Skip to content

1.2.x: Bump the ruby-deps group across 4 directories with 30 updates #347

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
dependabot wants to merge 1 commit into from
Closed

1.2.x: Bump the ruby-deps group across 4 directories with 30 updates #347

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 7, 2025 •
edited
Loading

Bumps the ruby-deps group with 1 update in the / directory: rack.
Bumps the ruby-deps group with 5 updates in the /examples/camping directory:

Package From To
rack 2.2.18 2.2.19
camping 2.1.532 3.2.6
rack 2.2.19 3.2.2
rackup 1.0.1 2.1.0
rexml 3.4.3 3.4.4
rubyzip 3.1.0 3.1.1

Bumps the ruby-deps group with 2 updates in the /examples/rails7 directory: rack and rails.
Bumps the ruby-deps group with 2 updates in the /examples/sinatra directory: rack and sinatra.

Updates rack from 2.2.18 to 2.2.19

Changelog

Sourced from rack's changelog.

[2.2.19] - 2025-10-07

Security

  • CVE-2025-61772 Multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
  • CVE-2025-61771 Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
  • CVE-2025-61770 Unbounded multipart preamble buffering enables DoS (memory exhaustion)
Commits
  • 4c4ea29 Bump patch version.
  • c370dcd Limit amount of retained data when parsing multipart requests
  • d869fed Fix denial of service vulnerbilties in multipart parsing
  • See full diff in compare view

Updates rack from 2.2.18 to 2.2.19

Changelog

Sourced from rack's changelog.

[2.2.19] - 2025-10-07

Security

  • CVE-2025-61772 Multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
  • CVE-2025-61771 Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
  • CVE-2025-61770 Unbounded multipart preamble buffering enables DoS (memory exhaustion)
Commits
  • 4c4ea29 Bump patch version.
  • c370dcd Limit amount of retained data when parsing multipart requests
  • d869fed Fix denial of service vulnerbilties in multipart parsing
  • See full diff in compare view

Updates rack from 2.2.18 to 2.2.19

Changelog

Sourced from rack's changelog.

[2.2.19] - 2025-10-07

Security

  • CVE-2025-61772 Multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
  • CVE-2025-61771 Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
  • CVE-2025-61770 Unbounded multipart preamble buffering enables DoS (memory exhaustion)
Commits
  • 4c4ea29 Bump patch version.
  • c370dcd Limit amount of retained data when parsing multipart requests
  • d869fed Fix denial of service vulnerbilties in multipart parsing
  • See full diff in compare view

Updates rack from 2.2.18 to 2.2.19

Changelog

Sourced from rack's changelog.

[2.2.19] - 2025-10-07

Security

  • CVE-2025-61772 Multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
  • CVE-2025-61771 Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
  • CVE-2025-61770 Unbounded multipart preamble buffering enables DoS (memory exhaustion)
Commits
  • 4c4ea29 Bump patch version.
  • c370dcd Limit amount of retained data when parsing multipart requests
  • d869fed Fix denial of service vulnerbilties in multipart parsing
  • See full diff in compare view

Updates rack from 2.2.18 to 2.2.19

Changelog

Sourced from rack's changelog.

[2.2.19] - 2025-10-07

Security

  • CVE-2025-61772 Multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
  • CVE-2025-61771 Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
  • CVE-2025-61770 Unbounded multipart preamble buffering enables DoS (memory exhaustion)
Commits
  • 4c4ea29 Bump patch version.
  • c370dcd Limit amount of retained data when parsing multipart requests
  • d869fed Fix denial of service vulnerbilties in multipart parsing
  • See full diff in compare view

Updates rack from 2.2.18 to 2.2.19

Changelog

Sourced from rack's changelog.

[2.2.19] - 2025-10-07

Security

  • CVE-2025-61772 Multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
  • CVE-2025-61771 Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
  • CVE-2025-61770 Unbounded multipart preamble buffering enables DoS (memory exhaustion)
Commits
  • 4c4ea29 Bump patch version.
  • c370dcd Limit amount of retained data when parsing multipart requests
  • d869fed Fix denial of service vulnerbilties in multipart parsing
  • See full diff in compare view

Updates camping from 2.1.532 to 3.2.6

Updates rack from 2.2.19 to 3.2.2

Changelog

Sourced from rack's changelog.

[2.2.19] - 2025-10-07

Security

  • CVE-2025-61772 Multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
  • CVE-2025-61771 Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
  • CVE-2025-61770 Unbounded multipart preamble buffering enables DoS (memory exhaustion)
Commits
  • 4c4ea29 Bump patch version.
  • c370dcd Limit amount of retained data when parsing multipart requests
  • d869fed Fix denial of service vulnerbilties in multipart parsing
  • See full diff in compare view

Updates rackup from 1.0.1 to 2.1.0

Changelog

Sourced from rackup's changelog.

v2.1.0

  • Correctly support streaming responses with webrick.

v2.0.0

  • Initial release and migration of code from rack.
Commits
  • eaea24a Bump minor version.
  • 482635c Correctly support streaming responses with webrick. (#8)
  • f3cab52 Update contributors according to enhanced mailmap.
  • 036b1bd Bump major version.
  • 686416d Install Ragel dependency for Puma.
  • 690883d Test falcon and puma external test suites.
  • 8321537 Add missing rackup executable.
  • 1c1dfd6 Test on main rack.
  • ce660d5 Revert "Prepare for Rack 2.x compatible release."
  • See full diff in compare view

Updates rake from 13.3.0 to 13.2.1

Changelog

Sourced from rake's changelog.

=== 13.2.1

  • Suppressed "internal:array:52:in 'Array#each'" from backtrace by @​hsbt in #554
  • Bump actions/configure-pages from 4 to 5 by @​dependabot in #553

=== 13.2.0

=== 13.1.0

... (truncated)

Commits
  • d84f6ef Bump up 13.2.1
  • 8b33b36 Merge pull request #553 from ruby/dependabot/github_actions/actions/configure...
  • 99f6823 Merge pull request #554 from ruby/suppress-array-internal
  • 54950e0 Suppressed "<internal:array>:52:in 'Array#each'" from backtrace
  • 675498c Bump up 13.2.0
  • 3dc4277 Bump actions/configure-pages from 4 to 5
  • c68e010 Merge pull request #549 from ruby/dependabot/github_actions/dependabot/fetch-...
  • 2cb46b6 Merge pull request #551 from andrykonchin/ak/restore-truffleruby-on-ci
  • c342e96 Add TruffleRuby on CI
  • d569f0f Merge pull request #550 from ruby/dependabot/github_actions/ruby/setup-ruby-1...
  • Additional commits viewable in compare view

Updates rexml from 3.4.3 to 3.4.4

Release notes

Sourced from rexml's releases.

REXML 3.4.4 - 2025-09-10

Improvement

  • Accept REXML::Document.new("") for backward compatibility
    • GH-296
    • GH-295
    • Patch by NAITOH Jun
    • Reported by Joe Rafaniello

Thanks

  • NAITOH Jun

  • Joe Rafaniello

Changelog

Sourced from rexml's changelog.

3.4.4 - 2025-09-10 {#version-3-4-4}

Improvement

  • Accept REXML::Document.new("") for backward compatibility
    • GH-296
    • GH-295
    • Patch by NAITOH Jun
    • Reported by Joe Rafaniello

Thanks

  • NAITOH Jun

  • Joe Rafaniello

Commits

Updates rubyzip from 3.1.0 to 3.1.1

Release notes

Sourced from rubyzip's releases.

v3.1.1

Version 3.1.1

The 3.1.x line adds AES decryption.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

Changelog

Sourced from rubyzip's changelog.

3.1.1 (2025-09-26)

  • Improve the IO pipeline when decompressing. #649 (which also fixes #647)

Tooling/internal:

  • Improve the DecryptedIo class with various updates and optimizations.
  • Remove the NullDecrypter class.
  • Properly convert the test suite to use minitest.
  • Move all test helper code into separate files.
  • Updates to the Actions CI, including new OS versions.
  • Update rubocop versions and fix resultant cop failures. #646
Commits
  • f87340d Update version number and Changelog for release.
  • 813d96d Add a Rubocop badge to the README.
  • 61c25b0 Reduce the number of YJIT test runs in CI.
  • 69dcb8e Allow Windows CI builds to fail.
  • da44b2c Update OS versions in the Actions CI.
  • fd78455 Use require_relative when pulling in test_helper.
  • 78848c5 Only require test helpers where they are needed.
  • e55f7c9 Move all test helper code into separate files.
  • 5f1fcb2 Remove unnecessary perms from gentestfiles.rb.
  • ceabd03 Remove unnecessary requires from test_helper.rb.
  • Additional commits viewable in compare view

Updates rack from 2.2.18 to 3.2.2

Changelog

Sourced from rack's changelog.

[2.2.19] - 2025-10-07

Security

  • CVE-2025-61772 Multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
  • CVE-2025-61771 Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
  • CVE-2025-61770 Unbounded multipart preamble buffering enables DoS (memory exhaustion)
Commits
  • 4c4ea29 Bump patch version.
  • c370dcd Limit amount of retained data when parsing multipart requests
  • d869fed Fix denial of service vulnerbilties in multipart parsing
  • See full diff in compare view

Updates rackup from 1.0.1 to 2.1.0

Changelog

Sourced from rackup's changelog.

v2.1.0

  • Correctly support streaming responses with webrick.

v2.0.0

  • Initial release and migration of code from rack.
Commits
  • eaea24a Bump minor version.
  • 482635c Correctly support streaming responses with webrick. (#8)
  • f3cab52 Update contributors according to enhanced mailmap.
  • 036b1bd Bump major version.
  • 686416d Install Ragel dependency for Puma.
  • 690883d Test falcon and puma external test suites.
  • 8321537 Add missing rackup executable.
  • 1c1dfd6 Test on main rack.
  • ce660d5 Revert "Prepare for Rack 2.x compatible release."
  • See full diff in compare view

Updates rake from 13.3.0 to 13.2.1

Changelog

Sourced from rake's changelog.

=== 13.2.1

  • Suppressed "internal:array:52:in 'Array#each'" from backtrace by @​hsbt in #554
  • Bump actions/configure-pages from 4 to 5 by @​dependabot in #553

=== 13.2.0

=== 13.1.0

... (truncated)

Commits
  • d84f6ef Bump up 13.2.1
  • 8b33b36 Merge pull request #553 from ruby/dependabot/github_actions/actions/configure...
  • 99f6823 Merge pull request #554 from ruby/suppress-array-internal
  • 54950e0 Suppressed "<internal:array>:52:in 'Array#each'" from backtrace
  • 675498c Bump up 13.2.0
  • 3dc4277 Bump actions/configure-pages from 4 to 5
  • c68e010 Merge pull request #549 from ruby/dependabot/github_actions/dependabot/fetch-...
  • 2cb46b6 Merge pull request #551 from andrykonchin/ak/restore-truffleruby-on-ci
  • c342e96 Add TruffleRuby on CI
  • d569f0f Merge pull request #550 from ruby/dependabot/github_actions/ruby/setup-ruby-1...
  • Additional commits viewable in compare view

Updates rack from 2.2.18 to 3.2.2

Changelog

Sourced from rack's changelog.

[2.2.19] - 2025-10-07

Security

  • CVE-2025-61772 Multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
  • CVE-2025-61771 Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
  • CVE-2025-61770 Unbounded multipart preamble buffering enables DoS (memory exhaustion)
Commits
  • 4c4ea29 Bump patch version.
  • c370dcd Limit amount of retained data when parsing multipart requests
  • d869fed Fix denial of service vulnerbilties in multipart parsing
  • See full diff in compare view

Updates rack from 2.2.18 to 2.2.19

Changelog

Sourced from rack's changelog.

[2.2.19] - 2025-10-07

Security

  • CVE-2025-61772 Multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
  • CVE-2025-61771 Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
  • CVE-2025-61770 Unbounded multipart preamble buffering enables DoS (memory exhaustion)
Commits
  • 4c4ea29 Bump patch version.
  • c370dcd Limit amount of retained data when parsing multipart requests
  • d869fed Fix denial of service vulnerbilties in multipart parsing
  • See full diff in compare view

Updates rack from 2.2.18 to 2.2.19

Changelog

Sourced from rack's changelog.

[2.2.19] - 2025-10-07

Security

  • CVE-2025-61772 Multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
  • CVE-2025-61771 Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
  • CVE-2025-61770 Unbounded multipart preamble buffering enables DoS (memory exhaustion)
Commits
  • 4c4ea29 Bump patch version.
  • c370dcd Limit amount of retained data when parsing multipart requests
  • d869fed Fix denial of service vulnerbilties in multipart parsing
  • See full diff in compare view

Updates rails from 7.2.2.2 to 8.0.3

Release notes

Sourced from rails's releases.

8.0.3

Active Support

  • ActiveSupport::FileUpdateChecker does not depend on Time.now to prevent unnecessary reloads with time travel test helpers

    Jan Grodowski

  • Fix ActiveSupport::BroadcastLogger from executing a block argument for each logger (tagged, info, etc.).

    Jared Armstrong

  • Make ActiveSupport::Logger #freeze-friendly.

    Joshua Young

  • Fix ActiveSupport::HashWithIndifferentAccess#transform_keys! removing defaults.

    Hartley McGuire

  • Fix ActiveSupport::HashWithIndifferentAccess#tranform_keys! to handle collisions.

    If the transformation would result in a key equal to another not yet transformed one, it would result in keys being lost.

    Before:

    >> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1}

    After:

    >> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1, "d" => 2}

    Jason T Johnson, Jean Boussier

  • Fix ActiveSupport::Cache::MemCacheStore#read_multi to handle network errors.

    This method specifically wasn't handling network errors like other codepaths.

    Alessandro Dal Grande

  • Fix configuring RedisCacheStore with raw: true.

    fatkodima

... (truncated)

Commits
  • 529f933 Preparing for 8.0.3 release
  • 6409b24 Merge pull request #55719 from skipkayhil/hm-fix-label-for-namespace
  • 030f68c Remove lock for rdoc gem in Gemfile
  • 0160f42 Sync CHANGELOGs
  • 6394bfb Merge pull request #55725 from byroot/js-include-type-module-sym
  • 0ff0d09 Merge pull request #55724 from fatkodima/preserve-locale-eml-preview
  • 74038d7 Merge pull request #55722 from kozy4324/fix-lease-sticky-flag-timing
  • 78fe965 Merge pull request #55710 from Shopify/grodowski/file-update-checker-time-tra...
  • 4fc9618 Merge pull request #55703 from byroot/hly-fix-query-cache-system-tests-2
  • 847072c Fix TransitionTable#as_json compatibility with json 2.14.0
  • Additional commits viewable in compare view

Updates rack from 2.2.18 to 2.2.19

Changelog

Sourced from rack's changelog.

[2.2.19] - 2025-10-07

Security

  • CVE-2025-61772 Multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
  • CVE-2025-61771 Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
  • CVE-2025-61770 Unbounded multipart preamble buffering enables DoS (memory exhaustion)
Commits
  • 4c4ea29 Bump patch version.
  • c370dcd Limit amount of retained data when parsing multipart requests
  • d869fed Fix denial of service vulnerbilties in multipart parsing
  • See full diff in compare view

Updates actioncable from 7.2.2.2 to 8.0.3

Release notes

Sourced from actioncable's releases.

8.0.3

Active Support

  • ActiveSupport::FileUpdateChecker does not depend on Time.now to prevent unnecessary reloads with time travel test helpers

    Jan Grodowski

  • Fix ActiveSupport::BroadcastLogger from executing a block argument for each logger (tagged, info, etc.).

    Jared Armstrong

  • Make ActiveSupport::Logger #freeze-friendly.

    Joshua Young

  • Fix ActiveSupport::HashWithIndifferentAccess#transform_keys! removing defaults.

    Hartley McGuire

  • Fix ActiveSupport::HashWithIndifferentAccess#tranform_keys! to handle collisions.

    If the transformation would result in a key equal to another not yet transformed one, it would result in keys being lost.

    Before:

    >> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1}

    After:

    >> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1, "d" => 2}

    Jason T Johnson, Jean Boussier

  • Fix ActiveSupport::Cache::MemCacheStore#read_multi to handle network errors.

    This method specifically wasn't handling network errors like other codepaths.

    Alessandro Dal Grande

  • Fix configuring RedisCacheStore with raw: true.

    fatkodima

... (truncated)

Changelog

Sourced from actioncable's changelog.

Rails 8.0.3 (September 22, 2025)

  • Fixed compatibility with redis gem 5.4.1

    Jean Boussier

  • Fixed a possible race condition in stream_from.

    OuYangJinTing

Rails 8.0.2.1 (August 13, 2025)

  • No changes.

Rails 8.0.2 (March 12, 2025)

  • No changes.

Rails 8.0.1 (December 13, 2024)

  • Ensure the Postgresql adapter always use a dedicated connection even during system tests.

    Fix an issue with the Action Cable Postgresql adapter causing deadlock or various weird pg client error during system tests.

    Jean Boussier

Rails 8.0.0.1 (December 10, 2024)

  • No changes.

Rails 8.0.0 (November 07, 2024)

  • No changes.

Rails 8.0.0.rc2 (October 30, 2024)

  • No changes.

Rails 8.0.0.rc1 (October 19, 2024)

  • No changes.

... (truncated)

Commits
  • 529f933 Preparing for 8.0.3 release
  • 0160f42 Sync CHANGELOGs
  • 5eb4c3d Merge pull request #54031 from bai/bun-lockfile-txt
  • b2ad417 Merge security patches in 8-0-stable
  • b0c813b Preparing for 8.0.2.1 release
  • 5f3b209 Replace "mailing list" with "forum" [ci-skip]
  • e0278f5 Merge pull request #55359 from byroot/actioncable-redis-5.4.1-compat
  • cb04cf5 Appease rubocop
  • 11493e8 Fix changelog formatting
  • f5b8826 Merge pull request #55201 from OuYangJinTing/fix/actioncable/channel
  • Additional commits viewable in compare view

Updates actionmailbox from 7.2.2.2 to 8.0.3

Release notes

Sourced from actionmailbox's releases.

8.0.3

Active Support

  • ActiveSupport::FileUpdateChecker does not depend on Time.now to prevent unnecessary reloads with time travel test helpers

    Jan Grodowski

  • Fix ActiveSupport::BroadcastLogger from executing a block argument for each logger (tagged, info, etc.).

    Jared Armstrong

  • Make ActiveSupport::Logger #freeze-friendly.

    Joshua Young

  • Fix ActiveSupport::HashWithIndifferentAccess#transform_keys! removing defaults.

    Hartley McGuire

  • Fix ActiveSupport::HashWithIndifferentAccess#tranform_keys! to handle collisions.

    If the transformation would result in a key equal to another not yet transformed one, it would result in keys being lost.

    Before:

    >> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1}

    After:

    >> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1, "d" => 2}

    Jason T Johnson, Jean Boussier

  • Fix ActiveSupport::Cache::MemCacheStore#read_multi to handle network errors.

    This method specifically wasn't handling network errors like other codepaths.

    Alessandro Dal Grande

  • Fix configuring RedisCacheStore with raw: true.

    fatkodima

... (truncated)

Changelog

Sourced from actionmailbox's changelog.

Rails 8.0.3 (September 22, 2025)

  • No changes.

Rails 8.0.2.1 (August 13, 2025)

  • No changes.

Rails 8.0.2 (March 12, 2025)

  • No changes.

Rails 8.0.1 (December 13, 2024)

  • No changes.

Rails 8.0.0.1 (December 10, 2024)

  • No changes.

Rails 8.0.0 (November 07, 2024)

  • No changes.

Rails 8.0.0.rc2 (October 30, 2024)

  • No changes.

Rails 8.0.0.rc1 (October 19, 2024)

  • No changes.

Rails 8.0.0.beta1 (September 26, 2024)

Please check 7-2-stable for previous changes.

Commits

Updates actionmailer from 7.2.2.2 to 8.0.3

Release notes

Sourced from actionmailer's releases.

8.0.3

Active Support

  • ActiveSupport::FileUpdateChecker does not depend on Time.now to prevent unnecessary reloads with time travel test helpers

    Jan Grodowski

  • Fix ActiveSupport::BroadcastLogger from executing a block argument for each logger (tagged, info, etc.).

    Jared Armstrong

  • Make ActiveSupport::Logger #freeze-friendly.

    Joshua Young

  • Fix ActiveSupport::HashWithIndifferentAccess#transform_keys! removing defaults.

    Hartley McGuire

  • Fix ActiveSupport::HashWithIndifferentAccess#tranform_keys! to handle collisions.

    If the transformation would result in a key equal to another not yet transformed one, it would result in keys being lost.

    Before:

    >> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1}

    After:

    >> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1, "d" => 2}

    Jason T Johnson, Jean Boussier

  • Fix ActiveSupport::Cache::MemCacheStore#read_multi to handle network errors.

    This method specifically wasn't handling network errors like other codepaths.

    Alessandro Dal Grande

  • Fix configuring RedisCacheStore with raw: true.

    fatkodima

... (truncated)

Description has been truncated

@dependabot
1.2.x: Bump the ruby-deps group across 4 directories with 30 updates
0a44aac 
Bumps the ruby-deps group with 1 update in the / directory: [rack](https://github.com/rack/rack).
Bumps the ruby-deps group with 5 updates in the /examples/camping directory:

| Package | From | To |
| --- | --- | --- |
| [rack](https://github.com/rack/rack) | `2.2.18` | `2.2.19` |
| [camping](http://rubycamping.org/) | `2.1.532` | `3.2.6` |
| [rack](https://github.com/rack/rack) | `2.2.19` | `3.2.2` |
| [rackup](https://github.com/rack/rackup) | `1.0.1` | `2.1.0` |
| [rexml](https://github.com/ruby/rexml) | `3.4.3` | `3.4.4` |
| [rubyzip](https://github.com/rubyzip/rubyzip) | `3.1.0` | `3.1.1` |

Bumps the ruby-deps group with 2 updates in the /examples/rails7 directory: [rack](https://github.com/rack/rack) and [rails](https://github.com/rails/rails).
Bumps the ruby-deps group with 2 updates in the /examples/sinatra directory: [rack](https://github.com/rack/rack) and [sinatra](https://github.com/sinatra/sinatra).


Updates `rack` from 2.2.18 to 2.2.19
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.18...v2.2.19)

Updates `rack` from 2.2.18 to 2.2.19
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.18...v2.2.19)

Updates `rack` from 2.2.18 to 2.2.19
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.18...v2.2.19)

Updates `rack` from 2.2.18 to 2.2.19
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.18...v2.2.19)

Updates `rack` from 2.2.18 to 2.2.19
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.18...v2.2.19)

Updates `rack` from 2.2.18 to 2.2.19
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.18...v2.2.19)

Updates `camping` from 2.1.532 to 3.2.6

Updates `rack` from 2.2.19 to 3.2.2
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.18...v2.2.19)

Updates `rackup` from 1.0.1 to 2.1.0
- [Release notes](https://github.com/rack/rackup/releases)
- [Changelog](https://github.com/rack/rackup/blob/main/releases.md)
- [Commits](rack/rackup@v1.0.1...v2.1.0)

Updates `rake` from 13.3.0 to 13.2.1
- [Release notes](https://github.com/ruby/rake/releases)
- [Changelog](https://github.com/ruby/rake/blob/master/History.rdoc)
- [Commits](ruby/rake@v13.3.0...v13.2.1)

Updates `rexml` from 3.4.3 to 3.4.4
- [Release notes](https://github.com/ruby/rexml/releases)
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md)
- [Commits](ruby/rexml@v3.4.3...v3.4.4)

Updates `rubyzip` from 3.1.0 to 3.1.1
- [Release notes](https://github.com/rubyzip/rubyzip/releases)
- [Changelog](https://github.com/rubyzip/rubyzip/blob/main/Changelog.md)
- [Commits](rubyzip/rubyzip@v3.1.0...v3.1.1)

Updates `rack` from 2.2.18 to 3.2.2
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.18...v2.2.19)

Updates `rackup` from 1.0.1 to 2.1.0
- [Release notes](https://github.com/rack/rackup/releases)
- [Changelog](https://github.com/rack/rackup/blob/main/releases.md)
- [Commits](rack/rackup@v1.0.1...v2.1.0)

Updates `rake` from 13.3.0 to 13.2.1
- [Release notes](https://github.com/ruby/rake/releases)
- [Changelog](https://github.com/ruby/rake/blob/master/History.rdoc)
- [Commits](ruby/rake@v13.3.0...v13.2.1)

Updates `rack` from 2.2.18 to 3.2.2
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.18...v2.2.19)

Updates `rack` from 2.2.18 to 2.2.19
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.18...v2.2.19)

Updates `rack` from 2.2.18 to 2.2.19
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.18...v2.2.19)

Updates `rails` from 7.2.2.2 to 8.0.3
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](rails/rails@v7.2.2.2...v8.0.3)

Updates `rack` from 2.2.18 to 2.2.19
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.18...v2.2.19)

Updates `actioncable` from 7.2.2.2 to 8.0.3
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.0.3/actioncable/CHANGELOG.md)
- [Commits](rails/rails@v7.2.2.2...v8.0.3)

Updates `actionmailbox` from 7.2.2.2 to 8.0.3
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.0.3/actionmailbox/CHANGELOG.md)
- [Commits](rails/rails@v7.2.2.2...v8.0.3)

Updates `actionmailer` from 7.2.2.2 to 8.0.3
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.0.3/actionmailer/CHANGELOG.md)
- [Commits](rails/rails@v7.2.2.2...v8.0.3)

Updates `actionpack` from 7.2.2.2 to 8.0.3
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.0.3/actionpack/CHANGELOG.md)
- [Commits](rails/rails@v7.2.2.2...v8.0.3)

Updates `actiontext` from 7.2.2.2 to 8.0.3
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.0.3/actiontext/CHANGELOG.md)
- [Commits](rails/rails@v7.2.2.2...v8.0.3)

Updates `actionview` from 7.2.2.2 to 8.0.3
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.0.3/actionview/CHANGELOG.md)
- [Commits](rails/rails@v7.2.2.2...v8.0.3)

Updates `activejob` from 7.2.2.2 to 8.0.3
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.0.3/activejob/CHANGELOG.md)
- [Commits](rails/rails@v7.2.2.2...v8.0.3)

Updates `activemodel` from 7.2.2.2 to 8.0.3
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.0.3/activemodel/CHANGELOG.md)
- [Commits](rails/rails@v7.2.2.2...v8.0.3)

Updates `activerecord` from 7.2.2.2 to 8.0.3
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.0.3/activerecord/CHANGELOG.md)
- [Commits](rails/rails@v7.2.2.2...v8.0.3)

Updates `activestorage` from 7.2.2.2 to 8.0.3
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.0.3/activestorage/CHANGELOG.md)
- [Commits](rails/rails@v7.2.2.2...v8.0.3)

Updates `activesupport` from 7.2.2.2 to 8.0.3
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.0.3/activesupport/CHANGELOG.md)
- [Commits](rails/rails@v7.2.2.2...v8.0.3)

Updates `bigdecimal` from 3.2.3 to 3.3.0
- [Release notes](https://github.com/ruby/bigdecimal/releases)
- [Changelog](https://github.com/ruby/bigdecimal/blob/master/CHANGES.md)
- [Commits](ruby/bigdecimal@v3.2.3...v3.3.0)

Updates `erb` from 4.0.4 to 5.0.3
- [Release notes](https://github.com/ruby/erb/releases)
- [Changelog](https://github.com/ruby/erb/blob/master/NEWS.md)
- [Commits](ruby/erb@v4.0.4...v5.0.3)

Updates `globalid` from 1.2.1 to 1.3.0
- [Release notes](https://github.com/rails/globalid/releases)
- [Commits](rails/globalid@v1.2.1...v1.3.0)

Updates `marcel` from 1.0.4 to 1.1.0
- [Release notes](https://github.com/rails/marcel/releases)
- [Commits](rails/marcel@v1.0.4...v1.1.0)

Updates `net-imap` from 0.5.10 to 0.5.12
- [Release notes](https://github.com/ruby/net-imap/releases)
- [Commits](ruby/net-imap@v0.5.10...v0.5.12)

Updates `nokogiri` from 1.18.9 to 1.18.10
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](sparklemotion/nokogiri@v1.18.9...v1.18.10)

Updates `pp` from 0.6.2 to 0.6.3
- [Release notes](https://github.com/ruby/pp/releases)
- [Commits](ruby/pp@v0.6.2...v0.6.3)

Updates `railties` from 7.2.2.2 to 8.0.3
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.0.3/railties/CHANGELOG.md)
- [Commits](rails/rails@v7.2.2.2...v8.0.3)

Updates `rdoc` from 6.14.2 to 6.15.0
- [Release notes](https://github.com/ruby/rdoc/releases)
- [Changelog](https://github.com/ruby/rdoc/blob/master/History.rdoc)
- [Commits](ruby/rdoc@v6.14.2...v6.15.0)

Updates `zeitwerk` from 2.6.18 to 2.7.3
- [Changelog](https://github.com/fxn/zeitwerk/blob/main/CHANGELOG.md)
- [Commits](fxn/zeitwerk@v2.6.18...v2.7.3)

Updates `rack` from 2.2.18 to 2.2.19
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.18...v2.2.19)

Updates `rack` from 2.2.18 to 2.2.19
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.18...v2.2.19)

Updates `rack` from 2.2.18 to 2.2.19
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.18...v2.2.19)

Updates `rack` from 2.2.18 to 2.2.19
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.18...v2.2.19)

Updates `sinatra` from 3.2.0 to 4.1.1
- [Changelog](https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md)
- [Commits](sinatra/sinatra@v3.2.0...v4.1.1)

Updates `rack` from 2.2.19 to 3.2.2
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.18...v2.2.19)

Updates `rack` from 2.2.18 to 3.2.2
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.18...v2.2.19)

Updates `rack-protection` from 3.2.0 to 4.1.1
- [Changelog](https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md)
- [Commits](sinatra/sinatra@v3.2.0...v4.1.1)

---
updated-dependencies:
- dependency-name: rack
  dependency-version: 2.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: rack
  dependency-version: 2.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: rack
  dependency-version: 2.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: rack
  dependency-version: 2.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: rack
  dependency-version: 2.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: rack
  dependency-version: 2.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: camping
  dependency-version: 3.2.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: rack
  dependency-version: 3.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: rackup
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: rake
  dependency-version: 13.2.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: rexml
  dependency-version: 3.4.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: rubyzip
  dependency-version: 3.1.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: rack
  dependency-version: 3.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: rackup
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: rake
  dependency-version: 13.2.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: rack
  dependency-version: 3.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: rack
  dependency-version: 2.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: rack
  dependency-version: 2.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: rails
  dependency-version: 8.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: rack
  dependency-version: 2.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: actioncable
  dependency-version: 8.0.3
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: actionmailbox
  dependency-version: 8.0.3
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: actionmailer
  dependency-version: 8.0.3
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: actionpack
  dependency-version: 8.0.3
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: actiontext
  dependency-version: 8.0.3
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: actionview
  dependency-version: 8.0.3
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: activejob
  dependency-version: 8.0.3
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: activemodel
  dependency-version: 8.0.3
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: activerecord
  dependency-version: 8.0.3
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: activestorage
  dependency-version: 8.0.3
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: activesupport
  dependency-version: 8.0.3
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: bigdecimal
  dependency-version: 3.3.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: erb
  dependency-version: 5.0.3
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: globalid
  dependency-version: 1.3.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: marcel
  dependency-version: 1.1.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: net-imap
  dependency-version: 0.5.12
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: nokogiri
  dependency-version: 1.18.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: pp
  dependency-version: 0.6.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: railties
  dependency-version: 8.0.3
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: rdoc
  dependency-version: 6.15.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: zeitwerk
  dependency-version: 2.7.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: rack
  dependency-version: 2.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: rack
  dependency-version: 2.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: rack
  dependency-version: 2.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: rack
  dependency-version: 2.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: sinatra
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: rack
  dependency-version: 3.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: rack
  dependency-version: 3.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: rack-protection
  dependency-version: 4.1.1
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: ruby-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Oct 7, 2025
@dependabot dependabot bot mentioned this pull request Oct 7, 2025
Closed
@chadlwilson
Copy link
Contributor

chadlwilson commented Oct 7, 2025

@dependabot ignore camping major version

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 7, 2025

OK, I won't notify you about version 3.x.x of camping again, unless you unignore it.

@chadlwilson
Copy link
Contributor

chadlwilson commented Oct 7, 2025

@dependabot ignore rails major version

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 7, 2025

OK, I won't notify you about version 8.x.x of rails again, unless you unignore it.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 7, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Oct 7, 2025
@dependabot dependabot bot deleted the dependabot/bundler/1.2-stable/ruby-deps-1d86624861 branch October 7, 2025 14:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@chadlwilson