Skip to content

fix: patch rack vuln#9

Merged
BillyRuffian merged 1 commit intomainfrom
bugfix/patch-rack
Feb 18, 2026
Merged

fix: patch rack vuln#9
BillyRuffian merged 1 commit intomainfrom
bugfix/patch-rack

Conversation

@BillyRuffian
Copy link
Member

No description provided.

Copilot AI review requested due to automatic review settings February 18, 2026 09:57
@BillyRuffian BillyRuffian merged commit d1b3070 into main Feb 18, 2026
5 checks passed
BillyRuffian added a commit that referenced this pull request Feb 18, 2026
Merge pull request #9 from dvla/bugfix/patch-rack
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR appears intended to remediate a Rack vulnerability by updating dependency versions and bumping the gem version.

Changes:

  • Bump gem version from 0.1.4 to 0.1.5.
  • Update Gemfile.lock, including upgrading rack to 3.2.5 (and multiple other dependency updates).
  • Update Bundler version recorded in the lockfile to 4.0.5.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
lib/dvla/dataverse/helper/version.rb Increments the gem version constant to 0.1.5.
Gemfile.lock Upgrades rack and refreshes the lockfile (including many unrelated dependency upgrades and a Bundler major-version bump).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants