Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 7, 2025

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.


This PR contains the following updates:

Package Change Age Confidence
rack (changelog) 2.2.18 -> 2.2.19 age confidence

Release Notes

rack/rack (rack)

v2.2.19

Compare Source

Security
  • CVE-2025-61772 Multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
  • CVE-2025-61771 Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
  • CVE-2025-61770 Unbounded multipart preamble buffering enables DoS (memory exhaustion)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the renovate Automated dependency updates label Oct 7, 2025
@renovate renovate bot requested a review from a team as a code owner October 7, 2025 05:10
@renovate renovate bot added the renovate Automated dependency updates label Oct 7, 2025
@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedrack@​2.2.18 ⏵ 2.2.1992 +1100100100100

View full report

@renovate renovate bot merged commit 0e42184 into main Oct 7, 2025
2 checks passed
@renovate renovate bot deleted the renovate/rack-2.x-lockfile branch October 7, 2025 08:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

renovate Automated dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant