Bump sinatra, rack, sinatra-contrib, activerecord, thin and rubocop #130

dependabot · 2025-10-10T20:51:54Z

Bumps sinatra, rack, sinatra-contrib, activerecord, thin and rubocop. These dependencies needed to be updated together.
Updates sinatra from 2.2.3 to 4.2.1

Changelog

Sourced from sinatra's changelog.

4.2.1 / 2025-10-10

Fix: Revert "PATH_INFO can never be empty" (#2124)

addresses issues with routing and 404, more in the original pull request

4.2.0 / 2025-10-08

New: Add :static_headers setting for custom headers in static file responses (#2089)

Fix: Fix regex in etag_matches? to prevent ReDoS (#2121)

Fix: PATH_INFO can never be empty (#2114)

Fix: Fix malformed Content-Type headers (#2081)

Fix: Avoid crash for integer values in content_type parameters (#2078)

4.1.1 / 2024-11-20

Fix: Restore WEBrick support (#2067)

4.1.0 / 2024-11-18

New: Add host_authorization setting (#2053)

Defaults to .localhost, .test and any IP address in development mode.

Security: addresses CVE-2024-21510.

Fix: Return an instance of Sinatra::IndifferentHash when calling #except (#2044)

Fix: Address warning from URI for Ruby 3.4 (#2060)

Fix: rackup no longer depends on WEBrick, recommend Puma instead (4a558503)

Fix: Zeitwerk 2.7.0+ compatibility (#2050)

Fix: Address warning about Hash construction for Ruby 3.4 (#2028)

Fix: Declare missing dependencies for Ruby 3.5 (#2032)

Fix: Compatibility with --enable-frozen-string-literal (#2033)

Fix: Rack 3.1 compatibility (#2035)

Don't depend on Rack::Logger

Don't delete content-length header when Rack::Files is used

4.0.1 / 2025-05-24

Rack 3.1 compatibility (#2035)

Fix malformed Content-Type headers (#2081)

Avoid crash for integer values in content_type parameters (#2078)

Fix compatibility with --enable-frozen-string-literal (#2033)

Declare missing dependencies for Ruby 3.5 (#2032)

Fix warning about Hash construction. (#2028)

Support Zeitwerk 2.7.0+ (#2050)

Address URI depreciation (#2060)

... (truncated)

Commits

599a007 4.2.1 release (#2125)
2c7f8db Revert "PATH_INFO can never be empty." (#2124)
f2ad45f 4.2.0 release (#2122)
3fe8c38 Fix regex in etag_matches? to prevent ReDoS (#2121)
fa99a21 PATH_INFO can never be empty. (#2114)
ea0d3fa Skip broken tests. (#2115)
5e15985 Sync changelog for v4.0.1
91cfb54 Add :static_headers setting for custom headers in static file responses (#2089)
c918134 Set rubygems_mfa_required for the sinatra gem (#2087)
ac3ff23 README: Remove duplicate mention of installing puma (#2091)
Additional commits viewable in compare view

Updates rack from 2.2.6.4 to 3.2.3

Release notes

Sourced from rack's releases.

v3.0.9.1

What's Changed

Fixed ReDoS in Accept header parsing [CVE-2024-26146]

Fixed ReDoS in Content Type header parsing [CVE-2024-25126]

Reject Range headers which are too large [CVE-2024-26141]

Full Changelog: rack/rack@v3.0.9...v3.0.9.1

v3.0.9

What's Changed

Fix content-length calcuation in Rack:Response#write #2150

Full Changelog: rack/rack@v3.0.8...v3.0.9

v3.0.8

What's Changed

Backport "Fix some unused variable verbose warnings" by @skipkayhil in rack/rack#2084

New Contributors

@skipkayhil made their first contribution in rack/rack#2084

Full Changelog: rack/rack@v3.0.7...v3.0.8

v3.0.7

What's Changed

Backport "Make query parameters without = have nil values". by @jeremyevans in rack/rack#2060

Full Changelog: rack/rack@v3.0.6.1...v3.0.7

v3.0.6.1

No release notes provided.

v3.0.4.1

Full Changelog: rack/rack@v3.0.4...v3.0.4.1

v3.0.4

Full Changelog: rack/rack@v3.0.3...v3.0.4

v3.0.3

What's Changed

Release v3.0.3 by @ioquatix in rack/rack#2000

Full Changelog: rack/rack@v3.0.2...v3.0.3

v3.0.2

Full Changelog: rack/rack@v3.0.1...v3.0.2

... (truncated)

Changelog

Sourced from rack's changelog.

Changelog

All notable changes to this project will be documented in this file. For info on how to format all future additions to this file please reference Keep A Changelog.

Unreleased

Security

CVE-2025-61780 Improper handling of headers in Rack::Sendfile may allow proxy bypass.

CVE-2025-61919 Unbounded read in Rack::Request form parsing can lead to memory exhaustion.

SPEC Changes

Define rack.response_finished callback arguments more strictly. (#2365, @skipkayhil)

Added

Add Rack::Files#assign_headers to allow overriding how the configured file headers are set. (#2377, @codergeek121)

Add support for rack.response_finished to Rack::TempfileReaper. (#2363, @skipkayhil)

Add support for streaming bodies when using Rack::Events. (#2375, @unflxw)

Changed

Raise before exceeding a part limit, not after. (#2362, @matthew-puku)

Rack::Deflater now uses a fixed GZip mtime value. (#2372, @bensheldon)

[3.2.2] - 2025-10-07

Security

CVE-2025-61772 Multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)

CVE-2025-61771 Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)

CVE-2025-61770 Unbounded multipart preamble buffering enables DoS (memory exhaustion)

[3.2.1] -- 2025-09-02

Added

Add support for streaming bodies when using Rack::Events. (#2375, @unflxw)

Fixed

Fix an issue where a NoMethodError would be raised when using Rack::Events with streaming bodies. (#2375, @unflxw)

[3.2.0] - 2025-07-31

This release continues Rack's evolution toward a cleaner, more efficient foundation while maintaining backward compatibility for most applications. The breaking changes primarily affect deprecated functionality, so most users should experience a smooth upgrade with improved performance and standards compliance.

SPEC Changes

... (truncated)

Commits

32bf888 Bump patch version.
e179614 Unbounded read in Rack::Request form parsing can lead to memory exhaustion.
57277b7 Improper handling of proxy headers in Rack::Sendfile may allow proxy bypass.
403b74b Normalize adivsories links.
fb395bb Fix handling of Errno::EPIPE in multipart tests.
bce149b Bump patch version.
3beacfc Limit amount of retained data when parsing multipart requests
589127f Fix denial of service vulnerbilties in multipart parsing
14c8731 Bump patch version.
7ea1f40 Support streaming bodies when using Rack::Events. (#2375)
Additional commits viewable in compare view

Updates sinatra-contrib from 2.2.3 to 4.2.1

Changelog

Sourced from sinatra-contrib's changelog.

4.2.1 / 2025-10-10

Fix: Revert "PATH_INFO can never be empty" (#2124)

addresses issues with routing and 404, more in the original pull request

4.2.0 / 2025-10-08

New: Add :static_headers setting for custom headers in static file responses (#2089)

Fix: Fix regex in etag_matches? to prevent ReDoS (#2121)

Fix: PATH_INFO can never be empty (#2114)

Fix: Fix malformed Content-Type headers (#2081)

Fix: Avoid crash for integer values in content_type parameters (#2078)

4.1.1 / 2024-11-20

Fix: Restore WEBrick support (#2067)

4.1.0 / 2024-11-18

New: Add host_authorization setting (#2053)

Defaults to .localhost, .test and any IP address in development mode.

Security: addresses CVE-2024-21510.

Fix: Return an instance of Sinatra::IndifferentHash when calling #except (#2044)

Fix: Address warning from URI for Ruby 3.4 (#2060)

Fix: rackup no longer depends on WEBrick, recommend Puma instead (4a558503)

Fix: Zeitwerk 2.7.0+ compatibility (#2050)

Fix: Address warning about Hash construction for Ruby 3.4 (#2028)

Fix: Declare missing dependencies for Ruby 3.5 (#2032)

Fix: Compatibility with --enable-frozen-string-literal (#2033)

Fix: Rack 3.1 compatibility (#2035)

Don't depend on Rack::Logger

Don't delete content-length header when Rack::Files is used

4.0.1 / 2025-05-24

Rack 3.1 compatibility (#2035)

Fix malformed Content-Type headers (#2081)

Avoid crash for integer values in content_type parameters (#2078)

Fix compatibility with --enable-frozen-string-literal (#2033)

Declare missing dependencies for Ruby 3.5 (#2032)

Fix warning about Hash construction. (#2028)

Support Zeitwerk 2.7.0+ (#2050)

Address URI depreciation (#2060)

... (truncated)

Commits

599a007 4.2.1 release (#2125)
f2ad45f 4.2.0 release (#2122)
7b50a1b 4.1.1 release (#2068)
73f3291 4.1.0 release (#2063)
ef00c6a Fix Sinatra::HamlHelpers docs (#2046)
973c936 Fix compatibility with --enable-frozen-string-literal (#2033)
5640495 Fix typos in changelog, readme and code comments (#2006)
b626e2d 4.0.0 release (#1996)
e56f657 Require Ruby 2.7.8 as minimum Ruby version (#1993)
8a17d4b Add support for Rack 3, drop support for Rack 2 (#1857)
Additional commits viewable in compare view

Updates activerecord from 6.1.7.10 to 8.0.3

Release notes

Sourced from activerecord's releases.

8.0.3

Active Support
ActiveSupport::FileUpdateChecker does not depend on Time.now to prevent unnecessary reloads with time travel test helpers

Jan Grodowski

Fix ActiveSupport::BroadcastLogger from executing a block argument for each logger (tagged, info, etc.).

Jared Armstrong

Make ActiveSupport::Logger #freeze-friendly.

Joshua Young

Fix ActiveSupport::HashWithIndifferentAccess#transform_keys! removing defaults.

Hartley McGuire
Fix ActiveSupport::HashWithIndifferentAccess#tranform_keys! to handle collisions.

If the transformation would result in a key equal to another not yet transformed one, it would result in keys being lost.

Before:
>> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1}
After:
>> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1, "d" => 2}
Jason T Johnson, Jean Boussier
Fix ActiveSupport::Cache::MemCacheStore#read_multi to handle network errors.

This method specifically wasn't handling network errors like other codepaths.

Alessandro Dal Grande

Fix configuring RedisCacheStore with raw: true.

fatkodima

... (truncated)

Changelog

Sourced from activerecord's changelog.

Rails 8.0.3 (September 22, 2025)
Fix query cache for pinned connections in multi threaded transactional tests

When a pinned connection is used across separate threads, they now use a separate cache store for each thread.

This improve accuracy of system tests, and any test using multiple threads.

Heinrich Lee Yu, Jean Boussier

Don't add id_value attribute alias when attribute/column with that name already exists.

Rob Lewis

Fix false positive change detection involving STI and polymorphic has one relationships.

Polymorphic has_one relationships would always be considered changed when defined in a STI child class, causing nedless extra autosaves.

David Fritsch

Skip calling PG::Connection#cancel in cancel_any_running_query when using libpq >= 18 with pg < 1.6.0, due to incompatibility. Rollback still runs, but may take longer.

Yasuo Honda, Lars Kanis

Fix stale association detection for polymorphic belongs_to.

Florent Beaurain, Thomas Crambert

Fix removal of PostgreSQL version comments in structure.sql for latest PostgreSQL versions which include \restrict

Brendan Weibrecht
Allow setting schema_format in database configuration.
primary:
  schema_format: ruby
Useful in multi-database setups to have different formats per-database.

T S Vallender
Use ntuples to populate row_count instead of count for Postgres

Jonathan Calvert

... (truncated)

Commits

529f933 Preparing for 8.0.3 release
0160f42 Sync CHANGELOGs
74038d7 Merge pull request #55722 from kozy4324/fix-lease-sticky-flag-timing
4fc9618 Merge pull request #55703 from byroot/hly-fix-query-cache-system-tests-2
20c7cff Merge pull request #55699 from skipkayhil/hm-zlxzqwylrmlruzuq
8408ba6 Merge pull request #55698 from salzig/fix/respect_schema_format_in_db_schema_...
e7f65a9 Merge pull request #55691 from kohder/rl-id-value-alias-fix
228fcf5 Merge pull request #51359 from dfritsch/dfritsch/51280-polymorphic-name
5456941 Return early when column are empty in WhereClause#except_predicates
87e495d Merge pull request #55675 from skipkayhil/hm-ouuplulxpznztlyp
Additional commits viewable in compare view

Updates thin from 1.8.1 to 2.0.1

Release notes

Sourced from thin's releases.

v1.8.2

What's Changed

Increase timeout when checking for server stop by @sergiodj in macournoyer/thin#384

Update tcp_spec.rb by @murraybd in macournoyer/thin#382

Ruby 3.2 by @Vasfed in macournoyer/thin#392

New Contributors

@sergiodj made their first contribution in macournoyer/thin#384

@murraybd made their first contribution in macournoyer/thin#382

@Vasfed made their first contribution in macournoyer/thin#392

Full Changelog: macournoyer/thin@v1.8.1...v1.8.2

Changelog

Sourced from thin's changelog.

== 2.0.0

Partial Rack 3 support. Full bi-directional streaming is not supported due to limitations in the implementation.

== 1.8.2 Ruby Razor

Ruby 3.2 support.

Commits

84a5188 Bump patch version.
3254c58 Use bake for release management.
20add8e Tidy up license files.
7c80818 Add license files for ruby and gpl (#438)
27d384b Correction to uninitialized constant. Fixes #445 (#446)
955db1a Bump major version.
a64256b Remove legacy Ruby 1.8 compatibility shims.
745093d Rakefile: rely on Rake's rakelib/ default
e0577f9 Fix "No such file or directory @ rb_io_reopen" error from test.
de6b618 Rack 3 no longer required environments (#437)
Additional commits viewable in compare view

Updates rubocop from 1.50.2 to 1.81.1

Release notes

Sourced from rubocop's releases.

RuboCop v1.81.1

Bug fixes

#14563: Fix incorrect autocorrection for Lint/DeprecatedOpenSSLConstant when Cipher appears twice. (@koic)

Changes

#14565: Allow multiline method chain for Style/NumberedParameters and Style/ItBlockParameter with EnforcedStyle: allow_single_line when the block itself is on a single line. (@earlopain)

RuboCop v1.81.0

New features

#14512: Add Style/ArrayIntersectWithSingleElement cop. (@r7kamura)

#10971: Support EnforcedStyleForMultiline: diff_comma in Style/TrailingCommaInArguments. (@akouryy)

Bug fixes

#14560: Fix an error for Style/NilComparison cop when using the var.==(nil) and var.===(nil) syntax. (@viralpraxis)

#14535: Fix autocorrect for Style/ExplicitBlockArgument when there are two methods that share the same implementation. (@earlopain)

#14527: Fix false negatives for Style/NumberedParameters and Style/ItBlockParameter when using multiline method chain with EnforcedStyle: allow_single_line. (@koic)

#14522: Fix false negatives for Layout/MultilineOperationIndentation when using indented code on LHS of equality operator in modifier method definition. (@koic)

#14496: Fix false negatives for Layout/EmptyLineBetweenDefs for AllowAdjacentOneLineDefs: false and DefLikeMacros that take no block. (@earlopain)

#14553: Fix false positives when EnforcedStyle: allowed_in_returns and !! appears across multiple lines in return position. (@koic)

#14557: Fix false positives for Style/RedundantParentheses when parentheses are used around a one-line rescue expression as a condition. (@koic)

#14525: Fix false positives for Style/RedundantRegexpEscape when an escaped variable sigil follows # (e.g., /#\@foo/, /#\@@bar/, /#\$baz/). (@koic)

#14529: Fix false negative in Layout/RescueEnsureAlignment with a block whose send node is split over multiple lines. (@dvandersluis)

#14528: Fix Style/RedundantFormat when the format string has a variable width that isn't given as a literal value. (@dvandersluis)

#14541: Fix gemspec parsing error when ParserEngine: parser_prism is configured in a base config file. ([@sudoremo][])

#14544: Fix an incorrect autocorrect for Lint/Void when using a return value in assignment method definition. (@koic)

#14543: Fix an incorrect autocorrect for Style/RedundantRegexpArgument when using escaped single quote character. (@koic)

#14540: Fix an incorrect autocorrect for Style/UnlessElse when using unless with then. (@koic)

#14507: Fix the built-in Ruby LSP add-on not restarting when config files (.rubocop.yml, .rubocop_todo.yml) change. (@earlopain)

#14514: Fix the built-in Ruby LSP add-on not respecting .rubocop config file. (@earlopain)

#14508: Fix the built-in Ruby LSP add-on getting in an irrecoverable state when the config is invalid on startup. (@earlopain)

#14534: Prevent Layout/LineLength autocorrection from splitting a block if its receiver contains a heredoc. (@dvandersluis)

#14497: Fix a false positive for Lint/ShadowedArgument when assigning inside a rescue block. (@earlopain)

Changes

#14492: Add support for LSP positionEncoding utf-8 and utf-32. ([@tmtm][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.81.1 (2025-09-26)

Bug fixes

#14563: Fix incorrect autocorrection for Lint/DeprecatedOpenSSLConstant when Cipher appears twice. ([@koic][])

Changes

#14565: Allow multiline method chain for Style/NumberedParameters and Style/ItBlockParameter with EnforcedStyle: allow_single_line when the block itself is on a single line. ([@earlopain][])

1.81.0 (2025-09-25)

New features

#14512: Add Style/ArrayIntersectWithSingleElement cop. ([@r7kamura][])

#10971: Support EnforcedStyleForMultiline: diff_comma in Style/TrailingCommaInArguments. ([@akouryy][])

Bug fixes

#14560: Fix an error for Style/NilComparison cop when using the var.==(nil) and var.===(nil) syntax. ([@viralpraxis][])

#14535: Fix autocorrect for Style/ExplicitBlockArgument when there are two methods that share the same implementation. ([@earlopain][])

#14527: Fix false negatives for Style/NumberedParameters and Style/ItBlockParameter when using multiline method chain with EnforcedStyle: allow_single_line. ([@koic][])

#14522: Fix false negatives for Layout/MultilineOperationIndentation when using indented code on LHS of equality operator in modifier method definition. ([@koic][])

#14496: Fix false negatives for Layout/EmptyLineBetweenDefs for AllowAdjacentOneLineDefs: false and DefLikeMacros that take no block. ([@earlopain][])

#14553: Fix false positives when EnforcedStyle: allowed_in_returns and !! appears across multiple lines in return position. ([@koic][])

#14557: Fix false positives for Style/RedundantParentheses when parentheses are used around a one-line rescue expression as a condition. ([@koic][])

#14525: Fix false positives for Style/RedundantRegexpEscape when an escaped variable sigil follows # (e.g., /#\@foo/, /#\@@bar/, /#\$baz/). ([@koic][])

#14529: Fix false negative in Layout/RescueEnsureAlignment with a block whose send node is split over multiple lines. ([@dvandersluis][])

#14528: Fix Style/RedundantFormat when the format string has a variable width that isn't given as a literal value. ([@dvandersluis][])

#14541: Fix gemspec parsing error when ParserEngine: parser_prism is configured in a base config file. ([@sudoremo][])

#14544: Fix an incorrect autocorrect for Lint/Void when using a return value in assignment method definition. ([@koic][])

#14543: Fix an incorrect autocorrect for Style/RedundantRegexpArgument when using escaped single quote character. ([@koic][])

#14540: Fix an incorrect autocorrect for Style/UnlessElse when using unless with then. ([@koic][])

#14507: Fix the built-in Ruby LSP add-on not restarting when config files (.rubocop.yml, .rubocop_todo.yml) change. ([@earlopain][])

#14514: Fix the built-in Ruby LSP add-on not respecting .rubocop config file. ([@earlopain][])

#14508: Fix the built-in Ruby LSP add-on getting in an irrecoverable state when the config is invalid on startup. ([@earlopain][])

#14534: Prevent Layout/LineLength autocorrection from splitting a block if its receiver contains a heredoc. ([@dvandersluis][])

#14497: Fix a false positive for Lint/ShadowedArgument when assigning inside a rescue block. ([@earlopain][])

Changes

#14492: Add support for LSP positionEncoding utf-8 and utf-32. ([@tmtm][])

1.80.2 (2025-09-03)

Bug fixes

#14477: Fix a false positive for Style/SafeNavigation when using ternary expression with index access call with method chain. ([@koic][])

#14486: Fix false positives for Style/RedundantParentheses with unary operators and yield, super, or defined?. ([@earlopain][])

#14489: Fix false negatives for Style/RedundantParentheses with method calls taking argument without parentheses like return (x y) if z. ([@earlopain][])

... (truncated)

Commits

db58831 Cut 1.81.1
2797207 Update Changelog
6b2f047 [Fix #14563] Fix an incorrect autocorrect for Lint/DeprecatedOpenSSLConstant
8260fc1 Allow implicit block args when the block itself is on one line only
c1400e7 [Docs] Document --editor-mode in a comment`
d3ef76a Reset the docs version
386bf10 Cut 1.81
148250d Update Changelog
face244 Fix an error for Style/NilComparison cop
d8c1d4c Fix an error for InternalAffairsOnSendWithoutOnCSend with alias_method an...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [sinatra](https://github.com/sinatra/sinatra), [rack](https://github.com/rack/rack), [sinatra-contrib](https://github.com/sinatra/sinatra), [activerecord](https://github.com/rails/rails), [thin](https://github.com/macournoyer/thin) and [rubocop](https://github.com/rubocop/rubocop). These dependencies needed to be updated together. Updates `sinatra` from 2.2.3 to 4.2.1 - [Changelog](https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md) - [Commits](sinatra/sinatra@v2.2.3...v4.2.1) Updates `rack` from 2.2.6.4 to 3.2.3 - [Release notes](https://github.com/rack/rack/releases) - [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md) - [Commits](rack/rack@v2.2.6.4...v3.2.3) Updates `sinatra-contrib` from 2.2.3 to 4.2.1 - [Changelog](https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md) - [Commits](sinatra/sinatra@v2.2.3...v4.2.1) Updates `activerecord` from 6.1.7.10 to 8.0.3 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v8.0.3/activerecord/CHANGELOG.md) - [Commits](rails/rails@v6.1.7.10...v8.0.3) Updates `thin` from 1.8.1 to 2.0.1 - [Release notes](https://github.com/macournoyer/thin/releases) - [Changelog](https://github.com/macournoyer/thin/blob/master/CHANGELOG) - [Commits](macournoyer/thin@v1.8.1...v2.0.1) Updates `rubocop` from 1.50.2 to 1.81.1 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.50.2...v1.81.1) --- updated-dependencies: - dependency-name: sinatra dependency-version: 4.2.1 dependency-type: direct:production - dependency-name: rack dependency-version: 3.2.3 dependency-type: direct:production - dependency-name: sinatra-contrib dependency-version: 4.2.1 dependency-type: direct:production - dependency-name: activerecord dependency-version: 8.0.3 dependency-type: direct:production - dependency-name: thin dependency-version: 2.0.1 dependency-type: direct:development - dependency-name: rubocop dependency-version: 1.81.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <[email protected]>

sonarqubecloud · 2025-10-10T20:52:36Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Oct 10, 2025

This was referenced Oct 10, 2025

Bump activerecord from 6.1.7.10 to 7.1.5.2 #125

Closed

Bump rack from 2.2.6.4 to 2.2.20 #129

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump sinatra, rack, sinatra-contrib, activerecord, thin and rubocop #130

Bump sinatra, rack, sinatra-contrib, activerecord, thin and rubocop #130

Uh oh!

dependabot bot commented on behalf of github Oct 10, 2025

Uh oh!

sonarqubecloud bot commented Oct 10, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump sinatra, rack, sinatra-contrib, activerecord, thin and rubocop #130

Are you sure you want to change the base?

Bump sinatra, rack, sinatra-contrib, activerecord, thin and rubocop #130

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 10, 2025

4.2.1 / 2025-10-10

4.2.0 / 2025-10-08

4.1.1 / 2024-11-20

4.1.0 / 2024-11-18

4.0.1 / 2025-05-24

v3.0.9.1

What's Changed

v3.0.9

What's Changed

v3.0.8

What's Changed

New Contributors

v3.0.7

What's Changed

v3.0.6.1

v3.0.4.1

v3.0.4

v3.0.3

What's Changed

v3.0.2

Changelog

Unreleased

Security

SPEC Changes

Added

Changed

[3.2.2] - 2025-10-07

Security

[3.2.1] -- 2025-09-02

Added

Fixed

[3.2.0] - 2025-07-31

SPEC Changes

4.2.1 / 2025-10-10

4.2.0 / 2025-10-08

4.1.1 / 2024-11-20

4.1.0 / 2024-11-18

4.0.1 / 2025-05-24

8.0.3

Active Support

Rails 8.0.3 (September 22, 2025)

v1.8.2

What's Changed

New Contributors

RuboCop v1.81.1

Bug fixes

Changes

RuboCop v1.81.0

New features

Bug fixes

Changes

1.81.1 (2025-09-26)

Bug fixes

Changes

1.81.0 (2025-09-25)

New features

Bug fixes

Changes

1.80.2 (2025-09-03)

Bug fixes

Uh oh!

sonarqubecloud bot commented Oct 10, 2025

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant