json` from 2.9.1 to 2.19.9 - [Release notes](https://github.com/ruby/json/releases) - [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md) - [Commits](ruby/json@v2.19.5...v2.19.9) --- updated-dependencies: - dependency-name: sqlite3 dependency-version: 2.9.5 dependency-type: direct:production dependency-group: bundler - dependency-name: json dependency-version: 2.19.9 dependency-type: indirect dependency-group: bundler - dependency-name: mail dependency-version: 2.9.1 dependency-type: indirect dependency-group: bundler - dependency-name: msgpack dependency-version: 1.8.2 dependency-type: indirect dependency-group: bundler - dependency-name: sqlite3 dependency-version: 2.9.5 dependency-type: direct:production dependency-group: bundler - dependency-name: json dependency-version: 2.19.9 dependency-type: indirect dependency-group: bundler - dependency-name: mail dependency-version: 2.9.1 dependency-type: indirect dependency-group: bundler - dependency-name: msgpack dependency-version: 1.8.2 dependency-type: indirect dependency-group: bundler - dependency-name: sqlite3 dependency-version: 2.9.5 dependency-type: direct:production dependency-group: bundler - dependency-name: json dependency-version: 2.19.9 dependency-type: indirect dependency-group: bundler ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the bundler group with 4 updates in the /e2e/ruby/rails/api-only directory: sqlite3, json, mail and msgpack.
Bumps the bundler group with 4 updates in the /e2e/ruby/rails/demo directory: sqlite3, json, mail and msgpack.
Bumps the bundler group with 1 update in the /e2e/ruby/rails/demo-rails70 directory: sqlite3.
Bumps the bundler group with 1 update in the /sdk/highlight-ruby/highlight directory: json.
Updates
sqlite3from 1.7.3 to 2.9.5Release notes
Sourced from sqlite3's releases.
... (truncated)
Changelog
Sourced from sqlite3's changelog.
... (truncated)
Commits
747e7deversion bump to v2.9.52bd436dFix use-after-free issue with custom functions (#710)b24e1e6Fix use-after-free issue with aggregate functions (#711)9abc955dep: update vendored sqlite to 3.53.2 (#709)a3f8e71For sqlcipher builds, prefer sqlcipher's header (#708)9292033build(deps): bump the actions group across 1 directory with 3 updates (#707)b79c841Introduce a security reporting policyae58899version bump to v2.9.4e16df53Merge pull request #704 from sparklemotion/dep-sqlite-3.53.12dc95ffdep: update vendored sqlite to 3.53.1Updates
jsonfrom 2.19.5 to 2.19.9Release notes
Sourced from json's releases.
Changelog
Sourced from json's changelog.
Commits
2cff267Release 2.19.9fd6a65bgenerator.c: don't start with a stack buffer in IO case5233dd9Release 2.19.83f44b26Prevent buffer over-read when generating EOF errorbe8d068Handle invalid types passed asmax_nestingoption59501c0Get rid of all_images gemc7a7b2bAdd a security note in READMEab6c8f2Release 2.19.7f033b9dFix some more edge cases with out of range floats5ca8a67parser.c: Ensure the user provided string can't be mutatedUpdates
mailfrom 2.9.0 to 2.9.1Release notes
Sourced from mail's releases.
Commits
d645d7bMerge pull request #1665 from mikel/tag-2915c863edBump to 2.9.114915faMerge pull request #1664 from mikel/sec4eab562Potential fix for pull request findingf9d59c2Improve decoding of Q- and B-encoded stringsf98fb65Merge pull request #1653 from ydah/add-ci-matrixd908100Add Ruby 3.4 to CI matrix in GitHub Actions workflowUpdates
msgpackfrom 1.8.0 to 1.8.2Changelog
Sourced from msgpack's changelog.
Commits
09c914dRelease 1.8.29cfd2abStop testing ruby 2.5 on macOS50245acMerge commit from fork5627d71_msgpack_buffer_shift_chunk: reset rmem pointers when fully emptycce2485Release 1.8.1677e6b8Merge pull request #389 from msgpack/str-limitf0b6281Update CI matrixabe9066Update CI matrix8ba8702Don't pre-allocate strings larger than the buffered size199e88fMerge pull request #386 from msgpack/fix-valgrind-ciUpdates
sqlite3from 1.7.3 to 2.9.5Release notes
Sourced from sqlite3's releases.
... (truncated)
Changelog
Sourced from sqlite3's changelog.
... (truncated)
Commits
747e7deversion bump to v2.9.52bd436dFix use-after-free issue with custom functions (#710)b24e1e6Fix use-after-free issue with aggregate functions (#711)9abc955dep: update vendored sqlite to 3.53.2 (#709)a3f8e71For sqlcipher builds, prefer sqlcipher's header (#708)9292033build(deps): bump the actions group across 1 directory with 3 updates (#707)b79c841Introduce a security reporting policyae58899version bump to v2.9.4e16df53Merge pull request #704 from sparklemotion/dep-sqlite-3.53.12dc95ffdep: update vendored sqlite to 3.53.1Updates
jsonfrom 2.19.5 to 2.19.9Release notes
Sourced from json's releases.
Changelog
Sourced from json's changelog.
Commits
2cff267Release 2.19.9fd6a65bgenerator.c: don't start with a stack buffer in IO case5233dd9Release 2.19.83f44b26Prevent buffer over-read when generating EOF errorbe8d068Handle invalid types passed asmax_nestingoption59501c0Get rid of all_images gemc7a7b2bAdd a security note in READMEab6c8f2Release 2.19.7f033b9dFix some more edge cases with out of range floats5ca8a67parser.c: Ensure the user provided string can't be mutatedUpdates
mailfrom 2.9.0 to 2.9.1Release notes
Sourced from mail's releases.
Commits
d645d7bMerge pull request #1665 from mikel/tag-2915c863edBump to 2.9.114915faMerge pull request #1664 from mikel/sec4eab562Potential fix for pull request findingf9d59c2Improve decoding of Q- and B-encoded stringsf98fb65Merge pull request #1653 from ydah/add-ci-matrixd908100Add Ruby 3.4 to CI matrix in GitHub Actions workflowUpdates
msgpackfrom 1.8.0 to 1.8.2Changelog
Sourced from msgpack's changelog.
Commits
09c914dRelease 1.8.29cfd2abStop testing ruby 2.5 on macOS50245acMerge commit from fork5627d71_msgpack_buffer_shift_chunk: reset rmem pointers when fully emptycce2485Release 1.8.1677e6b8Merge pull request #389 from msgpack/str-limitf0b6281Update CI matrixabe9066Update CI matrix8ba8702Don't pre-allocate strings larger than the buffered size199e88fMerge pull request #386 from msgpack/fix-valgrind-ciUpdates
sqlite3from 1.7.3 to 2.9.5Release notes
Sourced from sqlite3's releases.
... (truncated)
Changelog
Sourced from sqlite3's changelog.
... (truncated)
Commits
747e7deversion bump to v2.9.52bd436dFix use-after-free issue with custom functions (#710)b24e1e6Fix use-after-free issue with aggregate functions (#711)9abc955dep: update vendored sqlite to 3.53.2 (#709)a3f8e71For sqlcipher builds, prefer sqlcipher's header (#708)9292033build(deps): bump the actions group across 1 directory with 3 updates (#707)b79c841Introduce a security reporting policyae58899version bump to v2.9.4e16df53Merge pull request #704 from sparklemotion/dep-sqlite-3.53.12dc95ffdep: update vendored sqlite to 3.53.1Updates
jsonfrom 2.9.1 to 2.19.9Release notes
Sourced from json's releases.
Changelog
Sourced from json's changelog.
Commits
2cff267Release 2.19.9fd6a65bgenerator.c: don't start with a stack buffer in IO case5233dd9Release 2.19.83f44b26Prevent buffer over-read when generating EOF errorbe8d068Handle invalid types passed asmax_nestingoption59501c0Get rid of all_images gemc7a7b2bAdd a security note in READMEab6c8f2Release 2.19.7f033b9dFix some more edge cases with out of range floats5ca8a67parser.c: Ensure the user provided string can't be mutatedDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.
Note
Overview
Updates Bundler dependencies in the Ruby Rails e2e fixtures (
api-only,demo,demo-rails70) and thehighlightgem lockfile.sqlite3constraints move from~> 1.4to~> 2.9(resolved 2.9.5) in all three Rails sample apps, with lockfiles picking up the newer platform-specific native gems.api-onlyanddemoalso refresh transitive gems in their locks (json,mail,msgpack,net-protocolwhere applicable).demo-rails70is mainly the sqlite3 bump; its lock also advancesjson(and related entries such asmsgpack). Insdk/highlight-ruby/highlight, onlyGemfile.lockchanges:jsonis aligned to 2.19.9 (no Gemfile edit).No application or SDK source changes—only
Gemfile/Gemfile.lockupdates for dependency and security maintenance in test/demo bundles.Reviewed by Cursor Bugbot for commit a2c8296. Bugbot is set up for automated code reviews on this repo. Configure here.