Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump rails_admin, rails, jbuilder, elasticsearch-model, coffee-rails and sass-rails in /sample-rails-app #9

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jul 8, 2024

Bumps rails_admin, rails, jbuilder, elasticsearch-model, coffee-rails and sass-rails. These dependencies needed to be updated together.
Updates rails_admin from 0.8.1 to 3.1.3

Changelog

Sourced from rails_admin's changelog.

3.1.3 - 2024-07-06

Full Changelog

Fixed

  • Fix bson 5.0 compatibility (13da4f0)
  • Fix Importmap 2.0 compatibility (bd0cf97)

Security

3.1.2 - 2023-03-23

Full Changelog

Fixed

  • Fix install failing with importmap setup (aca22b6, #3609)
  • Fix to show non-eager-loaded models which are explicitly configured (87c9d5b, #3604)
  • Fix rails_admin.dom_ready event not triggered with jQuery on (2ee43de, 33773d7, #3600)
  • Restore caching in RailsAdmin::Config::Model#excluded? (#3587)
  • Optimize/simplify viable_models file path to class name logic (#3589)

3.1.1 - 2022-12-18

Full Changelog

Changed

  • Relax Font-Awesome dependency to allow Webpacker users to stay on 5.x (3a7f348, #3565)

Removed

  • Remove unused glphyicon assets (#3578)

Fixed

  • Simplify uses of defined? (#3561)
  • Define jQuery object in separate file to support esbuild (#3571)
  • Fix filter box being duplicated on browser back (c6b1893, #3570)
  • Fix sidebar menu expanding horizontally, preventing vertical scroll (9997c10, #3564)

3.1.0 - 2022-11-06

Full Changelog

Fixed

... (truncated)

Commits
  • 8a3ab57 Version 3.1.3
  • b5a287d Fix XSS vulnerability in the list view
  • 6fc208b Temporarily allow JRuby builds to fail
  • aa6ae5c Lock cancancan to 3.5.x as 3.6 doesn't work in Ruby 2.6 and JRuby 9.3
  • 13da4f0 Fix incompatibility with bson gem 5.0.0
  • 3b1e91d Pin sqlite3 to 1.x, as ActiveRecord is not compatible yet
  • 43c7dbb Avoid factory_bot 6.4.5
  • bd0cf97 Support importmap-rails 2.0
  • 0726fb3 Un-pin turbo-rails to fix Rails 6.1 builds
  • f822b2d Fix multiple_carrierwave field spec failing due to mocking
  • Additional commits viewable in compare view

Updates rails from 4.2.7.1 to 7.1.3.4

Release notes

Sourced from rails's releases.

7.1.3.4

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • No changes.

Action Pack

  • Include the HTTP Permissions-Policy on non-HTML Content-Types [CVE-2024-28103]

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

  • No changes.

... (truncated)

Commits
  • 19eebf6 Preparing for 7.1.3.4 release
  • bd7c28a update changelog
  • 1ac6d40 Sanitize ActionText HTML ContentAttachment in Trix edit view
  • c7b9e0c include the HTTP Permissions-Policy on non-HTML Content-Types
  • 747a03b Preparing for 7.1.3.3 release
  • 260cb39 Upgrade Trix to 2.1.1 to fix [CVE-2024-34341][1]
  • 6f0d1ad Preparing for 7.1.3.2 release
  • c25f0fc Respect raise_on_missing_ in controller
  • d73ed95 Preparing for 7.1.3.1 release
  • 43037d8 update changelog
  • Additional commits viewable in compare view

Updates jbuilder from 2.6.0 to 2.12.0

Release notes

Sourced from jbuilder's releases.

v2.12.0

What's Changed

New Contributors

Full Changelog: rails/jbuilder@v2.11.5...v2.12.0

v2.11.5

What's Changed

  • Make sure action_view is loaded before using it.

Full Changelog: rails/jbuilder@v2.11.4...v2.11.5

v2.11.4

What's Changed

Full Changelog: rails/jbuilder@v2.11.3...v2.11.4

v2.11.3

What's Changed

Full Changelog: rails/jbuilder@v2.11.2...v2.11.3

v2.11.2

What's Changed

... (truncated)

Commits
  • 080ce0b Prepare for 2.12.0
  • 0463bde Document Testing configuration for RSpec users (#539)
  • 6732db4 Replace deprecated ProxyObject with BasicObject (#563)
  • 0919e3f Use OpenStruct only if available (#562)
  • 3875613 Merge pull request #556 from amatsuda/run_railtie_in_tests
  • 5af3835 Rails 5.0 doesn't equip :action_controller_api on_load hook
  • 9db282b Run AC & AV railties on the testing app
  • b115670 Trigger :jbuilder initializer before starting the tests
  • 6d1dc92 This has to be done in the railtie, and is already written there
  • aa5a272 Merge pull request #552 from jalyna/patch-1
  • Additional commits viewable in compare view

Updates elasticsearch-model from 0.1.9 to 8.0.0

Release notes

Sourced from elasticsearch-model's releases.

v8.0.0

First general availability release for 8.0.0. Major versions of 8.x will support Elasticsearch version 8.x changing the elasticsearch dependency's major version: gem 'elasticsearch', '~> 8'. All references to type should have been removed. Document types were deprecated and do not exist in 8.x.

The dependency from elasticsearch on elasticsearch-transport was updated to elastic-transport. All 8.x Elasticsearch APIs supported by elasticsearch should now be supported on the Rails library. See Release notes for the Elasticsearch client 8.0 and the 8.x release notes for more information.

Compatibility

The gem is currently testing with Ruby 3.1, 3.2 and 3.3 and JRuby 9.4. Testing for Ruby 2.x versions has been dropped as they're no longer updated or supported. Currently testing with Rails 6.1, 7.0 and 7.1.

Changes since 8.0.0.pre

  • Address Rails 7.1 deprecation warning in elasticsearch-rails PR
  • Ensure subclasses are added to the registry PR

Development changes

  • Using debug for debugging in development and testing Gemfile groups.
  • Minor general code cleanups and styling changes.
  • Updated code for elasticsearch 8.x.

v8.0.0.pre

General:

First pre-release for 8.0.0. Major versions of 8.x will support Elasticsearch version 8.x changing the elasticsearch dependency's major version: gem 'elasticsearch', '~> 8'.

All references to type should have been removed. Document types were deprecated and do not exist in 8.x.

The dependency from elasticsearch on elasticsearch-transport was updated to elastic-transport. All 8.x Elasticsearch APIs supported by elasticsearch should now be supported on the Rails library. See Release notes for the Elasticsearch client 8.0 and the 8.x release notes for more information.

Compatibility

The gem is currently testing with Ruby 3.1, 3.2 and 3.3 and JRuby 9.4. Testing for Ruby 2.x versions has been dropped as they're no longer updated or supported. Currently testing with Rails 6.1, 7.0 and 7.1.

Development changes

  • Using debug for debugging in development and testing Gemfile groups.
  • Minor general code cleanups and styling changes.
  • Updated code to for elasticsearch 8.x.

7.2.1

  • The default git branch master has been renamed to main
  • Adds compatibility with Ruby 3 Pull Request

7.2.0

  • Updates specs and dependency to use with elasticsearch v7.14.0.
  • Update README, remove Virtus (unmaintained)
  • Updates Bundler.with_clean_dev (deprecated) to with_unbundled_env commit
  • Deal with nil document types in Multimodel commit

... (truncated)

Changelog

Sourced from elasticsearch-model's changelog.

8.0.0

First general availability release for 8.0.0. Major versions of 8.x will support Elasticsearch version 8.x changing the elasticsearch dependency's major version: gem 'elasticsearch', '~> 8'. All references to type should have been removed. Document types were deprecated and do not exist in 8.x.

The dependency from elasticsearch on elasticsearch-transport was updated to elastic-transport. All 8.x Elasticsearch APIs supported by elasticsearch should now be supported on the Rails library. See Release notes for the Elasticsearch client 8.0 and the 8.x release notes for more information.

Compatibility

The gem is currently testing with Ruby 3.1, 3.2 and 3.3 and JRuby 9.4. Testing for Ruby 2.x versions has been dropped as they're no longer updated or supported. Currently testing with Rails 6.1, 7.0 and 7.1.

Changes since 8.0.0.pre

  • Address Rails 7.1 deprecation warning in elasticsearch-rails PR
  • Ensure subclasses are added to the registry PR

Development changes

  • Using debug for debugging in development and testing Gemfile groups.
  • Minor general code cleanups and styling changes.
  • Updated code for elasticsearch 8.x.

7.2.1

  • The default git branch master has been renamed to main
  • Adds compatibility with Ruby 3 Pull Request

7.2.0

  • Updates specs and dependency to use with elasticsearch v7.14.0.
  • Update README, remove Virtus (unmaintained)
  • Updates Bundler.with_clean_dev (deprecated) to with_unbundled_env commit
  • Deal with nil document types in Multimodel commit
  • Update dependency to explicitly support version 7 commit
  • Stop emitting FATAL log when checking existence of indices commit
  • Remove unnecessary exception test on index checking commit
  • Removes dependency on extensions commit
  • Fixes basic template elasticsearch dependency commit

ActiveModel

  • Fixes indexing to use right logger in client
  • Updates ES client spec for client 7.14.0
  • Updates transport references

7.1.1

  • Fix: Ruby 2.7 deprecation warning on find_in_batches
  • Updates README for generating app with template. Related: #938

... (truncated)

Commits
  • 92c8d16 [DOCS] Updates CHANGELOG for 8.0.0
  • 6d1eeeb [CI] Tests with latest snapshot stack version
  • 9a49625 Dependency management
  • bd546fa Ensure subclasses are added to the registry
  • 98b6ce0 Address Rails 7.1 deprecation warning in elasticsearch-rails
  • 5411782 [DOCS] Updates READMEs
  • 18fa01d [CI] Updates GitHub Actions
  • 0aedb0d [CI] Updates GitHub Actions for JRuby, names
  • f9631b8 [DOCS] Updates README
  • 77ebcef [CI] Updates GitHub Actions
  • Additional commits viewable in compare view

Updates coffee-rails from 4.1.1 to 5.0.0

Changelog

Sourced from coffee-rails's changelog.

