Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 31, 2022

Bumps rack-attack from 6.5.0 to 6.6.0.

Release notes

Sourced from rack-attack's releases.

v6.6.0

Details in CHANGELOG entry.

Changelog

Sourced from rack-attack's changelog.

[6.6.0] - 2022-01-29

Added

  • Ability to have access to the request object instead of only env (still can access env with request.env) when customizing throttle and blocklist responses with new methods Rack::Attack.blocklisted_responder= and Rack::Attack.throttled_responder= which yield the request to your lambda. ([@​NikolayRys])

Deprecated

  • Rack::Attack.blocklisted_response=
  • Rack::Attack.throttled_response=
Commits
  • d0ec4de Bump gem version to v6.6.0
  • 3eca60d Merge pull request #556 from zarqman/dalli3-and-rails7
  • 97abc93 test: update rails 7 appraisal after final release
  • 8d9c884 Merge branch 'master' into dalli3-and-rails7
  • d204006 Merge branch 'ruby-3-1'
  • 9ccf628 Merge pull request #565 from orhantoy/include-license-in-gem-build
  • 501ab01 ci: run tests against ruby 3.1
  • aaeff6d feat: deprecate throttled_response and blocklisted_response
  • 8bf9d4e refactor: attempt to make method name more self explanatory and clear
  • c95f962 Include LICENSE in gem build
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jan 31, 2022
@dependabot dependabot bot force-pushed the dependabot/bundler/rack-attack-6.6.0 branch from e9367a0 to f2c8056 Compare February 10, 2022 14:10
@ClearlyClaire
Copy link
Contributor

Seems fine, the test seem unrelated, but flaky for some reason, it should probably be investigated.

dependabot bot and others added 2 commits March 12, 2022 08:35
Bumps [rack-attack](https://github.com/rack/rack-attack) from 6.5.0 to 6.6.0.
- [Release notes](https://github.com/rack/rack-attack/releases)
- [Changelog](https://github.com/rack/rack-attack/blob/master/CHANGELOG.md)
- [Commits](rack/rack-attack@v6.5.0...v6.6.0)

---
updated-dependencies:
- dependency-name: rack-attack
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@Gargron Gargron force-pushed the dependabot/bundler/rack-attack-6.6.0 branch from b5df659 to 640538c Compare March 12, 2022 07:35
@Gargron Gargron merged commit 46ad7fe into main Mar 12, 2022
@Gargron Gargron deleted the dependabot/bundler/rack-attack-6.6.0 branch March 12, 2022 08:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants