Skip to content

Update Mend: high confidence minor and patch dependency updates #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update Mend: high confidence minor and patch dependency updates #2

wants to merge 1 commit into from
+1,425 −896

Conversation

mend-for-g.yxqyang.asia[bot]
Copy link

@mend-for-g.yxqyang.asia mend-for-g.yxqyang.asia bot commented Apr 16, 2024 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
brakeman (source, changelog) 6.1.1 -> 6.2.2 age adoption passing confidence
capybara (changelog) 3.39.2 -> 3.40.0 age adoption passing confidence
connection_pool (changelog) 2.4.1 -> 2.5.3 age adoption passing confidence
cssbundling-rails (changelog) 1.3.3 -> 1.4.3 age adoption passing confidence
dalli (changelog) 3.2.6 -> 3.2.8 age adoption passing confidence
debug (changelog) 1.9.1 -> 1.10.0 age adoption passing confidence
delayed_job (changelog) 4.1.11 -> 4.1.13 age adoption passing confidence
delayed_job_active_record 4.1.8 -> 4.1.11 age adoption passing confidence
eslint-plugin-import 2.27.5 -> 2.31.0 age adoption passing confidence
google-cloud-storage (source) 1.45.0 -> 1.56.0 age adoption passing confidence
image_processing (changelog) 1.12.2 -> 1.14.0 age adoption passing confidence
jbuilder (changelog) 2.11.5 -> 2.13.0 age adoption passing confidence
jsbundling-rails (changelog) 1.2.1 -> 1.3.1 age adoption passing confidence
listen (changelog) 3.8.0 -> 3.9.0 age adoption passing confidence
minitest (changelog) ">= 5.15.0", "< 5.22.0" -> ">= 5.15.0", "< 5.25.6" age adoption passing confidence
propshaft 0.8.0 -> 0.9.1 age adoption passing confidence
qunit (source) 2.19.4 -> 2.24.1 age adoption passing confidence
rake (changelog) 13.1.0 -> 13.2.1 age adoption passing confidence
redcarpet "~> 3.2.3" -> "~> 3.6.0" age adoption passing confidence
redis (changelog) 5.0.8 -> 5.4.0 age adoption passing confidence
rexml (changelog) 3.2.6 -> 3.4.1 age adoption passing confidence
rollup (source) 2.79.1 -> 2.79.2 age adoption passing confidence
rouge (source, changelog) 4.2.0 -> 4.5.2 age adoption passing confidence
rubocop-minitest (source, changelog) 0.34.3 -> 0.38.0 age adoption passing confidence
rubocop-performance (source, changelog) 1.20.1 -> 1.25.0 age adoption passing confidence
rubyzip (changelog) 2.3.2 -> 2.4.1 age adoption passing confidence
sidekiq (source, changelog) 7.2.0 -> 7.3.9 age adoption passing confidence
sprockets-rails (changelog) 3.4.2 -> 3.5.2 age adoption passing confidence
stackprof (changelog) 0.2.25 -> 0.2.27 age adoption passing confidence
stimulus-rails (source) 1.3.0 -> 1.3.4 age adoption passing confidence
terser (changelog) 1.1.20 -> 1.2.5 age adoption passing confidence
webmock (changelog) 3.19.1 -> 3.25.1 age adoption passing confidence
webpack 4.46.0 -> 4.47.0 age adoption passing confidence
webrick 1.8.1 -> 1.9.1 age adoption passing confidence

Release Notes

presidentbeef/brakeman (brakeman)

v6.2.2

Compare Source

  • Ignore more native gems when building gem
  • Revamp command injection in pipeline* calls
  • New end-of-support dates for Rails

v6.2.1

Just a packaging fix for brakeman.gem

v6.2.0

  • Add --show-ignored option (Gabriel Zayas)
  • Add optional support for Prism parser
  • Warn about unscoped finds with find_by!
  • Treat ::X and X the same, for now (Jill Klang)
  • Fix compatibility with default frozen string literals (Jean Boussier)
  • Remediation advice for command injection (Nicholas Barone)
  • Fix Ruby warnings in test suite (Jean Boussier)
  • Support YAML aliases in secret configs (Chedli Bourguiba)
  • Add initial Rails 8 support (Ron Shinall)
  • Handle mass assignment with splats
  • Add support for symbolic links (Lu Zhu)

v6.1.2

Compare Source

  • Update Highline to 3.0
  • Add EOL date for Ruby 3.3.0
  • Avoid copying Sexps that are too large
  • Avoid detecting ViewComponentContrib::Base as dynamic render paths (vividmuimui)
  • Remove deprecated use of Kernel#open("|...")
  • Remove safe_yaml gem dependency
  • Avoid detecting Phlex components as dynamic render paths (Máximo Mussini)
teamcapybara/capybara (capybara)

v3.40.0

Compare Source

Release date: 2024-01-26

Changned
  • Dropped support for Ruby 2.7, 3.0+ is now required
  • Dropped support for Selenium < 4.8
  • Use the new headless option on chromedriver with registered selenium driver [Neil Carvalho]
Added
  • Capybara::Result#to_ary to support multiple assignment [Sean Doyle]
  • has_element? and related matchers [Sean Doyle]
  • Rack 3 support
Fixed
  • Forward save_screenshot options to selenium - Issue 2738
  • Rack test - don't auto submit forms with multiple inputs [Mitchell Henke]
  • Table row selector matches cell values in order - Issue 2686 [Jeff Parr]
  • Table row selector fixes for first column - Issue 2685 [Jeff Par]
mperham/connection_pool (connection_pool)

v2.5.3

Compare Source

  • Fix TruffleRuby/JRuby crash [#​201]

v2.5.2

Compare Source

  • Rollback inadvertant change to auto_reload_after_fork default. [#​200]

v2.5.1

Compare Source

  • Pass options to TimedStack in checkout [#​195]
  • Optimize connection lookup [#​196]
  • Fixes for use with Ractors

v2.5.0

Compare Source

idle_timeout = 60
pool = ConnectionPool.new ...
pool.reap(idle_timeout, &:close)
  • ConnectionPool#idle returns the count of connections not in use [#​187]
rails/cssbundling-rails (cssbundling-rails)

v1.4.3

Compare Source

What's Changed

New Contributors

Full Changelog: rails/cssbundling-rails@v1.4.2...v1.4.3

v1.4.2

Compare Source

What's Changed

Full Changelog: rails/cssbundling-rails@v1.4.1...v1.4.2

v1.4.1

Compare Source

What's Changed

Full Changelog: rails/cssbundling-rails@v1.4.0...v1.4.1

v1.4.0

Compare Source

What's Changed

New Contributors

Full Changelog: rails/cssbundling-rails@v1.3.3...v1.4.0

petergoldstein/dalli (dalli)

v3.2.8

Compare Source

==========

  • Handle IO::TimeoutError when establishing connection (eugeneius)
  • Drop dependency on base64 gem (Earlopain)
  • Address incompatibility with resolv-replace (y9v)
  • Add rubygems.org metadata (m-nakamura145)

v3.2.7

Compare Source

==========

  • Fix cascading error when there's an underlying network error in a pipelined get (eugeneius)
  • Ruby 3.4/head compatibility by adding base64 to gemspec (tagliala)
  • Add Ruby 3.3 to CI (m-nakamura145)
  • Use Socket's connect_timeout when available, and pass timeout to the socket's send and receive timeouts (mlarraz)
ruby/debug (debug)

v1.10.0

Compare Source

What's Changed

New Contributors

Full Changelog: ruby/debug@v1.9.2...v1.10.0

v1.9.2

Compare Source

What's Changed

New Contributors

Full Changelog: ruby/debug@v1.9.1...v1.9.2

collectiveidea/delayed_job (delayed_job)

v4.1.13

Compare Source

=======================

  • Enable Rails 8

v4.1.12

Compare Source

=======================

  • Add missing require for extract_options
  • Fix rails 7.2 ActiveSupport::ProxyObject deprecation
  • Multiple contributors on current and legacy test suite improvements
collectiveidea/delayed_job_active_record (delayed_job_active_record)

v4.1.11

Compare Source

What's Changed

New Contributors

Full Changelog: collectiveidea/delayed_job_active_record@v4.1.10...v4.1.11

v4.1.10

Compare Source

What's Changed

Full Changelog: collectiveidea/delayed_job_active_record@v4.1.9...v4.1.10

v4.1.9

Compare Source

What's Changed

New Contributors

Full Changelog: collectiveidea/delayed_job_active_record@v4.1.8...v4.1.9

import-js/eslint-plugin-import (eslint-plugin-import)

v2.31.0

Compare Source

Added
Fixed
Changed

v2.30.0

Compare Source

Added
Fixed
Changed
  • [Docs] [no-extraneous-dependencies]: Make glob pattern description more explicit ([#​2944], thanks [@​mulztob])
  • [no-unused-modules]: add console message to help debug [#​2866]
  • [Refactor] ExportMap: make procedures static instead of monkeypatching exportmap ([#​2982], thanks [@​soryy708])
  • [Refactor] ExportMap: separate ExportMap instance from its builder logic ([#​2985], thanks [@​soryy708])
  • [Docs] [order]: Add a quick note on how unbound imports and --fix ([#​2640], thanks [@​minervabot])
  • [Tests] appveyor -> GHA (run tests on Windows in both pwsh and WSL + Ubuntu) ([#​2987], thanks [@​joeyguerra])
  • [actions] migrate OSX tests to GHA ([ljharb#37], thanks [@​aks-])
  • [Refactor] exportMapBuilder: avoid hoisting ([#​2989], thanks [@​soryy708])
  • [Refactor] ExportMap: extract "builder" logic to separate files ([#​2991], thanks [@​soryy708])
  • [Docs] [order]: update the description of the pathGroupsExcludedImportTypes option ([#​3036], thanks [@​liby])
  • [readme] Clarify how to install the plugin ([#​2993], thanks [@​jwbth])

v2.29.1

Compare Source

Fixed
  • [no-extraneous-dependencies]: ignore export type { ... } from '...'

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

disabled

@mend-for-g.yxqyang.asia mend-for-g.yxqyang.asia bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 10 times, most recently from 0acd260 to c4c9d29 Compare April 23, 2024 06:41
@mend-for-g.yxqyang.asia mend-for-g.yxqyang.asia bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 11 times, most recently from 816c023 to 37cb9f5 Compare May 1, 2024 00:06
@mend-for-g.yxqyang.asia mend-for-g.yxqyang.asia bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 9 times, most recently from 2f152a5 to c4e1b8f Compare May 8, 2024 06:28
@mend-for-g.yxqyang.asia mend-for-g.yxqyang.asia bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 7 times, most recently from 9d069b1 to fdd518e Compare April 10, 2025 09:37
@mend-for-g.yxqyang.asia mend-for-g.yxqyang.asia bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 7 times, most recently from 5770e4c to 1f03a74 Compare April 17, 2025 09:11
@mend-for-g.yxqyang.asia mend-for-g.yxqyang.asia bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 6 times, most recently from 265cc2a to 5268b28 Compare April 24, 2025 10:56
@mend-for-g.yxqyang.asia mend-for-g.yxqyang.asia bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 7 times, most recently from 2cd52e1 to 04f0a32 Compare May 2, 2025 18:19
@mend-for-g.yxqyang.asia mend-for-g.yxqyang.asia bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from 04f0a32 to 89f5683 Compare May 3, 2025 14:04
@mend-for-g.yxqyang.asia mend-for-g.yxqyang.asia bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from 89f5683 to fe1c100 Compare May 5, 2025 07:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants