Browse Source

Bump rack from 3.1.16 to 3.1.17 uri from 1.0.3 to 1.0.4 (#3113)

* Bump rack from 3.1.16 to 3.1.17

Bumps [rack](https://github.com/rack/rack) from 3.1.16 to 3.1.17.
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rack/rack/compare/v3.1.16...v3.1.17)

---
updated-dependencies:
- dependency-name: rack
  dependency-version: 3.1.17
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump uri from 1.0.3 to 1.0.4

https://www.ruby-lang.org/en/news/2025/10/07/uri-cve-2025-61594/

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Samuel Young <samuel.young@softwire.com>
pull/3115/head
dependabot[bot] 2 months ago committed by GitHub
parent
commit
1b41187a03
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
  1. 4
      Gemfile.lock

4
Gemfile.lock

@ -343,7 +343,7 @@ GEM
activesupport (>= 3.0.0)
raabro (1.4.0)
racc (1.8.1)
rack (3.1.16)
rack (3.1.17)
rack-attack (6.7.0)
rack (>= 1.0, < 4)
rack-mini-profiler (3.3.1)
@ -511,7 +511,7 @@ GEM
unicode-display_width (2.5.0)
unread (0.14.0)
activerecord (>= 6.1)
uri (1.0.3)
uri (1.0.4)
useragent (0.16.11)
view_component (3.10.0)
activesupport (>= 5.2.0, < 8.0)

Loading…
Cancel
Save