Skip to content

Update all non-major dependencies to v2.7.5 - #324

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

Update all non-major dependencies to v2.7.5#324
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Aug 24, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
annotate 2.6.5 → 2.7.5 age confidence
selenium-webdriver (source, changelog) 4.46.0 → 4.47.0 age confidence
solargraph (source, changelog) 0.48.0 → 0.60.3 age confidence
sqlite3 (changelog) 2.9.6-aarch64-linux-gnu → 2.9.6 age confidence

Release Notes

ctran/annotate_models (annotate)

v2.7.5

Compare Source

See https://github.com/ctran/annotate_models/releases/tag/v2.7.5

v2.7.4

Compare Source

  • Fix with_comment format in annotate_models_rake #​560

v2.7.3

Compare Source

See https://github.com/ctran/annotate_models/releases/tag/v2.7.3

v2.7.2

Compare Source

See https://github.com/ctran/annotate_models/releases/tag/v2.7.2

v2.7.1

Compare Source

See https://github.com/ctran/annotate_models/releases/tag/v2.7.1

v2.7.0

Compare Source

See https://github.com/ctran/annotate_models/releases/tag/v2.7.0

v2.6.10: Revert incompatible change

Compare Source

Revert "Prefer SQL column type over normalized AR type"

v2.6.9

Compare Source

  • Support foreigh key #​241
  • Check if model has skip tag in annotate_model_file #​167
  • Fix issue where serializer-related flags weren't being honored #​246
  • Prefer SQL column type over normalized AR type #​231

v2.6.8

Compare Source

  • Nothing annotated unless options[:model_dir] is specified, #​234

v2.6.7

Compare Source

  • Nothing annotated unless options[:model_dir] is specified, #​234

v2.6.6

Compare Source

  • Makes it possible to wrap annotations, #​225
  • Fix single model generation, #​214
  • Fix default value for Rails 4.2, #​212
  • Don't crash on inherited models in subdirectories, #​232
  • Process model_dir in rake task, #​197
SeleniumHQ/selenium (selenium-webdriver)

v4.47.0

=========================

  • Support CDP versions: v149, v150, v151
  • support WebDriver BiDi on Safari Preview and move #bidi onto Driver (#​17729)
  • link generated BiDi elements to their spec definitions (#​17781)
  • add objectOnly/preserveExtras/scalar-primitive BiDi schema signals (#​17784)
  • construct the BiDi transport inside the domain from a connection (#​17796)
  • route BiDiBridge navigation through the generated Protocol::BrowsingContext (#​17785)
  • resolve spec runfiles via Bazel::Runfiles (#​17810)
  • [build] standardize generated-file license and not to edit markers across generators (#​17816)
  • validate nullable-constant BiDi params outbound (#​17818)
  • [build] upgrade rules_ruby to 0.28.0 and drop vendored Bazel::Runfiles workaround (#​17824)
  • [build] Merge vendor cddl files into shared BiDi schema and implement custom Firefox webExtension options (#​17840)
  • [grid] honor client-advertised se:remoteUrl for reachable BiDi/CDP/VNC URLs (#​17790)
  • tolerate and warn on missing required inbound BiDi fields, with SE_BIDI_STRICT to escalate (#​17844)
  • remove deprecated FTP proxy support (#​17846)
  • prevent CDP access with Firefox (#​17849)
  • test matchers assert log entries by id and optional messages and match severity (#​17848)
  • [bidi] Correct float/enum type fidelity in the shared schema and validate primitives outbound in Ruby (#​17852)
  • [bidi] mark BiDi types extensible per spec and update Ruby handling (#​17853)
  • raise typed WebDriver errors for BiDi from a generated error-code map (#​17855)
  • allow pending test guards to require matching provided exception (#​17859)
  • pass --enable-chrome-logs unless CHROME_LOG_FILE is set (#​17858)
  • support custom vendor specific capabilities in options classes (#​17862)
  • validate BiDi outbound ref fields against their declared type (#​17861)
  • generate BiDi domain type accessors and union variant factories (#​17865)
  • deprecate invalid Firefox profile code (#​17871)
  • [build] Automated Browser Version Update with CDP (#​17873)
castwide/solargraph (solargraph)

v0.60.3

Compare Source

  • Pin rdoc to ~> 7.0 (#​1216)
  • (tag: v0.60.2) Release 0.60.2 (rdoc fix)
  • Fix stale Hash::_Key expectations from upstream RBS core drift (#​1224)
  • Bump overcommit to ~> 0.71.0 (#​1221)
  • Resolve remote constants (#​1234)
  • Fix exponential blowup in Pin::Method#combine_same_type_arity_signatures (#​1238)
  • Respect #- yard comment-block separator (#​1218)
  • Typecheck attribute return tags against their backing ivar's type (#​1219)
  • Fix recursive-mutex deadlock in Library#sync_catalog (#​1220)
  • Fix Gemspecs#in_this_bundle? crash when no Gemfile is discoverable (#​1225)
  • Remove duplicate dead methods in RbsMap::Conversions (#​1253)

v0.60.2

Compare Source

v0.60.1

Compare Source

  • Process macro directives from included and extended modules (#​1210)
  • Flaky pathname issue (#​1211)
  • Check object equality in Pin::Base#nearly? (#​1213)

v0.60.0

Compare Source

  • Add YARD macro support for DSL methods (#​1187)
  • YARD macros - More typecheck fixes (#​1188)
  • Macro fixes (#​1189)
  • Unused macro methods (#​1191)
  • Transitive macros (#​1203)
  • Allow CTRL-C interruption of profile command + macro debug logs (#​1206)
  • Support for Inline RBS (#​1173)
  • Make typechecker errors vim quickfix friendly (#​1072)
  • Generate RBS (#​812)

v0.59.2

Compare Source

  • Convert RBS implicit nil annotations (#​1197)
  • Temporary job stubs (#​1200)
  • Limit pin combination to doc maps (#​1195)
  • Ignore literal values in type inference (#​1201)
  • Fix for clips with flaky node recipients

v0.59.1

Compare Source

  • Fix signatureHelp bug (#​1185)
  • Linting fixes for Ruby 3.1 (#​1193)
  • Parameters shadow local variables with same name (#​1192)

v0.59.0

Compare Source

  • Ensure pathname is required for rbs in shell caching processes (#​1183)
  • Pre-release branch 2026-01-12 (#​1152)
  • 2026-01-27 dev branch (#​1165)
  • Position linting (#​1179)
  • Revert YARD and RBS pin caching (#​1180)
  • Ensure pathname is required for rbs in shell caching processes (#​1183)
  • Limit default include glob to current directory (#​1184)
  • Require Ruby >= 3.1.0
  • Require RBS >= 3.10.0
  • Stub combine_same_type_arity_signatures (#​1186)

v0.58.3

Compare Source

  • Ignore workspace dependencies in cache processes (#​1174)

v0.58.2

Compare Source

  • Avoid rbs pollution (#​1146)
  • Fix 'solargraph pin --references ClassName' private method call (#​1150)
  • Improve memory efficiency of Position class (#​1054)
  • Raise InvalidOffsetError for offsets > text (#​1155)

v0.58.1

Compare Source

  • Normalize line endings to LF (#​1142)

v0.58.0

Compare Source

  • Faster constant resolution (#​1083)
  • [regression] Handle RBS static method aliases (#​1094)
  • More type fills and shims (#​1005)
  • Fix resolution in blocks in type checker (#​890)
  • Annotation fixes for strong typechecking (#​1057)
  • Remove dead code (#​1077)
  • Fix flakey spec (#​1080)
  • Fix bad sexpr generation in op_asgn (#​1089)
  • Opt-in for MFA requirement (#​730)
  • [regression] Fix resolution issues with namespaces from YARD (#​1097)
  • Improve a pin combination case around selfy types (#​1024)
  • Rescue reference errors in hosts (#​1105)
  • Relax bundler runtime dependency version constraint to support newer versions (#​1125)
  • Remove stale Pathname test (#​1135)
  • Enable strong type checking in CI (#​928)
  • Stale sg-ignore
  • Use rbs 3.9.5 in tests (#​1136)
  • Drop broken 'namespaces' method (#​1065)
  • Add ActiveRecord example from RBS (#​1074)
  • Keep workspace directories as absolute paths (#​1076)
  • Handle bad gem_dir from gemspec object (#​1079)
  • Test for absolute require paths (#​1137)
  • [regression] Fix resolution of ambiguous argument types (#​1098)
  • Remove sg-ignore for String#=~ (#​1138)
  • Allow levels to be changed for typechecking rules in .solargraph.yml (#​1126)

v0.57.0

Compare Source

  • Support ActiveSupport::Concern pattern for class methods (#​948)
  • More CI checks (#​996)
  • Linting / type annotation fixes (#​999)
  • Avoid overlapping chdir calls in multiple threads (#​1007)
  • Fix kwarg generation in ApiMap::SourceToYard (#​1003)
  • Enable Steep typechecking of Solargraph code (#​1004)
  • Fix convention requires (#​1008)
  • Plugin Util: Add Combination Priority (#​1010)
  • [regression] Fix crash while typechecking files with Struct use (#​1031)
  • Remove yard reference from gemfile (#​1033)
  • Allow newer RBS gem versions, exclude incompatible ones (#​995)
  • Look for external requires before cataloging bench (#​1021)
  • Remove Library#folding_ranges (#​904)
  • Complain in strong type-checking if an @​sg-ignore line is not needed (#​1011)
  • Document a log level env variable (#​894)
  • Fix hole in type checking evaluation (#​1009)
  • Improve typechecking error message (#​1014)
  • Internal strict type-checking fixes (#​1013)
  • Reproduce and fix a ||= (or-asgn) evaluation issue (#​1017)
  • Define closure for Pin::Symbol, for completeness (#​1027)
  • Fix 'all!' config to reporters (#​1018)
  • Fix DocMap.all_rbs_collection_gems_in_memory return type (#​1037)
  • Fix RuboCop linting errors in regular expressions (#​1038)
  • Resolve class aliases via Constant pins (#​1029)
  • Speed-up LSP completion response times (#​1035)
  • Revert "Resolve class aliases via Constant pins (#​1029)" (#​1041)
  • Avoid stack errors when resolving method aliases (#​1040)
  • [regression] Refine order of object convention method pins (#​1036)
  • Fix crash while generating activesupport pins (#​1043)
  • Type annotation improvements (#​1016)
  • Resolve class aliases via Constant pins (#​1048)
  • Understand "Parser::AST::Node < AST::Node" in RBS (#​1060)
  • Factor out require_paths logic to its own class (#​1062)
  • Fix type errors found in strong typechecking (#​1045)
  • Run plugin specs separately for perf insights (#​1046)
  • Run specs from solargraph-rails configured against current code in CI (#​892)
  • Fix Convention/Plugin pins not being updated on file change (#​1028)
  • Fix solargraph-rails check (#​1073)
  • Flow sensitive typing handles x.is_a? without an argument (#​1070)
  • Refactor reference pin handling (#​1058)

v0.56.2

Compare Source

  • Add support for Ruby Data.define (#​970)
  • Ensure that pin locations are always populated (#​965)
  • Improve struct support (#​992)
  • Include Rakefile, Gemfile, and gemspec files in config by default (#​984)
  • Use Open3 to cache gemspecs (#​1000)
  • Eager load node processors (#​1002)

v0.56.1

Compare Source

  • Library avoids blocking on pending yardoc caches (#​990)
  • DocMap checks for default Gemfile (#​989)
  • [Bug fix] Fixed an error in rbs/fills/tuple.rbs (#​993)

v0.56.0

Compare Source

  • [regression] Gem caching perf and logging fixes #​983

v0.55.5

Compare Source

  • Flatten results of DocMap external bundle query (#​981)
  • [breaking] Reimplement global conventions (#​877)
  • GemPins pin merging improvements (#​946)
  • Support class-scoped aliases and attributes from RBS (#​952)
  • Restructure ComplexType specs towards YARD doc compliance (#​969)
  • Use Prism (#​974)
  • Document pages (#​977)
  • Enable disabled-but-working specs (#​978)
  • Map RBS 'untyped' type (RBS::Types::Bases::Any) to 'undefined' (#​979)
  • Re-enable support for .gem_rbs_collection directories (#​942)
  • [breaking] Comply with YARD documentation on Hash tag format (#​968)
  • Ignore directory paths in Workspace#would_require? (#​988)

v0.55.4

Compare Source

  • Flatten results of DocMap external bundle query (#​981)

v0.55.3

Compare Source

  • Nil guards in flow-sensitive typing (patch release) (#​980)

v0.55.2

Compare Source

  • Require external bundle (#​972)

v0.55.1

Compare Source

  • Fix inline Struct definition (#​962)
  • Ensure DocMap requires bundler when loading gemspecs (#​963)
  • DelegatedMethod improvements (#​953)

v0.55.0

Compare Source

  • Flow-sensitive typing - automatically downcast from is_a? calls (#​856)
  • Tuple enabler: infer literal types and use them for signature selection (#​836)
  • Signature selection improvements (#​907)
  • Add support for Ruby Structs (#​939)
  • [regression] Fix interface change breaking solargraph-rails (#​940)
  • [regression] Add back bundler/require support for solargraph-rails (#​941)
  • Add specs for initialize capabilities (#​955)
  • Create MethodAlias pins from YARD (#​945)
  • MessageWorker prioritizes synchronization (#​956)
  • initialize/new method pin cleanups (#​949)
  • Clip rebinds blocks when cursor is not part of receiver (#​958)

v0.54.5

Compare Source

v0.54.4

Compare Source

v0.54.3

Compare Source

  • Improve inspect()/desc()/to_s() methods for better debugging output (#​913)
  • Fix generic resolution in Hash types (#​906)
  • Stop parsing RBS type parameter constraints as the type name (#​918)
  • Fix pin inference stack (#​922)
  • Refactor pin equality for performance (#​925)
  • Improve ApiMap catalog speed by preserving static pin indexes (#​930)
  • Update jaro_winkler dependency (#​931)

v0.54.2

Compare Source

  • Resolve generics correctly on mixin inclusion (#​898)
  • Pick correct String#split overload (#​905)
  • Fix type sent into YARD method (#​912)
  • Early CancelRequest handling (#​914)
  • Destructure partial yield types (#​915)
  • Dependency versions (#​916)

v0.54.1

Compare Source

  • Retire more RubyVM-specific code (#​797)
  • Add additional docs for key classes, modules and methods (#​802)
  • Populate location information from RBS files (#​768)
  • Consolidate parameter handling into Pin::Callable (#​844)
  • Adjust local variable presence to start after assignment, not before (#​864)
  • Resolve params from ref tags (#​872)
  • Reduce use of ComplexType.parse() to preserve rooted? information (#​870)
  • Ensure yield return types are qualified (#​886)
  • Understand type of 'def foo; @​foo ||= bar; end' reader methods (#​888)
  • Improvements to #inspect output on pins and chains (#​895)
  • Block method resolution improvements (#​885)
  • Understand mass assignment into instance variables (#​893)
  • Library sync and cache invalidation (#​903)
  • Handle super and yield scenarios from blocks (#​891)
  • Allow core and stdlib documentation to be uncached (#​899)
  • Surface variable names in LSP, e.g., textDocument/hover (#​910)
  • Keep idle progress notifications alive (#​911)

v0.54.0

Compare Source

  • Add support for simple block argument destructuring (#​821)
  • Benchmark the typecheck command (#​852)
  • Send Gem Caching Progress Notifications to LSP Clients (#​855)
  • [breaking] Fix more complex_type_spec.rb cases (#​813)
  • Mass assignment support - e.g., a, b = ['1', '2'] (#​843)
  • Memoize result of Chain#infer (#​857)
  • Ignore malformed mixins and overloads (#​862)
  • Drop Parser::ParserGem::ClassMethods#returns_from_node (#​866)
  • Refactor TypeChecker#argument_problems_for for type safety (#​867)
  • Specify more type behavior for variable reassignment (#​863)
  • One-step source synchronization (#​871)
  • Show cache progress in shell commands (#​874)
  • Fix miscellaneous scan errors (#​875)
  • Synchronous libraries (#​876)
  • Fix parsing of Set#classify method signature from RBS (#​878)
  • Sync Library#diagnose (#​882)
  • Doesn't false-alarm over splatted non-final args in typechecking (#​883)
  • Remove accidental inclusion of Module's methods in objects (#​884)
  • Remove another splat-related false alarm in strict typechecking (#​889)
  • Change require path warn to debug (#​897)

v0.53.4

Compare Source

  • [regression] Restore 'Unresolved call' typecheck for stdlib objects (#​849)
  • Lazy dynamic rebinding (#​851)
  • Restore fill for Class#allocate (#​848)
  • [regression] Ensure YardMap gems have return type for Class.new (#​850)
  • Create implicit .new pins in namespace method queries (#​853)

v0.53.3

Compare Source

  • Remove redundant core fills (#​824, #​841)
  • Resolve self type in variable assignments (#​839)
  • Eliminate splat-related false-alarms in strict typechecking (#​840)
  • Dynamic block binding with yieldreceiver (#​842)
  • Resolve generics by descending through context type (#​847)

v0.53.2

Compare Source

  • Fix a self-type-related false-positive in strict typechecking (#​834)
  • DocMap fetches gem dependencies (#​835)
  • Use configured command path to spawn solargraph processes (#​837)

v0.53.1

Compare Source

  • Reject nil requires in live code (#​831)
  • RbsMap adds mixins to current namespace (#​832)

v0.53.0

Compare Source

  • Fix crash on generic methods (#​762)
  • Add more type annotations to the codebase (#​763 et al.)
  • Address remaining typecheck issues at 'typed' level and add CI task (#​764)
  • Fix crash during strict typechecking (#​766)
  • DeepInference: Fix some bugs, add docs, refactor (#​767)
  • Include "self type" methods like Enumerable#each from RBS files (#​769)
  • Handle RBS global, module alias, class variable and class instance variable declarations (#​770)
  • Add support for generic includes via RBS (#​773)
  • Handle parsing tuples of tuples in tags (#​775)
  • Retire the RubyVM parser (#​776)
  • Improve block handling in signature selection (#​780)
  • Require Ruby >= 3 (#​791)
  • Cache YARD and RBS (#​781)
    • Language server generates gem documentation in the background
  • Fix bug handling Array(A, B) syntax while resolving generics (#​784)
  • Fix typeDefinitions for neovim (#​792)
  • Infer block-pass symbols (#​793)
  • Add #to_rbs methods to pins, use for better .inspect() output (#​789)
  • Remove deprecated commands (#​790)
  • Add :if support to NodeChainer for if statements as lvalues (#​805)
  • Fix ApiMap::Cache (#​806)
  • Map mixins from RBS (#​808)
  • Fix issue with wrong signature selection by call with block node (#​815)
  • Keep gem pins in memory (#​811)
  • Refactor gems command (#​816)
  • Use return type of literal blocks in inference (#​818)
  • Insert Module methods (#​820)
  • Revise documentation formatting (#​823)

v0.52.0

Compare Source

  • Chains resolve identical names with different contexts (#​679)
  • Handle symbol tags in method tag values (#​744)
  • Infer more specific Array types when possible (#​745)
  • Handle interpolated symbol literals (#​747)
  • Handle combined conditions, else clauses in case statements (#​746)
  • fix: support find require xxx.rb in local workspace. (#​722)
  • Don't require redundant attribute @​return and @​param tags (#​748)
  • Use @​yieldreturn tags for type inference (#​749)
  • Fix type annotations identified at 'typed' level (#​750)
  • Support RBS class aliases (#​751)
  • Better support for generics via Class @​param tags (#​743)
  • Generic module support through RBS (#​757)
  • Fix inference of begin expression types (#​754)
  • Add argument to satisfy typechecker on which signature to use (#​755)
  • Fix RBS ingestion implicit initializer issues, missing param types (#​756)
  • Validate zsuper arity
  • Use yard-solargraph plugin (#​759)
  • Add missing RBS types

v0.51.2

Compare Source

  • Fix exception from parser when anonymous block forwarding is used (#​740)
  • Parameterized Object types
  • Remove extraneous comment from method examples

v0.51.1

Compare Source

  • Format example code
  • Block infers yieldreceiver from chain

v0.51.0

Compare Source

  • Resolve self in yieldreceiver tags
  • Include absolute paths in config (#​674)
  • Enable diagnostics by default
  • Fix cache resolution (#​704)
  • Modify rubocop option for rubocop < 1.30 (#​665)
  • Include absolute paths in config (#​674)
  • Enable diagnostics by default
  • Remove RSpec convention (#​716)
  • Include convention pins in document_symbols (#​724)
  • Implement Go To Type Definition (#​717)
  • Remove e2mmap dependency (#​699)
  • Update rbs to 3.0
  • Relax reverse_markdown dependency (#​729)
  • Fix Ruby 3.4 and move all parsing to whitequark (#​739)
  • Add Pin::DelegatedMethod (#​602)
  • Complete global methods from a file inside namespaces (#​714)
  • gemspec dashes and required path slashes (#​697)

v0.50.0

Compare Source

  • Remove .travis.yml as its not longer used (#​627)
  • Fix empty string case when processing requires (#​644)
  • Fix scope() method call on wrong object (#​670)
  • Parse comments that start with multiple hashes (#​667)
  • Use XDG_CACHE_HOME if it exists (#​664)
  • Add rbs mention to readme (#​693)
  • Remove Atom from the readme (#​692)
  • Add more metadata to the gemspec (#​691)
  • Do not deprecate clear command
  • Library#locate_ref returns nil for unresolved requires (#​675)
  • Hide deprecated commands
  • List command
  • Fixes (or ignores) ffi crash (#​676)
  • increase sleep time on cataloger (#​677)
  • YardMap ignores absolute paths (#​678)
  • Clarify macros vs. directives
  • Infer complex types from method calls
  • Default cache uses XDG_CACHE_HOME default (#​664)

v0.49.0

Compare Source

  • Better union type handling
  • First version of RBS support
  • Dependency updates
  • Update RuboCop config options
  • RBS core and stdlib mapping
  • Anonymous splats and multisig arity
  • Infinite loop when checking if a class is a superclass (#​641)
sparklemotion/sqlite3-ruby (sqlite3)

v2.9.6

Compare Source

Security / Stability
  • Fix a garbage collection bug where the argument array passed to a custom aggregate function's step was not visible to the GC, so arguments could be collected mid-conversion when the aggregate takes two or more arguments, corrupting the values passed to step or crashing the process. See GHSA-mwm8-39rw-8826 for more information. #​733 @​jeremy
Fixed
  • Fix a leak where custom aggregate handler instances were never released, so a connection accumulated one instance per GROUP BY group per query for its lifetime. #​722 @​djmb
  • Fix GC compaction issues with custom functions, aggregates, collations, #trace and #authorizer=. These callbacks were registered with sqlite by passing a raw Ruby object pointer as user data; keeping the object reachable prevented collection but not relocation, after which sqlite held a stale address and the next call could raise NoMethodError, return a wrong result, or segfault. Affects applications that call GC.compact or run with GC.auto_compact = true. The equivalent issue in #busy_handler was fixed in #​466. #​723 @​djmb
  • Fix the private methods Database#open_v2 and #open16 silently replacing a live connection and leaking the previous connection handle when invoked via send on an open database. They now raise SQLite3::Exception. #​729 @​flavorjones
  • Fix TEXT values containing an embedded NUL byte being truncated at the first NUL when passed as arguments to functions created with Database#define_function. #​730 @​flavorjones
  • Fix an exception raised inside a Database#define_function block leaving the connection's sqlite mutex held, which deadlocked any other thread that later used the connection. The exception now propagates to the caller and the connection remains usable. #​731 @​flavorjones
  • Database.new now raises ArgumentError when the filename or VFS name contains an embedded NUL byte (or an embedded 0x0000 code unit in a UTF-16 filename), instead of silently opening

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

github-actions Bot commented Aug 24, 2026

Copy link
Copy Markdown

Container Scanning Status: ❌ Failure

NAME           INSTALLED                FIXED IN          TYPE  VULNERABILITY        SEVERITY    EPSS         RISK   
json           2.18.0                   2.19.2            gem   GHSA-3m6g-2423-7cp3  High        0.9% (55th)  0.7    
immutable      5.1.5                    5.1.8             npm   GHSA-xvcm-6775-5m9r  High        0.4% (36th)  0.3    
immutable      5.1.5                    5.1.8             npm   GHSA-v56q-mh7h-f735  High        0.4% (36th)  0.3    
picomatch      4.0.3                    4.0.4             npm   GHSA-c2c7-rcm5-vvqj  High        0.4% (33rd)  0.3    
postcss        8.5.13                   8.5.18            npm   GHSA-r28c-9q8g-f849  High        0.4% (30th)  0.3    
addressable    2.8.10                   2.9.0             gem   GHSA-h27x-rffw-24p4  High        0.4% (29th)  0.3    
nanoid         3.3.12                   3.3.16            npm   GHSA-28wg-ghj8-5hjv  High        0.3% (26th)  0.2    
nanoid         3.3.12                   3.3.18            npm   GHSA-2v37-7h3g-55p8  High        0.3% (24th)  0.2    
nanoid         3.3.16                   3.3.18            npm   GHSA-2v37-7h3g-55p8  High        0.3% (24th)  0.2    
picomatch      4.0.3                    4.0.4             npm   GHSA-3v7f-55p6-f55p  Medium      0.4% (34th)  0.2    
postcss        8.5.13                   8.5.23            npm   GHSA-fxqj-rqcc-2cmp  Medium      0.3% (24th)  0.2    
json           2.18.0                   2.19.9            gem   GHSA-x2f5-4prf-w687  Low         0.3% (22nd)  0.1    
bsdutils       1:2.41-5                 2.41.5-0+deb13u1  deb   CVE-2026-27456       Medium      0.1% (2nd)   < 0.1  
libblkid1      2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-27456       Medium      0.1% (2nd)   < 0.1  
liblastlog2-2  2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-27456       Medium      0.1% (2nd)   < 0.1  
libmount1      2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-27456       Medium      0.1% (2nd)   < 0.1  
libsmartcols1  2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-27456       Medium      0.1% (2nd)   < 0.1  
libuuid1       2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-27456       Medium      0.1% (2nd)   < 0.1  
login          1:4.16.0-2+really2.41-5  2.41.5-0+deb13u1  deb   CVE-2026-27456       Medium      0.1% (2nd)   < 0.1  
mount          2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-27456       Medium      0.1% (2nd)   < 0.1  
util-linux     2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-27456       Medium      0.1% (2nd)   < 0.1  
bsdutils       1:2.41-5                 2.41.5-0+deb13u1  deb   CVE-2026-13595       Medium      0.1% (1st)   < 0.1  
libblkid1      2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-13595       Medium      0.1% (1st)   < 0.1  
liblastlog2-2  2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-13595       Medium      0.1% (1st)   < 0.1  
libmount1      2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-13595       Medium      0.1% (1st)   < 0.1  
libsmartcols1  2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-13595       Medium      0.1% (1st)   < 0.1  
libuuid1       2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-13595       Medium      0.1% (1st)   < 0.1  
login          1:4.16.0-2+really2.41-5  2.41.5-0+deb13u1  deb   CVE-2026-13595       Medium      0.1% (1st)   < 0.1  
mount          2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-13595       Medium      0.1% (1st)   < 0.1  
util-linux     2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-13595       Medium      0.1% (1st)   < 0.1  
bsdutils       1:2.41-5                 2.41.3-1          deb   CVE-2025-14104       Negligible  0.2% (9th)   < 0.1  
libblkid1      2.41-5                   2.41.3-1          deb   CVE-2025-14104       Negligible  0.2% (9th)   < 0.1  
liblastlog2-2  2.41-5                   2.41.3-1          deb   CVE-2025-14104       Negligible  0.2% (9th)   < 0.1  
libmount1      2.41-5                   2.41.3-1          deb   CVE-2025-14104       Negligible  0.2% (9th)   < 0.1  
libsmartcols1  2.41-5                   2.41.3-1          deb   CVE-2025-14104       Negligible  0.2% (9th)   < 0.1  
libuuid1       2.41-5                   2.41.3-1          deb   CVE-2025-14104       Negligible  0.2% (9th)   < 0.1  
login          1:4.16.0-2+really2.41-5  2.41.3-1          deb   CVE-2025-14104       Negligible  0.2% (9th)   < 0.1  
mount          2.41-5                   2.41.3-1          deb   CVE-2025-14104       Negligible  0.2% (9th)   < 0.1  
util-linux     2.41-5                   2.41.3-1          deb   CVE-2025-14104       Negligible  0.2% (9th)   < 0.1  
bsdutils       1:2.41-5                 2.41.5-0+deb13u1  deb   CVE-2026-53612       Unknown     N/A          N/A    
bsdutils       1:2.41-5                 2.41.5-0+deb13u1  deb   CVE-2026-53613       Unknown     N/A          N/A    
bsdutils       1:2.41-5                 2.41.5-0+deb13u1  deb   CVE-2026-53614       Unknown     N/A          N/A    
bsdutils       1:2.41-5                 2.41.5-0+deb13u1  deb   CVE-2026-53615       Unknown     N/A          N/A    
libblkid1      2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53612       Unknown     N/A          N/A    
libblkid1      2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53613       Unknown     N/A          N/A    
libblkid1      2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53614       Unknown     N/A          N/A    
libblkid1      2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53615       Unknown     N/A          N/A    
liblastlog2-2  2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53612       Unknown     N/A          N/A    
liblastlog2-2  2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53613       Unknown     N/A          N/A    
liblastlog2-2  2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53614       Unknown     N/A          N/A    
liblastlog2-2  2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53615       Unknown     N/A          N/A    
libmount1      2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53612       Unknown     N/A          N/A    
libmount1      2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53613       Unknown     N/A          N/A    
libmount1      2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53614       Unknown     N/A          N/A    
libmount1      2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53615       Unknown     N/A          N/A    
libsmartcols1  2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53612       Unknown     N/A          N/A    
libsmartcols1  2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53613       Unknown     N/A          N/A    
libsmartcols1  2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53614       Unknown     N/A          N/A    
libsmartcols1  2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53615       Unknown     N/A          N/A    
libuuid1       2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53612       Unknown     N/A          N/A    
libuuid1       2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53613       Unknown     N/A          N/A    
libuuid1       2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53614       Unknown     N/A          N/A    
libuuid1       2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53615       Unknown     N/A          N/A    
login          1:4.16.0-2+really2.41-5  2.41.5-0+deb13u1  deb   CVE-2026-53612       Unknown     N/A          N/A    
login          1:4.16.0-2+really2.41-5  2.41.5-0+deb13u1  deb   CVE-2026-53613       Unknown     N/A          N/A    
login          1:4.16.0-2+really2.41-5  2.41.5-0+deb13u1  deb   CVE-2026-53614       Unknown     N/A          N/A    
login          1:4.16.0-2+really2.41-5  2.41.5-0+deb13u1  deb   CVE-2026-53615       Unknown     N/A          N/A    
mount          2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53612       Unknown     N/A          N/A    
mount          2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53613       Unknown     N/A          N/A    
mount          2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53614       Unknown     N/A          N/A    
mount          2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53615       Unknown     N/A          N/A    
util-linux     2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53612       Unknown     N/A          N/A    
util-linux     2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53613       Unknown     N/A          N/A    
util-linux     2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53614       Unknown     N/A          N/A    
util-linux     2.41-5                   2.41.5-0+deb13u1  deb   CVE-2026-53615       Unknown     N/A          N/A

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants