Skip to content

chore(deps): bump loofah from 2.25.0 to 2.25.1#2

Merged
Bulletdev merged 1 commit intomainfrom
dependabot/bundler/loofah-2.25.1
Apr 6, 2026
Merged

chore(deps): bump loofah from 2.25.0 to 2.25.1#2
Bulletdev merged 1 commit intomainfrom
dependabot/bundler/loofah-2.25.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 18, 2026

Bumps loofah from 2.25.0 to 2.25.1.

Release notes

Sourced from loofah's releases.

2.25.1 / 2026-03-17

Changelog

Sourced from loofah's changelog.

2.25.1 / 2026-03-17

Commits
  • c895c8b version bump to v2.25.1
  • f4ebc9c Merge pull request #302 from flavorjones/flavorjones/better-allowed-uri
  • 9f4e5db Update allowed_uri? to handle unescaped whitespace entities
  • e6f4751 doc: Move security reporting to Github
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Mar 18, 2026
@vercel
Copy link
Copy Markdown

vercel Bot commented Mar 18, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
kings-lendas Ready Ready Preview, Comment Apr 6, 2026 11:09am

@github-actions
Copy link
Copy Markdown

Brakeman Security Scan

  • Total warnings: 0
  • High confidence: 0

[OK] Nenhum issue de alta confiança.

@github-actions
Copy link
Copy Markdown

Dependency Security Check

[OK] Nenhuma vulnerabilidade conhecida.

Ver relatório
No vulnerabilities found

@github-actions
Copy link
Copy Markdown

Semgrep Static Analysis

  • Errors: 1
  • Critical (high confidence): 0
  • Warnings: 15

[FAIL] Errors encontrados! Corrigir.

@github-actions
Copy link
Copy Markdown

Security Scan — Kings Lendas

SAST (análise estática)

Check Status
Brakeman [OK] success
Dependências [OK] success
Semgrep [OK] success
TruffleHog [OK] success
Segredos locais [OK] success

DAST (testes dinâmicos)

Check Status
Autenticação [OK] success
SQL Injection [OK] success
SSRF / Path Traversal [OK] success
Integridade dos dados [OK] success

[OK] Todos os checks passaram!

@Bulletdev Bulletdev self-assigned this Apr 6, 2026
Bumps [loofah](https://github.com/flavorjones/loofah) from 2.25.0 to 2.25.1.
- [Release notes](https://github.com/flavorjones/loofah/releases)
- [Changelog](https://github.com/flavorjones/loofah/blob/main/CHANGELOG.md)
- [Commits](flavorjones/loofah@v2.25.0...v2.25.1)

---
updated-dependencies:
- dependency-name: loofah
  dependency-version: 2.25.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 6, 2026

Brakeman Security Scan

  • Total warnings: 0
  • High confidence: 0

[OK] Nenhum issue de alta confiança.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 6, 2026

Dependency Security Check

[WARN] Vulnerabilidades em dependências!

Ver relatório
Name: json
Version: 2.19.0
CVE: CVE-2026-33210
GHSA: GHSA-3m6g-2423-7cp3
Criticality: Unknown
URL: https://github.com/ruby/json/security/advisories/GHSA-3m6g-2423-7cp3
Title: Ruby JSON has a format string injection vulnerability
Solution: update to '~> 2.15.2.1', '~> 2.17.1.2', '>= 2.19.2'

Vulnerabilities found!

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 6, 2026

Semgrep Static Analysis

  • Errors: 1
  • Critical (high confidence): 0
  • Warnings: 15

[FAIL] Errors encontrados! Corrigir.

@codacy-production
Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results
Complexity 0
Duplication 0

View in Codacy

TIP This summary will be updated as you push new changes. Give us feedback

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 6, 2026

Security Scan — Kings Lendas

SAST (análise estática)

Check Status
Brakeman [OK] success
Dependências [FAIL] failure
Semgrep [OK] success
TruffleHog [OK] success
Segredos locais [OK] success

DAST (testes dinâmicos)

Check Status
Autenticação [OK] success
SQL Injection [OK] success
SSRF / Path Traversal [OK] success
Integridade dos dados [OK] success

[WARN] Alguns checks falharam. Revisar acima.

@Bulletdev Bulletdev merged commit 7898dc7 into main Apr 6, 2026
14 of 16 checks passed
@dependabot dependabot Bot deleted the dependabot/bundler/loofah-2.25.1 branch April 6, 2026 19:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant