Bump sinatra, sprockets, rails, active_model_serializers, audited, azure-storage-blob, faraday, faraday-conductivity, faraday_middleware, font-awesome-rails, gds-sso, notifications-ruby-client, plek, factory_bot_rails, pry-byebug, site_prism, rubocop and selenium-webdriver #552

dependabot · 2025-10-10T20:51:44Z

Bumps sinatra, sprockets, rails, active_model_serializers, audited, azure-storage-blob, faraday, faraday-conductivity, faraday_middleware, font-awesome-rails, gds-sso, notifications-ruby-client, plek, factory_bot_rails, pry-byebug, site_prism, rubocop and selenium-webdriver. These dependencies needed to be updated together.
Updates sinatra from 3.1.0 to 4.2.1

Changelog

Sourced from sinatra's changelog.

4.2.1 / 2025-10-10

Fix: Revert "PATH_INFO can never be empty" (#2124)

addresses issues with routing and 404, more in the original pull request

4.2.0 / 2025-10-08

New: Add :static_headers setting for custom headers in static file responses (#2089)

Fix: Fix regex in etag_matches? to prevent ReDoS (#2121)

Fix: PATH_INFO can never be empty (#2114)

Fix: Fix malformed Content-Type headers (#2081)

Fix: Avoid crash for integer values in content_type parameters (#2078)

4.1.1 / 2024-11-20

Fix: Restore WEBrick support (#2067)

4.1.0 / 2024-11-18

New: Add host_authorization setting (#2053)

Defaults to .localhost, .test and any IP address in development mode.

Security: addresses CVE-2024-21510.

Fix: Return an instance of Sinatra::IndifferentHash when calling #except (#2044)

Fix: Address warning from URI for Ruby 3.4 (#2060)

Fix: rackup no longer depends on WEBrick, recommend Puma instead (4a558503)

Fix: Zeitwerk 2.7.0+ compatibility (#2050)

Fix: Address warning about Hash construction for Ruby 3.4 (#2028)

Fix: Declare missing dependencies for Ruby 3.5 (#2032)

Fix: Compatibility with --enable-frozen-string-literal (#2033)

Fix: Rack 3.1 compatibility (#2035)

Don't depend on Rack::Logger

Don't delete content-length header when Rack::Files is used

4.0.1 / 2025-05-24

Rack 3.1 compatibility (#2035)

Fix malformed Content-Type headers (#2081)

Avoid crash for integer values in content_type parameters (#2078)

Fix compatibility with --enable-frozen-string-literal (#2033)

Declare missing dependencies for Ruby 3.5 (#2032)

Fix warning about Hash construction. (#2028)

Support Zeitwerk 2.7.0+ (#2050)

Address URI depreciation (#2060)

... (truncated)

Commits

599a007 4.2.1 release (#2125)
2c7f8db Revert "PATH_INFO can never be empty." (#2124)
f2ad45f 4.2.0 release (#2122)
3fe8c38 Fix regex in etag_matches? to prevent ReDoS (#2121)
fa99a21 PATH_INFO can never be empty. (#2114)
ea0d3fa Skip broken tests. (#2115)
5e15985 Sync changelog for v4.0.1
91cfb54 Add :static_headers setting for custom headers in static file responses (#2089)
c918134 Set rubygems_mfa_required for the sinatra gem (#2087)
ac3ff23 README: Remove duplicate mention of installing puma (#2091)
Additional commits viewable in compare view

Updates sprockets from 3.7.2 to 4.2.2

Release notes

Sourced from sprockets's releases.

v4.2.2

What's Changed

document how to chain ERB for custom processors by @ashkulz in rails/sprockets#807

Drop base64 gem from dependency by @tricknotes in rails/sprockets#810

Add Ruby 3.3 to CI matrix by @m-nakamura145 in rails/sprockets#799

Bump rake version 13.2 or higher to suppress ostruct warnings by @yahonda in rails/sprockets#811

Add logger as dependency to address warnings against Ruby 3.4.0dev by @yahonda in rails/sprockets#813

Address warning: URI::RFC3986_PARSER warnings against ruby 3.4.0dev by @yahonda in rails/sprockets#812

Full Changelog: rails/sprockets@v4.2.1...v4.2.2

4.2.1

What's Changed

Fix .jpeg precompile issue by @ghiculescu in rails/sprockets#781

CI against Ruby 3.2 [changelog skip] by @amatsuda in rails/sprockets#777

Fix header casing compatibility with Rails 7 by @skipkayhil in rails/sprockets#790

fix: set application/css-sourcemap+json default charset to unicode by @chadlwilson in rails/sprockets#764

New Contributors

@ghiculescu made their first contribution in rails/sprockets#781

@skipkayhil made their first contribution in rails/sprockets#791

@jpbalarini made their first contribution in rails/sprockets#768

@chadlwilson made their first contribution in rails/sprockets#764

Full Changelog: rails/sprockets@v4.2.0...v4.2.1

4.2.0

What's Changed

Fix class name in sample code by @ursm in rails/sprockets#751

fix: grammar by @benkoshy in rails/sprockets#756

fix typo by @benkoshy in rails/sprockets#757

Update Link by @benkoshy in rails/sprockets#754

Rack 3 support by @lsylvester in rails/sprockets#758

Make Sprockets::Utils.module_include thread safe on JRuby by @ntkme in rails/sprockets#759

Fix thread safety of Sprockets::CachedEnvironment and Sprockets::Cache::MemoryStore by @eregon in rails/sprockets#771

New Contributors

@ursm made their first contribution in rails/sprockets#751

@benkoshy made their first contribution in rails/sprockets#756

@ntkme made their first contribution in rails/sprockets#759

Full Changelog: rails/sprockets@v4.1.1...v4.2.0

v4.1.1

Fix Sprockets::Server to return response headers to compatible with with Rack::Lint 2.0.

Full Changelog: rails/sprockets@v4.1.0...v4.1.1

v4.1.0

... (truncated)

Changelog

Sourced from sprockets's changelog.

4.2.2

Added missing dependency on logger. #813

Fix URI::RFC3986_PARSER warnings. #812

Removed dependency on base64. #810

4.2.1

Fix for precompile issues when multiple extensions map to the same MIME type (eg. .jpeg / .jpg). #781

Fix application/css-sourcemap+json charset #764

Fix compatibility with Rack 2 applications. #790

4.2.0

Rack 3 compatibility. #758

Fix thread safety of Sprockets::CachedEnvironment and Sprockets::Cache::MemoryStore. #771

Add support for Rack 3.0. Headers set by sprockets will now be lower case. #758

Make Sprockets::Utils.module_include thread safe on JRuby. #759

Fix typo in asset.rb file. #768

4.1.1

Fix Sprockets::Server to return response headers to be compatible with Rack::Lint 2.0.

4.1.0

Allow age to be altered in asset:clean rake task.

Fix Sprockets::Server to return lower-cased response headers to comply with Rack::Lint 3.0. #744

Adding new directive depend_on_directory #668

Fix application/js-sourcemap+json charset #669

Fix CachedEnvironment caching nil values #723

Process *.jst.ejs.erb files with ERBProcessor #674

Fix cache key for coffee script processor to be dependent on the filename #670

4.0.3

Fix Manifest#find yielding from a Promise causing issue on Ruby 3.1.0-dev. #720

Better detect the ERB version to avoid deprecation warnings. #719

Allow assets already fingerprinted to be served through Sprockets::Server

Do not fingerprint files that already contain a valid digest in their name

Remove remaining support for Ruby < 2.4.#672

4.0.2

Fix etag and digest path compilation that were generating string with invalid digest since 4.0.1.

4.0.1

Fix for Ruby 2.7 keyword arguments warning in base.rb. #660

Fix for when x_sprockets_linecount is missing from a source map.

... (truncated)

Commits

4dff018 Release 4.2.2
2fe13f2 Merge pull request #812 from yahonda/uri_rfc3986_parser_escape_and_unescape_a...
19b056c Merge pull request #813 from yahonda/add_logger
ceac1ce Merge pull request #811 from yahonda/bump_rake
e87e7c6 Add logger as dependency to address warnings against Ruby 3.4.0dev
9386ae4 Address warning: URI::RFC3986_PARSER warnings against ruby 3.4.0dev
8b47cd5 Bump rake version 13 or higher to suppress ostruct warnings
37b8468 Merge pull request #799 from m-nakamura145/update-ci-matrix
e4686d5 Merge pull request #810 from tricknotes/drop-base64
b8eaeef Drop base64 gem from dependency
Additional commits viewable in compare view

Updates rails from 6.1.7.7 to 8.0.3

Release notes

Sourced from rails's releases.

8.0.3

Active Support
ActiveSupport::FileUpdateChecker does not depend on Time.now to prevent unnecessary reloads with time travel test helpers

Jan Grodowski

Fix ActiveSupport::BroadcastLogger from executing a block argument for each logger (tagged, info, etc.).

Jared Armstrong

Make ActiveSupport::Logger #freeze-friendly.

Joshua Young

Fix ActiveSupport::HashWithIndifferentAccess#transform_keys! removing defaults.

Hartley McGuire
Fix ActiveSupport::HashWithIndifferentAccess#tranform_keys! to handle collisions.

If the transformation would result in a key equal to another not yet transformed one, it would result in keys being lost.

Before:
>> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1}
After:
>> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1, "d" => 2}
Jason T Johnson, Jean Boussier
Fix ActiveSupport::Cache::MemCacheStore#read_multi to handle network errors.

This method specifically wasn't handling network errors like other codepaths.

Alessandro Dal Grande

Fix configuring RedisCacheStore with raw: true.

fatkodima

... (truncated)

Commits

529f933 Preparing for 8.0.3 release
6409b24 Merge pull request #55719 from skipkayhil/hm-fix-label-for-namespace
030f68c Remove lock for rdoc gem in Gemfile
0160f42 Sync CHANGELOGs
6394bfb Merge pull request #55725 from byroot/js-include-type-module-sym
0ff0d09 Merge pull request #55724 from fatkodima/preserve-locale-eml-preview
74038d7 Merge pull request #55722 from kozy4324/fix-lease-sticky-flag-timing
78fe965 Merge pull request #55710 from Shopify/grodowski/file-update-checker-time-tra...
4fc9618 Merge pull request #55703 from byroot/hly-fix-query-cache-system-tests-2
847072c Fix TransitionTable#as_json compatibility with json 2.14.0
Additional commits viewable in compare view

Updates active_model_serializers from 0.10.13 to 0.10.15

Changelog

Sourced from active_model_serializers's changelog.

v0.10.15 (2024-11-30)

Fixes:

#2482 Fix cant modify frozen Hash error due to rails changes (@vineelvineel)

#2460 Don't force ActionController::TestCase to load (@eugeneius)

Misc:

#2483 Support Rails 8 (@pulkit110)

v0.10.14 (2023-10-05)

Breaking changes:

Features:

Fixes:

#2427 Fix checking of method defined or not (@y-yagi)

Misc:

#2453 Update gem requirement to allow Rails 7.1 (@schinery, @mediafinger)

#2451 Upgrade to Ubuntu 22.04 on Github Actions (@wasifhossain)

#2442 Remove travis settings (@ohbarye)

Commits

8e1b223 chore(version): bump to v0.10.15
eef9fd2 Merge pull request #2483 from pulkit110/0-10-stable
b31d91c Support Rails 8
b21e78b Merge pull request #2482 from vineelvineel/fix_cant_modify_frozen_hash
785b7d3 Fix cant modify frozen Hash error due to rails changes
bda1950 Merge pull request #2460 from eugeneius/lazy_load_action_controller_test_case
bb43abd Don't force ActionController::TestCase to load
2170177 Merge pull request #2459 from Mubramaj/patch-1
09ebef2 Update add_pagination_links.md to add specific instruction for will_paginate gem
717ac11 Merge pull request #2455 from schinery/0-10-stable
Additional commits viewable in compare view

Updates audited from 5.3.3 to 5.8.0

Changelog

Sourced from audited's changelog.

5.8.0 (2024-11-08)

Allow calling audited multiple times - @mohammednasser-32 734

Relax gemspec to allow Rails 8.1 - @BranLiang 738

5.7.0 (2024-08-13)

Support for Rails 7.2 and Ruby 3.3, and testing cleanups - @mattbrictson #723

Allow max_audits to be a proc or symbol - @gmhawash #718

Support Rails 8 - @fernandomenolli #717

5.6.0 (2024-04-05)

Removed support for Rails 5.0 and 5.1.

Replace RequestStore with ActiveSupport::CurrentAttributes - @punkisdead #702

5.5.0 (2024-04-02)

Bad release. Same code as 5.4.1. Use 5.6.0 for updated features.

5.4.3 (2024-01-11)

Ignore readonly columns in audit - @sriddbs #692

Robustify Rails version checks - @blaet #689

Ignore callbacks if not specifed on the model #679

5.4.2 (2023-11-30)

Revert replacing RequetStore with ActiveSupport::CurrentAttributes until it is fully tested.

5.4.1 (2023-11-30)

Replace RequestStore with ActiveSupport::CurrentAttributes - @the-spectator #673

Don't require railtie when used outside of Rails - @nicduke38degrees #665

5.4.0 (2023-09-30)

Add Rails 7.1 support - @yuki24 #686

Commits

f935285 Bump version
05b7aad Merge pull request #739 from collectiveidea/rails8
e64b4e3 Add Rails 8.0 to build matrix
a1847f6 Merge pull request #734 from mohammednasser-32/allow_calling_audited_multiple...
b658e95 Merge pull request #738 from BranLiang/main
f2c9d7d Relax gemspec to allow Rails 8.1
882d1cb remove log message
d1c1b68 return if options did not change
e3a9d1c allow calling audited multiple times
8dc7184 Merge pull request #729 from mattbrictson/ci-rails-main
Additional commits viewable in compare view

Updates azure-storage-blob from 1.1.0 to 2.0.3

Release notes

Sourced from azure-storage-blob's releases.

Storage Client Library for Table 2.0.3

2021.10 - version 2.0.3

Allowed to use any version 1.x of Nokogiri for Ruby version later than or equal to 2.5.0.

Storage Client Library for Queue 2.0.3

2021.10 - version 2.0.3

Allowed to use any version 1.x of Nokogiri for Ruby version later than or equal to 2.5.0.

Storage Client Library for File 2.0.3

2021.10 - version 2.0.3

Allowed to use any version 1.x of Nokogiri for Ruby version later than or equal to 2.5.0.

Storage Client Library for Common 2.0.3

2021.10 - version 2.0.3

Allowed to use any version 1.x of Nokogiri for Ruby version later than or equal to 2.5.0.

Fixed handling of invalid connection strings

Storage Client Library for Table 2.0.2

2020.8 - version 2.0.2

Bumped up Nokogiri version to 1.11.0.rc2 for Ruby version later than or equal to 2.4.0.

Storage Client Library for Queue 2.0.2

2020.8 - version 2.0.2

Bumped up Nokogiri version to 1.11.0.rc2 for Ruby version later than or equal to 2.4.0.

Storage Client Library for File 2.0.2

2020.8 - version 2.0.2

Bumped up Nokogiri version to 1.11.0.rc2 for Ruby version later than or equal to 2.4.0.

Storage Client Library for Common 2.0.2

2020.8 - version 2.0.2

Bumped up Nokogiri version to 1.11.0.rc2 for Ruby version later than or equal to 2.4.0.

Changed to use persistent HTTP client to speed up requests #168.

Explicitly requiring tempfile to avoid runtime errors.

Storage Client Library for Blob 2.0.2

2021.10 - version 2.0.2

Allowed to use any version 1.x of Nokogiri for Ruby version later than or equal to 2.5.0.

Added access tier information and creation time of blob in response.

Storage Client Library for Table 2.0.1

2020.3 - version 2.0.1

Resolved the issue where a wrong version of 'azure-storage-common' is depended on.

Storage Client Library for Queue 2.0.1

2020.3 - version 2.0.1

Resolved the issue where a wrong version of 'azure-storage-common' is depended on.

Storage Client Library for File 2.0.1

2020.3 - version 2.0.1

... (truncated)

Commits

See full diff in compare view

Updates faraday from 0.17.6 to 1.10.4

Release notes

Sourced from faraday's releases.

v1.10.4

What's Changed

Make sure that Faraday::Request::Json and Faraday::Response::Json are correctly autoloaded by @iMacTia in lostisland/faraday#1595

Full Changelog: lostisland/faraday@v1.10.3...v1.10.4

v1.10.3

What's Changed

Add support for Ruby 3.2.0 in Faraday v1.x by @timrogers in lostisland/faraday#1483

New Contributors

@timrogers made their first contribution in lostisland/faraday#1483

Full Changelog: lostisland/faraday@v1.10.2...v1.10.3

v1.10.2

What's Changed

Deprecate three methods for version 2.0 by @hyuraku in lostisland/faraday#1446

Full Changelog: lostisland/faraday@v1.10.1...v1.10.2

v1.10.1

What's Changed

add Faraday#Deprecate to 1.x by @hyuraku in lostisland/faraday#1438

New Contributors

@hyuraku made their first contribution in lostisland/faraday#1438

Full Changelog: lostisland/faraday@v1.10.0...v1.10.1

v1.10.0

What's Changed

Add JSON middleware by @iMacTia in lostisland/faraday#1400

Full Changelog: lostisland/faraday@v1.9.3...v1.10.0

v1.9.3

What's Changed

Re-add support for Ruby 2.4+ by @iMacTia in lostisland/faraday#1371

Full Changelog: lostisland/faraday@v1.9.2...v1.9.3

v1.9.2

What's Changed

Add alias with legacy name to gemified middleware by @iMacTia in lostisland/faraday#1372

Full Changelog: lostisland/faraday@v1.9.1...v1.9.2

... (truncated)

Commits

41c990e Version bump to 1.10.4
435888d Make sure that Faraday::Request::Json and Faraday::Response::Json are cor...
8208693 Use ruby/setup-ruby in publish.yml
eeec367 Fix ruby version in publish.yml
92c038b Update publish.yml to use Ruby 2.7
7a382b5 Version bump to 1.10.3
16506ee Add support for Ruby 3.2.0 in Faraday v1.x (#1483)
d72db28 Fix rack version to '< 3' to avoid backwards incompatible change breaking specs
e7bbb4e Version bump to 1.10.2
2b1f331 Deprecate three methods for version 2.0 (#1446)
Additional commits viewable in compare view

Updates faraday-conductivity from 0.3.1 to 1.0.1

Release notes

Sourced from faraday-conductivity's releases.

v1.0.1

Fix SelectiveErrors default range to what it was before (400...600) (#4)

v1.0.0

Major changes:

SelectiveError middleware updated with new Faraday 1.0.0 error handling #1

Repeater, Mimetype middlewares removed #3

Commits

553faf5 Tick to v1.0.1
80f8103 Merge pull request #4 from sshao/fix_selective_errs_range
1f9172a Revert Selective Errors range to original
a661c74 Tick to v1.0.0
2d6bbb4 Merge pull request #1 from sshao/faraday_1_0_upgrade
500ac34 Update to use Faraday ~> 1.0
4eee42b Merge pull request #3 from sshao/delete_repeater
8101333 Delete Mimetype middleware
21cd866 Delete Repeater middleware
d37b6c5 Merge pull request #2 from sshao/update_ownership
Additional commits viewable in compare view

Updates faraday_middleware from 0.13.1 to 1.2.1

Release notes

Sourced from faraday_middleware's releases.

v1.2.1

What's Changed

Fixes 🐞

fix: drop unused addressable gem by @olleolleolle in lostisland/faraday_middleware#283

Don't register the request/response json middleware for Faraday 1.10+ by @iMacTia in lostisland/faraday_middleware#288

Misc/Docs 📄

Add Ruby 3.1 to CI by @petergoldstein in lostisland/faraday_middleware#278

Add link to awesome-faraday into README by @AlexWayfer in lostisland/faraday_middleware#281

correction in README.md by @Vandit1604 in lostisland/faraday_middleware#284

Adds Ruby 3.2 to CI. by @petergoldstein in lostisland/faraday_middleware#285

README: use GitHub Actions-based badge by @olleolleolle in lostisland/faraday_middleware#289

CI: Trust ruby/setup-ruby to install gems by @olleolleolle in lostisland/faraday_middleware#290

CI: add Ruby 3.3 to test matrix by @olleolleolle in lostisland/faraday_middleware#291

Ci drop yard junk by @olleolleolle in lostisland/faraday_middleware#292

New Contributors

@petergoldstein made their first contribution in lostisland/faraday_middleware#278

@AlexWayfer made their first contribution in lostisland/faraday_middleware#281

@Vandit1604 made their first contribution in lostisland/faraday_middleware#284

Full Changelog: lostisland/faraday_middleware@v1.2.0...v1.2.1

v1.2.0

What's Changed

Allow users to define its own set of Cacheable Status Code when using Faraday Middleware Cache by @Physium in lostisland/faraday_middleware#275

New Contributors

@Physium made their first contribution in lostisland/faraday_middleware#275

Full Changelog: lostisland/faraday_middleware@v1.1.0...v1.2.0

v1.1.0

Features

Use wrapped exception in Faraday::ParsingError to improve legibility of the error (#255, @d-m-u)

Bugs fixed

Use JSON.generate instead of .dump in request middleware (#266, @Be-ngt-oH)

Chores and misc

Add rubocop-package and drop git ls-files in gemspec (#263, @utkarsh2102)

v1.0.0

This is FaradayMiddleware 1.0 official release 🎉!

This release officially supports Faraday 1.0.

... (truncated)

Commits

b49e8ec Version bump to 1.2.1
d0cc061 CI: Rely on --format progress in RuboCop being default
7e9783c CI: Drop linting step yard-junk
d9eab98 README: Use a Retina gem version badge [ci skip]
88ed602 Don't register the request/response json middleware for Faraday 1.10+ (#288)
8786fb6 CI: use Ruby 2.7 in publish.yml
86ef0ae CI: add Ruby 3.3 to test matrix (#291)
1866410 CI: Trust ruby/setup-ruby to install gems (#290)
c5845c5 README: use GitHub Actions-based badge
e68ff84 Enable a more recent simplecov
Additional commits viewable in compare view

Updates font-awesome-rails from 4.7.0.8 to 4.7.0.9

Release notes

Sourced from font-awesome-rails's releases.

v4.7.0.9

Update Build Matrix and Add Rails 8 Support #234

Changelog

Sourced from font-awesome-rails's changelog.

See GitHub Releases for all future releases

Changes

Version FontAwesome SHA1 Notes / Other additions

4.7.0.9 a8386aa added Rails 8.0 support

4.7.0.8 a8386aa added Rails 7.0 support

4.7.0.7 a8386aa added Ruby 3.0 support; removes Rails 3.2 support

4.7.0.6 a8386aa added Rails 6.1 support

4.7.0.5 a8386aa added Rails 6.0 support

4.7.0.4 a8386aa added Rails 5.2 support

4.7.0.3 a8386aa improve gemspec description

4.7.0.2 a8386aa added Rails 5.1 support

4.7.0.1 a8386aa helpers no longer modify passed options

4.7.0.0 a8386aa 4.7.0 release (new icons)

4.6.3.1 8e241f2 Removed version query string from font assets

4.6.3.0 8e241f2 4.6.3 release (new brand icons)

4.6.2.0 e7cc59d 4.6.2 release (fixes and new icons)

4.6.1.0 6535013 4.6.1 release (minor stylesheet fixes)

4.6.0.0 5697be9 4.6.0 release (new icons)

4.5.0.1 dbc8d1b added official Rails 5 support

4.5.0.0 dbc8d1b 4.5.0 release (new icons)

4.4.0.0 e554555 4.4.0 release (new icons)

4.3.0.0 41b9ed0 4.3.0 release (new icons)

4.2.0.0 a65bd93 4.2.0 release (new icons)

4.1.0.0 2649d91 4.1.0 release (new icons)

4.0.3.2 0373b63 icon right alignment support in helpers

4.0.3.1 0373b63 asset pipeline improvements

4.0.3.0 0373b63 4.0.3 release (minor icon renames and updates)

4.0.1.0 c84c8ab 4.0.1 release (fixed hdd icon and fa-stack alignment)

4.0.0.0 4e92eeb 4.0.0 release (new naming conventions, new icons, IE7 support dropped)

3.2.1.3 b1a8ad4 added fa_icon and fa_stacked_icon view helpers

3.2.1.2 b1a8ad4 fixed suffix on svg font url during asset precompilation

3.2.1.1 b1a8ad4 renamed Font::Awesome module to FontAwesome to avoid Font name conflicts

3.2.1.0 b1a8ad4 3.2.1 release (stylesheet fixes)

3.2.0.0 a9065a1 3.2.0 release (new icons)

3.1.1.3 949a765 repackaged gem; cleaned out extraneous files

3.1.1.2 949a765 vendor/assets -> app/assets; Improved Rails 4 support

3.1.1.1 949a765 asset_path -> font_path usage; Now requires Rails >= 3.2.

3.1.1.0 949a765 3.1.1 release (icon fixes)

3.1.0.0 a4612d8 3.1.0 release (new icons)

3.0.2.0 13d5dd3 3.0.2 release (better IE7 rendering)

3.0.1.0 7d173f2 3.0.1 release (bug fixes and alignment improvements)

0.5.0 contrib (christhekeele) Attempt to prepare request to 3.0 release of font-awesome

0.4.0 05e5e5b Pullup request to 2.0 release of font-awesome

0.3.0 (unknown) (sorry, will make sure that doesn't happen again)

0.2.1 563a6f3 Forgot I had patched the css to reflect the font assetified location.

0.2.0 563a6f3 Repackaged after their new release

0.1.0 378b2d7 Simplest packaging as a gem as possible

... (truncated)

Commits

60150e4 Update readme formatting
207cfbc Bump version to 4.7.0.9
c82f80b Merge pull request #234 from bokmann/233-rails-8
50f961d Add rails 8 support
4f71148 Update build matrix
360d931 Dropping Rails 4 from build matrix
2949765 Pin gems in rails-4.2 gemfile
dbda6c8 Suggest font-awesome-sass for Font Awesome 5/6
e26d8c2 Merge pull request #228 from franco-cf/update-official-urls
c8e3190 docs: update font awesome official urls
Additional commits viewable in compare view

Updates gds-sso from 15.0.1 to 22.1.1

Changelog

Sourced from gds-sso's changelog.

22.1.1

Remove accidental dependency on climate_control #342

22.1.0

Add User#anonymous_user_id #341

22.0.0

BREAKING: Don't store overly long return_to paths in the session cookie. Specifically paths over 2048 bytes (2kB) which is very large and therefore hopefully not breaking in practice.

21.1.0

Setting an ENV var of GDS_SSO_MOCK_INVALID causes mock bearer token auth to fail, mirroring the behaviour of the non-bearer token strategy.

Fix an issue where Signon callbacks to api_only apps weren't possible because routes weren't available.

Fixes usage of GDS::SSO.config.api_request_matcher blocking authentication of GDS SSO internal API. Matcher for GDS SSO API can be configured with GDS::SSO.config { |config| config.gds_sso_api_request_matcher = ->(request) { request.path.start_with?("/custom/api") }}

21.0.0

BREAKING: Apps using api_only mode were incorrectly using a session auth when used without a bearer token (typically dev/test environments) this has been resolved and this may cause breaking workflows due to user permission differences between session and bearer token strategies. This can be resolved by configuring the additional_mock_permissions_required config option.

Adds config option for apps to enable API mode for a subset of routes. This can be enabled with an initialiser: GDS::SSO.config { |config| config.api_request_matcher = ->(request) { request.path.start_with?("/api/") } }.

BREAKING: Removed deprecated GDS::SSO::ControllerMethods::PermissionDeniedException.

BREAKING: MockBearerToken returns a specified GDS::SS...
Description has been truncated

…ure-storage-blob, faraday, faraday-conductivity, faraday_middleware, font-awesome-rails, gds-sso, notifications-ruby-client, plek, factory_bot_rails, pry-byebug, site_prism, rubocop and selenium-webdriver Bumps [sinatra](https://github.com/sinatra/sinatra), [sprockets](https://github.com/rails/sprockets), [rails](https://github.com/rails/rails), [active_model_serializers](https://github.com/rails-api/active_model_serializers), [audited](https://github.com/collectiveidea/audited), [azure-storage-blob](https://github.com/azure/azure-storage-ruby), [faraday](https://github.com/lostisland/faraday), [faraday-conductivity](https://github.com/enova/faraday-conductivity), [faraday_middleware](https://github.com/lostisland/faraday_middleware), [font-awesome-rails](https://github.com/bokmann/font-awesome-rails), [gds-sso](https://github.com/alphagov/gds-sso), [notifications-ruby-client](https://github.com/alphagov/notifications-ruby-client), [plek](https://github.com/alphagov/plek), [factory_bot_rails](https://github.com/thoughtbot/factory_bot_rails), [pry-byebug](https://github.com/deivid-rodriguez/pry-byebug), [site_prism](https://github.com/site-prism/site_prism), [rubocop](https://github.com/rubocop/rubocop) and [selenium-webdriver](https://github.com/SeleniumHQ/selenium). These dependencies needed to be updated together. Updates `sinatra` from 3.1.0 to 4.2.1 - [Changelog](https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md) - [Commits](sinatra/sinatra@v3.1.0...v4.2.1) Updates `sprockets` from 3.7.2 to 4.2.2 - [Release notes](https://github.com/rails/sprockets/releases) - [Changelog](https://github.com/rails/sprockets/blob/main/CHANGELOG.md) - [Commits](rails/sprockets@v3.7.2...v4.2.2) Updates `rails` from 6.1.7.7 to 8.0.3 - [Release notes](https://github.com/rails/rails/releases) - [Commits](rails/rails@v6.1.7.7...v8.0.3) Updates `active_model_serializers` from 0.10.13 to 0.10.15 - [Release notes](https://github.com/rails-api/active_model_serializers/releases) - [Changelog](https://github.com/rails-api/active_model_serializers/blob/v0.10.15/CHANGELOG.md) - [Commits](rails-api/active_model_serializers@v0.10.13...v0.10.15) Updates `audited` from 5.3.3 to 5.8.0 - [Changelog](https://github.com/collectiveidea/audited/blob/main/CHANGELOG.md) - [Commits](collectiveidea/audited@v5.3.3...v5.8.0) Updates `azure-storage-blob` from 1.1.0 to 2.0.3 - [Release notes](https://github.com/azure/azure-storage-ruby/releases) - [Changelog](https://github.com/Azure/azure-storage-ruby/blob/master/ChangeLog.md) - [Commits](https://github.com/azure/azure-storage-ruby/commits) Updates `faraday` from 0.17.6 to 1.10.4 - [Release notes](https://github.com/lostisland/faraday/releases) - [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md) - [Commits](lostisland/faraday@v0.17.6...v1.10.4) Updates `faraday-conductivity` from 0.3.1 to 1.0.1 - [Release notes](https://github.com/enova/faraday-conductivity/releases) - [Commits](enova/faraday-conductivity@v0.3.1...v1.0.1) Updates `faraday_middleware` from 0.13.1 to 1.2.1 - [Release notes](https://github.com/lostisland/faraday_middleware/releases) - [Commits](lostisland/faraday_middleware@v0.13.1...v1.2.1) Updates `font-awesome-rails` from 4.7.0.8 to 4.7.0.9 - [Release notes](https://github.com/bokmann/font-awesome-rails/releases) - [Changelog](https://github.com/bokmann/font-awesome-rails/blob/master/CHANGELOG.md) - [Commits](bokmann/font-awesome-rails@v4.7.0.8...v4.7.0.9) Updates `gds-sso` from 15.0.1 to 22.1.1 - [Changelog](https://github.com/alphagov/gds-sso/blob/main/CHANGELOG.md) - [Commits](alphagov/gds-sso@v15.0.1...v22.1.1) Updates `notifications-ruby-client` from 5.4.0 to 6.3.0 - [Changelog](https://github.com/alphagov/notifications-ruby-client/blob/main/CHANGELOG.md) - [Commits](https://github.com/alphagov/notifications-ruby-client/commits) Updates `plek` from 3.0.0 to 5.2.2 - [Changelog](https://github.com/alphagov/plek/blob/main/CHANGELOG.md) - [Commits](alphagov/plek@v3.0.0...v5.2.2) Updates `factory_bot_rails` from 6.2.0 to 6.5.1 - [Release notes](https://github.com/thoughtbot/factory_bot_rails/releases) - [Changelog](https://github.com/thoughtbot/factory_bot_rails/blob/main/NEWS.md) - [Commits](thoughtbot/factory_bot_rails@v6.2.0...v6.5.1) Updates `pry-byebug` from 3.10.1 to 3.11.0 - [Release notes](https://github.com/deivid-rodriguez/pry-byebug/releases) - [Changelog](https://github.com/deivid-rodriguez/pry-byebug/blob/master/CHANGELOG.md) - [Commits](deivid-rodriguez/pry-byebug@v3.10.1...v3.11.0) Updates `site_prism` from 4.0.3 to 5.1 - [Release notes](https://github.com/site-prism/site_prism/releases) - [Changelog](https://github.com/site-prism/site_prism/blob/main/CHANGELOG.md) - [Commits](site-prism/site_prism@v4.0.3...v5.1) Updates `rubocop` from 1.56.3 to 1.81.1 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.56.3...v1.81.1) Updates `selenium-webdriver` from 4.12.0 to 4.36.0 - [Release notes](https://github.com/SeleniumHQ/selenium/releases) - [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES) - [Commits](SeleniumHQ/selenium@selenium-4.12.0...selenium-4.36.0) --- updated-dependencies: - dependency-name: sinatra dependency-version: 4.2.1 dependency-type: direct:production - dependency-name: sprockets dependency-version: 4.2.2 dependency-type: direct:production - dependency-name: rails dependency-version: 8.0.3 dependency-type: direct:production - dependency-name: active_model_serializers dependency-version: 0.10.15 dependency-type: direct:production - dependency-name: audited dependency-version: 5.8.0 dependency-type: direct:production - dependency-name: azure-storage-blob dependency-version: 2.0.3 dependency-type: direct:production - dependency-name: faraday dependency-version: 1.10.4 dependency-type: direct:production - dependency-name: faraday-conductivity dependency-version: 1.0.1 dependency-type: direct:production - dependency-name: faraday_middleware dependency-version: 1.2.1 dependency-type: direct:production - dependency-name: font-awesome-rails dependency-version: 4.7.0.9 dependency-type: direct:production - dependency-name: gds-sso dependency-version: 22.1.1 dependency-type: direct:production - dependency-name: notifications-ruby-client dependency-version: 6.3.0 dependency-type: direct:production - dependency-name: plek dependency-version: 5.2.2 dependency-type: direct:production - dependency-name: factory_bot_rails dependency-version: 6.5.1 dependency-type: direct:development - dependency-name: pry-byebug dependency-version: 3.11.0 dependency-type: direct:development - dependency-name: site_prism dependency-version: '5.1' dependency-type: direct:development - dependency-name: rubocop dependency-version: 1.81.1 dependency-type: direct:development - dependency-name: selenium-webdriver dependency-version: 4.36.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Oct 10, 2025

dependabot bot force-pushed the dependabot/bundler/multi-ebb2826400 branch 2 times, most recently from 0da6a89 to 8b187f4 Compare October 13, 2025 09:29

dependabot bot force-pushed the dependabot/bundler/multi-ebb2826400 branch from 8b187f4 to 7e77568 Compare October 31, 2025 10:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump sinatra, sprockets, rails, active_model_serializers, audited, azure-storage-blob, faraday, faraday-conductivity, faraday_middleware, font-awesome-rails, gds-sso, notifications-ruby-client, plek, factory_bot_rails, pry-byebug, site_prism, rubocop and selenium-webdriver #552

Bump sinatra, sprockets, rails, active_model_serializers, audited, azure-storage-blob, faraday, faraday-conductivity, faraday_middleware, font-awesome-rails, gds-sso, notifications-ruby-client, plek, factory_bot_rails, pry-byebug, site_prism, rubocop and selenium-webdriver #552

Uh oh!

dependabot bot commented on behalf of github Oct 10, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Version	FontAwesome SHA1	Notes / Other additions
4.7.0.9	`a8386aa`	added Rails 8.0 support
4.7.0.8	`a8386aa`	added Rails 7.0 support
4.7.0.7	`a8386aa`	added Ruby 3.0 support; removes Rails 3.2 support
4.7.0.6	`a8386aa`	added Rails 6.1 support
4.7.0.5	`a8386aa`	added Rails 6.0 support
4.7.0.4	`a8386aa`	added Rails 5.2 support
4.7.0.3	`a8386aa`	improve gemspec description
4.7.0.2	`a8386aa`	added Rails 5.1 support
4.7.0.1	`a8386aa`	helpers no longer modify passed options
4.7.0.0	`a8386aa`	4.7.0 release (new icons)
4.6.3.1	`8e241f2`	Removed version query string from font assets
4.6.3.0	`8e241f2`	4.6.3 release (new brand icons)
4.6.2.0	`e7cc59d`	4.6.2 release (fixes and new icons)
4.6.1.0	`6535013`	4.6.1 release (minor stylesheet fixes)
4.6.0.0	`5697be9`	4.6.0 release (new icons)
4.5.0.1	`dbc8d1b`	added official Rails 5 support
4.5.0.0	`dbc8d1b`	4.5.0 release (new icons)
4.4.0.0	`e554555`	4.4.0 release (new icons)
4.3.0.0	`41b9ed0`	4.3.0 release (new icons)
4.2.0.0	`a65bd93`	4.2.0 release (new icons)
4.1.0.0	`2649d91`	4.1.0 release (new icons)
4.0.3.2	`0373b63`	icon right alignment support in helpers
4.0.3.1	`0373b63`	asset pipeline improvements
4.0.3.0	`0373b63`	4.0.3 release (minor icon renames and updates)
4.0.1.0	`c84c8ab`	4.0.1 release (fixed hdd icon and fa-stack alignment)
4.0.0.0	`4e92eeb`	4.0.0 release (new naming conventions, new icons, IE7 support dropped)
3.2.1.3	`b1a8ad4`	added `fa_icon` and `fa_stacked_icon` view helpers
3.2.1.2	`b1a8ad4`	fixed suffix on svg font url during asset precompilation
3.2.1.1	`b1a8ad4`	renamed Font::Awesome module to FontAwesome to avoid Font name conflicts
3.2.1.0	`b1a8ad4`	3.2.1 release (stylesheet fixes)
3.2.0.0	`a9065a1`	3.2.0 release (new icons)
3.1.1.3	`949a765`	repackaged gem; cleaned out extraneous files
3.1.1.2	`949a765`	vendor/assets -> app/assets; Improved Rails 4 support
3.1.1.1	`949a765`	asset_path -> font_path usage; Now requires Rails >= 3.2.
3.1.1.0	`949a765`	3.1.1 release (icon fixes)
3.1.0.0	`a4612d8`	3.1.0 release (new icons)
3.0.2.0	`13d5dd3`	3.0.2 release (better IE7 rendering)
3.0.1.0	`7d173f2`	3.0.1 release (bug fixes and alignment improvements)
0.5.0	`contrib`	(christhekeele) Attempt to prepare request to 3.0 release of font-awesome
0.4.0	`05e5e5b`	Pullup request to 2.0 release of font-awesome
0.3.0	(unknown)	(sorry, will make sure that doesn't happen again)
0.2.1	`563a6f3`	Forgot I had patched the css to reflect the font assetified location.
0.2.0	`563a6f3`	Repackaged after their new release
0.1.0	`378b2d7`	Simplest packaging as a gem as possible

Bump sinatra, sprockets, rails, active_model_serializers, audited, azure-storage-blob, faraday, faraday-conductivity, faraday_middleware, font-awesome-rails, gds-sso, notifications-ruby-client, plek, factory_bot_rails, pry-byebug, site_prism, rubocop and selenium-webdriver #552

Are you sure you want to change the base?

Bump sinatra, sprockets, rails, active_model_serializers, audited, azure-storage-blob, faraday, faraday-conductivity, faraday_middleware, font-awesome-rails, gds-sso, notifications-ruby-client, plek, factory_bot_rails, pry-byebug, site_prism, rubocop and selenium-webdriver #552

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

4.2.1 / 2025-10-10

4.2.0 / 2025-10-08

4.1.1 / 2024-11-20

4.1.0 / 2024-11-18

4.0.1 / 2025-05-24

v4.2.2

What's Changed

4.2.1

What's Changed

New Contributors

4.2.0

What's Changed

New Contributors

v4.1.1

v4.1.0

4.2.2

4.2.1

4.2.0

4.1.1

4.1.0

4.0.3

4.0.2

4.0.1

8.0.3

Active Support

v0.10.15 (2024-11-30)

v0.10.14 (2023-10-05)

5.8.0 (2024-11-08)

5.7.0 (2024-08-13)

5.6.0 (2024-04-05)

5.5.0 (2024-04-02)

5.4.3 (2024-01-11)

5.4.2 (2023-11-30)

5.4.1 (2023-11-30)

5.4.0 (2023-09-30)

Storage Client Library for Table 2.0.3

Storage Client Library for Queue 2.0.3

Storage Client Library for File 2.0.3

Storage Client Library for Common 2.0.3

Storage Client Library for Table 2.0.2

Storage Client Library for Queue 2.0.2

Storage Client Library for File 2.0.2

Storage Client Library for Common 2.0.2

Storage Client Library for Blob 2.0.2

Storage Client Library for Table 2.0.1

Storage Client Library for Queue 2.0.1

Storage Client Library for File 2.0.1

v1.10.4

What's Changed

v1.10.3

What's Changed

New Contributors

v1.10.2

What's Changed

v1.10.1

What's Changed

New Contributors

v1.10.0

What's Changed

v1.9.3

What's Changed

v1.9.2

What's Changed

v1.0.1

v1.0.0

v1.2.1

What's Changed

Fixes 🐞

Misc/Docs 📄

New Contributors

v1.2.0

What's Changed

New Contributors

dependabot bot commented on behalf of github Oct 10, 2025 •

edited

Loading