Skip to content

chore(deps): bump json from 2.19.0 to 2.19.2#3

Merged
Bulletdev merged 1 commit intomainfrom
dependabot/bundler/json-2.19.2
Apr 6, 2026
Merged

chore(deps): bump json from 2.19.0 to 2.19.2#3
Bulletdev merged 1 commit intomainfrom
dependabot/bundler/json-2.19.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 19, 2026 •
edited
Loading

Bumps json from 2.19.0 to 2.19.2.

Release notes

Sourced from json's releases.

v2.19.2

What's Changed

  • Fix a format string injection vulnerability in JSON.parse(doc, allow_duplicate_key: false). CVE-2026-33210

Full Changelog: ruby/json@v2.19.1...v2.19.2

v2.19.1

What's Changed

  • Fix a compiler dependent GC bug introduced in 2.18.0.

Full Changelog: ruby/json@v2.19.0...v2.19.1

Changelog

Sourced from json's changelog.

2026-03-18 (2.19.2)

  • Fix a format string injection vulnerability in JSON.parse(doc, allow_duplicate_key: false). CVE-2026-33210.

2026-03-08 (2.19.1)

  • Fix a compiler dependent GC bug introduced in 2.18.0.
Commits
  • 54f8a87 Release 2.19.2
  • 393b41c Fix a format string injection vulnerability
  • dbf6bb1 Merge pull request #953 from ruby/dependabot/github_actions/actions/create-gi...
  • 7187315 Bump actions/create-github-app-token from 2 to 3
  • 4a42a04 Release 2.19.1
  • 13689c2 Add missing GC_GUARD in fbuffer_append_str
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Mar 19, 2026
@vercel
Copy link
Copy Markdown

vercel Bot commented Mar 19, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
kings-lendas Ready Ready Preview, Comment Apr 6, 2026 11:09am

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Mar 19, 2026

Dependency Security Check

[OK] Nenhuma vulnerabilidade conhecida.

Ver relatório 
No vulnerabilities found

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Mar 19, 2026

Brakeman Security Scan

  • Total warnings: 0
  • High confidence: 0

[OK] Nenhum issue de alta confiança.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Mar 19, 2026

Semgrep Static Analysis

  • Errors: 1
  • Critical (high confidence): 0
  • Warnings: 15

[FAIL] Errors encontrados! Corrigir.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Mar 19, 2026

Security Scan — Kings Lendas

SAST (análise estática)

Check Status
Brakeman [OK] success
Dependências [OK] success
Semgrep [OK] success
TruffleHog [OK] success
Segredos locais [OK] success

DAST (testes dinâmicos)

Check Status
Autenticação [OK] success
SQL Injection [OK] success
SSRF / Path Traversal [OK] success
Integridade dos dados [OK] success

[OK] Todos os checks passaram!

@Bulletdev Bulletdev self-assigned this Apr 6, 2026
@dependabot
chore(deps): bump json from 2.19.0 to 2.19.2
8fbd791 
Bumps [json](https://github.com/ruby/json) from 2.19.0 to 2.19.2.
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](ruby/json@v2.19.0...v2.19.2)

---
updated-dependencies:
- dependency-name: json
  dependency-version: 2.19.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/bundler/json-2.19.2 branch from 709ccb5 to 8fbd791 Compare April 6, 2026 11:09
@codacy-production
Copy link
Copy Markdown

codacy-production Bot commented Apr 6, 2026

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results
Complexity 0
Duplication 0

View in Codacy

TIP This summary will be updated as you push new changes. Give us feedback

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 6, 2026

Semgrep Static Analysis

  • Errors: 1
  • Critical (high confidence): 0
  • Warnings: 15

[FAIL] Errors encontrados! Corrigir.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 6, 2026

Dependency Security Check

[WARN] Vulnerabilidades em dependências!

Ver relatório 
Name: loofah
Version: 2.25.0
GHSA: GHSA-46fp-8f5p-pf2m
Criticality: Unknown
URL: https://github.com/flavorjones/loofah/security/advisories/GHSA-46fp-8f5p-pf2m
Title: Improper detection of disallowed URIs by Loofah `allowed_uri?`
Solution: update to '>= 2.25.1'

Vulnerabilities found!

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 6, 2026

Brakeman Security Scan

  • Total warnings: 0
  • High confidence: 0

[OK] Nenhum issue de alta confiança.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 6, 2026

Security Scan — Kings Lendas

SAST (análise estática)

Check Status
Brakeman [OK] success
Dependências [FAIL] failure
Semgrep [OK] success
TruffleHog [OK] success
Segredos locais [OK] success

DAST (testes dinâmicos)

Check Status
Autenticação [OK] success
SQL Injection [OK] success
SSRF / Path Traversal [OK] success
Integridade dos dados [OK] success

[WARN] Alguns checks falharam. Revisar acima.

@Bulletdev Bulletdev merged commit f298cbc into main Apr 6, 2026
14 of 16 checks passed
@dependabot dependabot Bot deleted the dependabot/bundler/json-2.19.2 branch April 6, 2026 19:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@Bulletdev Bulletdev

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Bulletdev