[dependabot]

Bumps the ruby-deps group in /ruby with 1 update: webmock.

Updates webmock from 3.26.4 to 3.29.0

Release notes

Sourced from webmock's releases.

3.29.0

• Show a body diff for JSON requests whose content type has a +json suffix, such as application/vnd.api+json, and for the other content types WebMock already matches as JSON (#734)

  Thanks to Olivier Brisse

• Ignore the case of JSON, XML and url-encoded content types when matching request bodies, and match bodies of any +json or +xml media type, such as image/svg+xml, as JSON or XML

• Suggest declaring a JSON body as a hash when a request fails to match only because the JSON is formatted differently (#649)

  A body declared as a string must match the request body exactly, including key order and whitespace. When that is the only difference, the error for an unregistered request and the failure message of a request expectation now say so, and suggest with(body: JSON.parse(json_string)). Matching JSON strings regardless of key order by default is planned for the next major version (#485).

3.28.0

• Fix to_rack apps receiving a rack.session they did not set up (#985)

  WebMock used to add a session hash to the Rack env, shared by every request to the same stub. This confused apps that check whether a session is present, such as Rails API-only apps, and carried session data over between requests. WebMock now leaves rack.session and rack.session.options unset, as a real server does. If your app needs a session, include session middleware in the app you pass to to_rack. RackResponse#session and RackResponse#session_options have been removed.

  Thanks to Jan Graichen

• Fix crash when matching a hash body pattern against a JSON or XML request that has no body

  Thanks to Chris

• No longer warn about curb versions newer than the last one tested

• Document regexp values in hash_including

  Thanks to Christian Bruckmayer

• Remove unused RequestSignatureSnippet#request_params

  Thanks to Daniel Pepper

3.27.0

• Fix crash in async-http adapter when a request header has a nil value

  Thanks to hikmetba-bit

• The async-http adapter now matches stubs against raw request header values instead of values parsed by protocol-http, consistent with the other adapters

• Add RSpec hash_excluding support to body matching

  Thanks to Chris Gunther

• Fix hash_excluding ignoring keys given without a value and regexp values, in both query and body matching

• Fix crash when matching a request that has more than one Content-Type header

Changelog

Sourced from webmock's changelog.

3.29.0

• Show a body diff for JSON requests whose content type has a +json suffix, such as application/vnd.api+json, and for the other content types WebMock already matches as JSON (#734)

  Thanks to Olivier Brisse

• Ignore the case of JSON, XML and url-encoded content types when matching request bodies, and match bodies of any +json or +xml media type, such as image/svg+xml, as JSON or XML

• Suggest declaring a JSON body as a hash when a request fails to match only because the JSON is formatted differently (#649)

  A body declared as a string must match the request body exactly, including key order and whitespace. When that is the only difference, the error for an unregistered request and the failure message of a request expectation now say so, and suggest with(body: JSON.parse(json_string)). Matching JSON strings regardless of key order by default is planned for the next major version (#485).

3.28.0

• Fix to_rack apps receiving a rack.session they did not set up (#985)

  WebMock used to add a session hash to the Rack env, shared by every request to the same stub. This confused apps that check whether a session is present, such as Rails API-only apps, and carried session data over between requests. WebMock now leaves rack.session and rack.session.options unset, as a real server does. If your app needs a session, include session middleware in the app you pass to to_rack. RackResponse#session and RackResponse#session_options have been removed.

  Thanks to Jan Graichen

• Fix crash when matching a hash body pattern against a JSON or XML request that has no body

  Thanks to Chris

• No longer warn about curb versions newer than the last one tested

• Document regexp values in hash_including

  Thanks to Christian Bruckmayer

• Remove unused RequestSignatureSnippet#request_params

  Thanks to Daniel Pepper

3.27.0

• Fix crash in async-http adapter when a request header has a nil value

  Thanks to hikmetba-bit

• The async-http adapter now matches stubs against raw request header values instead of values parsed by protocol-http, consistent with the other adapters

• Add RSpec hash_excluding support to body matching

  Thanks to Chris Gunther

• Fix hash_excluding ignoring keys given without a value and regexp values, in both query and body matching

• Fix crash when matching a request that has more than one Content-Type header

Commits

• 664309c Version 3.29.0
• 5fc01c3 Only check that an oddly encoded JSON body does not raise
• b8dfa96 Suggest declaring a JSON body as a hash when only its formatting differs
• d78f3cf Restore the body diff setting after errors_spec turns it off
• 55d7fec Recognize JSON content types consistently in body diffs
• 8c1feb6 Version 3.28.0
• 875e348 Create the GitHub release as part of rake release
• f7639f4 Stop warning about curb versions newer than the last one checked
• 31d9526 Test regexp values in hash_including and array body patterns
• 3316276 Document that to_rack does not provide a session
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---

Summary by cubic

Updates webmock from 3.26.4 to 3.29.0 in ruby/Gemfile.lock, and transitively bigdecimal to 4.1.3. This is a development dependency; the bump is safe but carries a few behavior changes for request stubbing.

Notes for review

• to_rack stubs no longer set rack.session or rack.session.options; apps that rely on a session must include session middleware instead.
• RackResponse#session and RackResponse#session_options were removed.
• Body matching now treats +json and +xml content types (e.g. application/vnd.api+json) as JSON/XML and ignores content type case.
• Error messages now suggest declaring a JSON body as a hash when it only differs in key order or whitespace; string bodies still require an exact match.

^{Written for commit d9b8121. Summary will update on new commits.}

[Copilot]

Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.