Skip to content

Bump activesupport from 7.0.3.1 to 7.0.8#6

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bundler/activesupport-7.0.8
Closed

Bump activesupport from 7.0.3.1 to 7.0.8#6
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bundler/activesupport-7.0.8

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Sep 11, 2023

Bumps activesupport from 7.0.3.1 to 7.0.8.

Release notes

Sourced from activesupport's releases.

7.0.8

Active Support

  • Fix TimeWithZone still using deprecated #to_s when ENV or config to disable it are set.

    Hartley McGuire

  • Fix CacheStore#write_multi when using a distributed Redis cache with a connection pool.

    Fixes #48938.

    Jonathan del Strother

Active Model

  • No changes.

Active Record

  • Fix change_column not setting precision: 6 on datetime columns when using 7.0+ Migrations and SQLite.

    Hartley McGuire

  • Fix unscope is not working in specific case

    Before:

    Post.where(id: 1...3).unscope(where: :id).to_sql # "SELECT `posts`.* FROM `posts` WHERE `posts`.`id` >= 1 AND `posts`.`id` < 3"

    After:

    Post.where(id: 1...3).unscope(where: :id).to_sql # "SELECT `posts`.* FROM `posts`"

    Fixes #48094.

    Kazuya Hatanaka

  • Fix associations to a STI model including a class_name parameter

... (truncated)

Changelog

Sourced from activesupport's changelog.

Rails 7.0.8 (September 09, 2023)

  • Fix TimeWithZone still using deprecated #to_s when ENV or config to disable it are set.

    Hartley McGuire

  • Fix CacheStore#write_multi when using a distributed Redis cache with a connection pool.

    Fixes #48938.

    Jonathan del Strother

Rails 7.0.7.2 (August 22, 2023)

  • No changes.

Rails 7.0.7.1 (August 22, 2023)

  • Use a temporary file for storing unencrypted files while editing

    [CVE-2023-38037]

Rails 7.0.7 (August 09, 2023)

  • Fix Cache::NullStore with local caching for repeated reads.

    fatkodima

  • Fix to_s with no arguments not respecting custom :default formats

    Hartley McGuire

  • Fix ActiveSupport::Inflector.humanize(nil) raising NoMethodError: undefined method `end_with?' for nil:NilClass.

    James Robinson

  • Fix Enumerable#sum for Enumerator#lazy.

    fatkodima, Matthew Draper, Jonathan Hefner

  • Improve error message when EventedFileUpdateChecker is used without a compatible version of the Listen gem

    Hartley McGuire

... (truncated)

Commits
  • fc734f2 Preparing for 7.0.8 release
  • 7bf0e43 Fix TimeWithZone#to_s being overriden with ENV set
  • f5fd433 Document how to remove to_s deprecation warnings when defaul format is changed
  • ed9f292 Merge tag 'v7.0.7.2' into 7-0-stable
  • 3668b4b Preparing for 7.0.7.2 release
  • 2294b8b Bumping version
  • 2766c93 Merge branch '7-0-sec' into 7-0-stable
  • c92caef Preparing for 7.0.7.1 release
  • 936587d updating version / changelog
  • a21d6ed Use a temporary file for storing unencrypted files while editing
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [activesupport](https://github.com/rails/rails) from 7.0.3.1 to 7.0.8.
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v7.0.8/activesupport/CHANGELOG.md)
- [Commits](rails/rails@v7.0.3.1...v7.0.8)

---
updated-dependencies:
- dependency-name: activesupport
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 11, 2023
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Oct 6, 2023

Superseded by #10.

@dependabot dependabot Bot closed this Oct 6, 2023
@dependabot dependabot Bot deleted the dependabot/bundler/activesupport-7.0.8 branch October 6, 2023 05:54
alexstoick added a commit that referenced this pull request Apr 13, 2026
Closes dependabot alerts #1, #2, #3, #4, #5, #6, #7, #8, #9, #10, #11, #12.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants