Skip to content

chore(deps): bump rack-session from 2.1.1 to 2.1.2#2549

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/bundler/rack-session-2.1.2
Open

chore(deps): bump rack-session from 2.1.1 to 2.1.2#2549
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/bundler/rack-session-2.1.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 8, 2026

Bumps rack-session from 2.1.1 to 2.1.2.

Release notes

Sourced from rack-session's releases.

v2.1.2

  • CVE-2026-39324 Don't fall back to unencrypted coder if encryptors are present.
Changelog

Sourced from rack-session's changelog.

v2.1.2

  • CVE-2026-39324 Don't fall back to unencrypted coder if encryptors are present.
Commits
  • 504367b Bump patch version.
  • f43638c Don't fall back to unencrypted coder if encryptors are present.
  • dadcfe6 Bump actions/checkout from 4 to 5 (#54)
  • 4eb9ea8 Add top level session spec to validate existing formats.
  • 8f94577 Add rails to external tests.
  • 38ea47d Allow the v2 encryptor to serialize messages with Marshal (#44)
  • 43f2e3a Fix compatibility with older Rubies.
  • 6a060b8 Support UTF-8 data when using the JSON serializer (#39)
  • 8ce0146 Fix auth_tag retrieval on JRuby (#32)
  • 7727185 Add AEAD encryption (#23)
  • See full diff in compare view

@dependabot dependabot bot added dependencies ruby Pull requests that update Ruby code labels Apr 8, 2026
@till
Copy link
Copy Markdown
Collaborator

till commented Apr 10, 2026

@dependabot rebase

Bumps [rack-session](https://github.com/rack/rack-session) from 2.1.1 to 2.1.2.
- [Release notes](https://github.com/rack/rack-session/releases)
- [Changelog](https://github.com/rack/rack-session/blob/main/releases.md)
- [Commits](rack/rack-session@v2.1.1...v2.1.2)

---
updated-dependencies:
- dependency-name: rack-session
  dependency-version: 2.1.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/bundler/rack-session-2.1.2 branch from 3265e4e to 2e8fcb4 Compare April 10, 2026 20:21
@till till requested review from mroderick and olleolleolle April 10, 2026 23:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant