-
Notifications
You must be signed in to change notification settings - Fork 0
Bump sinatra, rails, puma_worker_killer, sprockets, prawn, sentry-raven, derailed_benchmarks, dotenv-rails and rubocop-performance #5
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
…en, derailed_benchmarks, dotenv-rails and rubocop-performance Bumps [sinatra](https://github.com/sinatra/sinatra), [rails](https://github.com/rails/rails), [puma_worker_killer](https://github.com/schneems/puma_worker_killer), [sprockets](https://github.com/rails/sprockets), [prawn](https://github.com/prawnpdf/prawn), [sentry-raven](https://github.com/getsentry/raven-ruby), [derailed_benchmarks](https://github.com/zombocom/derailed_benchmarks), [dotenv-rails](https://github.com/bkeepers/dotenv) and [rubocop-performance](https://github.com/rubocop/rubocop-performance). These dependencies needed to be updated together. Updates `sinatra` from 3.1.0 to 4.1.0 - [Changelog](https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md) - [Commits](sinatra/sinatra@v3.1.0...v4.1.0) Updates `rails` from 7.0.8 to 8.0.0 - [Release notes](https://github.com/rails/rails/releases) - [Commits](rails/rails@v7.0.8...v8.0.0) Updates `puma_worker_killer` from 0.3.1 to 1.0.0 - [Changelog](https://github.com/zombocom/puma_worker_killer/blob/main/CHANGELOG.md) - [Commits](zombocom/puma_worker_killer@v0.3.1...v1.0.0) Updates `sprockets` from 4.1.1 to 4.2.1 - [Release notes](https://github.com/rails/sprockets/releases) - [Changelog](https://github.com/rails/sprockets/blob/main/CHANGELOG.md) - [Commits](rails/sprockets@v4.1.1...v4.2.1) Updates `prawn` from 2.4.0 to 2.5.0 - [Release notes](https://github.com/prawnpdf/prawn/releases) - [Changelog](https://github.com/prawnpdf/prawn/blob/master/CHANGELOG.md) - [Commits](prawnpdf/prawn@2.4.0...2.5.0) Updates `sentry-raven` from 2.13.0 to 3.1.2 - [Release notes](https://github.com/getsentry/raven-ruby/releases) - [Changelog](https://github.com/getsentry/sentry-ruby/blob/master/CHANGELOG.md) - [Commits](getsentry/raven-ruby@v2.13.0...sentry-raven-v3.1.2) Updates `derailed_benchmarks` from 2.1.1 to 2.2.1 - [Changelog](https://github.com/zombocom/derailed_benchmarks/blob/main/CHANGELOG.md) - [Commits](zombocom/derailed_benchmarks@v2.1.1...v2.2.1) Updates `dotenv-rails` from 2.8.1 to 3.1.4 - [Release notes](https://github.com/bkeepers/dotenv/releases) - [Changelog](https://github.com/bkeepers/dotenv/blob/main/Changelog.md) - [Commits](bkeepers/dotenv@v2.8.1...v3.1.4) Updates `rubocop-performance` from 1.19.1 to 1.22.1 - [Release notes](https://github.com/rubocop/rubocop-performance/releases) - [Changelog](https://github.com/rubocop/rubocop-performance/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop-performance@v1.19.1...v1.22.1) --- updated-dependencies: - dependency-name: sinatra dependency-type: direct:production - dependency-name: rails dependency-type: direct:production - dependency-name: puma_worker_killer dependency-type: direct:production - dependency-name: sprockets dependency-type: direct:production - dependency-name: prawn dependency-type: direct:production - dependency-name: sentry-raven dependency-type: direct:production - dependency-name: derailed_benchmarks dependency-type: direct:development - dependency-name: dotenv-rails dependency-type: direct:development - dependency-name: rubocop-performance dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
Reviewer's Guide by SourceryThis PR updates multiple gem dependencies to their latest versions, with significant version jumps for Rails (7.0.8 to 8.0.0) and Sinatra (3.1.0 to 4.1.0). The changes include breaking changes, security fixes, and performance improvements across the updated dependencies. No diagrams generated as the changes look simple and do not need a visual representation. File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We have skipped reviewing this pull request. It seems to have been created by a bot (hey, dependabot[bot]!). We assume it knows what it's doing!
Bumps sinatra, rails, puma_worker_killer, sprockets, prawn, sentry-raven, derailed_benchmarks, dotenv-rails and rubocop-performance. These dependencies needed to be updated together.
Updates
sinatrafrom 3.1.0 to 4.1.0Changelog
Sourced from sinatra's changelog.
... (truncated)
Commits
73f32914.1.0 release (#2063)cd3e00dAddHostAuthorizationrack-protection middleware (#2053)8c4cd0bReturn an instance ofSinatra::IndifferentHashwhen calling#except(#2044)3c888f7AddressURIdepreciation (#2060)0d33ef8CI: don't test falcon on Ruby 2.74a55850Remove WEBrick955682eCI: unsetRUBYOPTfor JRuby jobs2d0b347Support Zeitwerk 2.7.0+ (#2050)6569ff8Revert "CI: document theconsolegem issue"77df658CI: document theconsolegem issueUpdates
railsfrom 7.0.8 to 8.0.0Release notes
Sourced from rails's releases.
... (truncated)
Commits
dd8f718Preparing for 8.0.0 releasef88e6aeMerge pull request #53550 from tysongach/devcontainer-links43425c8Bump deprecation message to 8.138bf52dAdd yarn.lock to allowed dirty files3de9afcMerge pull request #53546 from matthewd/dst_deprecation_fixebcb66eMerge pull request #53542 from Uaitt/remove-redundant-period-in-security-guides4f042a8Merge pull request #53520 from Earlopain/fix-backtrace-env-gem-paths74608e5Merge pull request #53533 from Earlopain/no-docs-for-rackup8ee2d3eMerge pull request #53504 from SleeplessByte/fix/anchor-scroll-mobile473f2b2Merge pull request #53515 from k-tsuchiya-jp/fix-53467Updates
puma_worker_killerfrom 0.3.1 to 1.0.0Changelog
Sourced from puma_worker_killer's changelog.
Commits
db7b26fv1.0.0 (#110)761d832[ci skip] Fix minor typo (#102)0e2275bUpdate Gemspec versions (#109)83b1d21Update actions/checkout to v4 (#107)293fd38Merge pull request #101 from mishina2228/gh-actionsa11241fUpdate actions/checkout from v2 to v36db1ab3Update CHANGELOG.mdcc6cec5Replace Travis CI with GitHub Actions2cc2dcfLock Rubocop ~> 0.81.0c8022f5Add GitHub Actions WorkflowUpdates
sprocketsfrom 4.1.1 to 4.2.1Release notes
Sourced from sprockets's releases.
Changelog
Sourced from sprockets's changelog.
Commits
5b040f3Prepare for 4.2.10a5879dRemove check CHANGELOG action8ee21cfUse Ruby LSP instead of rebornix.Ruby5d26375Merge pull request #764 from chadlwilson/fix-css-sourcemap-default-charset572235aMerge branch 'main' into fix-css-sourcemap-default-charset42f7d5eMerge pull request #790 from skipkayhil/hm-fix-rails-7-compatd0de178Merge pull request #768 from jpbalarini/patch-15d795a7Fix header casing compatibility with Rails 76554b6dMerge pull request #791 from skipkayhil/hm-fix-minitest-casing4be779fFix Minitest constant name in testsUpdates
prawnfrom 2.4.0 to 2.5.0Changelog
Sourced from prawn's changelog.
Commits
f82783b2.5.0689d14cUpdate dependencies1454bc6Update gem metadata0eaaaa3Update license specifiers8e64834Add the current maintainer to the list of authorsb32fff1Update the list of packaged filesf75790eUpdate gem signing85bdad8Remove load path from gemspecfe37363Move description up top.5bd4188Update certificateUpdates
sentry-ravenfrom 2.13.0 to 3.1.2Commits
aa3327crelease: 3.1.2f81180aAdd Makefile for sentry-raven9cd092eFix version bumping scriptbf77f9eFix sentry-raven's craft config4646920Update changelog30bb9d3Correct changelog linksf23e980Refine readme (#1366)86dcf3cCorrect type attribute's usages (#1354)5337548Merge release-sentry-rails/4.3.3 into masterdf1e5berelease: 4.3.3Updates
derailed_benchmarksfrom 2.1.1 to 2.2.1Changelog
Sourced from derailed_benchmarks's changelog.
Commits
897a2a9v2.2.1 (#253)4bfaa52[Close #251] Relax gem version requirement (#252)818f5fdv2.2.0 (#250)e1fbebfUpdate derailed_benchmarks.gemspec (#247)badd34bUpdate CHANGELOG.md [ci skip] (#246)17307b4support relative BUNDLE_GEMFILE path in tests (#245)fca88a3require ruby2_keywords when testing in ruby < 2.7 (#244)94a4122dead_end -> syntax_suggest (#243)c19bd61Add support for non-GET requests by@mateusg(#234)a99b8c3Test rails 7.1 and 7.2 (#242)Updates
dotenv-railsfrom 2.8.1 to 3.1.4Release notes
Sourced from dotenv-rails's releases.
... (truncated)
Changelog
Sourced from dotenv-rails's changelog.
... (truncated)
Commits
ee3975cPrepare for 3.1.4 releasefe760d1Merge pull request #512 from alpaca-tc/fix-spring691f7f9Make spring specs a little more explicitf75ff89follow-up bkeepers/dotenv#5111e8dae2Bump to 3.1.347f5cb6Prepare for v3.1.34223d1fMerge pull request #511 from runephilosof-abtion/patch-18c7e460Fix tests for spring changes54aa1f6Only use Spring if already loadedb86d9e4Merge pull request #509 from olleolleolle/run-standardUpdates
rubocop-performancefrom 1.19.1 to 1.22.1Release notes
Sourced from rubocop-performance's releases.
... (truncated)
Changelog
Sourced from rubocop-performance's changelog.
... (truncated)
Commits
69c5abcCut 1.22.13188974Update Changelog100cdfeMerge pull request #469 from koic/fix_false_positives_for_performance_big_dec...6bb06b2[Fix #468] Fix false positives forPerformance/BigDecimalWithNumericArgumentf74a890Switch back docs version to masterbf5f64fCut 1.22.0d26b441Update Changelog7233005Merge pull request #465 from Earlopain/start-end-safe-navigation767f2c9[Fix #407] MakePerformance/DoubleStartEndWithaware of safe navigationf28d18dMerge pull request #466 from Earlopain/block-given-disableDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Summary by Sourcery
Update multiple dependencies including Sinatra, Rails, Puma Worker Killer, Sprockets, Prawn, Sentry-Raven, Derailed Benchmarks, Dotenv-Rails, and Rubocop-Performance to their latest versions, addressing security vulnerabilities, improving compatibility, and enhancing performance.
Build: