Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump sinatra, grape and sinatra-contrib #213

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 12, 2024

Bumps sinatra, grape and sinatra-contrib. These dependencies needed to be updated together.
Updates sinatra from 2.2.3 to 4.0.0

Changelog

Sourced from sinatra's changelog.

4.0.0. / 2024-01-19

  • New: Add support for Rack 3 (#1857)

    • Note: you may want to read the [Rack 3 Upgrade Guide]
  • Require Ruby 2.7.8 as minimum Ruby version (#1993)

  • Breaking change: Drop support for Rack 2 (#1857)

    • Note: when using Sinatra to start the web server, you now need the rackup gem installed
  • Breaking change: Remove the IndifferentHash initializer (#1982)

  • Breaking change: Disable session_hijacking protection by default (#1984)

  • Breaking change: Remove Rack::Protection::EncryptedCookie (#1989)

    • Note: cookies are still encrypted (by [Rack::Session::Cookie])

#1857: sinatra/sinatra#1857 #1993: sinatra/sinatra#1993 #1982: sinatra/sinatra#1982 #1984: sinatra/sinatra#1984 #1989: sinatra/sinatra#1989 [Rack::Session::Cookie]: https://github.com/rack/rack-session [Rack 3 Upgrade Guide]: https://github.com/rack/rack/blob/main/UPGRADE-GUIDE.md

3.2.0 / 2023-12-29

  • New: Add #except method to Sinatra::IndifferentHash (#1940)

  • New: Use Exception#detailed_message to show backtrace (#1952)

  • New: Add Sinatra::HamlHelpers to sinatra-contrib (#1960)

  • Fix: Add base64 to rack-protection runtime dependencies (#1946)

  • Fix: Avoid open-ended dependencies for sinatra-contrib and rack-protection (#1949)

  • Fix: Helpful message when Sinatra::Runner times out (#1975)

  • Fix: Ruby 3.3 + Bundler 2.5 compatibility (#1975)

#1940: sinatra/sinatra#1940 #1946: sinatra/sinatra#1946 #1949: sinatra/sinatra#1949 #1952: sinatra/sinatra#1952 #1960: sinatra/sinatra#1960 #1975: sinatra/sinatra#1975

3.1.0 / 2023-08-07

... (truncated)

Commits
  • b626e2d 4.0.0 release (#1996)
  • e56f657 Require Ruby 2.7.8 as minimum Ruby version (#1993)
  • 9993829 CI: remove rack monkey patches
  • 09f1c2b CI: rdiscount 2.2.7.3 resolved the TruffleRuby issue
  • c43e097 CI: use the released version of childprocess
  • 739eaa0 CI: no need to set RUBY_ENGINE
  • d872057 CI: no need to set Encoding.default_external
  • 9c14764 Remove Rack::Protection::EncryptedCookie (#1989)
  • 667056c CI: allow ruby-head to fail
  • 393bb7c Avoid using deprecated Rack::Response#header
  • Additional commits viewable in compare view

Updates grape from 1.7.1 to 1.8.0

Changelog

Sourced from grape's changelog.

1.8.0 (2023/08/30)

Features

Fixes

Commits
  • ef9164c Preparing for release, 1.8.0.
  • ed8edaf Remove the section that says to increment the version number as part of the r...
  • 34224ac Replaced remaining references to Travis CI.
  • df3b3c8 Adjust test expectations to conform to rack 3 (#2346)
  • 8e1488d Fix unknown validator exception when using requires/optional with Entity (#2338)
  • 96ac079 Allow specifying a handler for grape_exceptions (#2342)
  • db7000b Stop yielding skip value (#2341)
  • dd741b9 [ISSUE-2321] Updates documentation on re-mounted configuration for params (#2...
  • 1147658 Fix custom validator not ending with _validator (#2337)
  • d1dfdcc Feature: Allows procs with arity 1 to validate and use custom messages (#2333)
  • Additional commits viewable in compare view

Updates sinatra-contrib from 2.2.3 to 4.0.0

Changelog

Sourced from sinatra-contrib's changelog.

4.0.0. / 2024-01-19

  • New: Add support for Rack 3 (#1857)

    • Note: you may want to read the [Rack 3 Upgrade Guide]
  • Require Ruby 2.7.8 as minimum Ruby version (#1993)

  • Breaking change: Drop support for Rack 2 (#1857)

    • Note: when using Sinatra to start the web server, you now need the rackup gem installed
  • Breaking change: Remove the IndifferentHash initializer (#1982)

  • Breaking change: Disable session_hijacking protection by default (#1984)

  • Breaking change: Remove Rack::Protection::EncryptedCookie (#1989)

    • Note: cookies are still encrypted (by [Rack::Session::Cookie])

#1857: sinatra/sinatra#1857 #1993: sinatra/sinatra#1993 #1982: sinatra/sinatra#1982 #1984: sinatra/sinatra#1984 #1989: sinatra/sinatra#1989 [Rack::Session::Cookie]: https://github.com/rack/rack-session [Rack 3 Upgrade Guide]: https://github.com/rack/rack/blob/main/UPGRADE-GUIDE.md

3.2.0 / 2023-12-29

  • New: Add #except method to Sinatra::IndifferentHash (#1940)

  • New: Use Exception#detailed_message to show backtrace (#1952)

  • New: Add Sinatra::HamlHelpers to sinatra-contrib (#1960)

  • Fix: Add base64 to rack-protection runtime dependencies (#1946)

  • Fix: Avoid open-ended dependencies for sinatra-contrib and rack-protection (#1949)

  • Fix: Helpful message when Sinatra::Runner times out (#1975)

  • Fix: Ruby 3.3 + Bundler 2.5 compatibility (#1975)

#1940: sinatra/sinatra#1940 #1946: sinatra/sinatra#1946 #1949: sinatra/sinatra#1949 #1952: sinatra/sinatra#1952 #1960: sinatra/sinatra#1960 #1975: sinatra/sinatra#1975

3.1.0 / 2023-08-07

... (truncated)

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Mar 12, 2024
@dependabot dependabot bot force-pushed the dependabot/bundler/sinatra-and-grape-and-sinatra-contrib-4.0.0 branch 4 times, most recently from 55e04b2 to b7db46b Compare March 12, 2024 14:59
@dependabot dependabot bot force-pushed the dependabot/bundler/sinatra-and-grape-and-sinatra-contrib-4.0.0 branch from b7db46b to fa463a3 Compare March 25, 2024 17:15
@dependabot dependabot bot force-pushed the dependabot/bundler/sinatra-and-grape-and-sinatra-contrib-4.0.0 branch from fa463a3 to d3be8b3 Compare April 2, 2024 16:15
@vertism
Copy link
Contributor

vertism commented May 7, 2024

@dependabot rebase

Bumps [sinatra](https://github.com/sinatra/sinatra), [grape](https://github.com/ruby-grape/grape) and [sinatra-contrib](https://github.com/sinatra/sinatra). These dependencies needed to be updated together.

Updates `sinatra` from 2.2.3 to 4.0.0
- [Changelog](https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md)
- [Commits](sinatra/sinatra@v2.2.3...v4.0.0)

Updates `grape` from 1.7.1 to 1.8.0
- [Changelog](https://github.com/ruby-grape/grape/blob/master/CHANGELOG.md)
- [Commits](ruby-grape/grape@v1.7.1...v1.8.0)

Updates `sinatra-contrib` from 2.2.3 to 4.0.0
- [Changelog](https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md)
- [Commits](sinatra/sinatra@v2.2.3...v4.0.0)

---
updated-dependencies:
- dependency-name: sinatra
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: grape
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: sinatra-contrib
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/bundler/sinatra-and-grape-and-sinatra-contrib-4.0.0 branch from d3be8b3 to 4e4b5d4 Compare May 7, 2024 09:23
@vertism
Copy link
Contributor

vertism commented Jun 11, 2024

@dependabot rebase

Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 11, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jun 11, 2024
@dependabot dependabot bot deleted the dependabot/bundler/sinatra-and-grape-and-sinatra-contrib-4.0.0 branch June 11, 2024 13:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant