Repository navigation
Bump the bundler group with 3 updates - #95
Merged
Merged
Conversation
Bumps the bundler group with 3 updates: [webrick](https://github.com/ruby/webrick), [csv](https://github.com/ruby/csv) and [bigdecimal](https://github.com/ruby/bigdecimal). Updates `webrick` from 1.8.2 to 1.9.2 - [Release notes](https://github.com/ruby/webrick/releases) - [Commits](ruby/webrick@v1.8.2...v1.9.2) Updates `csv` from 3.3.2 to 3.3.6 - [Release notes](https://github.com/ruby/csv/releases) - [Changelog](https://github.com/ruby/csv/blob/main/NEWS.md) - [Commits](ruby/csv@v3.3.2...v3.3.6) Updates `bigdecimal` from 3.1.9 to 4.1.3 - [Release notes](https://github.com/ruby/bigdecimal/releases) - [Changelog](https://github.com/ruby/bigdecimal/blob/master/CHANGES.md) - [Commits](ruby/bigdecimal@v3.1.9...v4.1.3) --- updated-dependencies: - dependency-name: webrick dependency-version: 1.9.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bundler - dependency-name: csv dependency-version: 3.3.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler - dependency-name: bigdecimal dependency-version: 4.1.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: bundler ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
judeallred
approved these changes
Sep 30, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the bundler group with 3 updates: webrick, csv and bigdecimal.
Updates
webrickfrom 1.8.2 to 1.9.2Release notes
Sourced from webrick's releases.
Commits
b1684cev1.9.28f979b8Add GitHub release.yml to exclude dependencies label from changelog72744d8Bump ruby/setup-ruby action from v1.190.0 to v1.268.0b0398afMerge pull request #158 from jackorp/fix_test6456725Merge pull request #180 from ruby/dependabot/github_actions/actions/checkout-6b62f8d8Bump actions/checkout from 5 to 69a59373Merge pull request #181 from osyoyu/no-nreaddaf314aRemove usage of IO#nread5584117Merge pull request #178 from ruby/dependabot/github_actions/step-security/har...b761de1Bump step-security/harden-runner from 2.13.1 to 2.13.2Updates
csvfrom 3.3.2 to 3.3.6Release notes
Sourced from csv's releases.
... (truncated)
Changelog
Sourced from csv's changelog.
... (truncated)
Commits
0873ab3Add 3.3.6 entryc94763aDon't use enumerator in CSV (#363)b36c160Bump actions/checkout from 6 to 7 (#360)c773f27Bump rubygems/configure-rubygems-credentials from 2.0.0 to 2.1.0 (#359)19c7649Unify first parameter name topath_or_ioacross methods (#358)79eb55aBump rubygems/configure-rubygems-credentials from 1.0.0 to 2.0.0 (#357)4a5c504Support block in CSV::Row#to_h (#356)bc69827Bump actions/checkout from 5 to 6 (#354)a2bda1eLink to LICENSE.txt0de1bf0Bump actions/checkout from 4 to 5 (#351)Updates
bigdecimalfrom 3.1.9 to 4.1.3Release notes
Sourced from bigdecimal's releases.
... (truncated)
Changelog
Sourced from bigdecimal's changelog.
... (truncated)
Commits
8ed99eaBump version to v4.1.3 (#558)60829daFaster gamma calculation (#524)00d26a2Make String#to_d accept embedded NUL bytes and reject ASCII-incompatible stri...7471291Guard string VALUEs while parsing their C string (#556)d2f2d20Honor exception: false for strings with null bytes (#550)0d5a486Honor exception: false for complex conversion (#549)d345bb3Merge pull request #555 from ruby/dependabot/github_actions/step-security/har...fc595d3Bump step-security/harden-runner from 2.21.0 to 2.21.14799dd5Fix precision loss in Newton-Raphson inverse (#552)881af5cBump step-security/harden-runner from 2.20.0 to 2.21.0 (#546)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsNote
Low Risk
Lockfile-only dependency bumps with no project source changes; main watch item is bigdecimal 4.x compatibility with the Jekyll/Ruby toolchain.
Overview
Updates
Gemfile.lockonly, pinning three direct/grouped gems:bigdecimal3.1.9 → 4.1.3 (major),csv3.3.2 → 3.3.6, andwebrick1.8.2 → 1.9.2. No application orGemfileconstraint changes beyond what Bundler resolved for the existing Jekyll stack (jekyllalready allowscsv ~> 3.0andwebrick ~> 1.7).The
bigdecimaljump is the widest semver step and also satisfies transitive needs (e.g.google-protobuf/sass-embedded).webrickstays on the 1.x line used for Jekyll’s local dev server;csvis a patch-level bump within 3.3.x.Reviewed by Cursor Bugbot for commit 5f2ff3d. Bugbot is set up for automated code reviews on this repo. Configure here.