Skip to content

Bump actionview from 7.2.2.2 to 7.2.3.1 - #90

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/actionview-7.2.3.1
Closed

Bump actionview from 7.2.2.2 to 7.2.3.1#90
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/actionview-7.2.3.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 24, 2026

Copy link
Copy Markdown
Contributor

Bumps actionview from 7.2.2.2 to 7.2.3.1.

Release notes

Sourced from actionview's releases.

7.2.3.1

Active Support

  • Reject scientific notation in NumberConverter

    [CVE-2026-33176]

    Jean Boussier

  • Fix SafeBuffer#% to preserve unsafe status

    [CVE-2026-33170]

    Jean Boussier

  • Improve performance of NumberToDelimitedConverter

    [CVE-2026-33169]

    Jean Boussier

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • Skip blank attribute names in tag helpers to avoid generating invalid HTML.

    [CVE-2026-33168]

    Mike Dalessio

Action Pack

  • No changes.

Active Job

  • No changes.

... (truncated)

Commits
  • ba76fca Preparing for 7.2.3.1 release
  • 8a379f4 Update changelog
  • 0b6f800 Skip blank attribute names in Action View tag helpers
  • bb2bdef Preparing for 7.2.3 release
  • b5a9a37 Merge pull request #55809 from zzak/8-0-rubocop
  • b14489e Sync CHANGELOG
  • f96593c Merge pull request #55725 from byroot/js-include-type-module-sym
  • 788fde0 Merge branch '7-2-sec' into 7-2-stable
  • 2db40ab Merge pull request #55476 from jonathanhefner/excerpt-with-non-whitespace-sep...
  • 02f0a4a Replace "mailing list" with "forum" [ci-skip]
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Mar 24, 2026
Bumps [actionview](https://github.com/rails/rails) from 7.2.2.2 to 7.2.3.1.
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.2.1/actionview/CHANGELOG.md)
- [Commits](rails/rails@v7.2.2.2...v7.2.3.1)

---
updated-dependencies:
- dependency-name: actionview
  dependency-version: 7.2.3.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bundler/actionview-7.2.3.1 branch from c4f1016 to dcec507 Compare April 6, 2026 16:46
@dependabot @github

dependabot Bot commented on behalf of github Apr 6, 2026

Copy link
Copy Markdown
Contributor Author

Looks like actionview is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 6, 2026
@dependabot
dependabot Bot deleted the dependabot/bundler/actionview-7.2.3.1 branch April 6, 2026 16:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants