Bump the bundler group across 1 directory with 8 updates by dependabot[bot] · Pull Request #1 · jaipandya/Boxmarklet

dependabot · 2024-07-29T09:02:14Z

Bumps the bundler group with 5 updates in the / directory:

Package	From	To
rack	`1.4.1`	`3.1.7`
sinatra	`1.3.2`	`4.0.0`
sinatra-contrib	`1.3.1`	`4.0.0`
sinatra-jsonp	`0.3.2`	`0.5.0`
pdfkit	`0.5.2`	`0.8.7.2`

Updates rack from 1.4.1 to 3.1.7

Release notes

Sourced from rack's releases.

v3.0.9.1

What's Changed

Fixed ReDoS in Accept header parsing [CVE-2024-26146]

Fixed ReDoS in Content Type header parsing [CVE-2024-25126]

Reject Range headers which are too large [CVE-2024-26141]

Full Changelog: rack/rack@v3.0.9...v3.0.9.1

v3.0.9

What's Changed

Fix content-length calcuation in Rack:Response#write #2150

Full Changelog: rack/rack@v3.0.8...v3.0.9

v3.0.8

What's Changed

Backport "Fix some unused variable verbose warnings" by @skipkayhil in rack/rack#2084

New Contributors

@skipkayhil made their first contribution in rack/rack#2084

Full Changelog: rack/rack@v3.0.7...v3.0.8

v3.0.7

What's Changed

Backport "Make query parameters without = have nil values". by @jeremyevans in rack/rack#2060

Full Changelog: rack/rack@v3.0.6.1...v3.0.7

v3.0.6.1

No release notes provided.

v3.0.4.1

Full Changelog: rack/rack@v3.0.4...v3.0.4.1

v3.0.4

Full Changelog: rack/rack@v3.0.3...v3.0.4

v3.0.3

What's Changed

Release v3.0.3 by @ioquatix in rack/rack#2000

Full Changelog: rack/rack@v3.0.2...v3.0.3

v3.0.2

Full Changelog: rack/rack@v3.0.1...v3.0.2

... (truncated)

Changelog

Sourced from rack's changelog.

[3.1.7] - 2024-07-11

Fixed

Do not remove escaped opening/closing quotes for content-disposition filenames. (#2229, [@jeremyevans])

Fix encoding setting for non-binary IO-like objects in MockRequest#env_for. (#2227, [@jeremyevans])

Rack::Response should not generate invalid content-length header. (#2219, [@ioquatix])

Allow empty PATH_INFO. (#2214, [@ioquatix])

[3.1.6] - 2024-07-03

Fixed

Fix several edge cases in Rack::Request#parse_http_accept_header's implementation. (#2226, [@ioquatix])

[3.1.5] - 2024-07-02

Security

Fix potential ReDoS attack in Rack::Request#parse_http_accept_header. (GHSA-cj83-2ww7-mvq7, @dwisiswant0)

[3.1.4] - 2024-06-22

Fixed

Fix Rack::Lint matching some paths incorrectly as authority form. (#2220, [@ioquatix])

[3.1.3] - 2024-06-12

Fixed

Fix passing non-strings to Rack::Utils.escape_html. (#2202, [@earlopain])

Rack::MockResponse gracefully handles empty cookies (#2203 [@wynksaiddestroy])

[3.1.2] - 2024-06-11

Rack::Response will take in to consideration chunked encoding responses (#2204, [@tenderlove])

[3.1.1] - 2024-06-11

Oops! I shouldn't have shipped that

[3.1.0] - 2024-06-11

⚠️ This release includes several breaking changes. Refer to the Removed section below for the list of deprecated methods that have been removed in this release.

Rack v3.1 is primarily a maintenance release that removes features deprecated in Rack v3.0. Alongside these removals, there are several improvements to the Rack SPEC, mainly focused on enhancing input and output handling. These changes aim to make Rack more efficient and align better with the requirements of server implementations and relevant HTTP specifications.

SPEC Changes

... (truncated)

Commits

4bb2f72 Bump patch version.
1c1e413 Ignore external tests directory.
b4a1036 Prepare for 3.1.7 release.
d0da91b Add more external tests.
f6f1510 Improve Rack::Response content-length header generation. (#2219)
fb339e0 Fix encoding setting for non-binary IO-like objects in MockRequest#env_for
e21872d Do not remove escaped opening/closing quotes for content-disposition filenames
5c3d79f Synchronize changelog with HEAD.
bca33b4 Allow empty PATH_INFO. (#2214) (#2234)
98aa947 Bump patch version.
Additional commits viewable in compare view

Updates sinatra from 1.3.2 to 4.0.0

Changelog

Sourced from sinatra's changelog.

4.0.0. / 2024-01-19

New: Add support for Rack 3 (#1857)

Note: you may want to read the [Rack 3 Upgrade Guide]

Require Ruby 2.7.8 as minimum Ruby version (#1993)

Breaking change: Drop support for Rack 2 (#1857)

Note: when using Sinatra to start the web server, you now need the rackup gem installed

Breaking change: Remove the IndifferentHash initializer (#1982)

Breaking change: Disable session_hijacking protection by default (#1984)

Breaking change: Remove Rack::Protection::EncryptedCookie (#1989)

Note: cookies are still encrypted (by [Rack::Session::Cookie])

#1857: sinatra/sinatra#1857 #1993: sinatra/sinatra#1993 #1982: sinatra/sinatra#1982 #1984: sinatra/sinatra#1984 #1989: sinatra/sinatra#1989 [Rack::Session::Cookie]: https://github.com/rack/rack-session [Rack 3 Upgrade Guide]: https://github.com/rack/rack/blob/main/UPGRADE-GUIDE.md

3.2.0 / 2023-12-29

New: Add #except method to Sinatra::IndifferentHash (#1940)

New: Use Exception#detailed_message to show backtrace (#1952)

New: Add Sinatra::HamlHelpers to sinatra-contrib (#1960)

Fix: Add base64 to rack-protection runtime dependencies (#1946)

Fix: Avoid open-ended dependencies for sinatra-contrib and rack-protection (#1949)

Fix: Helpful message when Sinatra::Runner times out (#1975)

Fix: Ruby 3.3 + Bundler 2.5 compatibility (#1975)

#1940: sinatra/sinatra#1940 #1946: sinatra/sinatra#1946 #1949: sinatra/sinatra#1949 #1952: sinatra/sinatra#1952 #1960: sinatra/sinatra#1960 #1975: sinatra/sinatra#1975

3.1.0 / 2023-08-07

... (truncated)

Commits

b626e2d 4.0.0 release (#1996)
e56f657 Require Ruby 2.7.8 as minimum Ruby version (#1993)
9993829 CI: remove rack monkey patches
09f1c2b CI: rdiscount 2.2.7.3 resolved the TruffleRuby issue
c43e097 CI: use the released version of childprocess
739eaa0 CI: no need to set RUBY_ENGINE
d872057 CI: no need to set Encoding.default_external
9c14764 Remove Rack::Protection::EncryptedCookie (#1989)
667056c CI: allow ruby-head to fail
393bb7c Avoid using deprecated Rack::Response#header
Additional commits viewable in compare view

Updates sinatra-contrib from 1.3.1 to 4.0.0

Changelog

Sourced from sinatra-contrib's changelog.

4.0.0. / 2024-01-19

New: Add support for Rack 3 (#1857)

Note: you may want to read the [Rack 3 Upgrade Guide]

Require Ruby 2.7.8 as minimum Ruby version (#1993)

Breaking change: Drop support for Rack 2 (#1857)

Note: when using Sinatra to start the web server, you now need the rackup gem installed

Breaking change: Remove the IndifferentHash initializer (#1982)

Breaking change: Disable session_hijacking protection by default (#1984)

Breaking change: Remove Rack::Protection::EncryptedCookie (#1989)

Note: cookies are still encrypted (by [Rack::Session::Cookie])

#1857: sinatra/sinatra#1857 #1993: sinatra/sinatra#1993 #1982: sinatra/sinatra#1982 #1984: sinatra/sinatra#1984 #1989: sinatra/sinatra#1989 [Rack::Session::Cookie]: https://github.com/rack/rack-session [Rack 3 Upgrade Guide]: https://github.com/rack/rack/blob/main/UPGRADE-GUIDE.md

3.2.0 / 2023-12-29

New: Add #except method to Sinatra::IndifferentHash (#1940)

New: Use Exception#detailed_message to show backtrace (#1952)

New: Add Sinatra::HamlHelpers to sinatra-contrib (#1960)

Fix: Add base64 to rack-protection runtime dependencies (#1946)

Fix: Avoid open-ended dependencies for sinatra-contrib and rack-protection (#1949)

Fix: Helpful message when Sinatra::Runner times out (#1975)

Fix: Ruby 3.3 + Bundler 2.5 compatibility (#1975)

#1940: sinatra/sinatra#1940 #1946: sinatra/sinatra#1946 #1949: sinatra/sinatra#1949 #1952: sinatra/sinatra#1952 #1960: sinatra/sinatra#1960 #1975: sinatra/sinatra#1975

3.1.0 / 2023-08-07

... (truncated)

Commits

b626e2d 4.0.0 release (#1996)
e56f657 Require Ruby 2.7.8 as minimum Ruby version (#1993)
8a17d4b Add support for Rack 3, drop support for Rack 2 (#1857)
4e8fdb5 3.2.0 release (#1977)
3b75657 Revert "Shorter Sinatra::Runner timeout" (#1976)
ca6b71c Helpful message when Sinatra::Runner times out
0e43702 Shorter Sinatra::Runner timeout
11119a8 CI: use latest rack-test release, not trunk (#1969)
58f65b0 Add Sinatra::HamlHelpers to sinatra-contrib (#1960)
f044fe9 Remove open-ended dependencies in gemspecs
Additional commits viewable in compare view

Updates sinatra-jsonp from 0.3.2 to 0.5.0

Commits

See full diff in compare view

Updates sinatra from 1.3.2 to 4.0.0

Changelog

Sourced from sinatra's changelog.

4.0.0. / 2024-01-19

New: Add support for Rack 3 (#1857)

Note: you may want to read the [Rack 3 Upgrade Guide]

Require Ruby 2.7.8 as minimum Ruby version (#1993)

Breaking change: Drop support for Rack 2 (#1857)

Note: when using Sinatra to start the web server, you now need the rackup gem installed

Breaking change: Remove the IndifferentHash initializer (#1982)

Breaking change: Disable session_hijacking protection by default (#1984)

Breaking change: Remove Rack::Protection::EncryptedCookie (#1989)

Note: cookies are still encrypted (by [Rack::Session::Cookie])

#1857: sinatra/sinatra#1857 #1993: sinatra/sinatra#1993 #1982: sinatra/sinatra#1982 #1984: sinatra/sinatra#1984 #1989: sinatra/sinatra#1989 [Rack::Session::Cookie]: https://github.com/rack/rack-session [Rack 3 Upgrade Guide]: https://github.com/rack/rack/blob/main/UPGRADE-GUIDE.md

3.2.0 / 2023-12-29

New: Add #except method to Sinatra::IndifferentHash (#1940)

New: Use Exception#detailed_message to show backtrace (#1952)

New: Add Sinatra::HamlHelpers to sinatra-contrib (#1960)

Fix: Add base64 to rack-protection runtime dependencies (#1946)

Fix: Avoid open-ended dependencies for sinatra-contrib and rack-protection (#1949)

Fix: Helpful message when Sinatra::Runner times out (#1975)

Fix: Ruby 3.3 + Bundler 2.5 compatibility (#1975)

#1940: sinatra/sinatra#1940 #1946: sinatra/sinatra#1946 #1949: sinatra/sinatra#1949 #1952: sinatra/sinatra#1952 #1960: sinatra/sinatra#1960 #1975: sinatra/sinatra#1975

3.1.0 / 2023-08-07

... (truncated)

Commits

b626e2d 4.0.0 release (#1996)
e56f657 Require Ruby 2.7.8 as minimum Ruby version (#1993)
9993829 CI: remove rack monkey patches
09f1c2b CI: rdiscount 2.2.7.3 resolved the TruffleRuby issue
c43e097 CI: use the released version of childprocess
739eaa0 CI: no need to set RUBY_ENGINE
d872057 CI: no need to set Encoding.default_external
9c14764 Remove Rack::Protection::EncryptedCookie (#1989)
667056c CI: allow ruby-head to fail
393bb7c Avoid using deprecated Rack::Response#header
Additional commits viewable in compare view

Updates pdfkit from 0.5.2 to 0.8.7.2

Release notes

Sourced from pdfkit's releases.

v0.8.7.2

What's Changed

Call IO.popen with an Array of command arguments (#518). by @postmodern in pdfkit/pdfkit#519

Bump to 0.8.7.2 by @serene in pdfkit/pdfkit#521

New Contributors

@postmodern made their first contribution in pdfkit/pdfkit#519

Full Changelog: pdfkit/pdfkit@v0.8.7.1...v0.8.7.2

v0.8.7.1

What's Changed

fix: support non-lower-case Content-Type header provided by app by @vladimir-mencl-eresearch in pdfkit/pdfkit#516

Bump to 0.8.7.1 by @serene in pdfkit/pdfkit#520

New Contributors

@vladimir-mencl-eresearch made their first contribution in pdfkit/pdfkit#516

Full Changelog: pdfkit/pdfkit@v0.8.7...v0.8.7.1

v0.8.7

Lowercase the header names for rack 3 changes (#511)

Partially escaped URLs should be escaped (#509)

v0.8.6

#499 - Update for new ruby and rails versions

v0.8.4.3.2

Bump to 0.8.4.3.2

Reduce scope of middleware exception handling (#476)

v0.8.4.3.1

Bump to 0.8.4.3

Don't override request level Content-Disposition header if it exists (#466)

Update rake (#471)

Add missing require statements for tempfile (#467)

Only grab last line of bundle exec which output (#464)

Return 500 status when an exception is caught in middleware (#469)

Update Travis CI URL for wkhtmltopf (#473)

v0.8.4.2

Improve Path Detection Feedback - pdfkit/pdfkit#460 Fix typo - pdfkit/pdfkit#444 Update Readme - pdfkit/pdfkit#444

Changelog

Sourced from pdfkit's changelog.

2023-02-27

Bump to 0.8.7.3

Allow passing a Pathname object to the path argument by @yujideveloper in pdfkit/pdfkit#522

Update repeatable options by @mguidetti in pdfkit/pdfkit#524

2022-10-18

Bump to 0.8.7.2

Call IO.popen with an Array of command arguments (#519)

2022-10-17

Bump to 0.8.7.1

Support non-lower-case Content-Type header provided by app (#516)

2022-10-02

Bump to 0.8.7

Lowercase the header names for rack 3 changes (#511)

Partially escaped URLs should be escaped (#509)

2022-04-11

Bump to 0.8.6

Update ruby and rails versions

2021-01-23

Bump to 0.8.5

Make PDFKit::VERSION public (#484)

Fix to render stylesheets as html safe string on Rails 6 (#483)

Adds support for Rails 6

2020-08-16

Bump to 0.8.4.3.2

Reduce scope of middleware exception handling (#476)

2020-07-05

Bump to 0.8.4.3.1

Don't override request level Content-Disposition header if it exists (#466)

Update rake (#471)

Add missing require statements for tempfile (#467)

Only grab last line of bundle exec which output (#464)

Return 500 status when an exception is caught in middleware (#469)

Update Travis CI URL for wkhtmltopf (#473)

2020-04-01

... (truncated)

Commits

404a5a4 Bump to 0.8.7.2 (#521)
79ec0c0 Call IO.popen with an Array of command arguments (#518). (#519)
ceca488 Bump to 0.8.7.1 (#520)
089e5de fix: support non-lower-case Content-Type header provided by app (#516)
6213317 Bump to 0.8.7 (#513)
6d0a162 Fix typo (#510)
54b4941 modify url_needs_escaping (#509)
41068fd Lowercase the header names for rack 3 changes (#511)
46cdf53 Bump to 0.8.6 (#504)
3f4583a Fix syntax error (#503)
Additional commits viewable in compare view

Updates httparty from 0.8.1 to 0.22.0

Release notes

Sourced from httparty's releases.

v0.22.0

What's Changed

Fix typo in example name by @xymbol in jnunemaker/httparty#780

Extract request building method by @aliismayilov in jnunemaker/httparty#786

CI: Tell dependabot to update GH Actions by @olleolleolle in jnunemaker/httparty#791

Add CSV gem as a dependency for Ruby 3.4 by @ngan in jnunemaker/httparty#796

Clear body when redirecting to a GET by @rhett-inbox in jnunemaker/httparty#783

CI against Ruby 3.3 by @y-yagi in jnunemaker/httparty#798

Bump actions/checkout from 3 to 4 by @dependabot in jnunemaker/httparty#792

Allow regexpr on raise errors. by @ryanfox1985 in jnunemaker/httparty#778

Avoid anonymous eval by @casperisfine in jnunemaker/httparty#776

Lazy load some gems by @orgads in jnunemaker/httparty#760

Redirect with authorization credentials to same host for relative paths by @jasonheecs in jnunemaker/httparty#700

Drop old ruby support by @jnunemaker in jnunemaker/httparty#799

New Contributors

@aliismayilov made their first contribution in jnunemaker/httparty#786

@ngan made their first contribution in jnunemaker/httparty#796

@rhett-inbox made their first contribution in jnunemaker/httparty#783

@y-yagi made their first contribution in jnunemaker/httparty#798

@dependabot made their first contribution in jnunemaker/httparty#792

@ryanfox1985 made their first contribution in jnunemaker/httparty#778

@casperisfine made their first contribution in jnunemaker/httparty#776

@jasonheecs made their first contribution in jnunemaker/httparty#700

Full Changelog: jnunemaker/httparty@v0.21.0...v0.22.0

v0.17.3

No release notes provided.

v0.17.2

No release notes provided.

Changelog

Sourced from httparty's changelog.

Changelog

All notable changes since 0.22 are documented in GitHub Releases.

0.21.0

escape filename in the multipart/form-data Content-Disposition header

Fix request marshaling

Replace mime-types with mini_mime

0.20.0

Breaking changes

Require Ruby >= 2.3.0

Fixes

Marshal.dump fails on response objects when request option :logger is set or :parser is a proc

Switch :pem option to to OpenSSL::PKey.read to support other algorithms

0.19.1

Remove use of unary + method for creating non-frozen string to increase compatibility with older versions of ruby

0.19.0

Multipart/Form-Data: rewind files after read

add frozen_string_literal pragma to all files

[Better handling of Accept-Encoding / Content-Encoding decompression (fixes #562)](jnunemaker/httparty#729)

0.18.1

Rename cop Lint/HandleExceptions to Lint/SuppressedException.

Encode keys in query params.

Fixed SSL doc example.

Add a build status badge.

0.18.0

Support gzip/deflate transfer encoding when explicit headers are set.

Support edge case cookie format with a blank attribute.

0.17.3

0.17.2 is broken jnunemaker/httparty#681

0.17.2

Add Response#nil? deprecetion warning

... (truncated)

Commits

6e1f154 master => main
15c1b4b Release 0.22.0
3155f48 Update changelog to point at github releases
e516b11 Merge pull request #799 from jnunemaker/drop-old-rubies
322785d Drop old ruby support
ca47360 Merge branch 'master' of https://github.com/jasonheecs/httparty into jasonhee...
b9bd421 Merge pull request #760 from orgads/lazy-require
5b25ae9 Merge pull request #776 from Shopify/avoid-anonymous-eval
8773af1 Fix regex specs
baa5e16 Merge branch 'raise_on_regexpr' of https://github.com/ryanfox1985/httparty in...
Additional commits viewable in compare view

Updates multi_xml from 0.4.2 to 0.7.1

Changelog

Sourced from multi_xml's changelog.

0.7.0

Add support for Ruby 3.3

Drop support for Ruby 3.0 and earlier

Don't mutate strings

0.6.0

Duplexed Streams

Support for Oga

Integer unification for Ruby 2.4

0.5.5

Fix symbolize_keys function

Fix Nokogiri parser for the same attr and inner element name

0.5.4

Add option to not cast parsed values

Use message instead of to_s

0.5.3

Add cryptographic signature

0.5.2

Remove ability to parse symbols and YAML

0.5.1

Revert "Reset @@parser in between specs"

0.5.0

Reset @@parser in between specs

Add attributes being passed through on content nodes

0.4.4

Fix regression in MultiXml.parse

0.4.3

Make parser a class variable

Add TYPE_NAMES constant

Commits

a3ed024 Bump version to 0.7.1
7d18711 Relax required Ruby version constraint to allow installation on Debian stable
f0480bf Bump version to 0.7.0
ad4cdad Add bin for development
eec72c5 Drop support for Ruby 3.0
1a7e9af Update runtime dependency in gemspec
f984436 Update development dependencies in Gemfile
4b87ab2 Clean up code
90df8a7 Update copyright year
3f2dad1 Update name
Additional commits viewable in compare view

Updates rack-protection from 1.2.0 to 4.0.0

Changelog

Sourced from rack-protection's changelog.

4.0.0. / 2024-01-19

New: Add support for Rack 3 (#1857)

Note: you may want to read the [Rack 3 Upgrade Guide]

Require Ruby 2.7.8 as minimum Ruby version (#1993)

Breaking change: Drop support for Rack 2 (#1857)

Note: when using Sinatra to start the web server, you now need the rackup gem installed

Breaking change: Remove the IndifferentHash initializer (#1982)

Breaking change: Disable session_hijacking protection by default (#1984)

Breaking change: Remove Rack::Protection::EncryptedCookie (#1989)

Note: cookies are still encrypted (by [Rack::Session::Cookie])

#1857: sinatra/sinatra#1857 #1993: sinatra/sinatra#1993 #1982: sinatra/sinatra#1982 #1984: sinatra/sinatra#1984 #1989: sinatra/sinatra#1989 [Rack::Session::Cookie]: https://github.com/rack/rack-session [Rack 3 Upgrade Guide]: https://github.com/rack/rack/blob/main/UPGRADE-GUIDE.md

3.2.0 / 2023-12-29

New: Add #except method to Sinatra::IndifferentHash (#1940)

New: Use Exception#detailed_message to show backtrace (#1952)

New: Add Sinatra::HamlHelpers to sinatra-contrib (#1960)

Fix: Add base64 to rack-protection runtime dependencies (#1946)

Fix: Avoid open-ended dependencies for sinatra-contrib and rack-protection (#1949)

Fix: Helpful message when Sinatra::Runner times out (#1975)

Fix: Ruby 3.3 + Bundler 2.5 compatibility (#1975)

#1940: sinatra/sinatra#1940 #1946: sinatra/sinatra#1946 #1949: sinatra/sinatra#1949 #1952: sinatra/sinatra#1952 #1960: sinatra/sinatra#1960 #1975: sinatra/sinatra#1975

3.1.0 / 2023-08-07

... (truncated)

Commits

b626e2d 4.0.0 release (#1996)
e56f657 Require Ruby 2.7.8 as minimum Ruby version (#1993)
9993829 CI: remove rack monkey patches
9c14764 Remove Rack::Protection::EncryptedCookie (#1989)
393bb7c Avoid using deprecated Rack::Response#header
db79236 Address missing session secret warning
fa5a139 CI: test rack-session head, test only latest JRuby (#1986)
157e307 Make session_hijacking an optional protection (#1984)
8a17d4b Add support for Rack 3, drop support for Rack 2 (#1857)
4e8fdb5 3.2.0 release (#1977)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the bundler group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [rack](https://github.com/rack/rack) | `1.4.1` | `3.1.7` | | [sinatra](https://github.com/sinatra/sinatra) | `1.3.2` | `4.0.0` | | [sinatra-contrib](https://github.com/sinatra/sinatra) | `1.3.1` | `4.0.0` | | [sinatra-jsonp](https://github.com/shtirlic/sinatra-jsonp) | `0.3.2` | `0.5.0` | | [pdfkit](https://github.com/pdfkit/pdfkit) | `0.5.2` | `0.8.7.2` | Updates `rack` from 1.4.1 to 3.1.7 - [Release notes](https://github.com/rack/rack/releases) - [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md) - [Commits](rack/rack@1.4.1...v3.1.7) Updates `sinatra` from 1.3.2 to 4.0.0 - [Changelog](https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md) - [Commits](sinatra/sinatra@1.3.2...v4.0.0) Updates `sinatra-contrib` from 1.3.1 to 4.0.0 - [Changelog](https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md) - [Commits](sinatra/sinatra@1.3.1...v4.0.0) Updates `sinatra-jsonp` from 0.3.2 to 0.5.0 - [Commits](https://github.com/shtirlic/sinatra-jsonp/commits/v0.5.0) Updates `sinatra` from 1.3.2 to 4.0.0 - [Changelog](https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md) - [Commits](sinatra/sinatra@1.3.2...v4.0.0) Updates `pdfkit` from 0.5.2 to 0.8.7.2 - [Release notes](https://github.com/pdfkit/pdfkit/releases) - [Changelog](https://github.com/pdfkit/pdfkit/blob/master/CHANGELOG.md) - [Commits](pdfkit/pdfkit@v0.5.2...v0.8.7.2) Updates `httparty` from 0.8.1 to 0.22.0 - [Release notes](https://github.com/jnunemaker/httparty/releases) - [Changelog](https://github.com/jnunemaker/httparty/blob/main/Changelog.md) - [Commits](jnunemaker/httparty@v0.8.1...v0.22.0) Updates `multi_xml` from 0.4.2 to 0.7.1 - [Changelog](https://github.com/sferik/multi_xml/blob/master/CHANGELOG.md) - [Commits](sferik/multi_xml@v0.4.2...v0.7.1) Updates `rack-protection` from 1.2.0 to 4.0.0 - [Changelog](https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md) - [Commits](sinatra/sinatra@1.2.0...v4.0.0) --- updated-dependencies: - dependency-name: rack dependency-type: direct:production dependency-group: bundler - dependency-name: sinatra dependency-type: direct:production dependency-group: bundler - dependency-name: sinatra-contrib dependency-type: direct:production dependency-group: bundler - dependency-name: sinatra-jsonp dependency-type: direct:production dependency-group: bundler - dependency-name: sinatra dependency-type: direct:production dependency-group: bundler - dependency-name: pdfkit dependency-type: direct:development dependency-group: bundler - dependency-name: httparty dependency-type: indirect dependency-group: bundler - dependency-name: multi_xml dependency-type: indirect dependency-group: bundler - dependency-name: rack-protection dependency-type: indirect dependency-group: bundler ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Jul 29, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the bundler group across 1 directory with 8 updates#1

Bump the bundler group across 1 directory with 8 updates#1
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/bundler/bundler-e604686bf3

dependabot bot commented on behalf of github Jul 29, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Jul 29, 2024

v3.0.9.1

What's Changed

v3.0.9

What's Changed

v3.0.8

What's Changed

New Contributors

v3.0.7

What's Changed

v3.0.6.1

v3.0.4.1

v3.0.4

v3.0.3

What's Changed

v3.0.2

[3.1.7] - 2024-07-11

Fixed

[3.1.6] - 2024-07-03

Fixed

[3.1.5] - 2024-07-02

Security

[3.1.4] - 2024-06-22

Fixed

[3.1.3] - 2024-06-12

Fixed

[3.1.2] - 2024-06-11

[3.1.1] - 2024-06-11

[3.1.0] - 2024-06-11

SPEC Changes

4.0.0. / 2024-01-19

3.2.0 / 2023-12-29

3.1.0 / 2023-08-07

4.0.0. / 2024-01-19

3.2.0 / 2023-12-29

3.1.0 / 2023-08-07

4.0.0. / 2024-01-19

3.2.0 / 2023-12-29

3.1.0 / 2023-08-07

v0.8.7.2

What's Changed

New Contributors

v0.8.7.1

What's Changed

New Contributors

v0.8.7

v0.8.6

v0.8.4.3.2

v0.8.4.3.1

v0.8.4.2

2023-02-27

2022-10-18

2022-10-17

2022-10-02

2022-04-11

2021-01-23

2020-08-16

2020-07-05

v0.22.0

What's Changed

New Contributors

v0.17.3

v0.17.2

Changelog

0.21.0

0.20.0

0.19.1

0.19.0

0.18.1

0.18.0

0.17.3

0.17.2

0.7.0

0.6.0

0.5.5

0.5.4

0.5.3

0.5.2

0.5.1