andylockran/andylockran.github.io

Watch

Fork 0

Bump the bundler group across 1 directory with 5 updates #4

Open

dependabot[bot] wants to merge 1 commit from dependabot/bundler/bundler-4285362153 into main

dependabot[bot] commented

2026-10-12 19:27:02 +00:00

(Migrated from github.com)

Bumps the bundler group with 5 updates in the / directory:

Package	From	To
addressable	`2.8.6`	`2.9.0`
concurrent-ruby	`1.2.2`	`1.3.7`
google-protobuf	`3.25.1`	`3.25.5`
rexml	`3.2.8`	`3.4.2`
webrick	`1.8.1`	`1.8.2`

Updates addressable from 2.8.6 to 2.9.0

Changelog

Sourced from addressable's changelog.

Addressable 2.9.0

fixes ReDoS vulnerability in Addressable::Template#match (fixes incomplete remediation in 2.8.10)

Addressable 2.8.10

fixes ReDoS vulnerability in Addressable::Template#match

Addressable 2.8.9

Reduce gem size by excluding test files (#569)

No need for bundler as development dependency (#571, 5fc1d93)

idna/pure: stop building the useless COMPOSITION_TABLE (removes the Addressable::IDNA::COMPOSITION_TABLE constant) (#564)

#569: sporkmonger/addressable#569 #571: sporkmonger/addressable#571 #564: sporkmonger/addressable#564

Addressable 2.8.8

Replace the unicode.data blob by a ruby constant (#561)

Allow public_suffix 7 (#558)

#561: sporkmonger/addressable#561 #558: sporkmonger/addressable#558

Addressable 2.8.7

Allow public_suffix 6 (#535)

#535: sporkmonger/addressable#535

Commits

0c3e858 Revving version and changelog
91915c1 Fixing additional vulnerable paths
a091e39 Add many more adversarial test cases to ensure we don't have any ReDoS regres...
463a819 Regenerate gemspec on newer rubygems
0afcb0b Improve from O(n^2) to O(n)
c87f768 Fix a ReDoS vulnerability in URI template matching
0d7e9b2 Fix links for 2.8.9 in CHANGELOG (#573)
e209120 Update version, gemspec, and CHANGELOG for 2.8.9 (#572)
3875874 Reduce gem size by excluding test files (#569)
3e57cc6 CI: back to windows-2022 for MRI job
Additional commits viewable in compare view

Updates concurrent-ruby from 1.2.2 to 1.3.7

Release notes

Sourced from concurrent-ruby's releases.

v1.3.7

There are 3 security fixes in this release, so updating is recommended. These security vulnerabilities are not very likely to be hit in practice and have a corresponding Low severity score.

What's Changed

CVE-2026-54904 AtomicReference#update livelocks when the stored value is Float::NAN. Fix by @joshuay03 and @eregon

CVE-2026-54905 ReentrantReadWriteLock read-count overflow grants a write lock without exclusivity. Fix by @joshuay03

CVE-2026-54906 ReadWriteLock allows wrong-thread write release and stray read-release counter corruption. Fix by @joshuay03

concurrent-ruby-ext: fix build on Darwin 32-bit by @barracuda156 in ruby-concurrency/concurrent-ruby#1064

Add SECURITY.md by @eregon in ruby-concurrency/concurrent-ruby#1104

Add Ruby 4.0 in CI by @eregon in ruby-concurrency/concurrent-ruby#1106

New Contributors

@barracuda156 made their first contribution in ruby-concurrency/concurrent-ruby#1064

Full Changelog: https://github.com/ruby-concurrency/concurrent-ruby/compare/v1.3.6...v1.3.7

v1.3.6

What's Changed

Run tests without the C extension in CI by @eregon in ruby-concurrency/concurrent-ruby#1081

Fix typo in Promise docs by @danieldiekmeier in ruby-concurrency/concurrent-ruby#1083

Correct word in readme by @wwahammy in ruby-concurrency/concurrent-ruby#1084

Fix mistakes in MVar documentation by @trinistr in ruby-concurrency/concurrent-ruby#1087

Fix multi require concurrent/executor/cached_thread_pool by @OuYangJinTing in ruby-concurrency/concurrent-ruby#1085

Use typed data APIs by @nobu in ruby-concurrency/concurrent-ruby#1096

Add Joshua Young to the list of maintainers by @eregon in ruby-concurrency/concurrent-ruby#1097

Asynchronous pruning for RubyThreadPoolExecutor by @joshuay03 in ruby-concurrency/concurrent-ruby#1082

Mark RubySingleThreadExecutor as a SerialExecutorService by @meineerde in ruby-concurrency/concurrent-ruby#1070

Allow TimerTask to be safely restarted after shutdown and avoid duplicate tasks by @bensheldon in ruby-concurrency/concurrent-ruby#1001

Flaky test fix: allow ThreadPool to shutdown before asserting completed_task_count by @bensheldon in ruby-concurrency/concurrent-ruby#1098

ThreadPoolExecutor#kill will wait_for_termination in JRuby; ensure TimerSet timer thread shuts down cleanly by @bensheldon in ruby-concurrency/concurrent-ruby#1044

New Contributors

@danieldiekmeier made their first contribution in ruby-concurrency/concurrent-ruby#1083

@wwahammy made their first contribution in ruby-concurrency/concurrent-ruby#1084

@trinistr made their first contribution in ruby-concurrency/concurrent-ruby#1087

@OuYangJinTing made their first contribution in ruby-concurrency/concurrent-ruby#1085

@nobu made their first contribution in ruby-concurrency/concurrent-ruby#1096

@joshuay03 made their first contribution in ruby-concurrency/concurrent-ruby#1082

Full Changelog: https://github.com/ruby-concurrency/concurrent-ruby/compare/v1.3.5...v1.3.6

... (truncated)

Changelog

Sourced from concurrent-ruby's changelog.

Release v1.3.7 (16 June 2026)

concurrent-ruby:

See the release notes on GitHub.

Release v1.3.6 (13 December 2025)

concurrent-ruby:

See the release notes on GitHub.

Release v1.3.5, edge v0.7.2 (15 January 2025)

concurrent-ruby:

(#1062) Remove dependency on logger.

concurrent-ruby-edge:

(#1062) Remove dependency on logger.

Release v1.3.4 (10 August 2024)

(#1060) Fix bug with return value of Concurrent.available_processor_count when cpu.cfs_quota_us is -1.

(#1058) Add Concurrent.cpu_shares that is cgroups aware.

Release v1.3.3 (9 June 2024)

(#1053) Improve the speed of Concurrent.physical_processor_count on Windows.

Release v1.3.2, edge v0.7.1 (7 June 2024)

concurrent-ruby:

(#1051) Remove dependency on win32ole.

concurrent-ruby-edge:

(#1052) Fix dependency on concurrent-ruby to allow the latest release.

Release v1.3.1 (29 May 2024)

Release 1.3.0 was broken when pushed to RubyGems. 1.3.1 is a packaging fix.

Release v1.3.0 (28 May 2024)

(#1042) Align Java Executor Service behavior for shuttingdown?, shutdown?

(#1038) Add Concurrent.available_processor_count that is cgroups aware.

... (truncated)

Commits

4c8fc28 Release 1.3.7
d91ca94 Fix AtomicReference#update livelock when stored value is Float::NAN on JRuby ...
7e4d711 Fix ReentrantReadWriteLock read hold overflow into write-lock bit
6e37e06 Fix AtomicReference#update livelock when stored value is Float::NAN
2825cfa Cleanup spec
3fd4932 Fix ReadWriteLock wrong-thread write release and stray read release
1974b47 Add Ruby 4.0 in CI
df8706d Add SECURITY.md (#1104)
7a1b789 Bump actions/upload-pages-artifact from 4 to 5
9b2dbf7 Bump actions/deploy-pages from 4 to 5
Additional commits viewable in compare view

Updates google-protobuf from 3.25.1 to 3.25.5

Commits

70e85ae Updating version.json and repo version numbers to: 25.5-dev
489aba5 Merge pull request #15984 from mkruskal-google/staleness-fix-25
367c7be Regen stale files
bbbd2de Updating version.json and repo version numbers to: 25.4-dev
fc222b9 Updating version.json and repo version numbers to: 25.3-dev
6ac0447 Updating version.json and repo version numbers to: 25.2-dev
See full diff in compare view

Updates rexml from 3.2.8 to 3.4.2

Release notes

Sourced from rexml's releases.

REXML 3.4.2 - 2025-08-26

Improvement

Improved performance.

GH-244

GH-245

GH-246

GH-249

GH-256

Patch by NAITOH Jun

Raise appropriate exception when failing to match start tag in DOCTYPE

GH-247

Patch by NAITOH Jun

Deprecate accepting array as an element in XPath.match, first and each

GH-252

Patch by tomoya ishida

Don't call needless encoding_updated

GH-259

Patch by Sutou Kouhei

Reuse XPath::match

GH-263

Patch by pboling

Cache redundant calls for doctype

GH-264

Patch by pboling

Use Safe Navigation (&.) from Ruby 2.3

GH-265

Patch by pboling

Remove redundant return statements

GH-266

Patch by pboling

Added XML declaration check & Source#skip_spaces method

GH-282

Patch by NAITOH Jun

Reported by Sofi Aberegg

Fixes

Fix docs typo

GH-248

Patch by James Coleman

... (truncated)

Changelog

Sourced from rexml's changelog.

3.4.2 - 2025-08-26 {#version-3-4-2}

Improvement

Improved performance.

GH-244

GH-245

GH-246

GH-249

GH-256

Patch by NAITOH Jun

Raise appropriate exception when failing to match start tag in DOCTYPE

GH-247

Patch by NAITOH Jun

Deprecate accepting array as an element in XPath.match, first and each

GH-252

Patch by tomoya ishida

Don't call needless encoding_updated

GH-259

Patch by Sutou Kouhei

Reuse XPath::match

GH-263

Patch by pboling

Cache redundant calls for doctype

GH-264

Patch by pboling

Use Safe Navigation (&.) from Ruby 2.3

GH-265

Patch by pboling

Remove redundant return statements

GH-266

Patch by pboling

Added XML declaration check & Source#skip_spaces method

GH-282

Patch by NAITOH Jun

Reported by Sofi Aberegg

Fixes

Fix docs typo

GH-248

Patch by James Coleman

... (truncated)

Commits

f36916f Add 3.4.2 entry (#284)
5859bde Added XML declaration check & Source#skip_spaces method (#282)
1d876e3 Bump actions/checkout from 4 to 5 (#283)
c87bda8 Remove ostruct from dev deps (#281)
c60ae02 Remove bundler from dev deps (#277)
9b084d7 Fix & Deprecate REXML::Text#text_indent (#275)
04a589a Fix a bug that XPath can't be used for no document element (#268)
66232ea Remove redundant return statements (#266)
63f3e97 Use Safe Navigation (&.) from Ruby 2.3 (#265)
d427fc5 Avoid redundant calls for doctype (#264)
Additional commits viewable in compare view

Updates webrick from 1.8.1 to 1.8.2

Release notes

Sourced from webrick's releases.

v1.8.2

What's Changed

Drop commented-out line by @olleolleolle in ruby/webrick#108

Add Ruby 3.1 & 3.2 to CI matrix by @tricknotes in ruby/webrick#109

Fix/redos by @ooooooo-q in ruby/webrick#114

Raise HTTPStatus::BadRequest for requests with invalid/duplicate content-length headers by @jeremyevans in ruby/webrick#120

Bump actions/checkout from 3 to 4 by @dependabot in ruby/webrick#121

Improve CI by @hsbt in ruby/webrick#123

Fix WEBrick::TestFileHandler#test_short_filename test not working on mswin by @KJTsanaktsidis in ruby/webrick#128

Fix bug chunk extension detection by @jeremyevans in ruby/webrick#125

Fix CI. by @ioquatix in ruby/webrick#131

Merge multiple cookie headers, preserving semantic correctness. by @ioquatix in ruby/webrick#130

Test on macos-latest by @byroot in ruby/webrick#132

Require CRLF line endings in request line and headers by @jeremyevans in ruby/webrick#138

Prefer squigly heredocs. by @ioquatix in ruby/webrick#143

Only strip space and horizontal tab in headers by @jeremyevans in ruby/webrick#141

Treat missing CRLF separator after headers as an EOFError by @jeremyevans in ruby/webrick#142

Return 400 response for chunked requests with unexpected data after chunk by @jeremyevans in ruby/webrick#136

Fix reference to URI::REGEXP::PATTERN::HOST by @casperisfine in ruby/webrick#144

Prevent request smuggling by @jeremyevans in ruby/webrick#146

New Contributors

@tricknotes made their first contribution in ruby/webrick#109

@ooooooo-q made their first contribution in ruby/webrick#114

@KJTsanaktsidis made their first contribution in ruby/webrick#128

@byroot made their first contribution in ruby/webrick#132

@casperisfine made their first contribution in ruby/webrick#144

Full Changelog: https://github.com/ruby/webrick/compare/v1.8.1...v1.8.2

Commits

0fb9de6 Bump up v1.8.2
b9a4c81 Removed trailing spaces
f5faca9 Prevent request smuggling
0c600e1 Fix reference to URI::REGEXP::PATTERN::HOST
15a9391 Return 400 response for chunked requests with unexpected data after chunk
2b38d56 Treat missing CRLF separator after headers as an EOFError
e4efb4a Remove unnecessary gsub calls in test_httprequest.rb
426e214 Only strip space and horizontal tab in headers
e72cb69 Prefer squigly heredocs. (#143)
ee60354 Require CRLF line endings in request line and headers
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the bundler group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [addressable](https://github.com/sporkmonger/addressable) | `2.8.6` | `2.9.0` | | [concurrent-ruby](https://github.com/ruby-concurrency/concurrent-ruby) | `1.2.2` | `1.3.7` | | [google-protobuf](https://github.com/protocolbuffers/protobuf) | `3.25.1` | `3.25.5` | | [rexml](https://github.com/ruby/rexml) | `3.2.8` | `3.4.2` | | [webrick](https://github.com/ruby/webrick) | `1.8.1` | `1.8.2` | Updates `addressable` from 2.8.6 to 2.9.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sporkmonger/addressable/blob/main/CHANGELOG.md">addressable's changelog</a>.</em></p> <blockquote> <h2>Addressable 2.9.0 </h2> <ul> <li>fixes ReDoS vulnerability in Addressable::Template#match (fixes incomplete remediation in 2.8.10)</li> </ul> <h2>Addressable 2.8.10 </h2> <ul> <li>fixes ReDoS vulnerability in Addressable::Template#match</li> </ul> <h2>Addressable 2.8.9 </h2> <ul> <li>Reduce gem size by excluding test files (<a href="https://redirect.github.com/sporkmonger/addressable/issues/569">#569</a>)</li> <li>No need for bundler as development dependency (<a href="https://redirect.github.com/sporkmonger/addressable/issues/571">#571</a>, <a href="https://github.com/sporkmonger/addressable/commit/5fc1d93">5fc1d93</a>)</li> <li>idna/pure: stop building the useless <code>COMPOSITION_TABLE</code> (removes the <code>Addressable::IDNA::COMPOSITION_TABLE</code> constant) (<a href="https://redirect.github.com/sporkmonger/addressable/issues/564">#564</a>)</li> </ul> <p><a href="https://redirect.github.com/sporkmonger/addressable/issues/569">#569</a>: <a href="https://redirect.github.com/sporkmonger/addressable/pull/569">sporkmonger/addressable#569</a> <a href="https://redirect.github.com/sporkmonger/addressable/issues/571">#571</a>: <a href="https://redirect.github.com/sporkmonger/addressable/pull/571">sporkmonger/addressable#571</a> <a href="https://redirect.github.com/sporkmonger/addressable/issues/564">#564</a>: <a href="https://redirect.github.com/sporkmonger/addressable/pull/564">sporkmonger/addressable#564</a></p> <h2>Addressable 2.8.8 </h2> <ul> <li>Replace the <code>unicode.data</code> blob by a ruby constant (<a href="https://redirect.github.com/sporkmonger/addressable/issues/561">#561</a>)</li> <li>Allow <code>public_suffix</code> 7 (<a href="https://redirect.github.com/sporkmonger/addressable/issues/558">#558</a>)</li> </ul> <p><a href="https://redirect.github.com/sporkmonger/addressable/issues/561">#561</a>: <a href="https://redirect.github.com/sporkmonger/addressable/pull/561">sporkmonger/addressable#561</a> <a href="https://redirect.github.com/sporkmonger/addressable/issues/558">#558</a>: <a href="https://redirect.github.com/sporkmonger/addressable/pull/558">sporkmonger/addressable#558</a></p> <h2>Addressable 2.8.7 </h2> <ul> <li>Allow <code>public_suffix</code> 6 (<a href="https://redirect.github.com/sporkmonger/addressable/issues/535">#535</a>)</li> </ul> <p><a href="https://redirect.github.com/sporkmonger/addressable/issues/535">#535</a>: <a href="https://redirect.github.com/sporkmonger/addressable/pull/535">sporkmonger/addressable#535</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sporkmonger/addressable/commit/0c3e8589b23d4402903a9b4e1fdeba4e43c52ca4"><code>0c3e858</code></a> Revving version and changelog</li> <li><a href="https://github.com/sporkmonger/addressable/commit/91915c1f7aafa3e2c9f42e2f4e21d948c7a861b8"><code>91915c1</code></a> Fixing additional vulnerable paths</li> <li><a href="https://github.com/sporkmonger/addressable/commit/a091e39ff02fc321b21dea3a0df585bef2ba3744"><code>a091e39</code></a> Add many more adversarial test cases to ensure we don't have any ReDoS regres...</li> <li><a href="https://github.com/sporkmonger/addressable/commit/463a819665a3b85ce5ce894c90bd7bfa3b9d2e15"><code>463a819</code></a> Regenerate gemspec on newer rubygems</li> <li><a href="https://github.com/sporkmonger/addressable/commit/0afcb0b9672bee301e5e96ed850fec05b2fcabb0"><code>0afcb0b</code></a> Improve from O(n^2) to O(n)</li> <li><a href="https://github.com/sporkmonger/addressable/commit/c87f768f22ab00376ed2f8cb106f59c9d0652d3a"><code>c87f768</code></a> Fix a ReDoS vulnerability in URI template matching</li> <li><a href="https://github.com/sporkmonger/addressable/commit/0d7e9b259fb0940d1a85064b04f678a7984409a5"><code>0d7e9b2</code></a> Fix links for 2.8.9 in CHANGELOG (<a href="https://redirect.github.com/sporkmonger/addressable/issues/573">#573</a>)</li> <li><a href="https://github.com/sporkmonger/addressable/commit/e2091200b31553f19248eb871f071852409796f8"><code>e209120</code></a> Update version, gemspec, and CHANGELOG for 2.8.9 (<a href="https://redirect.github.com/sporkmonger/addressable/issues/572">#572</a>)</li> <li><a href="https://github.com/sporkmonger/addressable/commit/387587492b6536748ed12a11c3fdb44a48885f28"><code>3875874</code></a> Reduce gem size by excluding test files (<a href="https://redirect.github.com/sporkmonger/addressable/issues/569">#569</a>)</li> <li><a href="https://github.com/sporkmonger/addressable/commit/3e57cc6018f94231aabb47fd341acd1b40f1e71a"><code>3e57cc6</code></a> CI: back to <code>windows-2022</code> for MRI job</li> <li>Additional commits viewable in <a href="https://github.com/sporkmonger/addressable/compare/addressable-2.8.6...addressable-2.9.0">compare view</a></li> </ul> </details> <br /> Updates `concurrent-ruby` from 1.2.2 to 1.3.7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/ruby-concurrency/concurrent-ruby/releases">concurrent-ruby's releases</a>.</em></p> <blockquote> <h2>v1.3.7</h2>  <p>There are 3 security fixes in this release, so updating is recommended. These security vulnerabilities are not very likely to be hit in practice and have a corresponding <code>Low</code> severity score.</p>  <h2>What's Changed</h2> <ul> <li><a href="https://github.com/ruby-concurrency/concurrent-ruby/security/advisories/GHSA-h8w8-99g7-qmvj">CVE-2026-54904</a> <code>AtomicReference#update</code> livelocks when the stored value is <code>Float::NAN</code>. Fix by <a href="https://github.com/joshuay03"><code>@joshuay03</code></a> and <a href="https://github.com/eregon"><code>@eregon</code></a></li> <li><a href="https://github.com/ruby-concurrency/concurrent-ruby/security/advisories/GHSA-wv3x-4vxv-whpp">CVE-2026-54905</a> <code>ReentrantReadWriteLock</code> read-count overflow grants a write lock without exclusivity. Fix by <a href="https://github.com/joshuay03"><code>@joshuay03</code></a></li> <li><a href="https://github.com/ruby-concurrency/concurrent-ruby/security/advisories/GHSA-6wx8-w4f5-wwcr">CVE-2026-54906</a> <code>ReadWriteLock</code> allows wrong-thread write release and stray read-release counter corruption. Fix by <a href="https://github.com/joshuay03"><code>@joshuay03</code></a></li> <li>concurrent-ruby-ext: fix build on Darwin 32-bit by <a href="https://github.com/barracuda156"><code>@barracuda156</code></a> in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1064">ruby-concurrency/concurrent-ruby#1064</a></li> <li>Add SECURITY.md by <a href="https://github.com/eregon"><code>@eregon</code></a> in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1104">ruby-concurrency/concurrent-ruby#1104</a></li> <li>Add Ruby 4.0 in CI by <a href="https://github.com/eregon"><code>@eregon</code></a> in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1106">ruby-concurrency/concurrent-ruby#1106</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/barracuda156"><code>@barracuda156</code></a> made their first contribution in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1064">ruby-concurrency/concurrent-ruby#1064</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ruby-concurrency/concurrent-ruby/compare/v1.3.6...v1.3.7">https://github.com/ruby-concurrency/concurrent-ruby/compare/v1.3.6...v1.3.7</a></p> <h2>v1.3.6</h2>  <h2>What's Changed</h2> <ul> <li>Run tests without the C extension in CI by <a href="https://github.com/eregon"><code>@eregon</code></a> in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1081">ruby-concurrency/concurrent-ruby#1081</a></li> <li>Fix typo in Promise docs by <a href="https://github.com/danieldiekmeier"><code>@danieldiekmeier</code></a> in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1083">ruby-concurrency/concurrent-ruby#1083</a></li> <li>Correct word in readme by <a href="https://github.com/wwahammy"><code>@wwahammy</code></a> in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1084">ruby-concurrency/concurrent-ruby#1084</a></li> <li>Fix mistakes in MVar documentation by <a href="https://github.com/trinistr"><code>@trinistr</code></a> in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1087">ruby-concurrency/concurrent-ruby#1087</a></li> <li>Fix multi require concurrent/executor/cached_thread_pool by <a href="https://github.com/OuYangJinTing"><code>@OuYangJinTing</code></a> in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1085">ruby-concurrency/concurrent-ruby#1085</a></li> <li>Use typed data APIs by <a href="https://github.com/nobu"><code>@nobu</code></a> in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1096">ruby-concurrency/concurrent-ruby#1096</a></li> <li>Add Joshua Young to the list of maintainers by <a href="https://github.com/eregon"><code>@eregon</code></a> in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1097">ruby-concurrency/concurrent-ruby#1097</a></li> <li>Asynchronous pruning for RubyThreadPoolExecutor by <a href="https://github.com/joshuay03"><code>@joshuay03</code></a> in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1082">ruby-concurrency/concurrent-ruby#1082</a></li> <li>Mark RubySingleThreadExecutor as a SerialExecutorService by <a href="https://github.com/meineerde"><code>@meineerde</code></a> in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1070">ruby-concurrency/concurrent-ruby#1070</a></li> <li>Allow TimerTask to be safely restarted after shutdown and avoid duplicate tasks by <a href="https://github.com/bensheldon"><code>@bensheldon</code></a> in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1001">ruby-concurrency/concurrent-ruby#1001</a></li> <li>Flaky test fix: allow ThreadPool to shutdown before asserting completed_task_count by <a href="https://github.com/bensheldon"><code>@bensheldon</code></a> in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1098">ruby-concurrency/concurrent-ruby#1098</a></li> <li><code>ThreadPoolExecutor#kill</code> will <code>wait_for_termination</code> in JRuby; ensure <code>TimerSet</code> timer thread shuts down cleanly by <a href="https://github.com/bensheldon"><code>@bensheldon</code></a> in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1044">ruby-concurrency/concurrent-ruby#1044</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/danieldiekmeier"><code>@danieldiekmeier</code></a> made their first contribution in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1083">ruby-concurrency/concurrent-ruby#1083</a></li> <li><a href="https://github.com/wwahammy"><code>@wwahammy</code></a> made their first contribution in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1084">ruby-concurrency/concurrent-ruby#1084</a></li> <li><a href="https://github.com/trinistr"><code>@trinistr</code></a> made their first contribution in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1087">ruby-concurrency/concurrent-ruby#1087</a></li> <li><a href="https://github.com/OuYangJinTing"><code>@OuYangJinTing</code></a> made their first contribution in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1085">ruby-concurrency/concurrent-ruby#1085</a></li> <li><a href="https://github.com/nobu"><code>@nobu</code></a> made their first contribution in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1096">ruby-concurrency/concurrent-ruby#1096</a></li> <li><a href="https://github.com/joshuay03"><code>@joshuay03</code></a> made their first contribution in <a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/pull/1082">ruby-concurrency/concurrent-ruby#1082</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ruby-concurrency/concurrent-ruby/compare/v1.3.5...v1.3.6">https://github.com/ruby-concurrency/concurrent-ruby/compare/v1.3.5...v1.3.6</a></p>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ruby-concurrency/concurrent-ruby/blob/master/CHANGELOG.md">concurrent-ruby's changelog</a>.</em></p> <blockquote> <h2>Release v1.3.7 (16 June 2026)</h2> <p>concurrent-ruby:</p> <ul> <li>See the <a href="https://github.com/ruby-concurrency/concurrent-ruby/releases/tag/v1.3.7">release notes on GitHub</a>.</li> </ul> <h2>Release v1.3.6 (13 December 2025)</h2> <p>concurrent-ruby:</p> <ul> <li>See the <a href="https://github.com/ruby-concurrency/concurrent-ruby/releases/tag/v1.3.6">release notes on GitHub</a>.</li> </ul> <h2>Release v1.3.5, edge v0.7.2 (15 January 2025)</h2> <p>concurrent-ruby:</p> <ul> <li>(<a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/issues/1062">#1062</a>) Remove dependency on logger.</li> </ul> <p>concurrent-ruby-edge:</p> <ul> <li>(<a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/issues/1062">#1062</a>) Remove dependency on logger.</li> </ul> <h2>Release v1.3.4 (10 August 2024)</h2> <ul> <li>(<a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/issues/1060">#1060</a>) Fix bug with return value of <code>Concurrent.available_processor_count</code> when <code>cpu.cfs_quota_us</code> is -1.</li> <li>(<a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/issues/1058">#1058</a>) Add <code>Concurrent.cpu_shares</code> that is cgroups aware.</li> </ul> <h2>Release v1.3.3 (9 June 2024)</h2> <ul> <li>(<a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/issues/1053">#1053</a>) Improve the speed of <code>Concurrent.physical_processor_count</code> on Windows.</li> </ul> <h2>Release v1.3.2, edge v0.7.1 (7 June 2024)</h2> <p>concurrent-ruby:</p> <ul> <li>(<a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/issues/1051">#1051</a>) Remove dependency on <code>win32ole</code>.</li> </ul> <p>concurrent-ruby-edge:</p> <ul> <li>(<a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/issues/1052">#1052</a>) Fix dependency on <code>concurrent-ruby</code> to allow the latest release.</li> </ul> <h2>Release v1.3.1 (29 May 2024)</h2> <ul> <li>Release 1.3.0 was broken when pushed to RubyGems. 1.3.1 is a packaging fix.</li> </ul> <h2>Release v1.3.0 (28 May 2024)</h2> <ul> <li>(<a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/issues/1042">#1042</a>) Align Java Executor Service behavior for <code>shuttingdown?</code>, <code>shutdown?</code></li> <li>(<a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/issues/1038">#1038</a>) Add <code>Concurrent.available_processor_count</code> that is cgroups aware.</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ruby-concurrency/concurrent-ruby/commit/4c8fc28ab6bb9bd8258a4c0c2fa6d35ebe77b3cb"><code>4c8fc28</code></a> Release 1.3.7</li> <li><a href="https://github.com/ruby-concurrency/concurrent-ruby/commit/d91ca9426cb819d6cc63f1bd64bfe54644d0beca"><code>d91ca94</code></a> Fix AtomicReference#update livelock when stored value is Float::NAN on JRuby ...</li> <li><a href="https://github.com/ruby-concurrency/concurrent-ruby/commit/7e4d711bacf7a1dac3ef6bda44004387be2dc7e6"><code>7e4d711</code></a> Fix <code>ReentrantReadWriteLock</code> read hold overflow into write-lock bit</li> <li><a href="https://github.com/ruby-concurrency/concurrent-ruby/commit/6e37e0644b83b182971dc540d2e4bee38df61386"><code>6e37e06</code></a> Fix <code>AtomicReference#update</code> livelock when stored value is <code>Float::NAN</code></li> <li><a href="https://github.com/ruby-concurrency/concurrent-ruby/commit/2825cfa12cb708b76557803957f76862eb1151a2"><code>2825cfa</code></a> Cleanup spec</li> <li><a href="https://github.com/ruby-concurrency/concurrent-ruby/commit/3fd493283ca5f84f0ef4e84aabd43ad68df4626b"><code>3fd4932</code></a> Fix <code>ReadWriteLock</code> wrong-thread write release and stray read release</li> <li><a href="https://github.com/ruby-concurrency/concurrent-ruby/commit/1974b4772efc034ee8eaa562b4370343f4c5c54b"><code>1974b47</code></a> Add Ruby 4.0 in CI</li> <li><a href="https://github.com/ruby-concurrency/concurrent-ruby/commit/df8706d40c483d76bbb0b3a35a633c68fa9e17be"><code>df8706d</code></a> Add SECURITY.md (<a href="https://redirect.github.com/ruby-concurrency/concurrent-ruby/issues/1104">#1104</a>)</li> <li><a href="https://github.com/ruby-concurrency/concurrent-ruby/commit/7a1b78941c081106c20a9ca0144ac73a48d254ab"><code>7a1b789</code></a> Bump actions/upload-pages-artifact from 4 to 5</li> <li><a href="https://github.com/ruby-concurrency/concurrent-ruby/commit/9b2dbf712896a638a73d2fa221206961c8d6484d"><code>9b2dbf7</code></a> Bump actions/deploy-pages from 4 to 5</li> <li>Additional commits viewable in <a href="https://github.com/ruby-concurrency/concurrent-ruby/compare/v1.2.2...v1.3.7">compare view</a></li> </ul> </details> <br /> Updates `google-protobuf` from 3.25.1 to 3.25.5 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/protocolbuffers/protobuf/commit/70e85ae1f994ee91001a18d9b5b4688ac027c03d"><code>70e85ae</code></a> Updating version.json and repo version numbers to: 25.5-dev</li> <li><a href="https://github.com/protocolbuffers/protobuf/commit/489aba5b55bb994bcd130a43e20cc9be3be04adf"><code>489aba5</code></a> Merge pull request <a href="https://redirect.github.com/protocolbuffers/protobuf/issues/15984">#15984</a> from mkruskal-google/staleness-fix-25</li> <li><a href="https://github.com/protocolbuffers/protobuf/commit/367c7bea8dd5505f817f41e052e50caa694fb0e6"><code>367c7be</code></a> Regen stale files</li> <li><a href="https://github.com/protocolbuffers/protobuf/commit/bbbd2dea0e508289d45b48612e4659a230708209"><code>bbbd2de</code></a> Updating version.json and repo version numbers to: 25.4-dev</li> <li><a href="https://github.com/protocolbuffers/protobuf/commit/fc222b9420e19d902e0aee5a6a95274dbbc2fc06"><code>fc222b9</code></a> Updating version.json and repo version numbers to: 25.3-dev</li> <li><a href="https://github.com/protocolbuffers/protobuf/commit/6ac04475591db12de14e89d3d750519c2ca9a4cc"><code>6ac0447</code></a> Updating version.json and repo version numbers to: 25.2-dev</li> <li>See full diff in <a href="https://github.com/protocolbuffers/protobuf/compare/v3.25.1...v3.25.5">compare view</a></li> </ul> </details> <br /> Updates `rexml` from 3.2.8 to 3.4.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/ruby/rexml/releases">rexml's releases</a>.</em></p> <blockquote> <h2>REXML 3.4.2 - 2025-08-26</h2> <h3>Improvement</h3> <ul> <li> <p>Improved performance.</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/244">GH-244</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/245">GH-245</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/246">GH-246</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/249">GH-249</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/256">GH-256</a></li> <li>Patch by NAITOH Jun</li> </ul> </li> <li> <p>Raise appropriate exception when failing to match start tag in DOCTYPE</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/247">GH-247</a></li> <li>Patch by NAITOH Jun</li> </ul> </li> <li> <p>Deprecate accepting array as an element in XPath.match, first and each</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/252">GH-252</a></li> <li>Patch by tomoya ishida</li> </ul> </li> <li> <p>Don't call needless encoding_updated</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/259">GH-259</a></li> <li>Patch by Sutou Kouhei</li> </ul> </li> <li> <p>Reuse XPath::match</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/263">GH-263</a></li> <li>Patch by pboling</li> </ul> </li> <li> <p>Cache redundant calls for doctype</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/264">GH-264</a></li> <li>Patch by pboling</li> </ul> </li> <li> <p>Use Safe Navigation (&.) from Ruby 2.3</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/265">GH-265</a></li> <li>Patch by pboling</li> </ul> </li> <li> <p>Remove redundant return statements</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/266">GH-266</a></li> <li>Patch by pboling</li> </ul> </li> <li> <p>Added XML declaration check & Source#skip_spaces method</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/282">GH-282</a></li> <li>Patch by NAITOH Jun</li> <li>Reported by Sofi Aberegg</li> </ul> </li> </ul> <h3>Fixes</h3> <ul> <li>Fix docs typo <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/248">GH-248</a></li> <li>Patch by James Coleman</li> </ul> </li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ruby/rexml/blob/master/NEWS.md">rexml's changelog</a>.</em></p> <blockquote> <h2>3.4.2 - 2025-08-26 {#version-3-4-2}</h2> <h3>Improvement</h3> <ul> <li> <p>Improved performance.</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/244">GH-244</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/245">GH-245</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/246">GH-246</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/249">GH-249</a></li> <li><a href="https://redirect.github.com/ruby/rexml/issues/256">GH-256</a></li> <li>Patch by NAITOH Jun</li> </ul> </li> <li> <p>Raise appropriate exception when failing to match start tag in DOCTYPE</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/247">GH-247</a></li> <li>Patch by NAITOH Jun</li> </ul> </li> <li> <p>Deprecate accepting array as an element in XPath.match, first and each</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/252">GH-252</a></li> <li>Patch by tomoya ishida</li> </ul> </li> <li> <p>Don't call needless encoding_updated</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/259">GH-259</a></li> <li>Patch by Sutou Kouhei</li> </ul> </li> <li> <p>Reuse XPath::match</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/263">GH-263</a></li> <li>Patch by pboling</li> </ul> </li> <li> <p>Cache redundant calls for doctype</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/264">GH-264</a></li> <li>Patch by pboling</li> </ul> </li> <li> <p>Use Safe Navigation (&.) from Ruby 2.3</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/265">GH-265</a></li> <li>Patch by pboling</li> </ul> </li> <li> <p>Remove redundant return statements</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/266">GH-266</a></li> <li>Patch by pboling</li> </ul> </li> <li> <p>Added XML declaration check & Source#skip_spaces method</p> <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/282">GH-282</a></li> <li>Patch by NAITOH Jun</li> <li>Reported by Sofi Aberegg</li> </ul> </li> </ul> <h3>Fixes</h3> <ul> <li>Fix docs typo <ul> <li><a href="https://redirect.github.com/ruby/rexml/issues/248">GH-248</a></li> <li>Patch by James Coleman</li> </ul> </li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ruby/rexml/commit/f36916fe1c66b8cdc1fe482263115625e084d8fe"><code>f36916f</code></a> Add 3.4.2 entry (<a href="https://redirect.github.com/ruby/rexml/issues/284">#284</a>)</li> <li><a href="https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23"><code>5859bde</code></a> Added XML declaration check & <code>Source#skip_spaces</code> method (<a href="https://redirect.github.com/ruby/rexml/issues/282">#282</a>)</li> <li><a href="https://github.com/ruby/rexml/commit/1d876e3bf658b7b4ec7c3372867521695e8eb023"><code>1d876e3</code></a> Bump actions/checkout from 4 to 5 (<a href="https://redirect.github.com/ruby/rexml/issues/283">#283</a>)</li> <li><a href="https://github.com/ruby/rexml/commit/c87bda8bb8773da7e5a0faf9f16ff165eb052a35"><code>c87bda8</code></a> Remove ostruct from dev deps (<a href="https://redirect.github.com/ruby/rexml/issues/281">#281</a>)</li> <li><a href="https://github.com/ruby/rexml/commit/c60ae027a3c20f359fdf76fa41ae64d22313f482"><code>c60ae02</code></a> Remove bundler from dev deps (<a href="https://redirect.github.com/ruby/rexml/issues/277">#277</a>)</li> <li><a href="https://github.com/ruby/rexml/commit/9b084d78708638cedff54743edc0907c4bd6574a"><code>9b084d7</code></a> Fix & Deprecate REXML::Text#text_indent (<a href="https://redirect.github.com/ruby/rexml/issues/275">#275</a>)</li> <li><a href="https://github.com/ruby/rexml/commit/04a589a61bf4e366abee8764ee74b03f4aecc4aa"><code>04a589a</code></a> Fix a bug that XPath can't be used for no document element (<a href="https://redirect.github.com/ruby/rexml/issues/268">#268</a>)</li> <li><a href="https://github.com/ruby/rexml/commit/66232eaf680d0937ae59bea285cdb8e4d3d88a93"><code>66232ea</code></a> Remove redundant return statements (<a href="https://redirect.github.com/ruby/rexml/issues/266">#266</a>)</li> <li><a href="https://github.com/ruby/rexml/commit/63f3e9772595a64b036953f0ab026d2ea5560a3b"><code>63f3e97</code></a> Use Safe Navigation (&.) from Ruby 2.3 (<a href="https://redirect.github.com/ruby/rexml/issues/265">#265</a>)</li> <li><a href="https://github.com/ruby/rexml/commit/d427fc5914fcc17d7247c5ff9099ee38639d6702"><code>d427fc5</code></a> Avoid redundant calls for doctype (<a href="https://redirect.github.com/ruby/rexml/issues/264">#264</a>)</li> <li>Additional commits viewable in <a href="https://github.com/ruby/rexml/compare/v3.2.8...v3.4.2">compare view</a></li> </ul> </details> <br /> Updates `webrick` from 1.8.1 to 1.8.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/ruby/webrick/releases">webrick's releases</a>.</em></p> <blockquote> <h2>v1.8.2</h2> <h2>What's Changed</h2> <ul> <li>Drop commented-out line by <a href="https://github.com/olleolleolle"><code>@olleolleolle</code></a> in <a href="https://redirect.github.com/ruby/webrick/pull/108">ruby/webrick#108</a></li> <li>Add Ruby 3.1 & 3.2 to CI matrix by <a href="https://github.com/tricknotes"><code>@tricknotes</code></a> in <a href="https://redirect.github.com/ruby/webrick/pull/109">ruby/webrick#109</a></li> <li>Fix/redos by <a href="https://github.com/ooooooo-q"><code>@ooooooo-q</code></a> in <a href="https://redirect.github.com/ruby/webrick/pull/114">ruby/webrick#114</a></li> <li>Raise HTTPStatus::BadRequest for requests with invalid/duplicate content-length headers by <a href="https://github.com/jeremyevans"><code>@jeremyevans</code></a> in <a href="https://redirect.github.com/ruby/webrick/pull/120">ruby/webrick#120</a></li> <li>Bump actions/checkout from 3 to 4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/ruby/webrick/pull/121">ruby/webrick#121</a></li> <li>Improve CI by <a href="https://github.com/hsbt"><code>@hsbt</code></a> in <a href="https://redirect.github.com/ruby/webrick/pull/123">ruby/webrick#123</a></li> <li>Fix WEBrick::TestFileHandler#test_short_filename test not working on mswin by <a href="https://github.com/KJTsanaktsidis"><code>@KJTsanaktsidis</code></a> in <a href="https://redirect.github.com/ruby/webrick/pull/128">ruby/webrick#128</a></li> <li>Fix bug chunk extension detection by <a href="https://github.com/jeremyevans"><code>@jeremyevans</code></a> in <a href="https://redirect.github.com/ruby/webrick/pull/125">ruby/webrick#125</a></li> <li>Fix CI. by <a href="https://github.com/ioquatix"><code>@ioquatix</code></a> in <a href="https://redirect.github.com/ruby/webrick/pull/131">ruby/webrick#131</a></li> <li>Merge multiple cookie headers, preserving semantic correctness. by <a href="https://github.com/ioquatix"><code>@ioquatix</code></a> in <a href="https://redirect.github.com/ruby/webrick/pull/130">ruby/webrick#130</a></li> <li>Test on macos-latest by <a href="https://github.com/byroot"><code>@byroot</code></a> in <a href="https://redirect.github.com/ruby/webrick/pull/132">ruby/webrick#132</a></li> <li>Require CRLF line endings in request line and headers by <a href="https://github.com/jeremyevans"><code>@jeremyevans</code></a> in <a href="https://redirect.github.com/ruby/webrick/pull/138">ruby/webrick#138</a></li> <li>Prefer squigly heredocs. by <a href="https://github.com/ioquatix"><code>@ioquatix</code></a> in <a href="https://redirect.github.com/ruby/webrick/pull/143">ruby/webrick#143</a></li> <li>Only strip space and horizontal tab in headers by <a href="https://github.com/jeremyevans"><code>@jeremyevans</code></a> in <a href="https://redirect.github.com/ruby/webrick/pull/141">ruby/webrick#141</a></li> <li>Treat missing CRLF separator after headers as an EOFError by <a href="https://github.com/jeremyevans"><code>@jeremyevans</code></a> in <a href="https://redirect.github.com/ruby/webrick/pull/142">ruby/webrick#142</a></li> <li>Return 400 response for chunked requests with unexpected data after chunk by <a href="https://github.com/jeremyevans"><code>@jeremyevans</code></a> in <a href="https://redirect.github.com/ruby/webrick/pull/136">ruby/webrick#136</a></li> <li>Fix reference to URI::REGEXP::PATTERN::HOST by <a href="https://github.com/casperisfine"><code>@casperisfine</code></a> in <a href="https://redirect.github.com/ruby/webrick/pull/144">ruby/webrick#144</a></li> <li>Prevent request smuggling by <a href="https://github.com/jeremyevans"><code>@jeremyevans</code></a> in <a href="https://redirect.github.com/ruby/webrick/pull/146">ruby/webrick#146</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/tricknotes"><code>@tricknotes</code></a> made their first contribution in <a href="https://redirect.github.com/ruby/webrick/pull/109">ruby/webrick#109</a></li> <li><a href="https://github.com/ooooooo-q"><code>@ooooooo-q</code></a> made their first contribution in <a href="https://redirect.github.com/ruby/webrick/pull/114">ruby/webrick#114</a></li> <li><a href="https://github.com/KJTsanaktsidis"><code>@KJTsanaktsidis</code></a> made their first contribution in <a href="https://redirect.github.com/ruby/webrick/pull/128">ruby/webrick#128</a></li> <li><a href="https://github.com/byroot"><code>@byroot</code></a> made their first contribution in <a href="https://redirect.github.com/ruby/webrick/pull/132">ruby/webrick#132</a></li> <li><a href="https://github.com/casperisfine"><code>@casperisfine</code></a> made their first contribution in <a href="https://redirect.github.com/ruby/webrick/pull/144">ruby/webrick#144</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ruby/webrick/compare/v1.8.1...v1.8.2">https://github.com/ruby/webrick/compare/v1.8.1...v1.8.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ruby/webrick/commit/0fb9de6788a3ba5fe903e63d778a0fb8c1dce786"><code>0fb9de6</code></a> Bump up v1.8.2</li> <li><a href="https://github.com/ruby/webrick/commit/b9a4c81ea94dec02a750c6b34092c55234519bf1"><code>b9a4c81</code></a> Removed trailing spaces</li> <li><a href="https://github.com/ruby/webrick/commit/f5faca9222541591e1a7c3c97552ebb0c92733c7"><code>f5faca9</code></a> Prevent request smuggling</li> <li><a href="https://github.com/ruby/webrick/commit/0c600e169bd4ae267cb5eeb6197277c848323bbe"><code>0c600e1</code></a> Fix reference to URI::REGEXP::PATTERN::HOST</li> <li><a href="https://github.com/ruby/webrick/commit/15a93914782789520837c334e0c302702aec34e2"><code>15a9391</code></a> Return 400 response for chunked requests with unexpected data after chunk</li> <li><a href="https://github.com/ruby/webrick/commit/2b38d5614e876d313fe981e87c4e35b91556d226"><code>2b38d56</code></a> Treat missing CRLF separator after headers as an EOFError</li> <li><a href="https://github.com/ruby/webrick/commit/e4efb4a2300540f14f93c09c06bf0357ac1597dc"><code>e4efb4a</code></a> Remove unnecessary gsub calls in test_httprequest.rb</li> <li><a href="https://github.com/ruby/webrick/commit/426e214532bb0be5e4ab8b3c9cef328432012d0d"><code>426e214</code></a> Only strip space and horizontal tab in headers</li> <li><a href="https://github.com/ruby/webrick/commit/e72cb697836e2ff201a4a74c108fdca9d3d2d0ed"><code>e72cb69</code></a> Prefer squigly heredocs. (<a href="https://redirect.github.com/ruby/webrick/issues/143">#143</a>)</li> <li><a href="https://github.com/ruby/webrick/commit/ee60354bcb84ec33b9245e1d1aa6e1f7e8132101"><code>ee60354</code></a> Require CRLF line endings in request line and headers</li> <li>Additional commits viewable in <a href="https://github.com/ruby/webrick/compare/v1.8.1...v1.8.2">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/andylockran/andylockran.github.io/network/alerts). </details>

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin "dependabot/bundler/bundler-4285362153:dependabot/bundler/bundler-4285362153"

git switch "dependabot/bundler/bundler-4285362153"

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch "main"

git merge --no-ff "dependabot/bundler/bundler-4285362153"

git switch "dependabot/bundler/bundler-4285362153"

git rebase "main"

git switch "main"

git merge --ff-only "dependabot/bundler/bundler-4285362153"

git switch "dependabot/bundler/bundler-4285362153"

git rebase "main"

git switch "main"

git merge --no-ff "dependabot/bundler/bundler-4285362153"

git switch "main"

git merge --squash "dependabot/bundler/bundler-4285362153"