Bump the dependencies group with 10 updates #557
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the dependencies group with 10 updates: | Package | From | To | | --- | --- | --- | | [brakeman](https://github.com/presidentbeef/brakeman) | `6.1.0` | `6.1.1` | | [factory_bot_rails](https://github.com/thoughtbot/factory_bot_rails) | `6.4.2` | `6.4.3` | | [puma](https://github.com/puma/puma) | `6.4.0` | `6.4.1` | | [sentry-rails](https://github.com/getsentry/sentry-ruby) | `5.15.0` | `5.15.2` | | [shoulda-matchers](https://github.com/thoughtbot/shoulda-matchers) | `5.3.0` | `6.0.0` | | [sqlite3](https://github.com/sparklemotion/sqlite3-ruby) | `1.6.9` | `1.7.0` | | [importmap-rails](https://github.com/rails/importmap-rails) | `1.2.3` | `2.0.1` | | [stimulus-rails](https://github.com/hotwired/stimulus-rails) | `1.3.0` | `1.3.3` | | [webauthn](https://github.com/cedarcode/webauthn-ruby) | `3.0.0` | `3.1.0` | | [view_component](https://github.com/viewcomponent/view_component) | `3.8.0` | `3.9.0` | Updates `brakeman` from 6.1.0 to 6.1.1 - [Release notes](https://github.com/presidentbeef/brakeman/releases) - [Changelog](https://github.com/presidentbeef/brakeman/blob/main/CHANGES.md) - [Commits](presidentbeef/brakeman@v6.1.0...v6.1.1) Updates `factory_bot_rails` from 6.4.2 to 6.4.3 - [Release notes](https://github.com/thoughtbot/factory_bot_rails/releases) - [Changelog](https://github.com/thoughtbot/factory_bot_rails/blob/main/NEWS.md) - [Commits](thoughtbot/factory_bot_rails@v6.4.2...v6.4.3) Updates `puma` from 6.4.0 to 6.4.1 - [Release notes](https://github.com/puma/puma/releases) - [Changelog](https://github.com/puma/puma/blob/master/History.md) - [Commits](puma/puma@v6.4.0...v6.4.1) Updates `sentry-rails` from 5.15.0 to 5.15.2 - [Release notes](https://github.com/getsentry/sentry-ruby/releases) - [Changelog](https://github.com/getsentry/sentry-ruby/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-ruby@5.15.0...5.15.2) Updates `shoulda-matchers` from 5.3.0 to 6.0.0 - [Release notes](https://github.com/thoughtbot/shoulda-matchers/releases) - [Changelog](https://github.com/thoughtbot/shoulda-matchers/blob/main/CHANGELOG.md) - [Commits](thoughtbot/shoulda-matchers@v5.3.0...v6.0.0) Updates `sqlite3` from 1.6.9 to 1.7.0 - [Release notes](https://github.com/sparklemotion/sqlite3-ruby/releases) - [Changelog](https://github.com/sparklemotion/sqlite3-ruby/blob/main/CHANGELOG.md) - [Commits](sparklemotion/sqlite3-ruby@v1.6.9...v1.7.0) Updates `importmap-rails` from 1.2.3 to 2.0.1 - [Release notes](https://github.com/rails/importmap-rails/releases) - [Commits](rails/importmap-rails@v1.2.3...v2.0.1) Updates `stimulus-rails` from 1.3.0 to 1.3.3 - [Release notes](https://github.com/hotwired/stimulus-rails/releases) - [Commits](hotwired/stimulus-rails@v1.3.0...v1.3.3) Updates `webauthn` from 3.0.0 to 3.1.0 - [Changelog](https://github.com/cedarcode/webauthn-ruby/blob/master/CHANGELOG.md) - [Commits](cedarcode/webauthn-ruby@v3.0.0...v3.1.0) Updates `view_component` from 3.8.0 to 3.9.0 - [Release notes](https://github.com/viewcomponent/view_component/releases) - [Changelog](https://github.com/ViewComponent/view_component/blob/main/docs/CHANGELOG.md) - [Commits](ViewComponent/view_component@v3.8.0...v3.9.0) --- updated-dependencies: - dependency-name: brakeman dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: factory_bot_rails dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: puma dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: sentry-rails dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: shoulda-matchers dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: sqlite3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: importmap-rails dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: stimulus-rails dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: webauthn dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: view_component dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the dependencies group with 10 updates:
6.1.06.1.16.4.26.4.36.4.06.4.15.15.05.15.25.3.06.0.01.6.91.7.01.2.32.0.11.3.01.3.33.0.03.1.03.8.03.9.0Updates
brakemanfrom 6.1.0 to 6.1.1Release notes
Sourced from brakeman's releases.
Changelog
Sourced from brakeman's changelog.
Commits
03bc349Bump to 6.1.11d1db16Update CHANGES for 6.1.1fcfdc28Merge pull request #1809 from presidentbeef/3-3-0-runtime-supporte490ebeHandle racc as default gem in Ruby 3.3.0Updates
factory_bot_railsfrom 6.4.2 to 6.4.3Release notes
Sourced from factory_bot_rails's releases.
Changelog
Sourced from factory_bot_rails's changelog.
Commits
6b350d1Bump to 6.4.3 [ci skip]d7d5ae8Bump rspec-rails from 6.0.1 to 6.1.04f13aa8Bump appraisal from 2.4.1 to 2.5.0ea1ff34Bump activerecord from 7.0.4.3 to 7.1.264a2188Bump rake from 13.0.6 to 13.1.043bba38Bump standard from 1.27.0 to 1.32.17be631fAllow primary key attributesc4638f6Remove code path for Rails 5.2 support499635fBe clear about supported Rails and Ruby versionsdb1aae5Added dependabot for GitHub Actions and bundlerUpdates
pumafrom 6.4.0 to 6.4.1Changelog
Sourced from puma's changelog.
Commits
a2870256.4.1 version tick!32a629d6.4.17e17826[Fix #3282]idle-timeoutnot waiting on all workers in cluster mode (#3283)437142eREADME.md - add the puma-acme plugin (#3301)e9125fa[CI] Change all workflow file extensions to '.yml' (#3300)d49dec9[CI] Add Ruby 3.3, use 'rubygems: latest' in tests.yaml MRI (#3299)2d27225Note symlink mechanism in restart documentation for hot restart (#3298)b747a65ragel.yml - remove Windows due to incorrect line directives (#3294)d158981Bump actions/upload-artifact from 3 to 4 (#3291)14fc84bfix define_method calls, use Symbol parameter instead of String (#3293)Updates
sentry-railsfrom 5.15.0 to 5.15.2Changelog
Sourced from sentry-rails's changelog.
Commits
e781f72release: 5.15.2502547eFix sample_rate applying to non error events (#2203)4781aabMerge branch 'release/5.15.1'a68ab37release: 5.15.1f12cc2cFix keyword arguments for MonitorCheckIns monkeypatch (#2199)9895426Expose background worker queue size (#2195)50dc58aPut development/test dependencies into a shared Gemfile (#2192)f3e94e0Fix broken PR link in CHANGELOG.md (#2190)3fa341cMerge branch 'release/5.15.0'Updates
shoulda-matchersfrom 5.3.0 to 6.0.0Release notes
Sourced from shoulda-matchers's releases.
Changelog
Sourced from shoulda-matchers's changelog.
Commits
4cfa6e7release: Bump version to 6.0.0 [skip ci] (#1595)6362b21chore: bring CHANGELOG up to date (#1596)4475181chore: Add issue templates (#1594)027db70feat: add ruby 3.3.0-rc1 support (#1588)4886266refactor: Remove the with qualifier on define_enum_for matcher (#1589)3821caachore: Update Rails versions (#1591)5d26d0dfix: Adjust flaky spec onValidateAbsenceOfMatcher(#1590)c17c0d7refactor: Enhance unit test helpers loading (#1585)423eddbchore: Fix yard undoc warnings (#1586)58f5077chore: Remove references to unsupported Rails versions (#1584)Updates
sqlite3from 1.6.9 to 1.7.0Release notes
Sourced from sqlite3's releases.
Changelog
Sourced from sqlite3's changelog.
Commits
4f8ff6fversion bump to v1.7.063f22d1Merge pull request #448 from sparklemotion/flavorjones-dep-rcd-1.4.051f4862dep: update to rake-compiler-dock 1.4.0 final5801ebeMerge pull request #447 from sparklemotion/flavorjones-ci-ruby-3.3.0740ea09Merge pull request #444 from sparklemotion/dependabot/bundler/ruby_memcheck-2...63dc974ci: update pipelines to test with ruby 3.3.0 final4ac1832build(deps): update ruby_memcheck requirement from 2.2.1 to 2.3.028047dbMerge pull request #441 from sparklemotion/flavorjones-pin-alpine-to-3.1814cb673Revert "build(deps): bump actions/download-artifact from 3 to 4"8d87322Revert "build(deps): bump actions/upload-artifact from 3 to 4"Updates
importmap-railsfrom 1.2.3 to 2.0.1Release notes
Sourced from importmap-rails's releases.
Commits
be74deaBump version for 2.0.131b0f16Ensure update only runs when there are outdated packages61727c4Bump version for 2.0.09b379c0spike basic update command. (#214)25e9166Update Impoortmaps::Command#puts_table to be markdown compatible (#222)59b6862Fix some paths5d20b21Fix wording in preloading pinned modules docs (#220)f27ec14Spell out Rails dependencies manually30868a8Remove remaining reference in README to deleted--downloadCLI option (#219)a4d915bNo more support EOL Rubys or near-EOLUpdates
stimulus-railsfrom 1.3.0 to 1.3.3Release notes
Sourced from stimulus-rails's releases.
Commits
ae4b675Bump version for 1.3.34604968Fix syntax error in stimulus_with_node.rb (#134)70926feBump version for 1.3.26530b09Fix stray "bf50ed5support for dasherized controller filenames (#126)0efe089If you create a new rails project with "--main --javascript bun" (#127)b87c71fUpdate stimulus_tasks.rake (#129)7510ff9Bump version for 1.3.125f3f63Preloading is now the default in importmap-rails 23e168f0fix duplicate controllers in manifest on update (#132)Updates
webauthnfrom 3.0.0 to 3.1.0Changelog
Sourced from webauthn's changelog.
Commits
486c43dbuild: prepare new3.1.0release6a5d7e9Suppressing unexpected error with `WebAuthn::PublicKeyCredentialWithAttestati...43a491bMerge pull request #410 from cedarcode/sr--packed-attestation-verification-wi...2f1e315feat: correctly verify "packed" attestation with self referenced certd897c1aMerge pull request #402 from olleolleolle/add-base64-dependencye4e0c13Inline base64 implementation6db9596Merge pull request #404 from cedarcode/dependabot/github_actions/actions/chec...a2c6f04build(deps): bump actions/checkout from 3 to 454ec025Merge pull request #403 from olleolleolle/patch-12ebaff8Configure Dependabot to update GitHub ActionsUpdates
view_componentfrom 3.8.0 to 3.9.0Release notes
Sourced from view_component's releases.
Changelog
Sourced from view_component's changelog.
Commits
c8462c2release 3.9.0 (#1952)0d26944Ensure HTML output safety (#1950)78dbac2Don't break "rails stats" if app/components is missing (#1927)31fafe3Avoid allocating new string when output_postamble is blank (#1911)d5f2544Add deprecation warnings for EOL Rails and Ruby and the associated work aroun...a5ccdefAdd support for ruby3.3 (#1948)6ae727fBump standard from 1.32.1 to 1.33.0 (#1949)782fed3Bump net-imap from 0.4.8 to 0.4.9 (#1946)b194b4eBump debug from 1.9.0 to 1.9.1 (#1947)ff46909Adding example for 3.x migration (#1876)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions