Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the deps group with 3 updates #399

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 13, 2024

Bumps the deps group with 3 updates: activesupport, excon and hyperclient.

Updates activesupport from 7.1.3 to 7.1.3.2

Release notes

Sourced from activesupport's releases.

v7.1.3.2

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • No changes.

Action Pack

  • Fix raise_on_missing_translations not working correctly with the translate method in controllers after the patch for CVE-2024-26143.

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

  • No changes.

... (truncated)

Changelog

Sourced from activesupport's changelog.

Rails 7.1.3.2 (February 21, 2024)

  • No changes.

Rails 7.1.3.1 (February 21, 2024)

  • No changes.
Commits

Updates excon from 0.109.0 to 0.110.0

Changelog

Sourced from excon's changelog.

0.110.0 2024-03-12

  • update bundled default certificates
Commits
  • 1970dee v0.109.0
  • 8751208 update bundled certs
  • 7451fcd remove stale action
  • 253b515 add security policy
  • 52dfe42 fix cron attribute on ci action
  • 4b43f0a add a weekly test run, for regular feedback even when code remains stable
  • 536d50f bump dependabot from daily to weekly
  • 18f023f add explicit content-types to fix tests on Rack 3+
  • f57afe1 add funding info
  • 44d0550 update gem version badge in readme to link to rubygems
  • Additional commits viewable in compare view

Updates hyperclient from 1.0.1 to 2.0.0

Changelog

Sourced from hyperclient's changelog.

2.0.0 (2024/02/01)

Commits
  • f7cbfc2 Preparing for release, 2.0.
  • 38bc864 Merge pull request #287 from dblock/follow-redirects
  • 180e888 Require faraday-follow_redirects.
  • d333203 Merge pull request #285 from dblock/faraday-2
  • f2c856c Add support for Faraday 2.x.
  • e446423 Update rubocop requirement from ~> 1.46.0 to ~> 1.48.0
  • 4b3064b Update rubocop requirement from ~> 1.45.1 to ~> 1.46.0
  • 10a0b41 Merge pull request #271 from dblock/ruby-3.2.0
  • 90bab91 Added Ruby 3.2.
  • f9374aa Merge pull request #270 from dblock/upgrade-rubocop
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the deps group with 3 updates: [activesupport](https://github.com/rails/rails), [excon](https://github.com/excon/excon) and [hyperclient](https://github.com/codegram/hyperclient).


Updates `activesupport` from 7.1.3 to 7.1.3.2
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v7.1.3.2/activesupport/CHANGELOG.md)
- [Commits](rails/rails@v7.1.3...v7.1.3.2)

Updates `excon` from 0.109.0 to 0.110.0
- [Changelog](https://github.com/excon/excon/blob/master/changelog.txt)
- [Commits](excon/excon@v0.109.0...v0.110.0)

Updates `hyperclient` from 1.0.1 to 2.0.0
- [Release notes](https://github.com/codegram/hyperclient/releases)
- [Changelog](https://github.com/codegram/hyperclient/blob/master/CHANGELOG.md)
- [Commits](codegram/hyperclient@v1.0.1...v2.0.0)

---
updated-dependencies:
- dependency-name: activesupport
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: deps
- dependency-name: excon
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: hyperclient
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Mar 13, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github May 17, 2024

Superseded by #409.

@dependabot dependabot bot closed this May 17, 2024
@dependabot dependabot bot deleted the dependabot/bundler/deps-dab665d345 branch May 17, 2024 06:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants