Skip to content

build(deps-dev): bump ffi from 1.16.3 to 1.17.3#4765

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bundler/ffi-1.17.3
Closed

build(deps-dev): bump ffi from 1.16.3 to 1.17.3#4765
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bundler/ffi-1.17.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Jan 15, 2026

Bumps ffi from 1.16.3 to 1.17.3.

Changelog

Sourced from ffi's changelog.

1.17.3 / 2025-12-29

Fixed:

  • Opt-in for MFA requirement explicitly. #1159
  • Fix type signature for FFI::AutoPointer#initialize, FFI::StructByReference#native_type and FFI::Struct#auto_ptr . #1158
  • Fix function signature of function_call in FFI trampoline. #1154 It failed on aarch64-mingw-ucrt.
  • Add workaround for segmentation faults on aarch64-mingw-ucrt. #1154
  • Call super in Library#freeze . #1154
  • Deny duplication of AutoPointer per #dup and #clone . #1173 They led to double free before.

Added:

  • Add binary gems for Ruby-4.0, now providing binary gems for Ruby-3.0 to 4.0.
  • Add msys2_mingw_dependencies for Windows Mingw for automatic installation of libffi. #1143
  • Mark callback dispatcher thread as fork safe for Puma. #1156
  • Add missing FFI::Platform module and LastError signatures. #1169

Removed:

  • Drop fat binary gems for Ruby < 3.0
  • Remove FFI::TypesGenerator from distributed gems. #1164
  • Remove libffi build dir after install, safing some install space. #1157

1.17.2 / 2025-04-15

Fixed:

  • #1144, #1145 Update libffi to 3.4.8 to fix installation issues on latest Macos on ARM64
  • Various adjustments to run the specs cleanly on Ruby-3.5 master branch.

1.17.1 / 2024-12-30

Fixed:

  • #1117 Restart async callback dispatcher thread after fork.
  • #1133 Add ruby-3.4 native gem.
  • #1134 Fix FFI::DataConverter non-generic usage in RBS files.

1.17.0 / 2024-06-02

Fixed:

  • Add FFI::AbstractMemory#read_array_of_string . It was defined but not exposed to Ruby nor tested. #1070

1.17.0.rc2 / 2024-04-22

... (truncated)

Commits
  • 68f4d3b Bump VERSION to ffi-1.17.3 and add release notes
  • 38d298e Update libffi to latest master branch
  • 77f9033 Merge pull request #1108 from lloeki/add-steep
  • 9cce647 Add ffi.gemspec to Gemfile
  • 42b2382 Fix newly introduced rbs signatures for FFI::Platform
  • 6e76f7f Add CI check for RBS files
  • b1fdbe1 Add Steep to check RBS files
  • 6076fab Merge pull request #1173 from ffi/fix-1155
  • 195f9e9 Merge pull request #1143 from johnnyshields/patch-2
  • 0ff4cb3 Binary gems don't need libffi header+lib files
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jan 15, 2026
@dependabot dependabot bot force-pushed the dependabot/bundler/ffi-1.17.3 branch 4 times, most recently from 5617268 to 41cf3fa Compare January 15, 2026 15:23
Bumps [ffi](https://github.com/ffi/ffi) from 1.16.3 to 1.17.3.
- [Changelog](https://github.com/ffi/ffi/blob/master/CHANGELOG.md)
- [Commits](ffi/ffi@v1.16.3...v1.17.3)

---
updated-dependencies:
- dependency-name: ffi
  dependency-version: 1.17.3
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/bundler/ffi-1.17.3 branch from 41cf3fa to db17e53 Compare January 15, 2026 15:49
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Jan 16, 2026

Looks like ffi is up-to-date now, so this is no longer needed.

@dependabot dependabot bot closed this Jan 16, 2026
@dependabot dependabot bot deleted the dependabot/bundler/ffi-1.17.3 branch January 16, 2026 02:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants