Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the bundler group across 6 directories with 14 updates #4

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Feb 12, 2025

Bumps the bundler group with 1 update in the /pkgs/development/web/mailcatcher directory: rack.
Bumps the bundler group with 2 updates in the /pkgs/servers/http/showoff directory: rack and addressable.
Bumps the bundler group with 1 update in the /pkgs/servers/monitoring/riemann-dash directory: ffi.
Bumps the bundler group with 3 updates in the /pkgs/servers/monitoring/sensu directory: addressable, json and jmespath.
Bumps the bundler group with 5 updates in the /pkgs/tools/admin/fastlane directory:

Package From To
addressable 2.8.0 2.8.7
json 2.6.2 2.10.1
webrick 1.7.0 1.8.2
jmespath 1.6.1 1.6.2
rexml 3.2.5 3.3.9

Bumps the bundler group with 3 updates in the /pkgs/tools/admin/oxidized directory: json, ffi and oxidized-web.

Updates rack from 1.6.11 to 2.2.11

Release notes

Sourced from rack's releases.

v2.2.8.1

What's Changed

Full Changelog: rack/rack@v2.2.8...v2.2.8.1

v2.2.8

What's Changed

New Contributors

Full Changelog: rack/rack@v2.2.7...v2.2.8

v2.2.7

What's Changed

New Contributors

Full Changelog: rack/rack@v2.2.6.4...v2.2.7

v2.2.6.4

No release notes provided.

v2.1.4.4

What's Changed

Full Changelog: rack/rack@v2.1.4.3...v2.1.4.4

v2.0.9.4

What's Changed

Full Changelog: rack/rack@v2.0.9.3...v2.0.9.4

Commits
  • aa5a0f5 Bump patch version.
  • f8b41c1 Escape non-printable characters when logging.
  • 14c9dec Bump patch version.
  • 6ae7057 [2.2-stable] Fix compatibility issues with Ruby 3.4.0dev (#2248)
  • b1deebd Bump patch version.
  • f7d40f9 Merge branch '2-2-sec' into 2-2-stable
  • e830011 bump version
  • d9c163a Avoid 2nd degree polynomial regexp in MediaType
  • 6245768 Return an empty array when ranges are too large
  • e4c1177 Fixing ReDoS in header parsing
  • Additional commits viewable in compare view

Updates sinatra from 1.4.8 to 3.2.0

Changelog

Sourced from sinatra's changelog.

3.2.0 / 2023-12-29

  • New: Add #except method to Sinatra::IndifferentHash (#1940)

  • New: Use Exception#detailed_message to show backtrace (#1952)

  • New: Add Sinatra::HamlHelpers to sinatra-contrib (#1960)

  • Fix: Add base64 to rack-protection runtime dependencies (#1946)

  • Fix: Avoid open-ended dependencies for sinatra-contrib and rack-protection (#1949)

  • Fix: Helpful message when Sinatra::Runner times out (#1975)

  • Fix: Ruby 3.3 + Bundler 2.5 compatibility (#1975)

#1940: sinatra/sinatra#1940 #1946: sinatra/sinatra#1946 #1949: sinatra/sinatra#1949 #1952: sinatra/sinatra#1952 #1960: sinatra/sinatra#1960 #1975: sinatra/sinatra#1975

3.1.0 / 2023-08-07

  • New: Add sass support via sass-embedded #1911 by なつき

  • New: Add start and stop callbacks #1913 by Jevin Sew

  • New: Warn on dropping sessions #1900 by Jonathan del Strother

  • New: Make Puma the default server #1924 by Patrik Ragnarsson

  • Fix: Remove use of Tilt::Cache #1922 by Jeremy Evans (allows use of Tilt 2.2.0 without deprecation warning)

  • Fix: rack-protection: specify rack version requirement #1932 by Patrik Ragnarsson

#1911: sinatra/sinatra#1911 #1913: sinatra/sinatra#1913 #1900: sinatra/sinatra#1900 #1924: sinatra/sinatra#1924 #1922: sinatra/sinatra#1922 #1932: sinatra/sinatra#1932

3.0.6 / 2023-04-11

  • Fix: Add support to keep open streaming connections with Puma #1858 by Jordan Owens

  • Fix: Avoid crash in uri helper on Integer input #1890 by Patrik Ragnarsson

... (truncated)

Commits
  • 4e8fdb5 3.2.0 release (#1977)
  • 3b75657 Revert "Shorter Sinatra::Runner timeout" (#1976)
  • 1551ef7 Ruby 3.3 + Bundler 2.5 compatibility
  • ca6b71c Helpful message when Sinatra::Runner times out
  • 0e43702 Shorter Sinatra::Runner timeout
  • cadbedd CI: move rack-protection to its own job (#1974)
  • 5d844ee Add workflow for Trusted Publishing to RubyGems (#1970)
  • 11119a8 CI: use latest rack-test release, not trunk (#1969)
  • 2b89659 CI: avoid rdiscount >= 2.2.7.2 on truffleruby
  • dcdebe9 CI: remove sinatra from rack-protection bundle
  • Additional commits viewable in compare view

Updates rack from 1.6.11 to 2.2.11

Release notes

Sourced from rack's releases.

v2.2.8.1

What's Changed

Full Changelog: rack/rack@v2.2.8...v2.2.8.1

v2.2.8

What's Changed

New Contributors

Full Changelog: rack/rack@v2.2.7...v2.2.8

v2.2.7

What's Changed

New Contributors

Full Changelog: rack/rack@v2.2.6.4...v2.2.7

v2.2.6.4

No release notes provided.

v2.1.4.4

What's Changed

Full Changelog: rack/rack@v2.1.4.3...v2.1.4.4

v2.0.9.4

What's Changed

Full Changelog: rack/rack@v2.0.9.3...v2.0.9.4

Commits
  • aa5a0f5 Bump patch version.
  • f8b41c1 Escape non-printable characters when logging.
  • 14c9dec Bump patch version.
  • 6ae7057 [2.2-stable] Fix compatibility issues with Ruby 3.4.0dev (#2248)
  • b1deebd Bump patch version.
  • f7d40f9 Merge branch '2-2-sec' into 2-2-stable
  • e830011 bump version
  • d9c163a Avoid 2nd degree polynomial regexp in MediaType
  • 6245768 Return an empty array when ranges are too large
  • e4c1177 Fixing ReDoS in header parsing
  • Additional commits viewable in compare view

Updates sinatra from 1.4.8 to 2.2.4

Changelog

Sourced from sinatra's changelog.

3.2.0 / 2023-12-29

  • New: Add #except method to Sinatra::IndifferentHash (#1940)

  • New: Use Exception#detailed_message to show backtrace (#1952)

  • New: Add Sinatra::HamlHelpers to sinatra-contrib (#1960)

  • Fix: Add base64 to rack-protection runtime dependencies (#1946)

  • Fix: Avoid open-ended dependencies for sinatra-contrib and rack-protection (#1949)

  • Fix: Helpful message when Sinatra::Runner times out (#1975)

  • Fix: Ruby 3.3 + Bundler 2.5 compatibility (#1975)

#1940: sinatra/sinatra#1940 #1946: sinatra/sinatra#1946 #1949: sinatra/sinatra#1949 #1952: sinatra/sinatra#1952 #1960: sinatra/sinatra#1960 #1975: sinatra/sinatra#1975

3.1.0 / 2023-08-07

  • New: Add sass support via sass-embedded #1911 by なつき

  • New: Add start and stop callbacks #1913 by Jevin Sew

  • New: Warn on dropping sessions #1900 by Jonathan del Strother

  • New: Make Puma the default server #1924 by Patrik Ragnarsson

  • Fix: Remove use of Tilt::Cache #1922 by Jeremy Evans (allows use of Tilt 2.2.0 without deprecation warning)

  • Fix: rack-protection: specify rack version requirement #1932 by Patrik Ragnarsson

#1911: sinatra/sinatra#1911 #1913: sinatra/sinatra#1913 #1900: sinatra/sinatra#1900 #1924: sinatra/sinatra#1924 #1922: sinatra/sinatra#1922 #1932: sinatra/sinatra#1932

3.0.6 / 2023-04-11

  • Fix: Add support to keep open streaming connections with Puma #1858 by Jordan Owens

  • Fix: Avoid crash in uri helper on Integer input #1890 by Patrik Ragnarsson

... (truncated)

Commits
  • 4e8fdb5 3.2.0 release (#1977)
  • 3b75657 Revert "Shorter Sinatra::Runner timeout" (#1976)
  • 1551ef7 Ruby 3.3 + Bundler 2.5 compatibility
  • ca6b71c Helpful message when Sinatra::Runner times out
  • 0e43702 Shorter Sinatra::Runner timeout
  • cadbedd CI: move rack-protection to its own job (#1974)
  • 5d844ee Add workflow for Trusted Publishing to RubyGems (#1970)
  • 11119a8 CI: use latest rack-test release, not trunk (#1969)
  • 2b89659 CI: avoid rdiscount >= 2.2.7.2 on truffleruby
  • dcdebe9 CI: remove sinatra from rack-protection bundle
  • Additional commits viewable in compare view

Updates addressable from 2.6.0 to 2.8.0

Changelog

Sourced from addressable's changelog.

Addressable 2.8.0

  • fixes ReDoS vulnerability in Addressable::Template#match
  • no longer replaces + with spaces in queries for non-http(s) schemes
  • fixed encoding ipv6 literals
  • the :compacted flag for normalized_query now dedupes parameters
  • fix broken escape_component alias
  • dropping support for Ruby 2.0 and 2.1
  • adding Ruby 3.0 compatibility for development tasks
  • drop support for rack-mount and remove Addressable::Template#generate
  • performance improvements
  • switch CI/CD to GitHub Actions

Addressable 2.7.0

  • added :compacted flag to normalized_query
  • heuristic_parse handles mailto: more intuitively
  • dropped explicit support for JRuby 9.0.5.0
  • compatibility w/ public_suffix 4.x
  • performance improvements
Commits
  • 6469a23 Updating gemspec again
  • 2433638 Merge branch 'main' of github.com:sporkmonger/addressable into main
  • e9c76b8 Merge pull request #378 from ashmaroli/flat-map
  • 56c5cf7 Update the gemspec
  • c1fed1c Require a non-vulnerable rake
  • 0d8a312 Adding note about ReDoS vulnerability
  • 89c7613 Merge branch 'template-regexp' into main
  • cf8884f Note about alias fix
  • bb03f71 Merge pull request #371 from charleystran/add_missing_encode_component_doc_entry
  • 6d1d809 Adding note about :compacted normalization
  • Additional commits viewable in compare view

Updates commonmarker from 0.18.2 to 0.23.11

Release notes

Sourced from commonmarker's releases.

v0.23.11

What's Changed

New Contributors

Full Changelog: gjtorikian/commonmarker@v0.23.10...v0.23.11

v0.23.10

What's Changed

Full Changelog: gjtorikian/commonmarker@v0.23.9...v0.23.10

v0.23.9

What's Changed

Full Changelog: gjtorikian/commonmarker@v0.23.8...v0.23.9

v0.23.8

What's Changed

New Contributors

Full Changelog: gjtorikian/commonmarker@v0.23.7...v0.23.8

v0.23.7

What's Changed

Full Changelog: gjtorikian/commonmarker@v0.23.6...v0.23.7

v0.23.7.pre1

What's Changed

Full Changelog: gjtorikian/commonmarker@v0.23.6...v0.23.7.pre1

v0.23.6

What's Changed

... (truncated)

Changelog

Sourced from commonmarker's changelog.

[v2.0.4] - 23-01-2025

What's Changed

Full Changelog: gjtorikian/commonmarker@v2.0.3...v2.0.4

[v2.0.3] - 21-01-2025

What's Changed

Full Changelog: gjtorikian/commonmarker@v2.0.2.1...v2.0.3

[v2.0.2.1] - 08-01-2025

What's Changed

Full Changelog: gjtorikian/commonmarker@v2.0.2...v2.0.2.1

[v2.0.2] - 29-12-2024

What's Changed

Full Changelog: gjtorikian/commonmarker@v2.0.1...v2.0.2

[v2.0.1] - 27-11-2024

What's Changed

Full Changelog: gjtorikian/commonmarker@v2.0.0...v2.0.1

[v2.0.0] - 25-11-2024

This is a major release in the sense that there's a breaking API change,

... (truncated)

Commits

Updates json from 2.2.0 to 2.10.1

Release notes

Sourced from json's releases.

v2.3.0

What's Changed

New Contributors

Full Changelog: ruby/json@v2.2.0...v2.3.0

v2.2.0

What's Changed

New Contributors

Full Changelog: ruby/json@v2.1.0...v2.2.0

v2.1.0

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from json's changelog.

2019-12-11 (2.3.0)

  • Fix default of create_additions to always be false for JSON(user_input) and JSON.parse(user_input, nil). Note that JSON.load remains with default true and is meant for internal serialization of trusted data. [CVE-2020-10663]
  • Fix passing args all #to_json in json/add/*.
  • Fix encoding issues
  • Fix issues of keyword vs positional parameter
  • Fix JSON::Parser against bigdecimal updates
  • Bug fixes to JRuby port

2019-02-21 (2.2.0)

  • Adds support for 2.6 BigDecimal and ruby standard library Set datetype.

2017-04-18 (2.1.0)

  • Allow passing of decimal_class option to specify a class as which to parse JSON float numbers.

2017-03-23 (2.0.4)

  • Raise exception for incomplete unicode surrogates/character escape sequences. This problem was reported by Daniel Gollahon (dgollahon).
  • Fix arbitrary heap exposure problem. This problem was reported by Ahmad Sherif (ahmadsherif).

2017-01-12 (2.0.3)

  • Set required_ruby_version to 1.9
  • Some small fixes

2016-07-26 (2.0.2)

  • Specify required_ruby_version for json_pure.
  • Fix issue #295 failure when parsing frozen strings.

2016-07-01 (2.0.1)

  • Fix problem when requiring json_pure and Parser constant was defined top level.
  • Add RB_GC_GUARD to avoid possible GC problem via Pete Johns.
  • Store current_nesting on stack by Aaron Patterson.

2015-09-11 (2.0.0)

  • Now complies to newest JSON RFC 7159.
  • Implements compatibility to ruby 2.4 integer unification.
  • Drops support for old rubies whose life has ended, that is rubies < 2.0. Also see https://www.ruby-lang.org/en/news/2014/07/01/eol-for-1-8-7-and-1-9-2/
  • There were still some mentions of dual GPL licensing in the source, but JSON has just the Ruby license that itself includes an explicit dual-licensing clause that allows covered software to be distributed under the terms of the Simplified BSD License instead for all ruby versions >= 1.9.3. This is however a GPL compatible license according to the Free Software Foundation. I changed these mentions to be consistent with the Ruby license setting in the gemspec files which were already correct now.
Commits

Updates nokogiri from 1.10.1 to 1.18.2

Release notes

Sourced from nokogiri's releases.

v1.18.2 / 2024-01-19

Fixed

  • When performing a CSS selector query, an XML document's root namespace declarations should not be applied to wildcard selectors ("*"). Fixes a bug introduced in v1.17.0. (#3411) @​flavorjones
74e0f9a7487a30a2957f46c5113d58f836436b033c9906e0bc6fee9d8cdafabf  nokogiri-1.18.2-aarch64-linux-gnu.gem
99bcea596a80eaee99f2bae2596275641ea688262c1da32b4e90db6159e86477  nokogiri-1.18.2-aarch64-linux-musl.gem
8288ec7a296e2510ca9bd053c0c5989f11260f8c07bc3e9afbafa536f7077281  nokogiri-1.18.2-arm64-darwin.gem
6fb0246b69f2c589a69254e82bc2a40aa238c4f977fd7903e283341a92935729  nokogiri-1.18.2-arm-linux-gnu.gem
dcdd4d10ed2743f0d8c887825700c3a8506aea1aa415917ac50ccc01597c51a3  nokogiri-1.18.2-arm-linux-musl.gem
93791cfb33186fe077eb9e1b8a6855b5621e328f81f565334572fa398366f8bf  nokogiri-1.18.2.gem
eefdf9f0d6086173d3488cf7a736732ee13fb6674ef15643478c20502a67bf37  nokogiri-1.18.2-java.gem
894514572fa7503ce9210e51a7f8a9a35f34f154d6406cec1ac148c3ce1536a3  nokogiri-1.18.2-x64-mingw-ucrt.gem
7fca165e5ee87e9b6b3f1377180376afc0c8652ed2a3d761f472f0e3d3a1c651  nokogiri-1.18.2-x86_64-darwin.gem
9330ced4a976604865c2a76ce158e2bc608fa83999552e85a32ec06f85f427db  nokogiri-1.18.2-x86_64-linux-gnu.gem
1cd7786ed15c76958d6a8f9a864df6208fecd624c340eb4ed211fbea60328f02  nokogiri-1.18.2-x86_64-linux-musl.gem

v1.18.1 / 2024-12-29

Fixed

  • [CRuby] XML::SAX::ParserContext keeps a reference to the input to avoid a potential use-after-free issue that's existed since v1.4.0 (2009). (#3395) @​flavorjones
35837013800e34342fcbaca305f8c49231f6bd4f779bfa23fe7b4686ae82d5b8  nokogiri-1.18.1-aarch64-linux-gnu.gem
1b303402cd045f9075a6ee291767c1ffe654b426ed30911e5b47819c21855b22  nokogiri-1.18.1-aarch64-linux-musl.gem
d75193f284c899d225943a8944479faedd995a7573ddd5c8308ffbdf2ec55204  nokogiri-1.18.1-arm64-darwin.gem
3b873fd6b0cd1ad7c77e87af701075bdfd14c9a6b2f2965c5e00ed29a5627a37  nokogiri-1.18.1-arm-linux-gnu.gem
d6fe26f6d1425f403077fbf829fc0ef8e521545c924a13777d6fdf1a0c07c1f3  nokogiri-1.18.1-arm-linux-musl.gem
df18be7e96c34736b6abfdeda80c6e845134fb9afe2fe5d4fbc1cf1f89c68475  nokogiri-1.18.1.gem
e0e19b340f92d09b2b731e22d68895b2062d6555188aff370b05617516d3a781  nokogiri-1.18.1-java.gem
50d81e905a60dff706b99c980abefedaf1c3d2c434a3b49afaf1b69b80f7f5b4  nokogiri-1.18.1-x64-mingw-ucrt.gem
d94e3aa6483577495fc8969d6b4b5c075840ce6b1ab09636a6d4177ad171051d  nokogiri-1.18.1-x86_64-darwin.gem
e516cf16ccde67ed4cc595a2621ca5ddd42562ecb24928914b0045a20a41620e  nokogiri-1.18.1-x86_64-linux-gnu.gem
f2c389bc100541247edaeaabc6d875b31d72e897471b66a67987b2e4df0192d6  nokogiri-1.18.1-x86_64-linux-musl.gem

v1.18.0 / 2024-12-25

... (truncated)

Changelog

Sourced from nokogiri's changelog.

v1.18.2 / 2024-01-19

Fixed

  • When performing a CSS selector query, an XML document's root namespace declarations should not be applied to wildcard selectors ("*"). Fixes a bug introduced in v1.17.0. (#3411) @​flavorjones

v1.18.1 / 2024-12-29

Fixed

  • [CRuby] XML::SAX::ParserContext keeps a reference to the input to avoid a potential use-after-free issue that's existed since v1.4.0 (2009). (#3395) @​flavorjones

v1.18.0 / 2024-12-25

Notable Changes

Ruby

This release introduces native gem support for Ruby 3.4.

This release ends support for Ruby 3.0, for which upstream support ended 2024-04-23.

This release ships separate precompiled GNU and Musl gems for all linux platforms. Previously both GNU and Musl target systems could use and install the same gem, e.g., the platform gem for x86_64-linux. Now, however, the precompiled gem platforms would be x86_64-linux-gnu and x86_64-linux-musl. So long as you're on bundler >= 2.5.6 this should be seamless other than perhaps needing to update the platforms in your "Gemfile.lock".

This release drops precompiled native platform gems for x86-linux and x86-mingw32. These platforms are still supported. Users on these platforms must install the "ruby platform" gem which requires a compiler toolchain. See Installing the ruby platform gem in the installation docs. (#3369, #3081)

Improved

  • [CRuby] CSS and XPath queries are faster now that Node#xpath, Node#css, and related functions are using a faster XPathContext initialization process. We benchmarked a 1.9x improvement for a 6kb file. Big thanks to @​nwellnhof for helping with this one. (#3378, superseded by #3389) @​flavorjones

v1.17.2 / 2024-12-12

Fixed

  • [JRuby] Fixed an issue where Node#dup when called with the new_parent_doc parameter was not decorating the node with the document's Node decorators. #3372 @​flavorjones

v1.17.1 / 2024-12-10

Fixed

v1.17.0 / 2024-12-08

... (truncated)

Commits
  • aa54fa5 version bump to v1.18.2
  • 0fb5541 backport: fix(css-selector): default XML namespace should not be applied to w...
  • 8ef2e91 ci: bump windows test images from "head" to "3.4"
  • c10fd7a dev: so tired of psych not building on various things
  • 8378749 fix(css-selector): default XML namespace is not applied to wildcard
  • b112e18 prefactor: restructure css-to-xpath tests
  • 3b28b49 version bump to v1.18.1
  • 6344147 fix: SAX::ParserContext keeps a reference to the input (backport of #3395 to ...
  • 1c9b8f1 doc: update CHANGELOG.md
  • 682a293 fix: SAX::ParserContext keeps a reference to the input
  • Additional commits viewable in compare view

Updates rack-contrib from 1.8.0 to 2.5.0

Release notes

Sourced from rack-contrib's releases.

Omnibus release of dooooooooom

The list of changes in this release is long, and should serve as a warning to me to make releases more often, as it cuts down on typing. Thanks to everyone who made PRs, checked PRs, merged PRs, and... renewed PRs. Special thanks to Andrew Konchin (@​andrykonchin) who is responsible for over half the changes in this monster release, and who has come on board as a maintainer.

This release removes the Rack::Runtime and Rack::Config middleware. This may seem like a foolhardy thing to do in a minor release, but rack itself ships with functionally identical versions. Compatibility has been maintained by having require "rack/contrib/<thing>" still work, but that should be changed to require "rack/<thing>" instead.

  • A #close method was added to the body that is returned by Rack::Signals.

  • A stub CHANGELOG.md, pointing to the canonical source of release notes, has been added.

  • Thread safety issues in Rack::Access, Rack::CommonCookies, and Rack::Deflect have been fixed. Additionally, the need for a thread-safe external cache object in Rack::LazyConditionalGet has been documented.

  • A SPEC violation in Rack::CSSHTTPRequest has been fixed.

  • Case-sensitive header problems in a whole bunch of middlewares have been fixed.

  • Rack::JSONBodyParser now only rescues JSON::ParserError if it is raised within the middleware's own code. Exceptions raised by the application itself will now be left alone to be handled elsewhere.

  • All string literals are now frozen.

  • Residual ye olde Ruby compatibility checks were removed from Rack::Backstage, Rack::MailExceptionsDescription has been truncated

Bumps the bundler group with 1 update in the /pkgs/development/web/mailcatcher directory: [rack](https://github.com/rack/rack).
Bumps the bundler group with 2 updates in the /pkgs/servers/http/showoff directory: [rack](https://github.com/rack/rack) and [addressable](https://github.com/sporkmonger/addressable).
Bumps the bundler group with 1 update in the /pkgs/servers/monitoring/riemann-dash directory: [ffi](https://github.com/ffi/ffi).
Bumps the bundler group with 3 updates in the /pkgs/servers/monitoring/sensu directory: [addressable](https://github.com/sporkmonger/addressable), [json](https://github.com/ruby/json) and [jmespath](https://github.com/trevorrowe/jmespath.rb).
Bumps the bundler group with 5 updates in the /pkgs/tools/admin/fastlane directory:

| Package | From | To |
| --- | --- | --- |
| [addressable](https://github.com/sporkmonger/addressable) | `2.8.0` | `2.8.7` |
| [json](https://github.com/ruby/json) | `2.6.2` | `2.10.1` |
| [webrick](https://github.com/ruby/webrick) | `1.7.0` | `1.8.2` |
| [jmespath](https://github.com/trevorrowe/jmespath.rb) | `1.6.1` | `1.6.2` |
| [rexml](https://github.com/ruby/rexml) | `3.2.5` | `3.3.9` |

Bumps the bundler group with 3 updates in the /pkgs/tools/admin/oxidized directory: [json](https://github.com/ruby/json), [ffi](https://github.com/ffi/ffi) and [oxidized-web](https://github.com/ytti/oxidized-web).


Updates `rack` from 1.6.11 to 2.2.11
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@1.6.11...v2.2.11)

Updates `sinatra` from 1.4.8 to 3.2.0
- [Changelog](https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md)
- [Commits](sinatra/sinatra@v1.4.8...v3.2.0)

Updates `rack` from 1.6.11 to 2.2.11
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@1.6.11...v2.2.11)

Updates `sinatra` from 1.4.8 to 2.2.4
- [Changelog](https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md)
- [Commits](sinatra/sinatra@v1.4.8...v3.2.0)

Updates `addressable` from 2.6.0 to 2.8.0
- [Changelog](https://github.com/sporkmonger/addressable/blob/main/CHANGELOG.md)
- [Commits](sporkmonger/addressable@addressable-2.6.0...addressable-2.8.0)

Updates `commonmarker` from 0.18.2 to 0.23.11
- [Release notes](https://github.com/gjtorikian/commonmarker/releases)
- [Changelog](https://github.com/gjtorikian/commonmarker/blob/main/CHANGELOG.md)
- [Commits](gjtorikian/commonmarker@v0.18.2...v0.23.11)

Updates `json` from 2.2.0 to 2.10.1
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](ruby/json@v1.8.6...v2.3.0)

Updates `nokogiri` from 1.10.1 to 1.18.2
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/v1.18.2/CHANGELOG.md)
- [Commits](sparklemotion/nokogiri@v1.10.1...v1.18.2)

Updates `rack-contrib` from 1.8.0 to 2.5.0
- [Release notes](https://github.com/rack/rack-contrib/releases)
- [Changelog](https://github.com/rack/rack-contrib/blob/main/CHANGELOG.md)
- [Commits](rack/rack-contrib@v1.8.0...v2.5.0)

Updates `ffi` from 1.10.0 to 1.17.1
- [Changelog](https://github.com/ffi/ffi/blob/master/CHANGELOG.md)
- [Commits](ffi/ffi@1.10.0...v1.17.1)

Updates `addressable` from 2.6.0 to 2.8.0
- [Changelog](https://github.com/sporkmonger/addressable/blob/main/CHANGELOG.md)
- [Commits](sporkmonger/addressable@addressable-2.6.0...addressable-2.8.0)

Updates `json` from 1.8.6 to 2.3.0
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](ruby/json@v1.8.6...v2.3.0)

Updates `jmespath` from 1.4.0 to 1.6.1
- [Release notes](https://github.com/trevorrowe/jmespath.rb/releases)
- [Changelog](https://github.com/jmespath/jmespath.rb/blob/main/CHANGELOG.md)
- [Commits](jmespath/jmespath.rb@v1.4.0...v1.6.1)

Updates `addressable` from 2.8.0 to 2.8.7
- [Changelog](https://github.com/sporkmonger/addressable/blob/main/CHANGELOG.md)
- [Commits](sporkmonger/addressable@addressable-2.6.0...addressable-2.8.0)

Updates `json` from 2.6.2 to 2.10.1
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](ruby/json@v1.8.6...v2.3.0)

Updates `webrick` from 1.7.0 to 1.8.2
- [Release notes](https://github.com/ruby/webrick/releases)
- [Commits](ruby/webrick@v1.7.0...v1.8.2)

Updates `jmespath` from 1.6.1 to 1.6.2
- [Release notes](https://github.com/trevorrowe/jmespath.rb/releases)
- [Changelog](https://github.com/jmespath/jmespath.rb/blob/main/CHANGELOG.md)
- [Commits](jmespath/jmespath.rb@v1.4.0...v1.6.1)

Updates `rexml` from 3.2.5 to 3.3.9
- [Release notes](https://github.com/ruby/rexml/releases)
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md)
- [Commits](ruby/rexml@v3.2.5...v3.3.9)

Updates `json` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](ruby/json@v1.8.6...v2.3.0)

Updates `ffi` from 1.10.0 to 1.17.1
- [Changelog](https://github.com/ffi/ffi/blob/master/CHANGELOG.md)
- [Commits](ffi/ffi@1.10.0...v1.17.1)

Updates `oxidized-web` from 0.13.1 to 0.14.0
- [Release notes](https://github.com/ytti/oxidized-web/releases)
- [Changelog](https://github.com/ytti/oxidized-web/blob/master/CHANGELOG.md)
- [Commits](ytti/oxidized-web@0.13.1...0.14.0)

Updates `git` from 1.5.0 to 1.19.1
- [Release notes](https://github.com/ruby-git/ruby-git/releases)
- [Changelog](https://github.com/ruby-git/ruby-git/blob/master/CHANGELOG.md)
- [Commits](ruby-git/ruby-git@v1.5.0...v1.19.1)

Updates `puma` from 3.11.4 to 6.4.3
- [Release notes](https://github.com/puma/puma/releases)
- [Changelog](https://github.com/puma/puma/blob/master/History.md)
- [Commits](puma/puma@v3.11.4...v6.4.3)

---
updated-dependencies:
- dependency-name: rack
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: sinatra
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: rack
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: sinatra
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: addressable
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: commonmarker
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: json
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: nokogiri
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: rack-contrib
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: ffi
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: addressable
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: json
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: jmespath
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: addressable
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: json
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: webrick
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: jmespath
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: rexml
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: json
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: ffi
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: oxidized-web
  dependency-type: direct:production
  dependency-group: bundler
- dependency-name: git
  dependency-type: indirect
  dependency-group: bundler
- dependency-name: puma
  dependency-type: indirect
  dependency-group: bundler
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Feb 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants