Skip to content

相依套件批次重整(收掉全部 dependabot 積壓) - #57

Merged
tim32503 merged 1 commit into
mainfrom
chore/deps-batch-refresh
Sep 2, 2026
Merged

tim32503 merged 1 commit into
mainfrom
chore/deps-batch-refresh

Conversation

@tim32503

@tim32503 tim32503 commented Sep 2, 2026

Copy link
Copy Markdown
Owner

需求說明

收掉積壓的 11 張 dependabot 票:與其逐張救基底過舊的分支,改於最新 main 一次解依賴、全部更新到當下最新相容版(皆 ≥ 各票目標版本)。

變更內容

更新 From → To 備註
brakeman 7.0.2 → 8.0.6(major) 移除的選項本專案未用;實掃 0 警告、ignore 維持空
selenium-webdriver 4.34 → 4.48 system tests 綠
pg 1.5.9 → 1.6.3 最低需求變更與本專案無關
bootsnap/turbo-rails/jbuilder/importmap-rails/debug minor/patch importmap audit 乾淨
rubocop 系列 1.78 → 1.90 等 0 offenses 不變
actions/checkout、upload-artifact v4 → v6 v6 breaking(pull_request_target 收緊)與本專案觸發器無關

過時票 #29(rails 8.1.1)已另行關閉留言(main 已在 8.1.3.1)。

測試確認

  • bin/rails test:222 runs, 0 failures;test:system:13 runs, 0 failures;M0 黃金值 diff 為空
  • rubocop 0 offenses、brakeman 8.0.6 零警告、importmap audit 無漏洞
  • dev /up 200、production precompile 成功

Closes #35, closes #34, closes #33, closes #32, closes #31, closes #30, closes #28, closes #14, closes #11, closes #7

- gems:debug 1.11.1、selenium-webdriver 4.48、bootsnap 1.25、
  brakeman 8.0.6(major,移除選項均未使用、實掃零警告)、
  turbo-rails 2.0.23、pg 1.6.3、jbuilder 2.15.1、
  importmap-rails 2.2.3、rubocop 系列(0 offenses 不變)
- GitHub Actions:checkout v4→v6、upload-artifact v4→v6
  (v6 的 pull_request_target 收緊與本專案無關,已查證)
- 全量驗證:222+13 測試綠、M0 零修改、brakeman/importmap
  audit 零警告、production precompile 過
@tim32503 tim32503 self-assigned this Sep 2, 2026
@tim32503
tim32503 merged commit c959d23 into main Sep 2, 2026
4 checks passed
@tim32503
tim32503 deleted the chore/deps-batch-refresh branch September 2, 2026 03:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant