Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Update all non-major dependencies #272

Merged
merged 2 commits into from
Jan 13, 2025
Merged

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Dec 10, 2024

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
awscli patch 2.22.13 -> 2.22.33 age adoption passing confidence
browser-tools orb minor 1.4.9 -> 1.5.0 age adoption passing confidence
capistrano-rails (changelog) minor 1.6.3 -> 1.7.0 age adoption passing confidence
cimg/ruby docker minor 3.3.6-browsers -> 3.4.1-browsers age adoption passing confidence
debug (changelog) minor 1.9.2 -> 1.10.0 age adoption passing confidence
dockerfile-rails minor 1.6.24 -> 1.7.0 age adoption passing confidence
health-monitor-rails minor 12.4.1 -> 12.5.0 age adoption passing confidence
importmap-rails minor 2.0.3 -> 2.1.0 age adoption passing confidence
lux-design-system dependencies patch 6.1.0 -> 6.1.1 age adoption passing confidence
node (source) minor 22.12.0 -> 22.13.0 age adoption passing confidence
pry minor 0.14.2 -> 0.15.2 age adoption passing confidence
rails (source, changelog) patch 8.0.0 -> 8.0.1 age adoption passing confidence
rubocop-rails (source, changelog) minor 2.27.0 -> 2.28.0 age adoption passing confidence
ruby (source) minor 3.3.6 -> 3.4.1 age adoption passing confidence
ruby final minor 3.3.6-slim -> 3.4.1-slim age adoption passing confidence
sass dependencies minor 1.82.0 -> 1.83.1 age adoption passing confidence
vite (source) devDependencies patch 6.0.3 -> 6.0.7 age adoption passing confidence

Release Notes

aws/aws-cli (awscli)

v2.22.33

Compare Source

v2.22.32

Compare Source

v2.22.31

Compare Source

v2.22.30

Compare Source

v2.22.29

Compare Source

v2.22.28

Compare Source

v2.22.27

Compare Source

v2.22.26

Compare Source

v2.22.25

Compare Source

v2.22.24

Compare Source

v2.22.23

Compare Source

v2.22.22

Compare Source

v2.22.21

Compare Source

v2.22.20

Compare Source

v2.22.19

Compare Source

v2.22.18

Compare Source

v2.22.17

Compare Source

v2.22.16

Compare Source

v2.22.15

Compare Source

v2.22.14

Compare Source

capistrano/rails (capistrano-rails)

v1.7.0: 1.7.0

Compare Source

✨ New Features

  • Add support for Propshaft by including .manifest.json in default assets_manifests (#​265) @​taketo1113
ruby/debug (debug)

v1.10.0

Compare Source

What's Changed

New Contributors

Full Changelog: ruby/debug@v1.9.2...v1.10.0

fly-apps/dockerfile-rails (dockerfile-rails)

v1.7.0

Compare Source

What's Changed

Full Changelog: fly-apps/dockerfile-rails@v1.6.25...v1.7.0

v1.6.25

Compare Source

lbeder/health-monitor-rails (health-monitor-rails)

v12.5.0

Compare Source

  • Fix compatibility with Rails 7 by conditionally using lease_connection (thanks to @​mapreal19)

v12.4.2

Compare Source

rails/importmap-rails (importmap-rails)

v2.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: rails/importmap-rails@v2.0.3...v2.1.0

nodejs/node (node)

v22.13.0

Compare Source

rails/rails (rails)

v8.0.1: 8.0.1

Compare Source

Active Support

  • Fix a bug in ERB::Util.tokenize that causes incorrect tokenization when ERB tags are preceeded by multibyte characters.

    Martin Emde

  • Restore the ability to decorate methods generated by class_attribute.

    It always has been complicated to use Module#prepend or an alias method chain
    to decorate methods defined by class_attribute, but became even harder in 8.0.

    This capability is now supported for both reader and writer methods.

    Jean Boussier

Active Model

  • No changes.

Active Record

  • Fix removing foreign keys with :restrict action for MySQ

    fatkodima

  • Fix a race condition in ActiveRecord::Base#method_missing when lazily defining attributes.

    If multiple thread were concurrently triggering attribute definition on the same model,
    it could result in a NoMethodError being raised.

    Jean Boussier

  • Fix MySQL default functions getting dropped when changing a column's nullability.

    Bastian Bartmann

  • Fix add_unique_constraint/add_check_constraint/add_foreign_key to be revertible when given invalid options.

    fatkodima

  • Fix asynchronous destroying of polymorphic belongs_to associations.

    fatkodima

  • Fix insert_all to not update existing records.

    fatkodima

  • NOT VALID constraints should not dump in create_table.

    Ryuta Kamizono

  • Fix finding by nil composite primary key association.

    fatkodima

  • Properly reset composite primary key configuration when setting a primary key.

    fatkodima

  • Fix Mysql2Adapter support for prepared statements

    Using prepared statements with MySQL could result in a NoMethodError exception.

    Jean Boussier, Leo Arnold, zzak

  • Fix parsing of SQLite foreign key names when they contain non-ASCII characters

    Zacharias Knudsen

  • Fix parsing of MySQL 8.0.16+ CHECK constraints when they contain new lines.

    Steve Hill

  • Ensure normalized attribute queries use IS NULL consistently for nil and normalized nil values.

    Joshua Young

  • Fix sum when performing a grouped calculation.

    User.group(:friendly).sum no longer worked. This is fixed.

    Edouard Chin

  • Restore back the ability to pass only database name to DATABASE_URL.

    fatkodima

Action View

  • Fix a crash in ERB template error highlighting when the error occurs on a
    line in the compiled template that is past the end of the source template.

    Martin Emde

  • Improve reliability of ERB template error highlighting.
    Fix infinite loops and crashes in highlighting and
    improve tolerance for alternate ERB handlers.

    Martin Emde

Action Pack

  • Add ActionDispatch::Request::Session#store method to conform Rack spec.

    Yaroslav

Active Job

  • Avoid crashing in Active Job logger when logging enqueueing errors

    ActiveJob.perform_all_later could fail with a TypeError when all
    provided jobs failed to be enqueueed.

    Efstathios Stivaros

Action Mailer

  • No changes.

Action Cable

  • Ensure the Postgresql adapter always use a dedicated connection even during system tests.

    Fix an issue with the Action Cable Postgresql adapter causing deadlock or various weird
    pg client error during system tests.

    Jean Boussier

Active Storage

  • No changes.

Action Mailbox

  • No changes.

Action Text

  • No changes.

Railties

  • Skip generation system tests related code for CI when --skip-system-test is given.

    fatkodima

  • Don't add bin/thrust if thruster is not in Gemfile.

    Étienne Barrié

  • Don't install a package for system test when applications don't use it.

    y-yagi

Guides

  • No changes.

v8.0.0.1: 8.0.0.1

Compare Source

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • No changes.

Action Pack

  • Add validation to content security policies to disallow spaces and semicolons.
    Developers should use multiple arguments, and different directive methods instead.

    [CVE-2024-54133]

    Gannon McGibbon

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

  • No changes.

Active Storage

  • No changes.

Action Mailbox

  • No changes.

Action Text

  • Update vendored trix version to 2.1.10

    John Hawthorn

Railties

  • No changes.

Guides

  • No changes.
rubocop/rubocop-rails (rubocop-rails)

v2.28.0

Compare Source

New features
Bug fixes
  • #​1390: Fix an incorrect autocorrect for Rails/SelectMap when select has no receiver and method chains are used. ([@​masato-bkn][])
  • #​1382: Fix false negatives for Rails/RedundantActiveRecordAllMethod when using all method in block. ([@​masato-bkn][])
  • #​1397: Fix Rails/FilePath cop error on join method with implicit receiver. ([@​viralpraxis][])
  • #​1398: Fix Rails/FilePath cop error in case of extra operations in Rails.root interpolation. ([@​viralpraxis][])
  • #​1392: Fix Rails/FilePath cop error with rescued Rails.root. ([@​viralpraxis][])
Changes
  • #​1388: Modify Rails/Pluck to ignore map/collect when used inside blocks to prevent potential N+1 queries. ([@​masato-bkn][])
sass/dart-sass (sass)

v1.83.1

Compare Source

  • Fix a bug where --quiet-deps would get deactivated for @content blocks,
    even when those blocks were entirely contained within dependencies.

  • Include deprecation IDs in deprecation warnings to make it easier to determine
    what to pass to --silence-deprecation or --fatal-deprecation.

v1.83.0

Compare Source

  • Allow trailing commas in all argument and parameter lists.
vitejs/vite (vite)

v6.0.7

Compare Source

v6.0.6

Compare Source

v6.0.5

Compare Source

v6.0.4

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link

github-actions bot commented Dec 10, 2024

Container Scanning Status: ❌ Failure


ghcr.io/pulibrary/imagecat-rails:pr-272 (debian 12.8)
=====================================================
Total: 29 (HIGH: 29, CRITICAL: 0)

┌────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬──────────────────────────────────────────────────────────────┐
│    Library     │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                            Title                             │
├────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼──────────────────────────────────────────────────────────────┤
│ linux-libc-dev │ CVE-2024-47745 │ HIGH     │ fixed  │ 6.1.119-1         │ 6.1.123-1     │ kernel: mm: call the security_mmap_file() LSM hook in        │
│                │                │          │        │                   │               │ remap_file_pages()                                           │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-47745                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-49861 │          │        │                   │               │ kernel: bpf: Fix helper writes to read-only maps             │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-49861                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-49996 │          │        │                   │               │ kernel: cifs: Fix buffer overflow when parsing NFS reparse   │
│                │                │          │        │                   │               │ points                                                       │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-49996                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-50055 │          │        │                   │               │ kernel: driver core: bus: Fix double free in driver API      │
│                │                │          │        │                   │               │ bus_register()                                               │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-50055                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-50121 │          │        │                   │               │ kernel: nfsd: cancel nfsd_shrinker_work using sync mode in   │
│                │                │          │        │                   │               │ nfs4_state_shutdown_net                                      │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-50121                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-50275 │          │        │                   │               │ kernel: arm64/sve: Discard stale CPU state when handling SVE │
│                │                │          │        │                   │               │ traps                                                        │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-50275                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-53099 │          │        │                   │               │ kernel: bpf: Check validity of link->type in                 │
│                │                │          │        │                   │               │ bpf_link_show_fdinfo()                                       │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-53099                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-53141 │          │        │                   │               │ kernel: netfilter: ipset: add missing range check in         │
│                │                │          │        │                   │               │ bitmap_ip_uadt                                               │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-53141                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-53142 │          │        │                   │               │ kernel: initramfs: avoid filename buffer overrun             │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-53142                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-53150 │          │        │                   │               │ kernel: ALSA: usb-audio: Fix out of bounds reads when        │
│                │                │          │        │                   │               │ finding clock sources...                                     │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-53150                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-53155 │          │        │                   │               │ kernel: ocfs2: fix uninitialized value in                    │
│                │                │          │        │                   │               │ ocfs2_file_read_iter()                                       │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-53155                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-53156 │          │        │                   │               │ kernel: wifi: ath9k: add range check for conn_rsp_epid in    │
│                │                │          │        │                   │               │ htc_connect_service()                                        │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-53156                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-53206 │          │        │                   │               │ kernel: tcp: Fix use-after-free of nreq in                   │
│                │                │          │        │                   │               │ reqsk_timer_handler().                                       │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-53206                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-53213 │          │        │                   │               │ kernel: net: usb: lan78xx: Fix double free issue with        │
│                │                │          │        │                   │               │ interrupt buffer allocation...                               │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-53213                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-53227 │          │        │                   │               │ kernel: scsi: bfa: Fix use-after-free in                     │
│                │                │          │        │                   │               │ bfad_im_module_exit()                                        │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-53227                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-56605 │          │        │                   │               │ kernel: Bluetooth: L2CAP: do not leave dangling sk pointer   │
│                │                │          │        │                   │               │ on error in...                                               │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-56605                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-56606 │          │        │                   │               │ kernel: af_packet: avoid erroring out after sock_init_data() │
│                │                │          │        │                   │               │ in packet_create()                                           │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-56606                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-56614 │          │        │                   │               │ kernel: xsk: fix OOB map writes when deleting elements       │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-56614                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-56642 │          │        │                   │               │ kernel: tipc: Fix use-after-free of kernel socket in         │
│                │                │          │        │                   │               │ cleanup_bearer().                                            │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-56642                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-56650 │          │        │                   │               │ kernel: netfilter: x_tables: fix LED ID check in             │
│                │                │          │        │                   │               │ led_tg_check()                                               │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-56650                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-56651 │          │        │                   │               │ kernel: can: hi311x: hi3110_can_ist(): fix potential         │
│                │                │          │        │                   │               │ use-after-free                                               │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-56651                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-56658 │          │        │                   │               │ kernel: net: defer final 'struct net' free in netns          │
│                │                │          │        │                   │               │ dismantle                                                    │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-56658                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-56662 │          │        │                   │               │ kernel: acpi: nfit: vmalloc-out-of-bounds Read in            │
│                │                │          │        │                   │               │ acpi_nfit_ctl                                                │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-56662                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-56663 │          │        │                   │               │ kernel: wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID          │
│                │                │          │        │                   │               │ off-by-one                                                   │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-56663                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-56672 │          │        │                   │               │ kernel: blk-cgroup: Fix UAF in blkcg_unpin_online()          │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-56672                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-56675 │          │        │                   │               │ kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU │
│                │                │          │        │                   │               │ flavors                                                      │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-56675                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-56708 │          │        │                   │               │ kernel: EDAC/igen6: Avoid segmentation fault on module       │
│                │                │          │        │                   │               │ unload                                                       │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-56708                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-56765 │          │        │                   │               │ kernel: powerpc/pseries/vas: Add close() callback in         │
│                │                │          │        │                   │               │ vas_vm_ops struct                                            │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-56765                   │
│                ├────────────────┤          │        │                   │               ├──────────────────────────────────────────────────────────────┤
│                │ CVE-2024-56766 │          │        │                   │               │ kernel: mtd: rawnand: fix double free in                     │
│                │                │          │        │                   │               │ atmel_pmecc_create_user()                                    │
│                │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-56766                   │
└────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴──────────────────────────────────────────────────────────────┘

@renovate renovate bot force-pushed the renovate/all-minor-patch branch 12 times, most recently from 4490b51 to 77150da Compare December 17, 2024 21:33
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from f455ac5 to 1c41d7d Compare December 25, 2024 10:06
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from a66f305 to 0545132 Compare January 1, 2025 08:28
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from 5e07c93 to 4949dca Compare January 9, 2025 22:29
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 4949dca to a0f754a Compare January 10, 2025 21:47
Copy link
Contributor Author

renovate bot commented Jan 13, 2025

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@hackartisan hackartisan merged commit 6372455 into main Jan 13, 2025
5 checks passed
@hackartisan hackartisan deleted the renovate/all-minor-patch branch January 13, 2025 17:39
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants