Conversation
dependabot
bot
added
dependencies
dependabot
bot
force-pushed
the
dependabot/bundler/sqlite3-2.9.0
branch
from
5686a5b to
a909101
Compare
Upgrade Analysis: sqlite3 v2.8.0 → v2.9.026 commits analyzed | 20 no impact | 5 analyzed, no app impact | 1 requires awareness (no action needed) Commits Requiring Mitigation
|
| Commit | Summary | Impact Level |
|---|---|---|
e26be38c |
New Statement#named_params method for SQL parameter introspection |
unlikely impact |
ad86ad7d |
named_params filters out numeric placeholder parameters |
likely impact |
2abcde4a |
named_params includes all named params (:, $, @ prefixed) |
likely impact |
d2aae384 |
Version bump to v2.8.1 (vendored sqlite updated to v3.51.1) | unlikely impact |
b9029a69 |
Version bump to v2.9.0 | likely impact |
No Impact (Skipped)
20 commits assessed as "no impact" during recon (CI config, merge commits, build deps, docs, test framework updates).
Verdict: Safe to merge. The only notable change (Ruby 3.1 support dropped) doesn't affect fizzy since we're on Ruby 3.4.7. The new Statement#named_params API and vendored sqlite3 update are transparent — fizzy uses ActiveRecord exclusively and doesn't call sqlite3 gem APIs directly.
Bumps [sqlite3](https://github.com/sparklemotion/sqlite3-ruby) from 2.8.0 to 2.9.0. - [Release notes](https://github.com/sparklemotion/sqlite3-ruby/releases) - [Changelog](https://github.com/sparklemotion/sqlite3-ruby/blob/main/CHANGELOG.md) - [Commits](sparklemotion/sqlite3-ruby@v2.8.0...v2.9.0) --- updated-dependencies: - dependency-name: sqlite3 dependency-version: 2.9.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
flavorjones
force-pushed
the
dependabot/bundler/sqlite3-2.9.0
branch
from
a909101 to
35dccbf
Compare
1 participant
Bumps sqlite3 from 2.8.0 to 2.9.0.
Release notes
Sourced from sqlite3's releases.
... (truncated)
Changelog
Sourced from sqlite3's changelog.
Commits
b9029a6version bump to v2.9.0f26cb7aMerge pull request #673 from sparklemotion/flavorjones/ruby-4-native-supportd479c81ci: temporarily pin to setup-ruby with windows ruby 440cdd3cdep: add native gem support for Ruby 4.0, drop Ruby 3.1 support9789b37Merge pull request #674 from sparklemotion/flavorjones/ci-arm-runnerse67a33fci: macos-13 is no longer available805f3e3ci: use arm64 runners to speed things up1d701bcMerge pull request #671 from houyuanjie/main58d9a0fFix the inconsistent names in SQLite3::Statement#memused RDoc call-seq3264d47dep: Update actions{upload,download}-artifact (#660)You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)