-
Notifications
You must be signed in to change notification settings - Fork 17
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Updating dependencies of the project #884
base: integration
Are you sure you want to change the base?
Conversation
* Bump angularjs-file-upload-rails from 1.1.6 to 2.4.1 Bumps [angularjs-file-upload-rails](https://github.com/marthyn/angularjs-file-upload-rails) from 1.1.6 to 2.4.1. - [Release notes](https://github.com/marthyn/angularjs-file-upload-rails/releases) - [Commits](https://github.com/marthyn/angularjs-file-upload-rails/commits/v2.4.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> * Bump redcarpet from 3.3.4 to 3.5.0 Bumps [redcarpet](https://github.com/vmg/redcarpet) from 3.3.4 to 3.5.0. - [Release notes](https://github.com/vmg/redcarpet/releases) - [Changelog](https://github.com/vmg/redcarpet/blob/master/CHANGELOG.md) - [Commits](vmg/redcarpet@v3.3.4...v3.5.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> * Bump meta_request from 0.3.4 to 0.7.2 Bumps [meta_request](https://github.com/dejan/rails_panel) from 0.3.4 to 0.7.2. - [Release notes](https://github.com/dejan/rails_panel/releases) - [Changelog](https://github.com/dejan/rails_panel/blob/master/CHANGELOG.md) - [Commits](dejan/rails_panel@meta_request-0.3.4...meta_request-0.7.2) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> * [Security] Bump rubyzip from 1.1.7 to 1.3.0 Bumps [rubyzip](https://github.com/rubyzip/rubyzip) from 1.1.7 to 1.3.0. **This update includes security fixes.** - [Release notes](https://github.com/rubyzip/rubyzip/releases) - [Changelog](https://github.com/rubyzip/rubyzip/blob/master/Changelog.md) - [Commits](rubyzip/rubyzip@v1.1.7...v1.3.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> * Bump pg_search from 1.0.5 to 2.3.0 Bumps [pg_search](https://github.com/Casecommons/pg_search) from 1.0.5 to 2.3.0. - [Release notes](https://github.com/Casecommons/pg_search/releases) - [Changelog](https://github.com/Casecommons/pg_search/blob/master/CHANGELOG.md) - [Commits](Casecommons/pg_search@v1.0.5...v2.3.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> * [Security] Bump nokogiri from 1.6.7.2 to 1.10.7 Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.6.7.2 to 1.10.7. **This update includes security fixes.** - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/master/CHANGELOG.md) - [Commits](sparklemotion/nokogiri@v1.6.7.2...v1.10.7) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> * [Security] Bump sprockets from 3.5.2 to 3.7.2 Bumps [sprockets](https://github.com/rails/sprockets) from 3.5.2 to 3.7.2. **This update includes a security fix.** - [Release notes](https://github.com/rails/sprockets/releases) - [Changelog](https://github.com/rails/sprockets/blob/v3.7.2/CHANGELOG.md) - [Commits](rails/sprockets@v3.5.2...v3.7.2) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> * [Security] Bump ffi from 1.9.10 to 1.12.1 Bumps [ffi](https://github.com/ffi/ffi) from 1.9.10 to 1.12.1. **This update includes a security fix.** - [Release notes](https://github.com/ffi/ffi/releases) - [Changelog](https://github.com/ffi/ffi/blob/master/CHANGELOG.md) - [Commits](ffi/ffi@1.9.10...1.12.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> * Bump rspec-rails from 3.2.1 to 3.9.0 Bumps [rspec-rails](https://github.com/rspec/rspec-rails) from 3.2.1 to 3.9.0. - [Release notes](https://github.com/rspec/rspec-rails/releases) - [Changelog](https://github.com/rspec/rspec-rails/blob/master/Changelog.md) - [Commits](rspec/rspec-rails@v3.2.1...v3.9.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
Have you tested whether all these changes keep the project running? |
@norbusan these were the changes suggested by dependabot. So, maybe it doesn't break the flow of the project...? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@Dishebh dependabot doesn't test the functionality of the project.
To merge this PR, either the correct tests need to be written/run or manual testing is needed to confirm functionality.
looking into it. Thanks for the review |
Keeping the project dependencies upto date.
Fixes issue #885