🚨 [security] Update factory_bot_rails 6.4.4 → 6.5.0 (minor)#305
Closed
depfu[bot] wants to merge 1 commit intomasterfrom
Closed
🚨 [security] Update factory_bot_rails 6.4.4 → 6.5.0 (minor)#305depfu[bot] wants to merge 1 commit intomasterfrom
depfu[bot] wants to merge 1 commit intomasterfrom
Conversation
Contributor
Author
|
Closed in favor of #320. |
1 similar comment
Contributor
Author
|
Closed in favor of #320. |
Contributor
Author
|
Closed in favor of #320. |
1 similar comment
Contributor
Author
|
Closed in favor of #320. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
🚨 Your current dependencies have known security vulnerabilities 🚨
This dependency update fixes known security vulnerabilities. Please see the details below and assess their impact carefully. We recommend to merge and deploy this as soon as possible!
Here is everything you need to know about this update. Please take a good look at what changed and the test results before merging this pull request.
What changed?
✳️ factory_bot_rails (6.4.4 → 6.5.0) · Repo · Changelog
Release Notes
6.5.0
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by more commits than we can show here.
✳️ base64 (0.2.0 → 0.3.0) · Repo
Release Notes
0.3.0
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 10 commits:
v0.3.0[DOC] Tweaks for module Base64Enabled trusted publisher for rubygems.orgAdd RBS signature and testing (#25)Update file list on gemspecUpdate license files same as ruby/rubyMerge pull request #21 from ruby/old-version-on-macosExclude older than 2.6 on macos-14Merge pull request #18 from mark-young-atg/provide_changelog_link_on_rubygemsProvide a 'Changelog' link on rubygems.org/gems/base64✳️ benchmark (0.4.0 → 0.4.1) · Repo
Release Notes
0.4.1
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 19 commits:
v0.4.1Merge pull request #12 from paarthmadan/correct-format-documentationMerge pull request #33 from ruby/dependabot/github_actions/step-security/harden-runner-2.12.0Bump step-security/harden-runner from 2.11.1 to 2.12.0Merge pull request #32 from ruby/dependabot/github_actions/step-security/harden-runner-2.11.1Bump step-security/harden-runner from 2.11.0 to 2.11.1Merge pull request #31 from ruby/dependabot/github_actions/step-security/harden-runner-2.11.0Bump step-security/harden-runner from 2.10.4 to 2.11.0Merge pull request #30 from ruby/dependabot/github_actions/step-security/harden-runner-2.10.4Bump step-security/harden-runner from 2.10.3 to 2.10.4Merge pull request #29 from ruby/dependabot/github_actions/step-security/harden-runner-2.10.3Bump step-security/harden-runner from 2.10.2 to 2.10.3Merge pull request #28 from ruby/dependabot/github_actions/rubygems/release-gem-1.1.1Bump rubygems/release-gem from 1.1.0 to 1.1.1Fixed version number of rubygems/release-gemMerge pull request #26 from ruby/dependabot/github_actions/rubygems/release-gem-9e85cb11501bebc2ae661c1500176316d3987059Merge pull request #27 from ruby/dependabot/github_actions/step-security/harden-runner-2.10.2Bump step-security/harden-runner from 2.10.1 to 2.10.2Bump rubygems/release-gem✳️ bigdecimal (3.1.9 → 3.2.2) · Repo · Changelog
Release Notes
3.2.2
3.2.1
3.2.0
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 21 commits:
Bump version to 3.2.2Update CHANGES for 3.2.2Make precision calculation in bigdecimal.div(value, 0) gc-compaction safe (#339)Bump version to 3.2.1CHANGES: Add v3.2.1 entriesMerge pull request #335 from tompng/div_with_preclimit_fixApply preclimit in BigDecimal_div2 when specified prec is 0Enabled trusted publisher for rubygems.org (#333)Bump version to 3.2.0Add dev:version:bump rake taskCHANGES: Add v3.2.0 entriesFix division rounding (#330)Integrate BigDecimal_div and BigDecimal_div2 (#329)[DOC] Indent multiline call-seq comment (#311)Merge pull request #327 from ko1/ractor_valueUse `Ractor#value` as `Ractor#take` is removedAdd a precision assertion to BigMath test (#316)Merge pull request #318 from tompng/rm_atan_convergence_commentMerge pull request #313 from mrzasa/fix-no-allocator-on-truffleRemove outdated BigMath.atan document that referrs to convergenceFix spec NoMethodError message for .allocator on truffle RubyRelease Notes
2.2.3
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 15 commits:
Bump versionFix building and publishing packageBump versionAdd 2.2.2 entryUse more specific changelog pageAdd support for Trusted PublishingMerge InvokeMethod18Mixin into InvokeMethod (#37)Add safety comment about x509 cert versioning rule (#34)Avoid use of id2ref for weak mapping (#35)Merge pull request #29 from jeremyevans/fix-openssl-cert-versionMerge pull request #33 from ruby/docs-fix-links[doc] Update linksMerge pull request #30 from mark-young-atg/provide_changelog_link_on_rubygemsProvide a 'Changelog' link on rubygems.org/gems/drbFix wrong certificate versionRelease Notes
6.5.4
6.5.3
6.5.2
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by more commits than we can show here.
Security Advisories 🚨
🚨 ReDoS Vulnerability in Rack::Multipart handle_mime_head
Commits
See the full diff on Github. The new version differs by 3 commits:
Bump patch version.Fix ReDoS and consistency in multipart regexesSynchronize changelog.Release Notes
2.3.0
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 29 commits:
Prepare for 2.3.0No need for CHANGELOG file. Use GitHub Releases insteadAdd release workflowMerge pull request #123 from jyeharry/feature/assert_dom-ignore-whitespace-v2Collapse whitespace from :text but not :htmlAdd failing test for assert_dom collapsing whitespaceMerge pull request #122 from jyeharry/feature/assert_dom-ignore-whitespaceAdd strict parameter to assert_domAdd failing test for assert_dom collapsing whitespaceAdd macos to supported platforms in Gemfile.lockci: run tests once a week on a timerMerge pull request #124 from rails/flavorjones-dep-logger-fixci: drop jruby where unsupported, pin concurrent-ruby where neededci: insert Rails 7.2 and 8.0 into the testing matrixdep: bundle updateMerge pull request #118 from m-nakamura145/update-checkout-actionUpdate checkout action versiondoc: introduce a CHANGELOG.md fileMerge pull request #117 from rails/flavorjones-ci-20240113ci: add mutex_m to the rails 7.0 gemfiledep: bundle updateMerge pull request #115 from joshuay03/raise-an-error-for-invalid-rangesMerge pull request #116 from joshuay03/raise-an-error-for-no-elements-with-blockRaise an error when given a block with a 0 element assertionRaise an error when provided an invalid Range, or invalid :minimum and :maximumMerge pull request #113 from joshuay03/feature/refute-and-assert-not-for-dom-and-dom-equalMerge pull request #114 from flavorjones/flavorjones-update-ci-matrix-2024-01Add `assert_not_dom`, `refute_dom`, `assert_not_select`, `refute_select` & `refute_dom_equal`ci: update ci matrix with rails 7.1 and ruby 3.3Release Notes
13.3.0
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by more commits than we can show here.
Release Notes
6.14.0
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 34 commits:
Bump version to 6.14.0 (#1371)Fix PR commenting workflowFetch PR details first to get the correct commit shaTest workflow fix: use sha for build checkout insteadAdd a new workflow to deploy page preview for PRs from forks (#1365)Load `cgi/escape` instead of `cgi/util` (#1366)Declare erb as a dependency (#1368)Merge pull request #1361 from p8/features/html-langAdd support for canonical URL link tag (#1354)Set language in HTMLBump ruby/setup-ruby from 1.235.0 to 1.237.0 (#1362)Rename test classes from Test* to *Test (#1359)Merge pull request #1349 from ybiquitous/css-link-underlineFix typo in test name (#1355)Don't run CI jobs for push by Dependabot (#1353)Increase `text-underline-offset` value with `em` unitBump ruby/setup-ruby from 1.233.0 to 1.235.0 (#1352)Bump step-security/harden-runner from 2.11.1 to 2.12.0 (#1351)Fix link to CONTRIBUTING on README (#1350)Polish link underline in Darkfish CSSFix image tag with external source (#1348)Update ri manpage to show how to access ruby pages (#1340)Fix rubygems hook execution when gemspec.rdoc_options contains --ri (#1347)Bump ruby/setup-ruby from 1.230.0 to 1.233.0 (#1346)Merge pull request #1342 from Shopify/vs-enable-method-def-parenthesisMerge pull request #1341 from Shopify/vs-make-to-rdoc-headings-more-idiomaticMove default RDoc headings to a constantAuto-fix Style/MethodDefParentheses violationsEnable Style/MethodDefParentheses ruleRuns ruby-core workflow on ubuntu-latest (#1345)Bump ruby/setup-ruby from 1.229.0 to 1.230.0 (#1339)Bump step-security/harden-runner from 2.11.0 to 2.11.1 (#1338)Fix RDoc::Options example in README (#1337)Bump ruby/setup-ruby from 1.227.0 to 1.229.0Release Notes
2.7.3 (from changelog)
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 16 commits:
Ready for 2.7.3cpath_expected_at: pass correct dir to the inflectorUser Symbol#name hereRefactor thread-safety testSimplify Zeitwerk::Cref#pathParameterize Zeitwerk::Cref::MapNew signature convention for exceptionsRevises duck-typing signaturesUse #: for RBS annotationsUpdates some signature annotationsDefines a dedicated registry for loadersDefines a dedicated registry for autoloadsRefactors the registry for inceptionsRefactors the registry for explicit namespacesSmall simplificationRevamp docs of Zeitwerk::Cref::Map🆕 erb (added, 5.0.1)
Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with
@depfu rebase.All Depfu comment commands