Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the dependencies group in /docker/mock-server with 5 updates #205

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 8, 2024

Bumps the dependencies group in /docker/mock-server with 5 updates:

Package From To
rails 7.0.4 7.1.3.2
sqlite3 1.6.0 1.7.2
puma 5.6.8 6.4.2
bootsnap 1.15.0 1.18.3
debug 1.7.1 1.9.1

Updates rails from 7.0.4 to 7.1.3.2

Release notes

Sourced from rails's releases.

v7.1.3.2

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • No changes.

Action Pack

  • Fix raise_on_missing_translations not working correctly with the translate method in controllers after the patch for CVE-2024-26143.

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

  • No changes.

... (truncated)

Commits
  • 6f0d1ad Preparing for 7.1.3.2 release
  • c25f0fc Respect raise_on_missing_ in controller
  • d73ed95 Preparing for 7.1.3.1 release
  • 43037d8 update changelog
  • 5187a9e fix XSS vulnerability when using translation
  • b4d3bfb Fix ReDoS in accept header scanning
  • 36c1591 Preparing for 7.1.3 release
  • a84622f Sync changelog
  • 1f505f0 Merge pull request #50771 from rails/backport-preview-nplus1
  • d8a8dd9 Merge pull request #50758 from rails/fix-video-preview-nplus1
  • Additional commits viewable in compare view

Updates sqlite3 from 1.6.0 to 1.7.2

Release notes

Sourced from sqlite3's releases.

1.7.2 / 2024-01-30

Dependencies


sha256 checksums:

e759f07dfad1a8ab00a7c49bdfff020ef61156ed18744781b16d202602119096  sqlite3-1.7.2-aarch64-linux.gem
e0eb1fa8ad8fd8ef08f5efe7412581415a7305648418520a278f6167f6e55218  sqlite3-1.7.2-arm-linux.gem
7368d9a4b4be6063660e826d059870b77f4ad740948885f6ba674f3a2a2b1d3c  sqlite3-1.7.2-arm64-darwin.gem
7583cfa5550dc37e26275a45cbafe7b6f503b0608f56ed7b52a764ff6725c3de  sqlite3-1.7.2-x64-mingw-ucrt.gem
92dc08c679c21f6589d6e4efde07267e5e971069f6b142a7f43af0a8bf8cbfba  sqlite3-1.7.2-x64-mingw32.gem
5d310ec6e2e705335811ef4658a90e65a14ed008adfd1d098252a79b4efb9b60  sqlite3-1.7.2-x86-linux.gem
b287e4971f75f81ead4237e77cbdfae68e0c794b4e76b2c86d21a0f807e65f01  sqlite3-1.7.2-x86_64-darwin.gem
37fcd0cc6038bd47a6cb2ca7cb1a063135a26cd0002b76977f67463ca7ebc69d  sqlite3-1.7.2-x86_64-linux.gem
16050775fea3095035c8d4cb33968523e8ef411ac2d6bfa5f27d4c2b119cfd8c  sqlite3-1.7.2.gem

1.7.1 / 2024-01-24

Dependencies


sha256 checksums:

7b41d9500f53a11360a78af510d09e7d3c2ce71cf7d531fda7a7a16ffd5280bc  sqlite3-1.7.1-aarch64-linux.gem
444c550f1fa548c09e7226d833186739726fd0503914fa740606e5f147a7267f  sqlite3-1.7.1-arm-linux.gem
96dfb220aedb0056b22848b6663bd1b5e69fb84e373ac9f1c57b76b902703b43  sqlite3-1.7.1-arm64-darwin.gem
e6af9e9643973cd041c566bfcafa72248d600e1d883adc188e494f66a49787bf  sqlite3-1.7.1-x64-mingw-ucrt.gem
f043f4654ef545fdcbbdbfccff9ae4d983436c0f87cc8de913c309bf228f3f71  sqlite3-1.7.1-x64-mingw32.gem
270a4ff88b5ee270eb18891c8baa63f07db8d846221cbe63002f292060a8f327  sqlite3-1.7.1-x86-linux.gem
398d1b0909efe046b57433cde679cf49f7b04487e8715164facaf2d8ff4f7cde  sqlite3-1.7.1-x86_64-darwin.gem
521749cf9ff2dc6b4039e05c6204fda806cfc7b47a938002f273f4490de2aa5c  sqlite3-1.7.1-x86_64-linux.gem
993d9220e086b53d9ee8d12394cd8f570e5c8bd567b7ee9703152837ccab6fee  sqlite3-1.7.1.gem

1.7.0 / 2023-12-27

Ruby

This release introduces native gem support for Ruby 3.3.

... (truncated)

Changelog

Sourced from sqlite3's changelog.

1.7.2 / 2024-01-30

Dependencies

1.7.1 / 2024-01-24

Dependencies

1.7.0 / 2023-12-27

Ruby

This release introduces native gem support for Ruby 3.3.

This release ends native gem support for Ruby 2.7, for which upstream support ended 2023-03-31. Ruby 2.7 is still generally supported, but will not be shipped in the native gems.

This release ends support for Ruby 1.9.3, 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, and 2.6.

Improved

1.6.9 / 2023-11-26

Dependencies

Added

  • Database.new now accepts a :default_transaction_mode option (defaulting to :deferred), and Database#transaction no longer requires a transaction mode to be specified. This should allow higher-level adapters to more easily choose a transaction mode for a database connection. #426 @​masamitsu-murase

1.6.8 / 2023-11-01

Dependencies

Added

... (truncated)

Commits
  • f90c980 version bump to v1.7.2
  • ae487b7 Merge pull request #495 from sparklemotion/flavorjones-dep-sqlite-3.45.1-17st...
  • e9bfbdb dep: update vendored sqlite to 3.45.1
  • 5374a84 version bump to v1.7.1
  • 6cb2906 Merge pull request #482 from sparklemotion/flavorjones-dep-sqlite-3.45.0
  • 89f13cc dep(dev): update minitest
  • 4b0eb35 dep: update vendored sqlite to 3.45.0
  • 4f8ff6f version bump to v1.7.0
  • 63f22d1 Merge pull request #448 from sparklemotion/flavorjones-dep-rcd-1.4.0
  • 51f4862 dep: update to rake-compiler-dock 1.4.0 final
  • Additional commits viewable in compare view

Updates puma from 5.6.8 to 6.4.2

Release notes

Sourced from puma's releases.

6.4.1

  • Bugfixes

    • DSL#warn_if_in_single_mode - fixup when workers set via CLI (#3256)
    • Fix idle-timeout not working in cluster mode (#3235, #3228, #3282, #3283)
    • Fix worker 0 timing out during phased restart (#3225, #2786)
    • context_builder.rb - require openssl if verify_mode != 'none' (#3179)
    • Make puma cluster process suitable as PID 1 (#3255)
    • Improve Puma::NullIO consistency with real IO (#3276)
    • extconf.rb - fixup to detect openssl info in Ruby build (#3271, #3266)
    • MiniSSL.java - set serialVersionUID, fix RaiseException deprecation (#3270)
    • dsl.rb - fix warn_if_in_single_mode when WEB_CONCURRENCY is set (#3265, #3264)
  • Maintenance

    • LOTS of test refactoring to make tests more stable and easier to write - thanks to @​MSP-Greg!
    • Fix bug in tests re: TestPuma::HOST4 (#3254)
    • Dockerfile for minimal repros: use Ruby 3.2, expect bundler installed (#3245)
    • fix define_method calls, use Symbol parameter instead of String (#3293)
  • Docs

    • README.md - add the puma-acme plugin (#3301)
    • Remove --keep-file-descriptors flag from systemd docs (#3248)
    • Note symlink mechanism in restart documentation for hot restart (#3298)

6.4.0 - The Eagle of Durango

image

America is #1 in professional cycling, baby!

  • Features

    • on_thread_exit hook (#2920)
    • on_thread_start_hook (#3195)
    • Shutdown on idle (#3209, #2580)
    • New error message when control server port taken (#3204)
  • Refactor

    • Remove Forwardable dependency (#3191, #3190)
    • Update URLMap Regexp usage for Ruby v3.3 (#3165)
  • Bugfixes

    • Bring the cert_pem: parameter into parity with the cert: parameter to ssl_bind. (#3174)
    • Fix using control server with IPv6 host (#3181)
    • control_cli.rb - add require_relative 'log_writer' (#3187)
    • Fix cases where fallback Rack response wasn't sent to the client (#3094)

6.3.1

  • Security
    • Address HTTP request smuggling vulnerabilities with zero-length Content Length header and trailer fields (GHSA-68xg-gqqm-vgj8)

6.3.0 - Mugi No Toki Itaru

... (truncated)

Changelog

Sourced from puma's changelog.

6.4.2 / 2024-01-08

  • Security
    • Limit the size of chunk extensions. Without this limit, an attacker could cause unbounded resource (CPU, network bandwidth) consumption. (GHSA-c2f4-cvqm-65w2)

6.4.1 / 2024-01-03

  • Bugfixes

    • DSL#warn_if_in_single_mode - fixup when workers set via CLI (#3256)
    • Fix idle-timeout not working in cluster mode (#3235, #3228, #3282, #3283)
    • Fix worker 0 timing out during phased restart (#3225, #2786)
    • context_builder.rb - require openssl if verify_mode != 'none' (#3179)
    • Make puma cluster process suitable as PID 1 (#3255)
    • Improve Puma::NullIO consistency with real IO (#3276)
    • extconf.rb - fixup to detect openssl info in Ruby build (#3271, #3266)
    • MiniSSL.java - set serialVersionUID, fix RaiseException deprecation (#3270)
    • dsl.rb - fix warn_if_in_single_mode when WEB_CONCURRENCY is set (#3265, #3264)
  • Maintenance

    • LOTS of test refactoring to make tests more stable and easier to write - thanks to @​MSP-Greg!
    • Fix bug in tests re: TestPuma::HOST4 (#3254)
    • Dockerfile for minimal repros: use Ruby 3.2, expect bundler installed (#3245)
    • fix define_method calls, use Symbol parameter instead of String (#3293)
  • Docs

    • README.md - add the puma-acme plugin (#3301)
    • Remove --keep-file-descriptors flag from systemd docs (#3248)
    • Note symlink mechanism in restart documentation for hot restart (#3298)

6.4.0 / 2023-09-21

  • Features

    • on_thread_exit hook (#2920)
    • on_thread_start_hook (#3195)
    • Shutdown on idle (#3209, #2580)
    • New error message when control server port taken (#3204)
  • Refactor

    • Remove Forwardable dependency (#3191, #3190)
    • Update URLMap Regexp usage for Ruby v3.3 (#3165)
  • Bugfixes

    • Bring the cert_pem: parameter into parity with the cert: parameter to ssl_bind. (#3174)
    • Fix using control server with IPv6 host (#3181)
    • control_cli.rb - add require_relative 'log_writer' (#3187)
    • Fix cases where fallback Rack response wasn't sent to the client (#3094)

6.3.1 / 2023-08-18

  • Security

... (truncated)

Commits

Updates bootsnap from 1.15.0 to 1.18.3

Changelog

Sourced from bootsnap's changelog.

1.18.3

  • Fix the cache corruption issue in the revalidation feature. See #474. The cache revalidation feature remains opt-in for now, until it is more battle tested.

1.18.2

  • Disable stale cache entries revalidation by default as it seems to cause cache corruption issues. See #471 and #474. Will be re-enabled in a future version once the root cause is identified.
  • Fix a potential compilation issue on some systems. See #470.

1.18.1

  • Handle EPERM errors when opening files with O_NOATIME.

1.18.0

  • Bootsnap.instrumentation now receive :hit events.
  • Add Bootsnap.log_stats! to print hit rate statistics on process exit. Can also be enabled with BOOTSNAP_STATS=1.
  • Revalidate stale cache entries by digesting the source content. This should significantly improve performance in environments where mtime isn't preserved (e.g. CI systems doing a git clone, etc). See #468.
  • Open source files and cache entries with O_NOATIME when available to reduce disk accesses. See #469.
  • bootsnap precompile --gemfile now look for .rb files in the whole gem and not just the lib/ directory. See #466.

1.17.1

  • Fix a compatibility issue with the prism library that ships with Ruby 3.3. See #463.
  • Improved the Kernel#require decorator to not cause a method redefinition warning. See #461.

1.17.0

  • Ensure $LOAD_PATH.dup is Ractor shareable to fix an conflict with did_you_mean.
  • Allow to ignore directories using absolute paths.
  • Support YAML and JSON CompileCache on TruffleRuby.
  • Support LoadPathCache on TruffleRuby.

1.16.0

  • Use RbConfig::CONFIG["rubylibdir"] instead of RbConfig::CONFIG["libdir"] to check for stdlib files. See #431.
  • Fix the cached version of YAML.load_file being slightly more permissive than the default Psych one. See #434. Date and Time values are now properly rejected, as well as aliases. If this causes a regression in your application, it is recommended to load trusted YAML files with YAML.unsafe_load_file.
Commits
  • 48c08b0 Release 1.18.3
  • 08cd0d9 Merge pull request #476 from Shopify/fix-revalidation
  • ad189d1 Fix a cache corruption issue during revalidation
  • 2dba040 Release 1.18.2
  • 38554bb Merge pull request #475 from Shopify/disable-revalidation-by-default
  • a5b46d0 Disable stale cache entries revalidation by default
  • 4b6d40e Merge pull request #473 from Shopify/gnu-source
  • 33754b4 Define _GNU_SOURCE properly
  • d4b4666 Workaround fdatasync bug on macOS
  • c88b4bd Include errno_provenance in sys_err messages
  • Additional commits viewable in compare view

Updates debug from 1.7.1 to 1.9.1

Release notes

Sourced from debug's releases.

v1.9.1

Fix small issue to release with Ruby 3.3.0.

What's Changed

Full Changelog: ruby/debug@v1.9.0...v1.9.1

v1.9.0

This release fixes many issues reported after v1.8.0, introduce IRB integrated console and more.

What's Changed

New Contributors

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group in /docker/mock-server with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [rails](https://github.com/rails/rails) | `7.0.4` | `7.1.3.2` |
| [sqlite3](https://github.com/sparklemotion/sqlite3-ruby) | `1.6.0` | `1.7.2` |
| [puma](https://github.com/puma/puma) | `5.6.8` | `6.4.2` |
| [bootsnap](https://github.com/Shopify/bootsnap) | `1.15.0` | `1.18.3` |
| [debug](https://github.com/ruby/debug) | `1.7.1` | `1.9.1` |


Updates `rails` from 7.0.4 to 7.1.3.2
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](rails/rails@v7.0.4...v7.1.3.2)

Updates `sqlite3` from 1.6.0 to 1.7.2
- [Release notes](https://github.com/sparklemotion/sqlite3-ruby/releases)
- [Changelog](https://github.com/sparklemotion/sqlite3-ruby/blob/main/CHANGELOG.md)
- [Commits](sparklemotion/sqlite3-ruby@v1.6.0...v1.7.2)

Updates `puma` from 5.6.8 to 6.4.2
- [Release notes](https://github.com/puma/puma/releases)
- [Changelog](https://github.com/puma/puma/blob/master/History.md)
- [Commits](puma/puma@v5.6.8...v6.4.2)

Updates `bootsnap` from 1.15.0 to 1.18.3
- [Changelog](https://github.com/Shopify/bootsnap/blob/main/CHANGELOG.md)
- [Commits](Shopify/bootsnap@v1.15.0...v1.18.3)

Updates `debug` from 1.7.1 to 1.9.1
- [Release notes](https://github.com/ruby/debug/releases)
- [Commits](ruby/debug@v1.7.1...v1.9.1)

---
updated-dependencies:
- dependency-name: rails
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: sqlite3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: puma
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: bootsnap
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: debug
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Mar 8, 2024
@dependabot dependabot bot requested review from a team and enomoto-kazuya and removed request for a team March 8, 2024 04:33
@enomoto-kazuya enomoto-kazuya merged commit b19b80d into master Mar 8, 2024
15 checks passed
@enomoto-kazuya enomoto-kazuya deleted the dependabot/bundler/docker/mock-server/dependencies-c0602ea2a6 branch March 8, 2024 05:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant