[openstreetmap/openstreetmap-website] Bump the dependencies group with 6 updates (PR #6911)

dependabot[bot] notifications at github.com
Wed Mar 18 23:16:13 UTC 2026 

Bumps the dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [doorkeeper](https://github.com/doorkeeper-gem/doorkeeper) | `5.8.2` | `5.9.0` |
| [doorkeeper-openid_connect](https://github.com/doorkeeper-gem/doorkeeper-openid_connect) | `1.8.11` | `1.9.0` |
| [opentelemetry-instrumentation-all](https://github.com/open-telemetry/opentelemetry-ruby-contrib) | `0.90.1` | `0.91.0` |
| [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) | `1.215.0` | `1.217.0` |
| [herb](https://github.com/marcoroth/herb) | `0.8.10` | `0.9.2` |
| [webmock](https://github.com/bblimke/webmock) | `3.26.1` | `3.26.2` |

Updates `doorkeeper` from 5.8.2 to 5.9.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/doorkeeper-gem/doorkeeper/releases">doorkeeper's releases</a>.</em></p>
<blockquote>
<h2>v.5.9.0</h2>
<ul>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper/issues/1791">#1791</a> Add support for Rails read replicas with automatic role switching via <code>enable_multiple_database_roles</code> configuration option</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper/issues/1792">#1792</a> Consider expires_in when clear expired tokens with StaleRecordsCleaner.</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper/issues/1790">#1790</a> Fix race condition in refresh token revocation check by moving InvalidGrantReuse check inside the lock block</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper/issues/1788">#1788</a> Fix regex for basic auth to be case-insensitive</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper/issues/1775">#1775</a> Fix Applications Secret Not Null Constraint generator</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper/issues/1779">#1779</a> Only lock previous access token model when creating a new token from its refresh token if revoke_previous_refresh_token_on_use is false</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper/issues/1778">#1778</a> Ensure that token revocation is idempotent by checking that that token has not already been revoked before revoking.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/doorkeeper-gem/doorkeeper/blob/main/CHANGELOG.md">doorkeeper's changelog</a>.</em></p>
<blockquote>
<h2>5.9.0</h2>
<ul>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper/issues/1791">#1791</a> Add support for Rails read replicas with automatic role switching via <code>enable_multiple_database_roles</code> configuration option</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper/issues/1792">#1792</a> Consider expires_in when clear expired tokens with StaleRecordsCleaner.</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper/issues/1790">#1790</a> Fix race condition in refresh token revocation check by moving InvalidGrantReuse check inside the lock block</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper/issues/1788">#1788</a> Fix regex for basic auth to be case-insensitive</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper/issues/1775">#1775</a> Fix Applications Secret Not Null Constraint generator</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper/issues/1779">#1779</a> Only lock previous access token model when creating a new token from its refresh token if revoke_previous_refresh_token_on_use is false</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper/issues/1778">#1778</a> Ensure that token revocation is idempotent by checking that that token has not already been revoked before revoking.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/doorkeeper-gem/doorkeeper/commit/6cf6c526e0827653bd27f6c8704ff865fb4c09ee"><code>6cf6c52</code></a> Release 5.9.0 :tada:</li>
<li><a href="https://github.com/doorkeeper-gem/doorkeeper/commit/36921b8ba5ac9f284fac927cb0d405d54379a6fd"><code>36921b8</code></a> Merge pull request <a href="https://redirect.github.com/doorkeeper-gem/doorkeeper/issues/1791">#1791</a> from doorkeeper-gem/copilot/fix-active-record-readon...</li>
<li><a href="https://github.com/doorkeeper-gem/doorkeeper/commit/7ba9c3b51f19207bcf3ece84b1890cc75889a121"><code>7ba9c3b</code></a> Add multiple database (roles) support</li>
<li><a href="https://github.com/doorkeeper-gem/doorkeeper/commit/e93e80aaea0e0b86a3c7f683dd2ba11de5da6383"><code>e93e80a</code></a> It doesn't work anymore, we need smth else</li>
<li><a href="https://github.com/doorkeeper-gem/doorkeeper/commit/0d9e3c20f11b10078c685686bdb2450627419ae8"><code>0d9e3c2</code></a> Merge pull request <a href="https://redirect.github.com/doorkeeper-gem/doorkeeper/issues/1785">#1785</a> from doorkeeper-gem/dependabot/github_actions/action...</li>
<li><a href="https://github.com/doorkeeper-gem/doorkeeper/commit/eab795810f0d617b97bd1629c3db29000637c926"><code>eab7958</code></a> Bump actions/checkout from 5 to 6</li>
<li><a href="https://github.com/doorkeeper-gem/doorkeeper/commit/e3c7f8750d0729c01708d223b246a0a88235ff0c"><code>e3c7f87</code></a> Merge pull request <a href="https://redirect.github.com/doorkeeper-gem/doorkeeper/issues/1792">#1792</a> from Paultdx/fixes/check-for-expires-in-when-cleaning</li>
<li><a href="https://github.com/doorkeeper-gem/doorkeeper/commit/51a4638b395f15fe6717f9db194fa9bbb5aa7491"><code>51a4638</code></a> update CHANGELOG.md</li>
<li><a href="https://github.com/doorkeeper-gem/doorkeeper/commit/1badcc095693001950e490ee3e17a659ae93db28"><code>1badcc0</code></a> rebase main</li>
<li><a href="https://github.com/doorkeeper-gem/doorkeeper/commit/4083aaad95d89650133ac3b1ecca03ec618b6666"><code>4083aaa</code></a> Consider expires_in when clear expired tokens with StaleRecordsCleaner</li>
<li>Additional commits viewable in <a href="https://github.com/doorkeeper-gem/doorkeeper/compare/v5.8.2...v.5.9.0">compare view</a></li>
</ul>
</details>
<br />

Updates `doorkeeper-openid_connect` from 1.8.11 to 1.9.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/doorkeeper-gem/doorkeeper-openid_connect/releases">doorkeeper-openid_connect's releases</a>.</em></p>
<blockquote>
<h2>v1.9.0</h2>
<ul>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/229">#229</a> Allow to application manage signing key and algorithm</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/230">#230</a> Add dynamic client registration</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/233">#233</a> fix: handle <code>DoubleRenderError</code> in library instead of requiring consumer workaround</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/232">#232</a> Implements customizable OpenID request class</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/236">#236</a> Derive <code>token_endpoint_auth_methods_supported</code> from Doorkeeper's client_credentials config</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/225">#225</a> Allow configuration of id_token expiration using a block.</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/237">#237</a> Fix dynamic client registration returning hashed secret when <code>hash_application_secrets</code> is enabled</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/226">#226</a> Respect Doorkeeper's configured <code>pkce_code_challenge_methods</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/doorkeeper-gem/doorkeeper-openid_connect/blob/master/CHANGELOG.md">doorkeeper-openid_connect's changelog</a>.</em></p>
<blockquote>
<h2>v1.9.0 (2026-03-16)</h2>
<ul>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/229">#229</a> Allow to application manage signing key and algorithm</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/230">#230</a> Add dynamic client registration</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/233">#233</a> fix: handle <code>DoubleRenderError</code> in library instead of requiring consumer workaround</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/232">#232</a> Implements customizable OpenID request class</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/236">#236</a> Derive <code>token_endpoint_auth_methods_supported</code> from Doorkeeper's client_credentials config</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/225">#225</a> Allow configuration of id_token expiration using a block.</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/237">#237</a> Fix dynamic client registration returning hashed secret when <code>hash_application_secrets</code> is enabled</li>
<li><a href="https://redirect.github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/226">#226</a> Respect Doorkeeper's configured <code>pkce_code_challenge_methods</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/doorkeeper-gem/doorkeeper-openid_connect/commit/ea1e8228c853555e483aca22ec26f2c47416dc98"><code>ea1e822</code></a> Release 1.9.0 :tada:</li>
<li><a href="https://github.com/doorkeeper-gem/doorkeeper-openid_connect/commit/7bb2acea8c25d4409e0c35de22778648177c0037"><code>7bb2ace</code></a> Merge pull request <a href="https://redirect.github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/226">#226</a> from kapschy/master</li>
<li><a href="https://github.com/doorkeeper-gem/doorkeeper-openid_connect/commit/42d90dd895d16a9d823941c207d53b71aff5f24c"><code>42d90dd</code></a> Delegate to the base Doorkeeper <code>pkce_code_challenge_methods</code></li>
<li><a href="https://github.com/doorkeeper-gem/doorkeeper-openid_connect/commit/4fb99ad79865e7b948277de46e0b91b7478c1569"><code>4fb99ad</code></a> Merge pull request <a href="https://redirect.github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/237">#237</a> from doorkeeper-gem/copilot/fix-dynamic-client-regist...</li>
<li><a href="https://github.com/doorkeeper-gem/doorkeeper-openid_connect/commit/07994518262c6154a31e7a108c30981526f71f0f"><code>0799451</code></a> Fix dynamic client registration to return plaintext secret with hash_applicat...</li>
<li><a href="https://github.com/doorkeeper-gem/doorkeeper-openid_connect/commit/7f06332c5d299de0e2325d35299f2617273ea780"><code>7f06332</code></a> Merge pull request <a href="https://redirect.github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/225">#225</a> from jurruh/master</li>
<li><a href="https://github.com/doorkeeper-gem/doorkeeper-openid_connect/commit/884ede0c5476593dec438c336faab9ec6940db93"><code>884ede0</code></a> Add entry to changelog</li>
<li><a href="https://github.com/doorkeeper-gem/doorkeeper-openid_connect/commit/6e853d7b3e1c2aeba691bd5d93c5bc13c0a0152a"><code>6e853d7</code></a> Allow configuration of id_token expiration using a block</li>
<li><a href="https://github.com/doorkeeper-gem/doorkeeper-openid_connect/commit/3111492db1b22904848abc2d397d9e5550b9f4cc"><code>3111492</code></a> Merge pull request <a href="https://redirect.github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/236">#236</a> from doorkeeper-gem/copilot/disable-client-secret-bas...</li>
<li><a href="https://github.com/doorkeeper-gem/doorkeeper-openid_connect/commit/8f9e6a9e0ff88d08effbb86366297bd525b1350e"><code>8f9e6a9</code></a> Derive token_endpoint_auth_methods_supported from Doorkeeper client_credentia...</li>
<li>Additional commits viewable in <a href="https://github.com/doorkeeper-gem/doorkeeper-openid_connect/compare/v1.8.11...v1.9.0">compare view</a></li>
</ul>
</details>
<br />

Updates `opentelemetry-instrumentation-all` from 0.90.1 to 0.91.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-ruby-contrib/releases">opentelemetry-instrumentation-all's releases</a>.</em></p>
<blockquote>
<h2>opentelemetry-instrumentation-all 0.91.0</h2>
<h3>v0.91.0 / 2026-03-17</h3>
<ul>
<li>ADDED: Upgrade opentelemetry-instrumentation-anthropic to 0.4.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-dalli to 0.29.2</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-ethon to 0.28.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-excon to 0.28.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-faraday to 0.32.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-grape to 0.6.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-graphql to 0.31.2</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-http to 0.29.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-http_client to 0.28.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-httpx to 0.7.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-net_http to 0.28.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-racecar to 0.6.1</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-rack to 0.30.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-rails to 0.40.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-restclient to 0.27.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-sinatra to 0.29.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-trilogy to 0.67.0</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-ruby-contrib/blob/main/instrumentation/all/CHANGELOG.md">opentelemetry-instrumentation-all's changelog</a>.</em></p>
<blockquote>
<h2>v0.91.0 / 2026-03-17</h2>
<ul>
<li>ADDED: Upgrade opentelemetry-instrumentation-anthropic to 0.4.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-dalli to 0.29.2</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-ethon to 0.28.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-excon to 0.28.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-faraday to 0.32.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-grape to 0.6.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-graphql to 0.31.2</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-http to 0.29.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-http_client to 0.28.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-httpx to 0.7.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-net_http to 0.28.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-racecar to 0.6.1</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-rack to 0.30.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-rails to 0.40.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-restclient to 0.27.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-sinatra to 0.29.0</li>
<li>ADDED: Upgrade opentelemetry-instrumentation-trilogy to 0.67.0</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/open-telemetry/opentelemetry-ruby-contrib/commit/cbe92a6f207d9509d79af0c5015ad215de2ef6d0"><code>cbe92a6</code></a> release: Release 18 items (<a href="https://redirect.github.com/open-telemetry/opentelemetry-ruby-contrib/issues/2093">#2093</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-ruby-contrib/commit/f5ff69b93c375d32fffab6b86f9d863633462b17"><code>f5ff69b</code></a> chore: update rubocop requirement from ~&gt; 1.84.0 to ~&gt; 1.85.0 in the producti...</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-ruby-contrib/commit/1cdfc76363871776f972297d236fe504f8670ba6"><code>1cdfc76</code></a> test: Switch to RSpec Mocks (<a href="https://redirect.github.com/open-telemetry/opentelemetry-ruby-contrib/issues/2011">#2011</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-ruby-contrib/commit/1c6c7e27577de8310997e1906fcfe4636d917870"><code>1c6c7e2</code></a> ci: Address issues identified by renovate part. 2 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-ruby-contrib/issues/1938">#1938</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-ruby-contrib/commit/638a44fc4a2f05b845993c797c5a5f586fc07347"><code>638a44f</code></a> chore(deps): update dependency rubocop to '~&gt; 1.84.0' (<a href="https://redirect.github.com/open-telemetry/opentelemetry-ruby-contrib/issues/1993">#1993</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-ruby-contrib/commit/ff7f181f6d58a81b3ada42f6d8ddeffd221743d0"><code>ff7f181</code></a> chore: Trim whitespace from changelogs (<a href="https://redirect.github.com/open-telemetry/opentelemetry-ruby-contrib/issues/2002">#2002</a>)</li>
<li>See full diff in <a href="https://github.com/open-telemetry/opentelemetry-ruby-contrib/compare/opentelemetry-instrumentation-all/v0.90.1...opentelemetry-instrumentation-all/v0.91.0">compare view</a></li>
</ul>
</details>
<br />

