gitlab dependabot-gitlab/dependabot v3.51.0-alpha.1

4 months ago

3.51.0-alpha.1 (2025-05-09)

⚠️ Security updates (2 changes)

  • [Security] Bump rack-session from 2.1.0 to 2.1.1 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3661
  • [Security] Bump net-imap from 0.5.6 to 0.5.7 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3626

🚀 New features (1 change)

  • Add support for basic admin and user role by @andrcuns. See merge request dependabot-gitlab/dependabot!3631

🔬 Improvements (2 changes)

  • Update default error pages by @andrcuns. See merge request dependabot-gitlab/dependabot!3635
  • Add gitlab api rate limit handling by @andrcuns. See merge request dependabot-gitlab/dependabot!3611

🐞 Bug Fixes (4 changes)

  • Fix incorrect handling of search input by @andrcuns. See merge request dependabot-gitlab/dependabot!3642
  • Fix error on empty project search field input by @andrcuns. See merge request dependabot-gitlab/dependabot!3637
  • Fix user and session migrations by @andrcuns. See merge request dependabot-gitlab/dependabot!3634
  • Do not fetch vulnerability array if dependency is not vulnerable by @andrcuns. See merge request dependabot-gitlab/dependabot!3605

📦 Dependency updates (12 changes)

  • Bump sidekiq from 7.3.9 to 8.0.3 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3663
  • Bump dependabot-omnibus from 0.311.0 to 0.312.0 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3662
  • Bump vite from 5.4.19 to 6.3.5 by @andrcuns. See merge request dependabot-gitlab/dependabot!3660
  • Bump redis from 7.4.3 to 8.0.0 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3652
  • Bump dependabot-omnibus from 0.310.0 to 0.311.0 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3646
  • Bump mongo from 8.0.8 to 8.0.9 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3640
  • Remove uri from direct dependencies by @andrcuns. See merge request dependabot-gitlab/dependabot!3628
  • Update transitive dependencies by @andrcuns. See merge request dependabot-gitlab/dependabot!3629
  • Update solargraph to version 0.54.2 by @andrcuns. See merge request dependabot-gitlab/dependabot!3621
  • Switch to sidekiq-alive-next gem by @andrcuns. See merge request dependabot-gitlab/dependabot!3610
  • Bump redis from 7.4.2 to 7.4.3 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3608
  • Bump dependabot-omnibus from 0.309.0 to 0.310.0 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3604

📦🔧 Development dependency updates (11 changes)

  • Bump @types/node from 22.15.3 to 22.15.17 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3659
  • [Security] Bump vite from 5.4.18 to 5.4.19 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3658
  • Bump grape-swagger-entity from 0.6.0 to 0.6.1 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3654
  • Bump redis from 7.4.3 to 8.0.0 in /.devcontainer by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3651
  • Bump allure from 3.0.0-beta.11 to 3.0.0-beta.12 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3643
  • Bump mongo from 8.0.8 to 8.0.9 in /.devcontainer by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3639
  • Bump rspec-rails from 7.1.1 to 8.0.0 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3632
  • Bump @types/node from 22.15.2 to 22.15.3 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3620
  • Bump solargraph from 0.54.0 to 0.54.1 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3617
  • Bump grape-swagger-entity from 0.5.5 to 0.6.0 by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3616
  • Bump redis from 7.4.2 to 7.4.3 in /.devcontainer by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3607

🔧 CI changes (7 changes)

  • Add named flags to build-image task by @andrcuns. See merge request dependabot-gitlab/dependabot!3649
  • Move build image task out of ci namespace by @andrcuns. See merge request dependabot-gitlab/dependabot!3648
  • Update version-bump job by @andrcuns. See merge request dependabot-gitlab/dependabot!3648
  • Fix image path for core image in publish task by @andrcuns. See merge request dependabot-gitlab/dependabot!3621
  • Implement image publishing task by @andrcuns. See merge request dependabot-gitlab/dependabot!3619
  • Migrate scripts to mise tasks by @andrcuns. See merge request dependabot-gitlab/dependabot!3618
  • Manage tools using mise by @andrcuns. See merge request dependabot-gitlab/dependabot!3615

🧰 Maintenance (18 changes)

  • Move concurrently dep to dev dependencies by @andrcuns.
  • Move back jobs and runs route under projects by @andrcuns. See merge request dependabot-gitlab/dependabot!3657
  • Add legacy-js-api to silenced deprecation list by @andrcuns. See merge request dependabot-gitlab/dependabot!3656
  • Serve static assets directly from public/assets folder by @andrcuns. See merge request dependabot-gitlab/dependabot!3656
  • Ensure static asset loading if environment is missing by @andrcuns. See merge request dependabot-gitlab/dependabot!3656
  • Switch to vite for frontend compilation by @andrcuns. See merge request dependabot-gitlab/dependabot!3655
  • Update sidekiq link name by @andrcuns.
  • Improve e2e tests for jobs functionality by @andrcuns. See merge request dependabot-gitlab/dependabot!3647
  • Add setup for local dev environment in containers by @andrcuns. See merge request dependabot-gitlab/dependabot!3644
  • Rename user role to viewer by @andrcuns. See merge request dependabot-gitlab/dependabot!3638
  • Clean up authentication for extra routes by @andrcuns. See merge request dependabot-gitlab/dependabot!3633
  • [BREAKING] Refactor api concerns and add admin role support by @andrcuns. See merge request dependabot-gitlab/dependabot!3631
  • Update local devcontainer setup by @andrcuns. See merge request dependabot-gitlab/dependabot!3627
  • Add pre-commit to mise.toml by @andrcuns. See merge request dependabot-gitlab/dependabot!3622
  • Switch to bun for node dependencies by @andrcuns. See merge request dependabot-gitlab/dependabot!3613
  • Add common mise tasks by @andrcuns. See merge request dependabot-gitlab/dependabot!3612
  • Drop old remember token index in user model by @andrcuns. See merge request dependabot-gitlab/dependabot!3606
  • Use default rails authentication flow by @andrcuns. See merge request dependabot-gitlab/dependabot!3601

📄 Documentation updates (2 changes)

  • Add tooling install section in contribution guide by @andrcuns.
  • Update documentation for user roles by @andrcuns. See merge request dependabot-gitlab/dependabot!3636

🚀 Deployment changes (2 changes)

  • Bump gitlab-org/cluster-integration/gitlab-agent/agentk in /deploy/agent by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3664
  • Bump gitlab-org/cluster-integration/gitlab-agent/agentk in /deploy/agent by @dependabot-bot. See merge request dependabot-gitlab/dependabot!3609

Don't miss a new dependabot release

NewReleases is sending notifications on new releases.