Bump the bundler group across 1 directory with 27 updates #4
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the bundler group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [puma](https://github.com/puma/puma) | `3.9.1` | `5.6.9` | | [simple_form](https://github.com/heartcombo/simple_form) | `3.5.0` | `5.0.0` | | [devise](https://github.com/heartcombo/devise) | `4.3.0` | `4.9.4` | | [rails](https://github.com/rails/rails) | `5.1.2` | `7.2.1` | | [simple_form](https://github.com/heartcombo/simple_form) | `5.0.0` | `5.3.1` | | [sass-rails](https://github.com/rails/sass-rails) | `5.0.6` | `6.0.0` | | [coffee-rails](https://github.com/rails/coffee-rails) | `4.2.2` | `5.0.0` | | [web-console](https://github.com/rails/web-console) | `3.5.1` | `4.2.1` | | [capybara](https://github.com/teamcapybara/capybara) | `2.14.4` | `3.40.0` | | [puma](https://github.com/puma/puma) | `5.6.9` | `6.4.3` | | [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `3.4.4` | `4.25.0` | | [listen](https://github.com/guard/listen) | `3.1.5` | `3.9.0` | Updates `puma` from 3.9.1 to 5.6.9 - [Release notes](https://github.com/puma/puma/releases) - [Changelog](https://github.com/puma/puma/blob/master/History.md) - [Commits](puma/puma@v3.9.1...v5.6.9) Updates `simple_form` from 3.5.0 to 5.0.0 - [Release notes](https://github.com/heartcombo/simple_form/releases) - [Changelog](https://github.com/heartcombo/simple_form/blob/main/CHANGELOG.md) - [Commits](heartcombo/simple_form@v3.5.0...v5.0.0) Updates `devise` from 4.3.0 to 4.9.4 - [Release notes](https://github.com/heartcombo/devise/releases) - [Changelog](https://github.com/heartcombo/devise/blob/main/CHANGELOG.md) - [Commits](heartcombo/devise@v4.3.0...v4.9.4) Updates `rails` from 5.1.2 to 7.2.1 - [Release notes](https://github.com/rails/rails/releases) - [Commits](rails/rails@v5.1.2...v7.2.1) Updates `simple_form` from 5.0.0 to 5.3.1 - [Release notes](https://github.com/heartcombo/simple_form/releases) - [Changelog](https://github.com/heartcombo/simple_form/blob/main/CHANGELOG.md) - [Commits](heartcombo/simple_form@v3.5.0...v5.0.0) Updates `sass-rails` from 5.0.6 to 6.0.0 - [Release notes](https://github.com/rails/sass-rails/releases) - [Commits](rails/sass-rails@v5.0.6...v6.0.0) Updates `coffee-rails` from 4.2.2 to 5.0.0 - [Changelog](https://github.com/rails/coffee-rails/blob/master/CHANGELOG.md) - [Commits](rails/coffee-rails@v4.2.2...v5.0.0) Updates `web-console` from 3.5.1 to 4.2.1 - [Release notes](https://github.com/rails/web-console/releases) - [Changelog](https://github.com/rails/web-console/blob/main/CHANGELOG.markdown) - [Commits](rails/web-console@v3.5.1...v4.2.1) Updates `capybara` from 2.14.4 to 3.40.0 - [Changelog](https://github.com/teamcapybara/capybara/blob/master/History.md) - [Commits](teamcapybara/capybara@2.14.4...3.40.0) Updates `puma` from 5.6.9 to 6.4.3 - [Release notes](https://github.com/puma/puma/releases) - [Changelog](https://github.com/puma/puma/blob/master/History.md) - [Commits](puma/puma@v3.9.1...v5.6.9) Updates `selenium-webdriver` from 3.4.4 to 4.25.0 - [Release notes](https://github.com/SeleniumHQ/selenium/releases) - [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES) - [Commits](https://github.com/SeleniumHQ/selenium/commits/selenium-4.25.0) Updates `listen` from 3.1.5 to 3.9.0 - [Release notes](https://github.com/guard/listen/releases) - [Commits](guard/listen@v3.1.5...v3.9.0) Updates `actionpack` from 5.1.2 to 7.2.1 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.1/actionpack/CHANGELOG.md) - [Commits](rails/rails@v5.1.2...v7.2.1) Updates `actionview` from 5.1.2 to 7.2.1 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.1/actionview/CHANGELOG.md) - [Commits](rails/rails@v5.1.2...v7.2.1) Updates `activejob` from 5.1.2 to 7.2.1 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.1/activejob/CHANGELOG.md) - [Commits](rails/rails@v5.1.2...v7.2.1) Updates `activerecord` from 5.1.2 to 7.2.1 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.1/activerecord/CHANGELOG.md) - [Commits](rails/rails@v5.1.2...v7.2.1) Updates `activesupport` from 5.1.2 to 7.2.1 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.1/activesupport/CHANGELOG.md) - [Commits](rails/rails@v5.1.2...v7.2.1) Updates `addressable` from 2.5.1 to 2.8.7 - [Changelog](https://github.com/sporkmonger/addressable/blob/main/CHANGELOG.md) - [Commits](sporkmonger/addressable@addressable-2.5.1...addressable-2.8.7) Updates `ffi` from 1.9.18 to 1.17.0 - [Changelog](https://github.com/ffi/ffi/blob/master/CHANGELOG.md) - [Commits](ffi/ffi@1.9.18...v1.17.0) Updates `globalid` from 0.4.0 to 1.2.1 - [Release notes](https://github.com/rails/globalid/releases) - [Commits](rails/globalid@v0.4.0...v1.2.1) Updates `loofah` from 2.0.3 to 2.22.0 - [Release notes](https://github.com/flavorjones/loofah/releases) - [Changelog](https://github.com/flavorjones/loofah/blob/main/CHANGELOG.md) - [Commits](flavorjones/loofah@v2.0.3...v2.22.0) Updates `nokogiri` from 1.8.0 to 1.16.7 - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md) - [Commits](sparklemotion/nokogiri@v1.8.0...v1.16.7) Updates `rack` from 2.0.3 to 3.1.7 - [Release notes](https://github.com/rack/rack/releases) - [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md) - [Commits](rack/rack@2.0.3...v3.1.7) Updates `rails-html-sanitizer` from 1.0.3 to 1.6.0 - [Release notes](https://github.com/rails/rails-html-sanitizer/releases) - [Changelog](https://github.com/rails/rails-html-sanitizer/blob/main/CHANGELOG.md) - [Commits](rails/rails-html-sanitizer@v1.0.3...v1.6.0) Updates `rake` from 12.0.0 to 13.2.1 - [Release notes](https://github.com/ruby/rake/releases) - [Changelog](https://github.com/ruby/rake/blob/master/History.rdoc) - [Commits](ruby/rake@v12.0.0...v13.2.1) Updates `rubyzip` from 1.2.1 to 2.3.2 - [Release notes](https://github.com/rubyzip/rubyzip/releases) - [Changelog](https://github.com/rubyzip/rubyzip/blob/master/Changelog.md) - [Commits](rubyzip/rubyzip@v1.2.1...v2.3.2) Updates `sprockets` from 3.7.1 to 4.2.1 - [Release notes](https://github.com/rails/sprockets/releases) - [Changelog](https://github.com/rails/sprockets/blob/main/CHANGELOG.md) - [Commits](rails/sprockets@v3.7.1...v4.2.1) Updates `tzinfo` from 1.2.3 to 2.0.6 - [Release notes](https://github.com/tzinfo/tzinfo/releases) - [Changelog](https://github.com/tzinfo/tzinfo/blob/master/CHANGES.md) - [Commits](tzinfo/tzinfo@v1.2.3...v2.0.6) Updates `websocket-extensions` from 0.1.2 to 0.1.5 - [Changelog](https://github.com/faye/websocket-extensions-ruby/blob/main/CHANGELOG.md) - [Commits](faye/websocket-extensions-ruby@0.1.2...0.1.5) --- updated-dependencies: - dependency-name: puma dependency-type: direct:production dependency-group: bundler - dependency-name: simple_form dependency-type: direct:production dependency-group: bundler - dependency-name: devise dependency-type: direct:production dependency-group: bundler - dependency-name: rails dependency-type: direct:production dependency-group: bundler - dependency-name: simple_form dependency-type: direct:production dependency-group: bundler - dependency-name: sass-rails dependency-type: direct:production dependency-group: bundler - dependency-name: coffee-rails dependency-type: direct:production dependency-group: bundler - dependency-name: web-console dependency-type: direct:development dependency-group: bundler - dependency-name: capybara dependency-type: direct:development dependency-group: bundler - dependency-name: puma dependency-type: direct:production dependency-group: bundler - dependency-name: selenium-webdriver dependency-type: direct:development dependency-group: bundler - dependency-name: listen dependency-type: direct:development dependency-group: bundler - dependency-name: actionpack dependency-type: indirect dependency-group: bundler - dependency-name: actionview dependency-type: indirect dependency-group: bundler - dependency-name: activejob dependency-type: indirect dependency-group: bundler - dependency-name: activerecord dependency-type: indirect dependency-group: bundler - dependency-name: activesupport dependency-type: indirect dependency-group: bundler - dependency-name: addressable dependency-type: indirect dependency-group: bundler - dependency-name: ffi dependency-type: indirect dependency-group: bundler - dependency-name: globalid dependency-type: indirect dependency-group: bundler - dependency-name: loofah dependency-type: indirect dependency-group: bundler - dependency-name: nokogiri dependency-type: indirect dependency-group: bundler - dependency-name: rack dependency-type: indirect dependency-group: bundler - dependency-name: rails-html-sanitizer dependency-type: indirect dependency-group: bundler - dependency-name: rake dependency-type: indirect dependency-group: bundler - dependency-name: rubyzip dependency-type: indirect dependency-group: bundler - dependency-name: sprockets dependency-type: indirect dependency-group: bundler - dependency-name: tzinfo dependency-type: indirect dependency-group: bundler - dependency-name: websocket-extensions dependency-type: indirect dependency-group: bundler ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
Vulnerable Libraries (5)
More info on how to fix Vulnerable Libraries in Ruby. 👉 Go to the dashboard for detailed results. 📥 Happy? Share your feedback with us. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Warning
Dependabot will stop supporting
bundler v1!Please upgrade to version
v2.Bumps the bundler group with 10 updates in the / directory:
3.9.15.6.93.5.05.0.04.3.04.9.45.1.27.2.15.0.05.3.15.0.66.0.04.2.25.0.03.5.14.2.12.14.43.40.05.6.96.4.33.4.44.25.03.1.53.9.0Updates
pumafrom 3.9.1 to 5.6.9Release notes
Sourced from puma's releases.
... (truncated)
Changelog
Sourced from puma's changelog.
... (truncated)
Commits
f196b23Merge commit from fork24eec195.6.93c8e8b05.6.9 release note [ci skip]12935735.6.8bbb880fMerge pull request from GHSA-c2f4-cvqm-65w278393bf5.6.77405a21Merge pull request from GHSA-68xg-gqqm-vgj8d33424b5.6.7 release note [ci skip]f8c7b235.6.608af1b55.6.6 release noteUpdates
simple_formfrom 3.5.0 to 5.0.0Changelog
Sourced from simple_form's changelog.
... (truncated)
Commits
440ed5fInclude information about security issues in README.md and8c91bd7Don't call#sendin form object to build file inputs62408e8Removeruby-headjobs69f4d46Update jruby versionbcc1197Don't run specs with jruby 9.1 and Rails 68d56636Fix full error message test on Rails 613d0341Use different assertions for Rails 5 and 66f677ecDon't run specs with Rails 6 and older rubiesfc25ab4Rails 6 and latest rubies on CI9d7921fMerge pull request #1667 from olleolleolle/patch-1Updates
devisefrom 4.3.0 to 4.9.4Release notes
Sourced from devise's releases.
Commits
d5a48b4Release v4.9.4bab47e1Adds Ruby 3.3 to CI on 4-stablecee7457Bump year [ci skip]95ed7d3Merge pull request #5641 from henryaj/patch-1edffc79Respect locale set by controller in the failure app (#5567)1d66580Release v4.9.3dcbfb32Merge pull request #5640 from nmaggioni/nm_config_template_typoc146b25Better clarify need to overrideinternal_methods9a08620Update changelog with Rails 7.1 mention [ci skip]407f223Fix test warning about deprecated cache format in Rails 7.1Updates
railsfrom 5.1.2 to 7.2.1Release notes
Sourced from rails's releases.
... (truncated)
Commits
a11f0a6Preparing for 7.2.1 release8b40780Sync changelog2988debUpdate the description of when SQLite might make sense as the configured data...cd1b3dbRevert "Merge pull request #49769 from jonathanhefner/active_record-enum-non-...e314216Merge pull request #52546 from Uaitt/config-assets-quiet-improvements33227d2Merge pull request #52357 from Uaitt/clarify-upgrading-ruby-on-rails-guide2402fb4Merge pull request #52637 from jlduran/cleanup-service-worker-white-space7600221Fix linting issues in action_controller_overview.md90d9e12Merge pull request #52138 from skipkayhil/hm-rack-input-is-optionalf42a784Move the rewind code closer to the reason why we need to rewindUpdates
simple_formfrom 5.0.0 to 5.3.1Changelog
Sourced from simple_form's changelog.
... (truncated)
Commits
440ed5fInclude information about security issues in README.md and8c91bd7Don't call#sendin form object to build file inputs62408e8Removeruby-headjobs69f4d46Update jruby versionbcc1197Don't run specs with jruby 9.1 and Rails 68d56636Fix full error message test on Rails 613d0341Use different assertions for Rails 5 and 66f677ecDon't run specs with Rails 6 and older rubiesfc25ab4Rails 6 and latest rubies on CI9d7921fMerge pull request #1667 from olleolleolle/patch-1Updates
sass-railsfrom 5.0.6 to 6.0.0Release notes
Sourced from sass-rails's releases.
Commits
a77240cPrepare to 6.0.08dbe4dcBump version to 6.0.0.beta3830a8ecBump minimum version of sassc-railsff54c20Fix open-ended dependencyebe9ef7Bump version to v6.0.0.beta2409d871Merge pull request #424 from rails/sassc-railsd809900Recomend to use SassC::Rails::Importer to users requiring sass/rails/importer706526dMake sass-rails an wrapper for sassc-rails to allow a smooth upgrade pathac38f1eMerge pull request #423 from gregmolnar/masterd61b999remove gemnasium badge from readmeUpdates
coffee-railsfrom 4.2.2 to 5.0.0Changelog
Sourced from coffee-rails's changelog.
Commits
32a2939Prepare to 5.0.06507f0aSet the javascripts generator option as true in the railtie5f0e005Point to rails repository74214e8Merge pull request #114 from larouxn/rails_6_supporteff9c00Revert folder structure changes, remove --javascripts flage7ce694Fix for exclusively Rails 669e6782TESTING, use my fork of Railsfc8c48cConditionally use Rails 6 folder stucture5df5816Merge pull request #111 from larouxn/stop_testing_below_ruby_2.29bead93Merge pull request #112 from larouxn/update_travis_jruby_versionUpdates
web-consolefrom 3.5.1 to 4.2.1Release notes
Sourced from web-console's releases.
... (truncated)
Changelog
Sourced from web-console's changelog.
... (truncated)
Commits
a3b7c2aPrepare for 4.2.18c1670fMerge pull request #332 from JoeDupuis/support-rack-2-and-333f6d58[FIX #331] Add simultaneous support for both Rack 2 and 34f7e392Test with all supported versions of Rails7536fb0Test with Ruby 3.211efc57Only adds the deprecator in the app if Rails supports itdc3df04Remove warning by defining the constant in the right place405d4afAdd devcontainer config3cb71a1Merge pull request #325 from etiennebarrie/use-dedicated-deprecatord07fa6aUse a dedicated ActiveSupport::Deprecation objectUpdates
capybarafrom 2.14.4 to 3.40.0Changelog
Sourced from capybara's changelog.
... (truncated)
Commits
a210c6eUpdate history02e2650Don't encourage the 'XPath trap' with examplesb37c5b4Expand onCapybara::Selectordocumentation (#2736)e844a6fupdate test81611a5Add rack2 gemfileff859c8Forward save_screenshot options to seleniumc6a04a9gemfile updates63aeae1Add rackup development dependencya900ac7Update README (#2721)1857cb1DelegateCapybara::Result#to_ary(#2733)Updates
pumafrom 5.6.9 to 6.4.3Release notes
Sourced from puma's releases.
... (truncated)
Changelog
Sourced from puma's changelog.
... (truncated)
Commits
f196b23Merge commit from fork24eec195.6.93c8e8b05.6.9 release note [ci skip]12935735.6.8bbb880fMerge pull request from GHSA-c2f4-cvqm-65w278393bf5.6.77405a21Merge pull request from GHSA-68xg-gqqm-vgj8d33424b5.6.7 release note [ci skip]f8c7b235.6.608af1b55.6.6 release noteUpdates
selenium-webdriverfrom 3.4.4 to 4.25.0Release notes
Sourced from selenium-webdriver's releases.
... (truncated)
Changelog
Sourced from selenium-webdriver's changelog.
... (truncated)
Commits
Description has been truncated