Updates `aws-sdk-s3` from 1.215.0 to 1.217.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md">aws-sdk-s3's changelog</a>.</em></p>
<blockquote>
<h2>1.217.0 (2026-03-18)</h2>
<ul>
<li>Feature - Code Generated Changes, see <code>./build_tools</code> or <code>aws-sdk-core</code>'s CHANGELOG.md for details.</li>
</ul>
<h2>1.216.0 (2026-03-12)</h2>
<ul>
<li>Feature - Adds support for account regional namespaces for general purpose buckets. The account regional namespace is a reserved subdivision of the global bucket namespace where only your account can create general purpose buckets.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/aws/aws-sdk-ruby/commits">compare view</a></li>
</ul>
</details>
<br />

Updates `herb` from 0.8.10 to 0.9.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/marcoroth/herb/releases">herb's releases</a>.</em></p>
<blockquote>
<h2>v0.9.2</h2>
<h3>Parser</h3>
<ul>
<li>Detect <code>javascript_tag</code> and <code>javascript_include_tag</code> helpers by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1374">marcoroth/herb#1374</a></li>
</ul>
<h3>Engine</h3>
<ul>
<li>Delegate context-aware expressions to overridable engine methods by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1421">marcoroth/herb#1421</a></li>
</ul>
<h3>Dev Tools</h3>
<ul>
<li>Allow overlay hint to be customized by ReActionView by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1420">marcoroth/herb#1420</a></li>
</ul>
<h3>libherb</h3>
<ul>
<li>Fix O(n) linked list walk in <code>hb_arena_append_page()</code> by <a href="https://github.com/timkaechele"><code>@​timkaechele</code></a> and <a href="https://github.com/citizen428"><code>@​citizen428</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1380">marcoroth/herb#1380</a></li>
</ul>
<h3>Commits</h3>
<p><strong>Full Changelog</strong>: <a href="https://github.com/marcoroth/herb/compare/v0.9.1...v0.9.2">https://github.com/marcoroth/herb/compare/v0.9.1...v0.9.2</a></p>
<h2>v0.9.1</h2>
<h3>Parser</h3>
<ul>
<li>Support Action View tag helpers with inline blocks by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1404">marcoroth/herb#1404</a></li>
<li>Fix Action View Helpers with positional arguments and block by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1406">marcoroth/herb#1406</a></li>
</ul>
<h3>Engine</h3>
<ul>
<li>Make sure <code>validate_ruby</code> also works on older Rubies by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1411">marcoroth/herb#1411</a></li>
<li>Delegate <code>add_expression_block</code> for Erubi compatibility by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1417">marcoroth/herb#1417</a></li>
</ul>
<h3>Linter</h3>
<ul>
<li>Warn about <code>j()</code> in <code>erb-no-unsafe-script-interpolation</code> by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1407">marcoroth/herb#1407</a></li>
<li>Allow more types for <code>html-allowed-script-type</code> rule by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1413">marcoroth/herb#1413</a></li>
<li>Support more cases for <code>erb-no-duplicate-branch-elements</code> by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1415">marcoroth/herb#1415</a></li>
<li>Re-export linter rule utils from <code>core</code> by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1416">marcoroth/herb#1416</a></li>
</ul>
<h3>Linter Rules</h3>
<h5>New Rules</h5>
<ul>
<li>Implement <code>actionview-no-silent-render</code> rule by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1402">marcoroth/herb#1402</a></li>
<li>Implement <code>erb-no-silent-statement</code> rule by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1403">marcoroth/herb#1403</a></li>
<li>Implement <code>erb-no-empty-control-flow</code> rule by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1412">marcoroth/herb#1412</a></li>
</ul>
<h3>VS Code / Cursor</h3>
<ul>
<li>Don't register Toggle Comment as global shortcut by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1409">marcoroth/herb#1409</a></li>
</ul>
<h3>Dependencies</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/marcoroth/herb/commit/ee69f667a0e88279b1054932b49c77b43b84555d"><code>ee69f66</code></a> <code>v0.9.2</code></li>
<li><a href="https://github.com/marcoroth/herb/commit/d68a879e4f791095e5e6183f029270f8d3e5082d"><code>d68a879</code></a> Parser: Detect <code>javascript_tag</code> and <code>javascript_include_tag</code> helpers (<a href="https://redirect.github.com/marcoroth/herb/issues/1374">#1374</a>)</li>
<li><a href="https://github.com/marcoroth/herb/commit/7faaca5bb51102c0128a8785d83f16ef0ed0ecb7"><code>7faaca5</code></a> C: Fix O(n) linked list walk in <code>hb_arena_append_page()</code> (<a href="https://redirect.github.com/marcoroth/herb/issues/1380">#1380</a>)</li>
<li><a href="https://github.com/marcoroth/herb/commit/f037dbbcfb09762cbf6c466c9d3c83afb1ed494d"><code>f037dbb</code></a> Engine: Delegate context-aware expressions to overridable engine methods (<a href="https://redirect.github.com/marcoroth/herb/issues/1421">#1421</a>)</li>
<li><a href="https://github.com/marcoroth/herb/commit/41ca2f4a1e1a9d600bf9e9dde55bac7c5c347dd9"><code>41ca2f4</code></a> Dev Tools: Allow overlay hint to be customized by ReActionView (<a href="https://redirect.github.com/marcoroth/herb/issues/1420">#1420</a>)</li>
<li><a href="https://github.com/marcoroth/herb/commit/d6b1025ceb372476083361d6d6debe2d18faa7f5"><code>d6b1025</code></a> <code>v0.9.1</code></li>
<li><a href="https://github.com/marcoroth/herb/commit/c468c7805b2f15c92db30f216bf5b375eea42212"><code>c468c78</code></a> Engine: Delegate <code>add_expression_block</code> for Erubi compatibility (<a href="https://redirect.github.com/marcoroth/herb/issues/1417">#1417</a>)</li>
<li><a href="https://github.com/marcoroth/herb/commit/349937a94289d1bc474f22db9d693b19a2568cb9"><code>349937a</code></a> Linter: Re-export linter rule utils from <code>core</code> (<a href="https://redirect.github.com/marcoroth/herb/issues/1416">#1416</a>)</li>
<li><a href="https://github.com/marcoroth/herb/commit/7fc78b3b794848996f5da131ec157c1ce7b6ca53"><code>7fc78b3</code></a> Linter: Support more cases for <code>erb-no-duplicate-branch-elements</code> (<a href="https://redirect.github.com/marcoroth/herb/issues/1415">#1415</a>)</li>
<li><a href="https://github.com/marcoroth/herb/commit/0780a1f29d3c16b472d90612d9e0917a039f94ff"><code>0780a1f</code></a> Linter: Allow more types for <code>html-allowed-script-type</code> rule (<a href="https://redirect.github.com/marcoroth/herb/issues/1413">#1413</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/marcoroth/herb/compare/v0.8.10...v0.9.2">compare view</a></li>
</ul>
</details>
<br />

Updates `webmock` from 3.26.1 to 3.26.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/bblimke/webmock/releases">webmock's releases</a>.</em></p>
<blockquote>
<h2>3.26.2</h2>
<ul>
<li>
<p>Add support to parse http/2 request on curb adapter</p>
<p>Thanks to <a href="https://github.com/criess">Christoph Rieß</a></p>
</li>
<li>
<p>CurbAdapter alias <code>code</code> from <code>response_code</code></p>
<p>Thanks to <a href="https://github.com/criess">Christoph Rieß</a></p>
</li>
<li>
<p>Add HTTP.rb v6.0.0 compatibility to http_rb adapter</p>
<p>Thanks to <a href="https://github.com/sferik">Erik Berlin</a></p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/bblimke/webmock/blob/master/CHANGELOG.md">webmock's changelog</a>.</em></p>
<blockquote>
<h1>3.26.2</h1>
<ul>
<li>
<p>Add support to parse http/2 request on curb adapter</p>
<p>Thanks to <a href="https://github.com/criess">Christoph Rieß</a></p>
</li>
<li>
<p>CurbAdapter alias <code>code</code> from <code>response_code</code></p>
<p>Thanks to <a href="https://github.com/criess">Christoph Rieß</a></p>
</li>
<li>
<p>Add HTTP.rb v6.0.0 compatibility to http_rb adapter</p>
<p>Thanks to <a href="https://github.com/sferik">Erik Berlin</a></p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/bblimke/webmock/commit/ce700d989d015ace217f0c2720910abff25a029d"><code>ce700d9</code></a> Version 3.26.2</li>
<li><a href="https://github.com/bblimke/webmock/commit/ddf8a439d943452f315c27ee105d31afd9bb2553"><code>ddf8a43</code></a> Merge pull request <a href="https://redirect.github.com/bblimke/webmock/issues/1121">#1121</a> from criess/cr/curb-http-2-parse-headers</li>
<li><a href="https://github.com/bblimke/webmock/commit/035e9fcc66ab99efb063e54266fc27d2ea156d97"><code>035e9fc</code></a> [fix] add support to parse http/2 request on curb adapter</li>
<li><a href="https://github.com/bblimke/webmock/commit/29d3532b1bd60c595a753606c9e88da19090e672"><code>29d3532</code></a> Merge pull request <a href="https://redirect.github.com/bblimke/webmock/issues/1123">#1123</a> from sferik/support-http_rb-6</li>
<li><a href="https://github.com/bblimke/webmock/commit/801ad3b5936c0ca77fbda4157ba92ad470925b0c"><code>801ad3b</code></a> Merge pull request <a href="https://redirect.github.com/bblimke/webmock/issues/1122">#1122</a> from criess/cr/curb-easy-code-as-alias</li>
<li><a href="https://github.com/bblimke/webmock/commit/a4de224de9e38f68196fd9a60b4716b8ab8fc3f4"><code>a4de224</code></a> Add HTTP.rb 6.0.0 compatibility to http_rb adapter</li>
<li><a href="https://github.com/bblimke/webmock/commit/c6cf2f153f568f7d8fb595eb007b839de1d4c6d2"><code>c6cf2f1</code></a> [fix] CurbAdapter alias <code>code</code> from <code>response_code</code></li>
<li><a href="https://github.com/bblimke/webmock/commit/596d8a8949c2e01113217263333a08507d2881eb"><code>596d8a8</code></a> Merge pull request <a href="https://redirect.github.com/bblimke/webmock/issues/1113">#1113</a> from koic/ci_against_ruby_4_0</li>
<li><a href="https://github.com/bblimke/webmock/commit/86977f8fa543a58ae831d2387b3c516e23d9624b"><code>86977f8</code></a> Run CI against Ruby 4.0</li>
<li><a href="https://github.com/bblimke/webmock/commit/cc11b7873fab478c9722461eecb17a5957de5d28"><code>cc11b78</code></a> Merge pull request <a href="https://redirect.github.com/bblimke/webmock/issues/1114">#1114</a> from koic/remove_pride_option_from_minitest_rake_task</li>
<li>Additional commits viewable in <a href="https://github.com/bblimke/webmock/compare/v3.26.1...v3.26.2">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions


</details>
You can view, comment on, or merge this pull request online at:

  https://github.com/openstreetmap/openstreetmap-website/pull/6911

-- Commit Summary --

  * Bump the dependencies group with 6 updates

-- File Changes --

    M Gemfile.lock (94)

-- Patch Links --

https://github.com/openstreetmap/openstreetmap-website/pull/6911.patch
https://github.com/openstreetmap/openstreetmap-website/pull/6911.diff

-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/6911
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/pull/6911 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20260318/c1fbee21/attachment-0001.htm>

More information about the rails-dev mailing list