Skip to content

Bump rubyzip from 3.1.0 to 3.1.1 - #324

Merged
lkacenja merged 2 commits into
dep-2025-10-01from
dependabot/bundler/rubyzip-3.1.1
Oct 1, 2025
Merged

Bump rubyzip from 3.1.0 to 3.1.1#324
lkacenja merged 2 commits into
dep-2025-10-01from
dependabot/bundler/rubyzip-3.1.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 29, 2025

Copy link
Copy Markdown
Contributor

Bumps rubyzip from 3.1.0 to 3.1.1.

Release notes

Sourced from rubyzip's releases.

v3.1.1

Version 3.1.1

The 3.1.x line adds AES decryption.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

Changelog

Sourced from rubyzip's changelog.

3.1.1 (2025-09-26)

  • Improve the IO pipeline when decompressing. #649 (which also fixes #647)

Tooling/internal:

  • Improve the DecryptedIo class with various updates and optimizations.
  • Remove the NullDecrypter class.
  • Properly convert the test suite to use minitest.
  • Move all test helper code into separate files.
  • Updates to the Actions CI, including new OS versions.
  • Update rubocop versions and fix resultant cop failures. #646
Commits
  • f87340d Update version number and Changelog for release.
  • 813d96d Add a Rubocop badge to the README.
  • 61c25b0 Reduce the number of YJIT test runs in CI.
  • 69dcb8e Allow Windows CI builds to fail.
  • da44b2c Update OS versions in the Actions CI.
  • fd78455 Use require_relative when pulling in test_helper.
  • 78848c5 Only require test helpers where they are needed.
  • e55f7c9 Move all test helper code into separate files.
  • 5f1fcb2 Remove unnecessary perms from gentestfiles.rb.
  • ceabd03 Remove unnecessary requires from test_helper.rb.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

lkacenja and others added 2 commits September 17, 2025 14:57
Bumps [rubyzip](https://github.com/rubyzip/rubyzip) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/rubyzip/rubyzip/releases)
- [Changelog](https://github.com/rubyzip/rubyzip/blob/main/Changelog.md)
- [Commits](rubyzip/rubyzip@v3.1.0...v3.1.1)

---
updated-dependencies:
- dependency-name: rubyzip
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Sep 29, 2025
@lkacenja
lkacenja changed the base branch from main to dep-2025-10-01 October 1, 2025 16:45
@lkacenja
lkacenja merged commit 73a5ec8 into dep-2025-10-01 Oct 1, 2025
2 checks passed
@dependabot
dependabot Bot deleted the dependabot/bundler/rubyzip-3.1.1 branch October 1, 2025 16:48
lkacenja added a commit that referenced this pull request Oct 1, 2025
* Bump turbo-rails from 2.0.16 to 2.0.17 (#325)

Bumps [turbo-rails](https://github.com/hotwired/turbo-rails) from 2.0.16 to 2.0.17.
- [Release notes](https://github.com/hotwired/turbo-rails/releases)
- [Commits](hotwired/turbo-rails@v2.0.16...v2.0.17)

---
updated-dependencies:
- dependency-name: turbo-rails
  dependency-version: 2.0.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Leo Kacenjar <lkacenja@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump rubyzip from 3.1.0 to 3.1.1 (#324)

Bumps [rubyzip](https://github.com/rubyzip/rubyzip) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/rubyzip/rubyzip/releases)
- [Changelog](https://github.com/rubyzip/rubyzip/blob/main/Changelog.md)
- [Commits](rubyzip/rubyzip@v3.1.0...v3.1.1)

---
updated-dependencies:
- dependency-name: rubyzip
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Leo Kacenjar <lkacenja@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump puma from 7.0.3 to 7.0.4 (#317)

Bumps [puma](https://github.com/puma/puma) from 7.0.3 to 7.0.4.
- [Release notes](https://github.com/puma/puma/releases)
- [Changelog](https://github.com/puma/puma/blob/master/History.md)
- [Commits](puma/puma@v7.0.3...v7.0.4)

---
updated-dependencies:
- dependency-name: puma
  dependency-version: 7.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Leo Kacenjar <lkacenja@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump rails from 8.0.2.1 to 8.0.3 (#315)

* Bump rails from 8.0.2.1 to 8.0.3

Bumps [rails](https://github.com/rails/rails) from 8.0.2.1 to 8.0.3.
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](rails/rails@v8.0.2.1...v8.0.3)

---
updated-dependencies:
- dependency-name: rails
  dependency-version: 8.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Return tsort.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Leo Kacenjar <lkacenja@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Fix up the tests.

* Bump propshaft from 1.2.1 to 1.3.1 (#316)

Bumps [propshaft](https://github.com/rails/propshaft) from 1.2.1 to 1.3.1.
- [Release notes](https://github.com/rails/propshaft/releases)
- [Commits](rails/propshaft@v1.2.1...v1.3.1)

---
updated-dependencies:
- dependency-name: propshaft
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Leo Kacenjar <lkacenja@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump aws-sdk-s3 from 1.199.0 to 1.199.1 (#320)

Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) from 1.199.0 to 1.199.1.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

---
updated-dependencies:
- dependency-name: aws-sdk-s3
  dependency-version: 1.199.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Leo Kacenjar <lkacenja@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* See if we can reduce test errors.

* Try to make test less flappy.

* Try to make test less flappy.

* Try to make test less flappy.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant