Skip to content

Bump rack-mini-profiler from 0.10.5 to 2.0.2#122

Closed
dependabot-preview[bot] wants to merge 1 commit intomasterfrom
dependabot/bundler/rack-mini-profiler-2.0.2
Closed

Bump rack-mini-profiler from 0.10.5 to 2.0.2#122
dependabot-preview[bot] wants to merge 1 commit intomasterfrom
dependabot/bundler/rack-mini-profiler-2.0.2

Conversation

@dependabot-preview
Copy link
Copy Markdown

Bumps rack-mini-profiler from 0.10.5 to 2.0.2.

Changelog

Sourced from rack-mini-profiler's changelog.

2.0.2 - 2020-05-25

  • [FIX] client timings were not showing up when you clicked show trivial

2.0.1 - 2020-03-17

  • [REVERT] Prepend Net::HTTP patch instead of class_eval and aliasing (#429) (technique clashes with New Relic and Skylight agents)

2.0.0 - 2020-03-11

  • [FEATURE] Prepend Net::HTTP patch instead of class_eval and aliasing (#429)
  • [FEATURE] Stop patching Rails and use ActiveSupport::Notifications by default (see README.md for details)

1.1.6 - 2020-01-30

  • [FIX] edge condition on page transition function could lead to exceptions

1.1.5 - 2020-01-28

  • [FIX] correct custom counter regression
  • [FIX] respect max_traces_to_show
  • [FIX] handle storage engine failures in whitelist mode

1.1.4 - 2019-12-12

  • [SECURITY] carefully crafted SQL could cause an XSS on sites that do not use CSPs

1.1.3 - 2019-10-28

  • [FEATURE] precompile all templates to avoid need for unsafe-eval

1.1.2 - 2019-10-24

  • [FIX] JS payload was not working on IE11 and leading to errors
  • [FIX] Remove global singleton_class which was injected
  • [FIX] Regressions post removal of jQuery

1.1.1 - 2019-10-22

  • [FIX] correct JavaScript fetch support header iteration (Jorge Manrubia)

1.1.0 - 2019-10-01

  • [FEATURE] remove jQuery dependency, switch template library to dot.js
  • [FEATURE] disable all sensitive debugging methods by default (env, memory profiling) can be enabled with enable_advanced_debugging_tools.
  • [FIX] when conditionally requiring rack mini profiler, asset precompile could fail
  • [FEATURE] /rack-mini-profiler/requests can be used to monitor all requests for apps that do not have a UI (like API apps)
  • [SECURITY] XSS injection in ?pp=help via rogue uri

1.0.2 - 2019-02-05

... (truncated)
Commits
  • 44b01ff DEV: new release
  • 4543ed2 FIX: Fix client timings regression and bring back 'show trivial' (#441)
  • 2594524 DEV: Quality of life improvements when working on MP client-side code (#443)
  • 7026ca7 bump version and update changelog
  • 2f321c1 Revert "FEATURE: Prepend Net::HTTP patch instead of class_eval and aliasing (...
  • 3cb877b DEV: Use ENV hash instead of constant to enable rails patches (#435)
  • 5985033 Bump version to 2.0.0
  • b15fe68 FEATURE: Make Rails patches optional and turned off by default (#418)
  • 056b600 gemspec: Point out homepage with HTTPS (#430)
  • 331bc7f CI: Drop unused sudo: false directive (#431)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Pull request limits (per update run and/or open at any time)
  • Automerge options (never/patch/minor, and dev/runtime dependencies)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

@dependabot-preview dependabot-preview bot added the dependencies Pull requests that update a dependency file label May 25, 2020
@dependabot-preview
Copy link
Copy Markdown
Author

Superseded by #124.

@dependabot-preview dependabot-preview bot deleted the dependabot/bundler/rack-mini-profiler-2.0.2 branch July 29, 2020 04:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants