Skip to content

chore(security): bump rexml past high advisory - #25

Merged
thomasrockhu-codecov merged 1 commit into
mainfrom
th/dependabot-cve-rexml
Aug 11, 2026
Merged

chore(security): bump rexml past high advisory#25
thomasrockhu-codecov merged 1 commit into
mainfrom
th/dependabot-cve-rexml

Conversation

@thomasrockhu-codecov

Copy link
Copy Markdown
Contributor

Summary

  • Pin rexml >= 3.3.6 and refresh Gemfile.lock (3.4.4).
  • Clears Dependabot high alerts (projected until merge).

Test plan

  • CI passes on this branch
  • After merge, Dependabot high count drops to 0

Pin rexml >= 3.3.6 and refresh Gemfile.lock (3.4.4).
@thomasrockhu-codecov
thomasrockhu-codecov merged commit 6917b4e into main Aug 11, 2026
3 of 4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant