Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Mend: high confidence minor and patch dependency updates #2

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Apr 16, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
brakeman (source, changelog) 6.1.1 -> 6.2.2 age adoption passing confidence
capybara (changelog) 3.39.2 -> 3.40.0 age adoption passing confidence
cssbundling-rails (changelog) 1.3.3 -> 1.4.1 age adoption passing confidence
debug 1.9.1 -> 1.9.2 age adoption passing confidence
delayed_job (changelog) 4.1.11 -> 4.1.13 age adoption passing confidence
delayed_job_active_record 4.1.8 -> 4.1.11 age adoption passing confidence
eslint-plugin-import 2.27.5 -> 2.31.0 age adoption passing confidence
image_processing 1.12.2 -> 1.13.0 age adoption passing confidence
jbuilder (changelog) 2.11.5 -> 2.13.0 age adoption passing confidence
jsbundling-rails (changelog) 1.2.1 -> 1.3.1 age adoption passing confidence
listen (changelog) 3.8.0 -> 3.9.0 age adoption passing confidence
minitest (changelog) ">= 5.15.0", "< 5.22.0" -> ">= 5.15.0", "< 5.25.3" age adoption passing confidence
propshaft 0.8.0 -> 0.9.1 age adoption passing confidence
qunit (source) 2.19.4 -> 2.22.0 age adoption passing confidence
rack (changelog) 3.0.8 -> 3.1.8 age adoption passing confidence
rake (changelog) 13.1.0 -> 13.2.1 age adoption passing confidence
redis (changelog) 5.0.8 -> 5.3.0 age adoption passing confidence
rexml (changelog) 3.2.6 -> 3.3.9 age adoption passing confidence
rubocop-minitest (source, changelog) 0.34.3 -> 0.36.0 age adoption passing confidence
sprockets-rails (changelog) 3.4.2 -> 3.5.2 age adoption passing confidence
stackprof (changelog) 0.2.25 -> 0.2.26 age adoption passing confidence
stimulus-rails (source) 1.3.0 -> 1.3.4 age adoption passing confidence
terser (changelog) 1.1.20 -> 1.2.4 age adoption passing confidence
trix (source) 2.0.5 -> 2.1.8 age adoption passing confidence
webmock (changelog) 3.19.1 -> 3.24.0 age adoption passing confidence
webpack 4.46.0 -> 4.47.0 age adoption passing confidence
webrick 1.8.1 -> 1.9.0 age adoption passing confidence

Release Notes

presidentbeef/brakeman (brakeman)

v6.2.2

Compare Source

  • Ignore more native gems when building gem
  • Revamp command injection in pipeline* calls
  • New end-of-support dates for Rails

v6.2.1

Just a packaging fix for brakeman.gem

v6.2.0

  • Add --show-ignored option (Gabriel Zayas)
  • Add optional support for Prism parser
  • Warn about unscoped finds with find_by!
  • Treat ::X and X the same, for now (Jill Klang)
  • Fix compatibility with default frozen string literals (Jean Boussier)
  • Remediation advice for command injection (Nicholas Barone)
  • Fix Ruby warnings in test suite (Jean Boussier)
  • Support YAML aliases in secret configs (Chedli Bourguiba)
  • Add initial Rails 8 support (Ron Shinall)
  • Handle mass assignment with splats
  • Add support for symbolic links (Lu Zhu)

v6.1.2

Compare Source

  • Update Highline to 3.0
  • Add EOL date for Ruby 3.3.0
  • Avoid copying Sexps that are too large
  • Avoid detecting ViewComponentContrib::Base as dynamic render paths (vividmuimui)
  • Remove deprecated use of Kernel#open("|...")
  • Remove safe_yaml gem dependency
  • Avoid detecting Phlex components as dynamic render paths (Máximo Mussini)
teamcapybara/capybara (capybara)

v3.40.0

Compare Source

Release date: 2024-01-26

Changned
  • Dropped support for Ruby 2.7, 3.0+ is now required
  • Dropped support for Selenium < 4.8
  • Use the new headless option on chromedriver with registered selenium driver [Neil Carvalho]
Added
  • Capybara::Result#to_ary to support multiple assignment [Sean Doyle]
  • has_element? and related matchers [Sean Doyle]
  • Rack 3 support
Fixed
  • Forward save_screenshot options to selenium - Issue 2738
  • Rack test - don't auto submit forms with multiple inputs [Mitchell Henke]
  • Table row selector matches cell values in order - Issue 2686 [Jeff Parr]
  • Table row selector fixes for first column - Issue 2685 [Jeff Par]
rails/cssbundling-rails (cssbundling-rails)

v1.4.1

Compare Source

What's Changed

Full Changelog: rails/cssbundling-rails@v1.4.0...v1.4.1

v1.4.0

Compare Source

What's Changed

New Contributors

Full Changelog: rails/cssbundling-rails@v1.3.3...v1.4.0

ruby/debug (debug)

v1.9.2

Compare Source

What's Changed

New Contributors

Full Changelog: ruby/debug@v1.9.1...v1.9.2

collectiveidea/delayed_job (delayed_job)

v4.1.13

Compare Source

=======================

  • Enable Rails 8

v4.1.12

Compare Source

=======================

  • Add missing require for extract_options
  • Fix rails 7.2 ActiveSupport::ProxyObject deprecation
  • Multiple contributors on current and legacy test suite improvements
collectiveidea/delayed_job_active_record (delayed_job_active_record)

v4.1.11

Compare Source

What's Changed

New Contributors

Full Changelog: collectiveidea/delayed_job_active_record@v4.1.10...v4.1.11

v4.1.10

Compare Source

What's Changed

Full Changelog: collectiveidea/delayed_job_active_record@v4.1.9...v4.1.10

v4.1.9

Compare Source

What's Changed

New Contributors

Full Changelog: collectiveidea/delayed_job_active_record@v4.1.8...v4.1.9

import-js/eslint-plugin-import (eslint-plugin-import)

v2.31.0

Compare Source

Added
Fixed
Changed

v2.30.0

Compare Source

Added
Fixed
Changed
  • [Docs] [no-extraneous-dependencies]: Make glob pattern description more explicit ([#​2944], thanks [@​mulztob])
  • [no-unused-modules]: add console message to help debug [#​2866]
  • [Refactor] ExportMap: make procedures static instead of monkeypatching exportmap ([#​2982], thanks [@​soryy708])
  • [Refactor] ExportMap: separate ExportMap instance from its builder logic ([#​2985], thanks [@​soryy708])
  • [Docs] [order]: Add a quick note on how unbound imports and --fix ([#​2640], thanks [@​minervabot])
  • [Tests] appveyor -> GHA (run tests on Windows in both pwsh and WSL + Ubuntu) ([#​2987], thanks [@​joeyguerra])
  • [actions] migrate OSX tests to GHA ([ljharb#37], thanks [@​aks-])
  • [Refactor] exportMapBuilder: avoid hoisting ([#​2989], thanks [@​soryy708])
  • [Refactor] ExportMap: extract "builder" logic to separate files ([#​2991], thanks [@​soryy708])
  • [Docs] [order]: update the description of the pathGroupsExcludedImportTypes option ([#​3036], thanks [@​liby])
  • [readme] Clarify how to install the plugin ([#​2993], thanks [@​jwbth])

v2.29.1

Compare Source

Fixed

v2.29.0

Compare Source

Added

v2.28.1

Compare Source

Fixed
Changed

v2.28.0

Compare Source

Fixed
  • [no-duplicates]: remove duplicate identifiers in duplicate imports ([#​2577], thanks [@​joe-matsec])
  • [consistent-type-specifier-style]: fix accidental removal of comma in certain cases ([#​2754], thanks [@​bradzacher])
  • [Perf] ExportMap: Improve ExportMap.for performance on larger codebases ([#​2756], thanks [@​leipert])
  • [no-extraneous-dependencies]/TypeScript: do not error when importing inline type from dev dependencies ([#​2735], thanks [@​andyogo])
  • [newline-after-import]/TypeScript: do not error when re-exporting a namespaced import ([#​2832], thanks [@​laurens-dg])
  • [order]: partial fix for [#​2687] (thanks [@​ljharb])
  • [no-duplicates]: Detect across type and regular imports ([#​2835], thanks [@​benkrejci])
  • [extensions]: handle . and .. properly ([#​2778], thanks [@​benasher44])
  • [no-unused-modules]: improve schema (thanks [@​ljharb])
  • [no-unused-modules]: report error on binding instead of parent export ([#​2842], thanks [@​Chamion])
Changed
  • [Docs] [no-duplicates]: fix example schema ([#​2684], thanks [@​simmo])
  • [Docs] [group-exports]: fix syntax highlighting ([#​2699], thanks [@​devinrhode2])
  • [Docs] [extensions]: reference node ESM behavior ([#​2748], thanks [@​xM8WVqaG])
  • [Refactor] [exports-last]: use array.prototype.findlastindex (thanks [@​ljharb])
  • [Refactor] [no-anonymous-default-export]: use object.fromentries (thanks [@​ljharb])
  • [Refactor] [no-unused-modules]: use array.prototype.flatmap (thanks [@​ljharb])
janko/image_processing (image_processing)

v1.13.0

Compare Source

  • [minimagick] Use -append when calling #append with no arguments (@​janko)

  • [vips] Avoid lines on the side when rotating by multiples of 90 degrees (@​etherbob)

  • Add #resize_to_cover that allows resizing an image to cover a given rectangle without cropping the excess (@​brendon)

rails/jbuilder (jbuilder)

v2.13.0

Compare Source

What's Changed

New Contributors

Full Changelog: rails/jbuilder@v2.12.0...v2.13.0

v2.12.0

Compare Source

What's Changed

New Contributors

Full Changelog: rails/jbuilder@v2.11.5...v2.12.0

rails/jsbundling-rails (jsbundling-rails)

v1.3.1

Compare Source

What's Changed

Full Changelog: https://github.com/rails/jsbundling-rails/comp


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 10 times, most recently from 0acd260 to c4c9d29 Compare April 23, 2024 06:41
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 11 times, most recently from 816c023 to 37cb9f5 Compare May 1, 2024 00:06
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 9 times, most recently from 2f152a5 to c4e1b8f Compare May 8, 2024 06:28
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 6 times, most recently from 6454480 to e69e3c0 Compare October 20, 2024 06:31
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 6 times, most recently from e826913 to ceafd3e Compare October 29, 2024 10:44
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 7 times, most recently from b0984bb to 1769da1 Compare November 5, 2024 10:24
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 4 times, most recently from ce85eab to e2b1a24 Compare November 15, 2024 11:48
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch 4 times, most recently from c60da2d to 5d82670 Compare November 22, 2024 11:08
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from 5d82670 to f879cca Compare November 25, 2024 11:51
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/mend-high-confidence-minor-and-patch-dependency-updates branch from f879cca to 43a8a78 Compare November 26, 2024 08:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants