Bump i18n from 1.14.1 to 1.14.6 - #368
Conversation
Bumps [i18n](https://github.com/ruby-i18n/i18n) from 1.14.1 to 1.14.6. - [Release notes](https://github.com/ruby-i18n/i18n/releases) - [Changelog](https://github.com/ruby-i18n/i18n/blob/master/CHANGELOG.md) - [Commits](ruby-i18n/i18n@v1.14.1...v1.14.6) --- updated-dependencies: - dependency-name: i18n dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
b78be37 to
bc27426
Compare
|
Grackle review -- no-CI patch bump VerificationFindingsHIGH #1 -- Lockfile contains massive unrelated dependency downgrades VERIFIED: The diff downgrades sinatra 4.2.1->3.2.0, rack 3.2.6->2.2.8.1, puma removed entirely, rack-session removed, thin 2.0.1->1.8.2, mustermann 3.1.1->3.0.0, rexml 3.4.4->3.3.2, tilt 2.7.0->2.3.0, concurrent-ruby 1.2.2->1.3.4, base64 0.3.0->0.2.0. RUBY VERSION changed from 3.3.5p100 to 3.3.0p0. DEPENDENCIES section drops builder, puma, rackup, rtl and loosens sinatra constraint from ~>4.1 to unversioned. This is NOT a minimal i18n patch -- the lockfile was regenerated against a different Gemfile and Ruby version. Gemfile.lock:1-48 Verified location: HIGH #2 -- RUBY VERSION regressed from 3.3.5 to 3.3.0 VERIFIED: Gemfile.lock:46 shows 'ruby 3.3.0p0' but main has 'ruby 3.3.5p100'. Dependabot resolved against a different Ruby than what the project runs on, which explains the cascading version changes. Verified location: MEDIUM #3 -- i18n 1.14.6 raises ArgumentError on nil key in exists? VERIFIED via upstream release notes: PR #696 adds 'Raise ArgumentError on nil key in exists?'. This is a behavioral change -- code that previously called I18n.exists?(nil) silently returning false will now raise. For a content site using i18n for translations, this is unlikely to be hit but is a real breaking change in edge-case usage. Verified location: What's solid
Priority stack for the authorRegenerate the lockfile from the actual production Ruby (3.3.5) and current Gemfile first -- the current diff is a full lockfile regression that downgrades sinatra/rack/puma and removes dependencies, making this PR unreviewable as an i18n-only change. Recommendation: NO-GO skill-sig: 26cfcbaf · 3pp-skill-sig: ad61853a |
Bumps i18n from 1.14.1 to 1.14.6.
Release notes
Sourced from i18n's releases.
... (truncated)
Commits
3b65f65Bump to 1.14.66d0c2ceAdd post install message for Ruby < 3.2 users1fbc930Merge pull request #696 from KinWang-2013/fix/exists-method-nil-key18799dfMerge pull request #697 from zachmargolis/margolis-optimize-pluralsaacb76aMerge pull request #699 from alexpls/masterd718ed4Merge pull request #701 from stevegeek/fix_load_rb_with_pathnameee22f10Fix loading of .rb locale files when load_path is not a string, eg it is a Pa...229d57eFixes strings being interpolated multiple timeseacc34fMerge pull request #698 from davetron5000/rdoc-fixes55dc807fix issues with RDoc generationDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)