Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the dependencies group with 3 updates #566

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 4, 2024

Bumps the dependencies group with 3 updates: brakeman, sqlite3 and katalyst-tables.

Updates brakeman from 6.1.1 to 6.1.2

Release notes

Sourced from brakeman's releases.

6.1.2

  • Avoid detecting Phlex components as dynamic render paths (Máximo Mussini)
  • Avoid detecting ViewComponentContrib::Base as dynamic render paths (vividmuimui)
  • Avoid copying Sexps that are too large (#1818, #1546)
  • Add EOL date for Ruby 3.3.0
  • Remove deprecated use of Kernel#open("|...")
  • Remove safe_yaml gem dependency
  • Update Highline to 3.0 (#1812)
Changelog

Sourced from brakeman's changelog.

6.1.2 - 2024-02-01

  • Update Highline to 3.0
  • Add EOL date for Ruby 3.3.0
  • Avoid copying Sexps that are too large
  • Avoid detecting ViewComponentContrib::Base as dynamic render paths (vividmuimui)
  • Remove deprecated use of Kernel#open("|...")
  • Remove safe_yaml gem dependency
  • Avoid detecting Phlex components as dynamic render paths (Máximo Mussini)
Commits
  • a368fd9 Bump to 6.1.2
  • 08a119a Update CHANGES
  • a216548 Update Highline to 3.0 (#1825)
  • 1954a00 Skip timeout test (#1823)
  • fe9e0a3 Merge pull request #1821 from vividmuimui/view_component_contrib_base
  • 5291a41 Merge pull request #1822 from presidentbeef/eol_for_3_3
  • b02ba1e Add EOL for Ruby 3.3.0
  • f07829d Merge pull request #1820 from presidentbeef/limit_mass_of_copied_values
  • 26d4180 fix: avoid detecting 'ViewComponentContrib::Base' as dynamic render paths
  • 180e872 Avoid copying Sexps that are too large
  • Additional commits viewable in compare view

Updates sqlite3 from 1.7.1 to 1.7.2

Release notes

Sourced from sqlite3's releases.

1.7.2 / 2024-01-30

Dependencies


sha256 checksums:

e759f07dfad1a8ab00a7c49bdfff020ef61156ed18744781b16d202602119096  sqlite3-1.7.2-aarch64-linux.gem
e0eb1fa8ad8fd8ef08f5efe7412581415a7305648418520a278f6167f6e55218  sqlite3-1.7.2-arm-linux.gem
7368d9a4b4be6063660e826d059870b77f4ad740948885f6ba674f3a2a2b1d3c  sqlite3-1.7.2-arm64-darwin.gem
7583cfa5550dc37e26275a45cbafe7b6f503b0608f56ed7b52a764ff6725c3de  sqlite3-1.7.2-x64-mingw-ucrt.gem
92dc08c679c21f6589d6e4efde07267e5e971069f6b142a7f43af0a8bf8cbfba  sqlite3-1.7.2-x64-mingw32.gem
5d310ec6e2e705335811ef4658a90e65a14ed008adfd1d098252a79b4efb9b60  sqlite3-1.7.2-x86-linux.gem
b287e4971f75f81ead4237e77cbdfae68e0c794b4e76b2c86d21a0f807e65f01  sqlite3-1.7.2-x86_64-darwin.gem
37fcd0cc6038bd47a6cb2ca7cb1a063135a26cd0002b76977f67463ca7ebc69d  sqlite3-1.7.2-x86_64-linux.gem
16050775fea3095035c8d4cb33968523e8ef411ac2d6bfa5f27d4c2b119cfd8c  sqlite3-1.7.2.gem
Changelog

Sourced from sqlite3's changelog.

1.7.2 / 2024-01-30

Dependencies

Commits
  • f90c980 version bump to v1.7.2
  • ae487b7 Merge pull request #495 from sparklemotion/flavorjones-dep-sqlite-3.45.1-17st...
  • e9bfbdb dep: update vendored sqlite to 3.45.1
  • See full diff in compare view

Updates katalyst-tables from 2.4.0 to 2.5.0

Release notes

Sourced from katalyst-tables's releases.

v2.5.0

What's Changed

Full Changelog: katalyst/tables@v2.4.0...v2.5.0

Changelog

Sourced from katalyst-tables's changelog.

[2.5.0]

  • Breaking change: use Rails' object lookup path to find row partials Previously: Nested::ResourceController would have looked for Nested::Model in the controller directory: app/views/nested/resources/_nested_model.html+row.erb After this change, uses Rails' polymorphic partials logic and looks in the model views directory: app/views/nested/models/_model.html+row.erb
Commits
  • 9ff34d1 Release 2.5.0
  • af31b05 Remove Ruby version testing matrix and fix setup
  • b8c647c Use to_partial_path for finding table row partials
  • ec29914 Add tests for nested resources
  • 94b8f17 Bump the dependencies group with 3 updates
  • 8ccf077 Upgrade Ruby to 3.2.3
  • efd7fb2 Bump the dependencies group with 1 update
  • 8739971 Bump the dependencies group with 1 update
  • f122959 Bump the dependencies group with 1 update
  • 300885b Bump the dependencies group with 2 updates
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 3 updates: [brakeman](https://github.com/presidentbeef/brakeman), [sqlite3](https://github.com/sparklemotion/sqlite3-ruby) and [katalyst-tables](https://github.com/katalyst/tables).


Updates `brakeman` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/presidentbeef/brakeman/releases)
- [Changelog](https://github.com/presidentbeef/brakeman/blob/main/CHANGES.md)
- [Commits](presidentbeef/brakeman@v6.1.1...v6.1.2)

Updates `sqlite3` from 1.7.1 to 1.7.2
- [Release notes](https://github.com/sparklemotion/sqlite3-ruby/releases)
- [Changelog](https://github.com/sparklemotion/sqlite3-ruby/blob/main/CHANGELOG.md)
- [Commits](sparklemotion/sqlite3-ruby@v1.7.1...v1.7.2)

Updates `katalyst-tables` from 2.4.0 to 2.5.0
- [Release notes](https://github.com/katalyst/tables/releases)
- [Changelog](https://github.com/katalyst/tables/blob/main/CHANGELOG.md)
- [Commits](katalyst/tables@v2.4.0...v2.5.0)

---
updated-dependencies:
- dependency-name: brakeman
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: sqlite3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: katalyst-tables
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Feb 4, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 5, 2024

Looks like these dependencies are up-to-date now, so this is no longer needed.

@dependabot dependabot bot closed this Feb 5, 2024
@dependabot dependabot bot deleted the dependabot/bundler/dependencies-f1be6143e3 branch February 5, 2024 01:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants