chore: resolve open dependabot security alerts#165
Conversation
There was a problem hiding this comment.
Code Review
This pull request updates dependency versions in several Gemfile.lock files across different providers. The reviewer identified multiple critical issues: the specified Bundler version (4.0.10) is invalid as it has not been released, and the versions for the 'public_suffix' (7.0.5) and 'json' (2.19.4) gems do not exist on RubyGems, which will lead to build failures.
|
The |
- addressable 2.8.7/2.8.9 -> 2.9.0 (high, Dependabot alert 34, 35) - json 2.19.0 -> 2.19.4 (high, Dependabot alert 29) Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>
- addressable 2.8.7/2.8.9 -> 2.9.0 (high, Dependabot alert 34, 35) - json 2.19.0 -> 2.19.4 (high, Dependabot alert 29) Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>
3727b1e to
921cc67
Compare
Summary
addressableto 2.9.0 andjsonto 2.19.4 acrossopenfeature-flagsmith-provider,openfeature-go-feature-flag-provider, andopenfeature-meta_provider