Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updating dependencies of the project #884

Open
wants to merge 4 commits into
base: integration
Choose a base branch
from

Conversation

Dishebh
Copy link

@Dishebh Dishebh commented Jan 30, 2020

Keeping the project dependencies upto date.

Fixes issue #885

Dishebh and others added 4 commits November 1, 2019 10:49
* Bump angularjs-file-upload-rails from 1.1.6 to 2.4.1

Bumps [angularjs-file-upload-rails](https://github.com/marthyn/angularjs-file-upload-rails) from 1.1.6 to 2.4.1.
- [Release notes](https://github.com/marthyn/angularjs-file-upload-rails/releases)
- [Commits](https://github.com/marthyn/angularjs-file-upload-rails/commits/v2.4.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

* Bump redcarpet from 3.3.4 to 3.5.0

Bumps [redcarpet](https://github.com/vmg/redcarpet) from 3.3.4 to 3.5.0.
- [Release notes](https://github.com/vmg/redcarpet/releases)
- [Changelog](https://github.com/vmg/redcarpet/blob/master/CHANGELOG.md)
- [Commits](vmg/redcarpet@v3.3.4...v3.5.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

* Bump meta_request from 0.3.4 to 0.7.2

Bumps [meta_request](https://github.com/dejan/rails_panel) from 0.3.4 to 0.7.2.
- [Release notes](https://github.com/dejan/rails_panel/releases)
- [Changelog](https://github.com/dejan/rails_panel/blob/master/CHANGELOG.md)
- [Commits](dejan/rails_panel@meta_request-0.3.4...meta_request-0.7.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

* [Security] Bump rubyzip from 1.1.7 to 1.3.0

Bumps [rubyzip](https://github.com/rubyzip/rubyzip) from 1.1.7 to 1.3.0. **This update includes security fixes.**
- [Release notes](https://github.com/rubyzip/rubyzip/releases)
- [Changelog](https://github.com/rubyzip/rubyzip/blob/master/Changelog.md)
- [Commits](rubyzip/rubyzip@v1.1.7...v1.3.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

* Bump pg_search from 1.0.5 to 2.3.0

Bumps [pg_search](https://github.com/Casecommons/pg_search) from 1.0.5 to 2.3.0.
- [Release notes](https://github.com/Casecommons/pg_search/releases)
- [Changelog](https://github.com/Casecommons/pg_search/blob/master/CHANGELOG.md)
- [Commits](Casecommons/pg_search@v1.0.5...v2.3.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

* [Security] Bump nokogiri from 1.6.7.2 to 1.10.7

Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.6.7.2 to 1.10.7. **This update includes security fixes.**
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/master/CHANGELOG.md)
- [Commits](sparklemotion/nokogiri@v1.6.7.2...v1.10.7)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

* [Security] Bump sprockets from 3.5.2 to 3.7.2

Bumps [sprockets](https://github.com/rails/sprockets) from 3.5.2 to 3.7.2. **This update includes a security fix.**
- [Release notes](https://github.com/rails/sprockets/releases)
- [Changelog](https://github.com/rails/sprockets/blob/v3.7.2/CHANGELOG.md)
- [Commits](rails/sprockets@v3.5.2...v3.7.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

* [Security] Bump ffi from 1.9.10 to 1.12.1

Bumps [ffi](https://github.com/ffi/ffi) from 1.9.10 to 1.12.1. **This update includes a security fix.**
- [Release notes](https://github.com/ffi/ffi/releases)
- [Changelog](https://github.com/ffi/ffi/blob/master/CHANGELOG.md)
- [Commits](ffi/ffi@1.9.10...1.12.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

* Bump rspec-rails from 3.2.1 to 3.9.0

Bumps [rspec-rails](https://github.com/rspec/rspec-rails) from 3.2.1 to 3.9.0.
- [Release notes](https://github.com/rspec/rspec-rails/releases)
- [Changelog](https://github.com/rspec/rspec-rails/blob/master/Changelog.md)
- [Commits](rspec/rspec-rails@v3.2.1...v3.9.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
@norbusan
Copy link
Collaborator

Have you tested whether all these changes keep the project running?

@Dishebh
Copy link
Author

Dishebh commented Jan 30, 2020

@norbusan these were the changes suggested by dependabot. So, maybe it doesn't break the flow of the project...?

Copy link
Collaborator

@munen munen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@Dishebh dependabot doesn't test the functionality of the project.

To merge this PR, either the correct tests need to be written/run or manual testing is needed to confirm functionality.

@munen munen requested review from mariobehling and removed request for branch14 January 30, 2020 15:15
@Dishebh
Copy link
Author

Dishebh commented Jan 30, 2020

@Dishebh dependabot doesn't test the functionality of the project.

To merge this PR, either the correct tests need to be written/run or manual testing is needed to confirm functionality.

looking into it. Thanks for the review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants