Skip to content

Commit 6d5f237

Browse files
Bump activesupport from 7.1.5.1 to 7.2.3.1 in /apps/basic-example (#4081)
Bumps [activesupport](https://github.com/rails/rails) from 7.1.5.1 to 7.2.3.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/rails/rails/releases">activesupport's releases</a>.</em></p> <blockquote> <h2>7.2.3.1</h2> <h2>Active Support</h2> <ul> <li> <p>Reject scientific notation in NumberConverter</p> <p>[CVE-2026-33176]</p> <p><em>Jean Boussier</em></p> </li> <li> <p>Fix <code>SafeBuffer#%</code> to preserve unsafe status</p> <p>[CVE-2026-33170]</p> <p><em>Jean Boussier</em></p> </li> <li> <p>Improve performance of NumberToDelimitedConverter</p> <p>[CVE-2026-33169]</p> <p><em>Jean Boussier</em></p> </li> </ul> <h2>Active Model</h2> <ul> <li>No changes.</li> </ul> <h2>Active Record</h2> <ul> <li>No changes.</li> </ul> <h2>Action View</h2> <ul> <li> <p>Skip blank attribute names in tag helpers to avoid generating invalid HTML.</p> <p>[CVE-2026-33168]</p> <p><em>Mike Dalessio</em></p> </li> </ul> <h2>Action Pack</h2> <ul> <li>No changes.</li> </ul> <h2>Active Job</h2> <ul> <li>No changes.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rails/rails/commit/ba76fca032a66f3716ca8a661c9ddb006acaf885"><code>ba76fca</code></a> Preparing for 7.2.3.1 release</li> <li><a href="https://github.com/rails/rails/commit/8a379f43ea3e1c62fc7f6eabc1808ae9f74f726d"><code>8a379f4</code></a> Update changelog</li> <li><a href="https://github.com/rails/rails/commit/b54a4b373c6f042cab6ee2033246b1c9ecc38974"><code>b54a4b3</code></a> Improve performance of NumberToDelimitedConverter</li> <li><a href="https://github.com/rails/rails/commit/c1ad0e8e1972032f3395853a5e99cea035035beb"><code>c1ad0e8</code></a> Fix <code>SafeBuffer#%</code> to preserve unsafe status</li> <li><a href="https://github.com/rails/rails/commit/ebd6be18120d1136511eb516338e27af25ac0a1a"><code>ebd6be1</code></a> NumberConverter: reject scientific notation</li> <li><a href="https://github.com/rails/rails/commit/4a155f1fd7d4a1887b169eda4983a052fb2e2f13"><code>4a155f1</code></a> Lock some dependencies</li> <li><a href="https://github.com/rails/rails/commit/bb2bdef2925433a0c5db31b873f9faddf2e2e65d"><code>bb2bdef</code></a> Preparing for 7.2.3 release</li> <li><a href="https://github.com/rails/rails/commit/fe41a9fa77412917ea3f228d6a742f31ad21e26d"><code>fe41a9f</code></a> Merge pull request <a href="https://redirect.github.com/rails/rails/issues/55840">#55840</a> from zzak/asup-xml-mini-bigdecimal-float-precision</li> <li><a href="https://github.com/rails/rails/commit/12040a3145012fb312eb2d70fc700f4d34a27934"><code>12040a3</code></a> Merge pull request <a href="https://redirect.github.com/rails/rails/issues/55808">#55808</a> from olivier-thatch/fix-enum-sole</li> <li><a href="https://github.com/rails/rails/commit/58630e19ad0fe3c822302ae147ad1f863c95de2e"><code>58630e1</code></a> Merge pull request <a href="https://redirect.github.com/rails/rails/issues/55794">#55794</a> from rails/fix-55513</li> <li>Additional commits viewable in <a href="https://github.com/rails/rails/compare/v7.1.5.1...v7.2.3.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=activesupport&package-manager=bundler&previous-version=7.1.5.1&new-version=7.2.3.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/software-mansion/react-native-gesture-handler/network/alerts). </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michał <michal.bert@swmansion.com>
1 parent fd14d12 commit 6d5f237

2 files changed

Lines changed: 538 additions & 330 deletions

File tree

apps/basic-example/Gemfile.lock

Lines changed: 8 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -5,19 +5,18 @@ GEM
55
base64
66
nkf
77
rexml
8-
activesupport (7.1.5.1)
8+
activesupport (7.2.3.1)
99
base64
1010
benchmark (>= 0.3)
1111
bigdecimal
12-
concurrent-ruby (~> 1.0, >= 1.0.2)
12+
concurrent-ruby (~> 1.0, >= 1.3.1)
1313
connection_pool (>= 2.2.5)
1414
drb
1515
i18n (>= 1.6, < 2)
1616
logger (>= 1.4.2)
17-
minitest (>= 5.1)
18-
mutex_m
17+
minitest (>= 5.1, < 6)
1918
securerandom (>= 0.3)
20-
tzinfo (~> 2.0)
19+
tzinfo (~> 2.0, >= 2.0.5)
2120
addressable (2.9.0)
2221
public_suffix (>= 2.0.2, < 8.0)
2322
algoliasearch (1.27.5)
@@ -67,7 +66,7 @@ GEM
6766
cocoapods-try (1.2.0)
6867
colored2 (3.1.2)
6968
concurrent-ruby (1.3.3)
70-
connection_pool (2.5.3)
69+
connection_pool (3.0.2)
7170
drb (2.2.3)
7271
escape (0.0.4)
7372
ethon (0.16.0)
@@ -78,11 +77,11 @@ GEM
7877
gh_inspector (1.1.3)
7978
httpclient (2.9.0)
8079
mutex_m
81-
i18n (1.14.7)
80+
i18n (1.14.8)
8281
concurrent-ruby (~> 1.0)
8382
json (2.12.2)
8483
logger (1.7.0)
85-
minitest (5.25.5)
84+
minitest (5.27.0)
8685
molinillo (0.8.0)
8786
mutex_m (0.3.0)
8887
nanaimo (0.3.0)
@@ -92,7 +91,7 @@ GEM
9291
public_suffix (4.0.7)
9392
rexml (3.4.1)
9493
ruby-macho (2.5.1)
95-
securerandom (0.3.2)
94+
securerandom (0.4.1)
9695
typhoeus (1.4.1)
9796
ethon (>= 0.9.0)
9897
tzinfo (2.0.6)

0 commit comments

Comments
 (0)