Skip to content

Bump i18n from 1.14.1 to 1.14.6 - #368

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/i18n-1.14.6
Open

Bump i18n from 1.14.1 to 1.14.6#368
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/i18n-1.14.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2024

Copy link
Copy Markdown

Bumps i18n from 1.14.1 to 1.14.6.

Release notes

Sourced from i18n's releases.

v1.14.6

What's Changed

Ruby < 3.2 support will be dropped April 2025. Upgrade now to continue using i18n after that date.

New Contributors

Full Changelog: ruby-i18n/i18n@v1.14.5...v1.14.6

v1.14.5

What's Changed

New Contributors

Full Changelog: ruby-i18n/i18n@v1.14.4...v1.14.5

v1.14.4

What's Changed

Note: the racc dependency will be coming back in Version 2.

Full Changelog: ruby-i18n/i18n@v1.14.3...v1.14.4

v1.14.3

What's Changed

... (truncated)

Commits
  • 3b65f65 Bump to 1.14.6
  • 6d0c2ce Add post install message for Ruby < 3.2 users
  • 1fbc930 Merge pull request #696 from KinWang-2013/fix/exists-method-nil-key
  • 18799df Merge pull request #697 from zachmargolis/margolis-optimize-plurals
  • aacb76a Merge pull request #699 from alexpls/master
  • d718ed4 Merge pull request #701 from stevegeek/fix_load_rb_with_pathname
  • ee22f10 Fix loading of .rb locale files when load_path is not a string, eg it is a Pa...
  • 229d57e Fixes strings being interpolated multiple times
  • eacc34f Merge pull request #698 from davetron5000/rdoc-fixes
  • 55dc807 fix issues with RDoc generation
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
dependabot Bot requested a review from a team as a code owner September 16, 2024 02:18
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 16, 2024
Bumps [i18n](https://github.com/ruby-i18n/i18n) from 1.14.1 to 1.14.6.
- [Release notes](https://github.com/ruby-i18n/i18n/releases)
- [Changelog](https://github.com/ruby-i18n/i18n/blob/master/CHANGELOG.md)
- [Commits](ruby-i18n/i18n@v1.14.1...v1.14.6)

---
updated-dependencies:
- dependency-name: i18n
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@barretts
barretts force-pushed the dependabot/bundler/i18n-1.14.6 branch from b78be37 to bc27426 Compare June 15, 2026 21:50
@barretts

Copy link
Copy Markdown

3PP Grackle (automated dependency triage -- Frontend DX)

Grackle review -- no-CI patch bump

Verification

git diff main...HEAD
gh release view v1.14.6 --repo ruby-i18n/i18n
compared BUNDLED WITH on main vs branch

Findings

HIGH #1 -- Lockfile contains massive unrelated dependency downgrades

VERIFIED: The diff downgrades sinatra 4.2.1->3.2.0, rack 3.2.6->2.2.8.1, puma removed entirely, rack-session removed, thin 2.0.1->1.8.2, mustermann 3.1.1->3.0.0, rexml 3.4.4->3.3.2, tilt 2.7.0->2.3.0, concurrent-ruby 1.2.2->1.3.4, base64 0.3.0->0.2.0. RUBY VERSION changed from 3.3.5p100 to 3.3.0p0. DEPENDENCIES section drops builder, puma, rackup, rtl and loosens sinatra constraint from ~>4.1 to unversioned. This is NOT a minimal i18n patch -- the lockfile was regenerated against a different Gemfile and Ruby version. Gemfile.lock:1-48

Verified location: Gemfile.lock:8-9

HIGH #2 -- RUBY VERSION regressed from 3.3.5 to 3.3.0

VERIFIED: Gemfile.lock:46 shows 'ruby 3.3.0p0' but main has 'ruby 3.3.5p100'. Dependabot resolved against a different Ruby than what the project runs on, which explains the cascading version changes.

Verified location: Gemfile.lock:45

MEDIUM #3 -- i18n 1.14.6 raises ArgumentError on nil key in exists?

VERIFIED via upstream release notes: PR #696 adds 'Raise ArgumentError on nil key in exists?'. This is a behavioral change -- code that previously called I18n.exists?(nil) silently returning false will now raise. For a content site using i18n for translations, this is unlikely to be hit but is a real breaking change in edge-case usage.

Verified location: Gemfile.lock:8

What's solid

  • BUNDLED WITH remains 2.4.10 on both sides -- the bundler version itself did not change
  • The i18n gem itself is a clean patch bump (1.14.1 -> 1.14.6) with only its existing concurrent-ruby dep unchanged

Priority stack for the author

Regenerate the lockfile from the actual production Ruby (3.3.5) and current Gemfile first -- the current diff is a full lockfile regression that downgrades sinatra/rack/puma and removes dependencies, making this PR unreviewable as an i18n-only change.

Recommendation: NO-GO

skill-sig: 26cfcbaf · 3pp-skill-sig: ad61853a

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant