Skip to content

build(deps): bump sinatra from 4.1.0 to 4.2.0 in /rapidconnect - #43

Open
dependabot[bot] wants to merge 1 commit into
tuakiri-developfrom
dependabot/bundler/rapidconnect/sinatra-4.2.0
Open

build(deps): bump sinatra from 4.1.0 to 4.2.0 in /rapidconnect#43
dependabot[bot] wants to merge 1 commit into
tuakiri-developfrom
dependabot/bundler/rapidconnect/sinatra-4.2.0

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubOct 10, 2025

Copy link
Copy Markdown
Contributor

Bumps sinatra from 4.1.0 to 4.2.0.

Changelog

Sourced from sinatra's changelog.

4.2.0 / 2025-10-08

  • New: Add :static_headers setting for custom headers in static file responses (#2089)
  • Fix: Fix regex in etag_matches? to prevent ReDoS (#2121)
  • Fix: PATH_INFO can never be empty (#2114)
  • Fix: Fix malformed Content-Type headers (#2081)
  • Fix: Avoid crash for integer values in content_type parameters (#2078)

4.1.1 / 2024-11-20

  • Fix: Restore WEBrick support (#2067)
Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabotdependabotBot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Oct 10, 2025
@vladimir-mencl-eresearch

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
dependabotBotforce-pushed the dependabot/bundler/rapidconnect/sinatra-4.2.0 branch 2 times, most recently from f9305b3 to acb2c70CompareOctober 13, 2025 02:07
@dependabot@github

dependabotBot commented on behalf of githubOct 13, 2025

Copy link
Copy Markdown
ContributorAuthor

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabotBot deleted the dependabot/bundler/rapidconnect/sinatra-4.2.0 branch October 13, 2025 02:25
@vladimir-mencl-eresearch
vladimir-mencl-eresearch restored the dependabot/bundler/rapidconnect/sinatra-4.2.0 branch March 25, 2026 04:04
@vladimir-mencl-eresearch

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
dependabotBotforce-pushed the dependabot/bundler/rapidconnect/sinatra-4.2.0 branch 2 times, most recently from 1f8f209 to 3a14774CompareMarch 25, 2026 04:06
@vladimir-mencl-eresearch

Copy link
Copy Markdown
Contributor

This breaks the app and will require further work if we need it. Let's park it until we need it - and we may dodge it if we migrate services off RapidConnect fast enough.

@vladimir-mencl-eresearch

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [sinatra](https://github.com/sinatra/sinatra) from 4.1.0 to 4.2.0.
- [Changelog](https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md)
- [Commits](sinatra/sinatra@v4.1.0...v4.2.0)
---
updated-dependencies:
- dependency-name: sinatra
dependency-version: 4.2.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed the dependabot/bundler/rapidconnect/sinatra-4.2.0 branch from 3a14774 to cea13c1CompareApril 13, 2026 05:38
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filerubyPull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@vladimir-mencl-eresearch