Skip to content

Fix vulnerable Ruby dependencies - #2121

Merged
zkoppert merged 1 commit into
masterfrom
zk/fix-dependabot-alerts
Oct 26, 2026
Merged

zkoppert merged 1 commit into
masterfrom
zk/fix-dependabot-alerts

Conversation

@zkoppert

Copy link
Copy Markdown
Member

Summary

  • I updated json from 2.19.5 to 2.19.9.
  • I updated concurrent-ruby from 1.3.6 to 1.3.8.
  • I updated nokogiri from 1.19.3 to 1.19.4 for all locked platforms.
  • These updates address all 12 open Dependabot alerts while preserving the existing Bundler version.

Testing

  • bundle check
  • I verified the loaded versions for all three updated gems.
  • bundle exec rake (71 runs, 153 assertions, no failures, and no errors)

Copilot AI max review requested due to automatic review settings October 26, 2026 00:12

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.

@zkoppert
zkoppert merged commit 8ea04e1 into master Oct 26, 2026
16 checks passed
@zkoppert
zkoppert deleted the zk/fix-dependabot-alerts branch October 26, 2026 02:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants