Bump the prod-dependencies group across 1 directory with 16 updates #12026
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
dependabot
bot
added
dependencies
ruby
dependabot
bot
force-pushed
the
dependabot/bundler/updater/prod-dependencies-b39c926601
branch
4 times, most recently
from
975598b to
d9c1c83
Compare
Bumps the prod-dependencies group with 16 updates in the /updater directory: | Package | From | To | | --- | --- | --- | | [http](https://github.com/httprb/http) | `5.1.1` | `5.2.0` | | [opentelemetry-metrics-sdk](https://github.com/open-telemetry/opentelemetry-ruby) | `0.6.0` | `0.6.1` | | [zeitwerk](https://github.com/fxn/zeitwerk) | `2.7.1` | `2.7.2` | | [aws-sdk-codecommit](https://github.com/aws/aws-sdk-ruby) | `1.63.0` | `1.83.0` | | [aws-sdk-ecr](https://github.com/aws/aws-sdk-ruby) | `1.68.0` | `1.99.0` | | [faraday](https://github.com/lostisland/faraday) | `2.7.11` | `2.13.0` | | [faraday-retry](https://github.com/lostisland/faraday-retry) | `2.2.0` | `2.3.1` | | [gitlab](https://github.com/NARKOZ/gitlab) | `5.0.0` | `5.1.0` | | [json](https://github.com/ruby/json) | `2.6.3` | `2.10.2` | | [nokogiri](https://github.com/sparklemotion/nokogiri) | `1.16.5` | `1.18.7` | | [parser](https://github.com/whitequark/parser) | `3.3.6.0` | `3.3.7.4` | | [psych](https://github.com/ruby/psych) | `5.1.2` | `5.2.3` | | [sorbet-runtime](https://github.com/sorbet/sorbet) | `0.5.11952` | `0.5.12003` | | [stackprof](https://github.com/tmm1/stackprof) | `0.2.25` | `0.2.27` | | [parseconfig](https://github.com/datafolklabs/ruby-parseconfig) | `1.0.8` | `1.1.2` | | [rubyzip](https://github.com/rubyzip/rubyzip) | `2.3.2` | `2.4.1` | Updates `http` from 5.1.1 to 5.2.0 - [Changelog](https://github.com/httprb/http/blob/main/CHANGELOG.md) - [Commits](httprb/http@v5.1.1...v5.2.0) Updates `opentelemetry-metrics-sdk` from 0.6.0 to 0.6.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-ruby/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-ruby/blob/main/metrics_sdk/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-ruby@opentelemetry-metrics-sdk/v0.6.0...opentelemetry-metrics-sdk/v0.6.1) Updates `zeitwerk` from 2.7.1 to 2.7.2 - [Changelog](https://github.com/fxn/zeitwerk/blob/main/CHANGELOG.md) - [Commits](fxn/zeitwerk@v2.7.1...v2.7.2) Updates `aws-sdk-codecommit` from 1.63.0 to 1.83.0 - [Release notes](https://github.com/aws/aws-sdk-ruby/releases) - [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-codecommit/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-ruby/commits) Updates `aws-sdk-ecr` from 1.68.0 to 1.99.0 - [Release notes](https://github.com/aws/aws-sdk-ruby/releases) - [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-ecr/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-ruby/commits) Updates `faraday` from 2.7.11 to 2.13.0 - [Release notes](https://github.com/lostisland/faraday/releases) - [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md) - [Commits](lostisland/faraday@v2.7.11...v2.13.0) Updates `faraday-retry` from 2.2.0 to 2.3.1 - [Release notes](https://github.com/lostisland/faraday-retry/releases) - [Changelog](https://github.com/lostisland/faraday-retry/blob/main/CHANGELOG.md) - [Commits](lostisland/faraday-retry@v2.2.0...v2.3.1) Updates `gitlab` from 5.0.0 to 5.1.0 - [Release notes](https://github.com/NARKOZ/gitlab/releases) - [Commits](NARKOZ/gitlab@v5.0.0...v5.1.0) Updates `json` from 2.6.3 to 2.10.2 - [Release notes](https://github.com/ruby/json/releases) - [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md) - [Commits](ruby/json@v2.6.3...v2.10.2) Updates `nokogiri` from 1.16.5 to 1.18.7 - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md) - [Commits](sparklemotion/nokogiri@v1.16.5...v1.18.7) Updates `parser` from 3.3.6.0 to 3.3.7.4 - [Changelog](https://github.com/whitequark/parser/blob/master/CHANGELOG.md) - [Commits](whitequark/parser@v3.3.6.0...v3.3.7.4) Updates `psych` from 5.1.2 to 5.2.3 - [Release notes](https://github.com/ruby/psych/releases) - [Commits](ruby/psych@v5.1.2...v5.2.3) Updates `sorbet-runtime` from 0.5.11952 to 0.5.12003 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `stackprof` from 0.2.25 to 0.2.27 - [Changelog](https://github.com/tmm1/stackprof/blob/master/CHANGELOG.md) - [Commits](tmm1/stackprof@v0.2.25...v0.2.27) Updates `parseconfig` from 1.0.8 to 1.1.2 - [Changelog](https://github.com/datafolklabs/ruby-parseconfig/blob/master/Changelog) - [Commits](https://github.com/datafolklabs/ruby-parseconfig/commits) Updates `rubyzip` from 2.3.2 to 2.4.1 - [Release notes](https://github.com/rubyzip/rubyzip/releases) - [Changelog](https://github.com/rubyzip/rubyzip/blob/master/Changelog.md) - [Commits](rubyzip/rubyzip@v2.3.2...v2.4.1) --- updated-dependencies: - dependency-name: http dependency-version: 5.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies - dependency-name: opentelemetry-metrics-sdk dependency-version: 0.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-dependencies - dependency-name: zeitwerk dependency-version: 2.7.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-dependencies - dependency-name: aws-sdk-codecommit dependency-version: 1.83.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies - dependency-name: aws-sdk-ecr dependency-version: 1.99.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies - dependency-name: faraday dependency-version: 2.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies - dependency-name: faraday-retry dependency-version: 2.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies - dependency-name: gitlab dependency-version: 5.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies - dependency-name: json dependency-version: 2.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies - dependency-name: nokogiri dependency-version: 1.18.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies - dependency-name: parser dependency-version: 3.3.7.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-dependencies - dependency-name: psych dependency-version: 5.2.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies - dependency-name: sorbet-runtime dependency-version: 0.5.12003 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-dependencies - dependency-name: stackprof dependency-version: 0.2.27 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-dependencies - dependency-name: parseconfig dependency-version: 1.1.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies - dependency-name: rubyzip dependency-version: 2.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
sachin-sandhu
force-pushed
the
dependabot/bundler/updater/prod-dependencies-b39c926601
branch
from
d9c1c83 to
63ab449
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the prod-dependencies group with 16 updates in the /updater directory:
5.1.15.2.00.6.00.6.12.7.12.7.21.63.01.83.01.68.01.99.02.7.112.13.02.2.02.3.15.0.05.1.02.6.32.10.21.16.51.18.73.3.6.03.3.7.45.1.25.2.30.5.119520.5.120030.2.250.2.271.0.81.1.22.3.22.4.1Updates
httpfrom 5.1.1 to 5.2.0Changelog
Sourced from http's changelog.
Commits
bb754c7Release v5.2.0de1e319ci: Cleanup and update workflow02e66b0ci: Add Ruby 3.3 to the test matrix81d281eSECURITY.md: use private vulnerability reporting feature (#772)03370c6Fix changelog uri in gemspecf7e16c8Add support for thePURGEHTTP method. (#757)8b802bfDo more conservative URL normalization (#758)65276d7Prevent CRLF injection due to broken URL normalizer (#765)3b7133cfix: close sockets on initialize timeout (#762)4060ccdnot_found requires two arguments (#761)Updates
opentelemetry-metrics-sdkfrom 0.6.0 to 0.6.1Release notes
Sourced from opentelemetry-metrics-sdk's releases.
Changelog
Sourced from opentelemetry-metrics-sdk's changelog.
Commits
dd14784release: Release opentelemetry-metrics-sdk 0.6.1 (was 0.6.0) (#1834)c39e7a6fix: use condition signal to replace sleep and remove timeout.timeout… (#1826)Updates
zeitwerkfrom 2.7.1 to 2.7.2Changelog
Sourced from zeitwerk's changelog.
Commits
6aa2821Ready for 2.7.2632f2bbLet get_or_set evaluate the fallback lazilyb37c6d1Add a couple more of testsd61c3e1Define get_or_set for cref mapscc7d546Revises some signatures245fc05Fixes signature annotationc3eaaccAdds a test for cref maps177ab23Docs improvements85a9b97Adds code commentsc74ddf7Introduce Zeitwerk::Cref::MapUpdates
aws-sdk-codecommitfrom 1.63.0 to 1.83.0Changelog
Sourced from aws-sdk-codecommit's changelog.
... (truncated)
Commits
Updates
aws-sdk-ecrfrom 1.68.0 to 1.99.0Changelog
Sourced from aws-sdk-ecr's changelog.
... (truncated)
Commits
Updates
faradayfrom 2.7.11 to 2.13.0Release notes
Sourced from faraday's releases.
... (truncated)
Commits
77204ccVersion bump to 2.13.0919dc8ffeat(ssl options): support SNI hostname (#1615)064a54bVersion bump to 2.12.3cd1c44aFix thread safety issue by avoiding mutation of proxy options hash (#1617)1551c32removes ruby2_keywords usagea9cf004Version bump to 2.12.2529b5b0Formatting the log using parameter progname for the logger (#1606)b7b2bc1[TEST] fix compatibility with ruby 3.4.0devf9f4ce5Use generic argument forwarding + remove ruby2_keywords93ef9e0Version bump to 2.12.1Updates
faraday-retryfrom 2.2.0 to 2.3.1Release notes
Sourced from faraday-retry's releases.
Changelog
Sourced from faraday-retry's changelog.
Commits
10ec1daVersion bump to 2.3.12865414Move documentation comment to the right place75d3efbScope retryable module under faraday modulef021508v2.3.05af8aa8Gemfile: Avoid warning output from RuboCop136a4ffRefactoring and rubocop fixes13e9a7fUpdate spec/faraday/retry/middleware_spec.rb2979869fix code documentation52a857cfix typo22ab15aword correctionsUpdates
gitlabfrom 5.0.0 to 5.1.0Release notes
Sourced from gitlab's releases.
Commits
bcfeb45Release v5.1.06ca8f7aMerge pull request #701 from balasankarc/support-access-token-endpoint64896abAdd Project Access Token related endpoints26edb1bMerge pull request #700 from balasankarc/support-ci-job-token0bfb77cSupport using CI_JOB_TOKEN for authentication579bcdaMerge pull request #699 from caiconkhicon/dattang/add-pipeline_schedule_get_p...a9da2e9Remove verb from method name100e256Add get_pipelines_by_pipeline_schedule methodf3bd928Merge pull request #698 from ddieulivol/ddieulivol-merge_request_dependencies5e31a2dMerge branch 'master' into ddieulivol-merge_request_dependenciesUpdates
jsonfrom 2.6.3 to 2.10.2Release notes
Sourced from json's releases.
... (truncated)
Changelog
Sourced from json's changelog.
... (truncated)
Commits
350c1fdRelease 2.10.2c56db31Merge commit from forkcf242d8Fix potential out of bound read injson_string_unescape.57911f1Merge pull request #762 from byroot/invalid-escape7d0637bRaise a ParserError on all incomplete unicode escape sequence.c079793Avoid fast-path IO writes when IO has ext encac30b69Merge pull request #757 from rahim/fix-generator-error-no-method-error2e015ffFix JSON::GeneratorError#detailed_message with Ruby < 3.2f3e1136Merge pull request #756 from byroot/utf8-snippetse144793Ensure parser error snippets are valid UTF-8Updates
nokogirifrom 1.16.5 to 1.18.7Release notes
Sourced from nokogiri's releases.
... (truncated)
Changelog
Sourced from nokogiri's changelog.
... (truncated)
Commits
13e8aa4version bump to v1.18.7605699ddep: bump libxml2 to 2.13.7 (v1.18.x backport) (#3495)804e590dep: bump libxml2 to 2.13.752bf15bdep(dev): drop Rubocop from JRuby deps189769dversion bump to v1.18.6de4982ffix(jruby): Node#attribute in HTML documents (v1.18.x) (#3492)7d95b0ffix(jruby): Node#attribute in HTML documents58823ffversion bump to v1.18.54473261Fix MRI Ruby vs. JRuby XML child namespace output differences (backport v1.18...6cac169doc: update CHANGELOGUpdates
parserfrom 3.3.6.0 to 3.3.7.4Changelog
Sourced from parser's changelog.
Commits
da0aec5Update changelog.d368857Bump versione261316- lexer-strings.rb: Avoid an exception on utf8 surrogate pair codepoints (#1051)6f54456- builder.rb: emitkwargsnode forindexasgnwhen opted in (#1053)d34616f- builder.rb: correctly handle...forwarding to super with explicit block ...beb5ccdSupress warnings during parsing (#1013)75c6ce0- numbered parameters are valid for pattern matching pinning (#1060)6c92533Update changelog.d9f8860Update changelog.23d3a8fBump versionUpdates
psychfrom 5.1.2 to 5.2.3Release notes
Sourced from psych's releases.
... (truncated)
Commits
2af9f6aBump version for released086434Merge pull request #709 from headius/snakeyaml-engine-2.9ac887cdUpdate to SnakeYAML-Engine 2.95857e5cMerge pull request #708 from ruby/remove-vim-settings2f46abfremove vim settings7a68700Merge pull request #706 from ruby/dependabot/github_actions/step-security/har...c80fbf8Bump step-security/harden-runner from 2.10.2 to 2.10.394ea06eMerge pull request #707 from ruby/javaopt7f7dc1fAdded JAVA_OPTS for java version of psychb96a661Merge pull request #705 from ruby/support-bundled-gemsUpdates
sorbet-runtimefrom 0.5.11952 to 0.5.12003Release notes
Sourced from sorbet-runtime's releases.
... (truncated)
Commits
Updates
stackproffrom 0.2.25 to 0.2.27Commits
a4d23d1bumping versiond90ad35Merge pull request #226 from froydnj/froydnj-fix-timing-crash078f365Merge pull request #230 from s4na/ruby3.302b866aAdd Ruby 3.3 to CI4e504d3be more diligent about atomic operations08b5127don't setrunninguntil all relevant state is initializedebdd3afbumping versionbd885f9Merge pull request #222 from casperisfine/typed-dataaaeef71Migrate to the TypedData API91d12e7Merge pull request #219 from casperisfine/yjit-3.3-postponed-jbos