5.0.0 (Apr 23, 2019)

  • Remove support to Rails < 5.2.
  • Support Rails 6.

4.2.2 (May 24, 2017)

  • Support digest resolution for coffee templates.

4.2.1 (June 30, 2016)

  • Fix error in the gem package.

4.2.0 (June 30, 2016)

  • Override js_template hook in the Rails generator to allow Rails to be CoffeeScript agnostic.
Commits
  • 32a2939 Prepare to 5.0.0
  • 6507f0a Set the javascripts generator option as true in the railtie
  • 5f0e005 Point to rails repository
  • 74214e8 Merge pull request #114 from larouxn/rails_6_support
  • eff9c00 Revert folder structure changes, remove --javascripts flag
  • e7ce694 Fix for exclusively Rails 6
  • 69e6782 TESTING, use my fork of Rails
  • fc8c48c Conditionally use Rails 6 folder stucture
  • 5df5816 Merge pull request #111 from larouxn/stop_testing_below_ruby_2.2
  • 9bead93 Merge pull request #112 from larouxn/update_travis_jruby_version
  • Additional commits viewable in compare view

Updates sass-rails from 5.0.6 to 6.0.0

Release notes

Sourced from sass-rails's releases.

6.0.0

Breaking change

v5.0.7

  • Remove ruby warnings
Commits
  • a77240c Prepare to 6.0.0
  • 8dbe4dc Bump version to 6.0.0.beta3
  • 830a8ec Bump minimum version of sassc-rails
  • ff54c20 Fix open-ended dependency
  • ebe9ef7 Bump version to v6.0.0.beta2
  • 409d871 Merge pull request #424 from rails/sassc-rails
  • d809900 Recomend to use SassC::Rails::Importer to users requiring sass/rails/importer
  • 706526d Make sass-rails an wrapper for sassc-rails to allow a smooth upgrade path
  • ac38f1e Merge pull request #423 from gregmolnar/master
  • d61b999 remove gemnasium badge from readme
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…and sass-rails

Bumps [rails_admin](https://github.com/sferik/rails_admin), [rails](https://github.com/rails/rails), [jbuilder](https://github.com/rails/jbuilder), [elasticsearch-model](https://github.com/elasticsearch/elasticsearch-rails), [coffee-rails](https://github.com/rails/coffee-rails) and [sass-rails](https://github.com/rails/sass-rails). These dependencies needed to be updated together.

Updates `rails_admin` from 0.8.1 to 3.1.3
- [Changelog](https://github.com/railsadminteam/rails_admin/blob/v3.1.3/CHANGELOG.md)
- [Commits](railsadminteam/rails_admin@v0.8.1...v3.1.3)

Updates `rails` from 4.2.7.1 to 7.1.3.4
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](rails/rails@v4.2.7.1...v7.1.3.4)

Updates `jbuilder` from 2.6.0 to 2.12.0
- [Release notes](https://github.com/rails/jbuilder/releases)
- [Commits](rails/jbuilder@v2.6.0...v2.12.0)

Updates `elasticsearch-model` from 0.1.9 to 8.0.0
- [Release notes](https://github.com/elasticsearch/elasticsearch-rails/releases)
- [Changelog](https://github.com/elastic/elasticsearch-rails/blob/main/CHANGELOG.md)
- [Commits](elastic/elasticsearch-rails@v0.1.9...v8.0.0)

Updates `coffee-rails` from 4.1.1 to 5.0.0
- [Changelog](https://github.com/rails/coffee-rails/blob/master/CHANGELOG.md)
- [Commits](rails/coffee-rails@v4.1.1...v5.0.0)

Updates `sass-rails` from 5.0.6 to 6.0.0
- [Release notes](https://github.com/rails/sass-rails/releases)
- [Commits](rails/sass-rails@v5.0.6...v6.0.0)

---
updated-dependencies:
- dependency-name: rails_admin
  dependency-type: direct:production
- dependency-name: rails
  dependency-type: direct:production
- dependency-name: jbuilder
  dependency-type: direct:production
- dependency-name: elasticsearch-model
  dependency-type: direct:production
- dependency-name: coffee-rails
  dependency-type: direct:production
- dependency-name: sass-rails
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jul 8, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants