Bump the bundler group across 1 directory with 7 updates #15
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the bundler group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [activesupport](https://github.com/rails/rails) | `7.0.3` | `7.0.7.1` | | [nokogiri](https://github.com/sparklemotion/nokogiri) | `1.14.3` | `1.18.9` | | [rack](https://github.com/rack/rack) | `2.2.3.1` | `2.2.20` | | [rexml](https://github.com/ruby/rexml) | `3.2.5` | `3.4.2` | | [sinatra](https://github.com/sinatra/sinatra) | `2.2.0` | `4.2.0` | | [webrick](https://github.com/ruby/webrick) | `1.7.0` | `1.8.2` | Updates `activesupport` from 7.0.3 to 7.0.7.1 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v8.1.1/activesupport/CHANGELOG.md) - [Commits](rails/rails@v7.0.3...v7.0.7.1) Updates `nokogiri` from 1.14.3 to 1.18.9 - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md) - [Commits](sparklemotion/nokogiri@v1.14.3...v1.18.9) Updates `activerecord` from 7.0.3 to 7.0.7.1 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v8.1.1/activerecord/CHANGELOG.md) - [Commits](rails/rails@v7.0.3...v7.0.7.1) Updates `rack` from 2.2.3.1 to 2.2.20 - [Release notes](https://github.com/rack/rack/releases) - [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md) - [Commits](rack/rack@2.2.3.1...v2.2.20) Updates `rexml` from 3.2.5 to 3.4.2 - [Release notes](https://github.com/ruby/rexml/releases) - [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md) - [Commits](ruby/rexml@v3.2.5...v3.4.2) Updates `sinatra` from 2.2.0 to 4.2.0 - [Changelog](https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md) - [Commits](sinatra/sinatra@v2.2.0...v4.2.0) Updates `webrick` from 1.7.0 to 1.8.2 - [Release notes](https://github.com/ruby/webrick/releases) - [Commits](ruby/webrick@v1.7.0...v1.8.2) --- updated-dependencies: - dependency-name: activesupport dependency-version: 7.0.7.1 dependency-type: direct:production dependency-group: bundler - dependency-name: nokogiri dependency-version: 1.18.9 dependency-type: direct:production dependency-group: bundler - dependency-name: activerecord dependency-version: 7.0.7.1 dependency-type: indirect dependency-group: bundler - dependency-name: rack dependency-version: 2.2.20 dependency-type: indirect dependency-group: bundler - dependency-name: rexml dependency-version: 3.4.2 dependency-type: indirect dependency-group: bundler - dependency-name: sinatra dependency-version: 4.2.0 dependency-type: indirect dependency-group: bundler - dependency-name: webrick dependency-version: 1.8.2 dependency-type: indirect dependency-group: bundler ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
This was referenced Dec 23, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the bundler group with 6 updates in the / directory:
7.0.37.0.7.11.14.31.18.92.2.3.12.2.203.2.53.4.22.2.04.2.01.7.01.8.2Updates
activesupportfrom 7.0.3 to 7.0.7.1Release notes
Sourced from activesupport's releases.
... (truncated)
Commits
c92caefPreparing for 7.0.7.1 release936587dupdating version / changeloga21d6edUse a temporary file for storing unencrypted files while editing522c86fPreparing for 7.0.7 release5610cbaSync CHANGELOG with the changes in the repository7e9ffc2Fix to_s not using :default format with no argsa8e88e2FixCache::NullStorewith local caching for repeated readsb18b9dfMerge pull request #48800 from robinjam/fix-humanize-nilb12fe80FixEnumerable#sumforEnumerator#lazye3f80f6Add lower bound to Listen gem requirementUpdates
nokogirifrom 1.14.3 to 1.18.9Release notes
Sourced from nokogiri's releases.
... (truncated)
Changelog
Sourced from nokogiri's changelog.
... (truncated)
Commits
1dcd8ceversion bump to v1.18.9a05d2b4Apply upstream patches to address multiple vulnerabilities (#3526)947a55eApply upstream patches to address multiple vulnerabilities9187f4aversion bump to v1.18.81deea04dep: libxml2 to v2.13.8 (branchv1.18.x) (#3509)6457fe6dep: libxml2 to v2.13.813e8aa4version bump to v1.18.7605699ddep: bump libxml2 to 2.13.7 (v1.18.x backport) (#3495)804e590dep: bump libxml2 to 2.13.752bf15bdep(dev): drop Rubocop from JRuby depsUpdates
activerecordfrom 7.0.3 to 7.0.7.1Release notes
Sourced from activerecord's releases.
... (truncated)
Commits
c92caefPreparing for 7.0.7.1 release936587dupdating version / changelog522c86fPreparing for 7.0.7 release5610cbaSync CHANGELOG with the changes in the repository2dccb3fMerge pull request #48891 from rails/rm-devcontainer-rightfabd0b5Merge pull request #48886 from fatkodima/backport-4567064ea100Make sure nested base errors are translatablebc035fcUse single quotes instead of double quotes to get SQLite constraintsb9521b5Remove duplicated fixtured25e34dFixActiveRecord::QueryMethods#in_order_ofto work with nilsUpdates
rackfrom 2.2.3.1 to 2.2.20Release notes
Sourced from rack's releases.
Changelog
Sourced from rack's changelog.
... (truncated)
Commits
6ef5915Bump patch version.4e2c903Unbounded read inRack::Requestform parsing can lead to memory exhaustion.fba2c8bImproper handling of proxy headers inRack::Sendfilemay allow proxy bypass.ed3d834Normalize adivsories links.4c4ea29Bump patch version.c370dcdLimit amount of retained data when parsing multipart requestsd869fedFix denial of service vulnerbilties in multipart parsing0f76d43Bump patch version.493a411Fix thin integration.54e4ffdUnbounded parameter parsing inRack::QueryParser.Updates
rexmlfrom 3.2.5 to 3.4.2Release notes
Sourced from rexml's releases.
... (truncated)
Changelog
Sourced from rexml's changelog.
... (truncated)
Commits
f36916fAdd 3.4.2 entry (#284)5859bdeAdded XML declaration check &Source#skip_spacesmethod (#282)1d876e3Bump actions/checkout from 4 to 5 (#283)c87bda8Remove ostruct from dev deps (#281)c60ae02Remove bundler from dev deps (#277)9b084d7Fix & Deprecate REXML::Text#text_indent (#275)04a589aFix a bug that XPath can't be used for no document element (#268)66232eaRemove redundant return statements (#266)63f3e97Use Safe Navigation (&.) from Ruby 2.3 (#265)d427fc5Avoid redundant calls for doctype (#264)Updates
sinatrafrom 2.2.0 to 4.2.0Changelog
Sourced from sinatra's changelog.
... (truncated)
Commits
f2ad45f4.2.0 release (#2122)3fe8c38Fix regex inetag_matches?to prevent ReDoS (#2121)fa99a21PATH_INFOcan never be empty. (#2114)ea0d3faSkip broken tests. (#2115)5e15985Sync changelog for v4.0.191cfb54Add :static_headers setting for custom headers in static file responses (#2089)c918134Setrubygems_mfa_requiredfor thesinatragem (#2087)ac3ff23README: Remove duplicate mention of installing puma (#2091)cfcc70dCI: don't useRack::Linton invalid hostname (#2086)c235249CI: Test with Ruby 3.4 (#2083)Updates
webrickfrom 1.7.0 to 1.8.2Release notes
Sourced from webrick's releases.
... (truncated)
Commits
0fb9de6Bump up v1.8.2b9a4c81Removed trailing spacesf5faca9Prevent request smuggling0c600e1Fix reference to URI::REGEXP::PATTERN::HOST15a9391Return 400 response for chunked requests with unexpected data after chunk2b38d56Treat missing CRLF separator after headers as an EOFErrore4efb4aRemove unnecessary gsub calls in test_httprequest.rb426e214Only strip space and horizontal tab in headerse72cb69Prefer squigly heredocs. (#143)ee60354Require CRLF line endings in request line and headersDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.