chore(deps-dev): bump rack-mini-profiler from 4.0.1 to 5.0.0 - #2841
Conversation
2eb8c8f to
8a4dc45
Compare
Bumps [rack-mini-profiler](https://github.com/MiniProfiler/rack-mini-profiler) from 4.0.1 to 5.0.0. - [Release notes](https://github.com/MiniProfiler/rack-mini-profiler/releases) - [Changelog](https://github.com/MiniProfiler/rack-mini-profiler/blob/master/CHANGELOG.md) - [Commits](MiniProfiler/rack-mini-profiler@v4.0.1...v5.0.0) --- updated-dependencies: - dependency-name: rack-mini-profiler dependency-version: 5.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
8a4dc45 to
0dbbb47
Compare
Dependency Upgrade Review: rack-mini-profiler 4.0.1 → 5.0.0PR scope: dependency-only, dev dependency. Dependabot updated the Gemfile constraint (~> 4.0 → ~> 5.0) alongside the lockfile. Changes in dependencyOne breaking change: Ruby >= 3.2.0 required (the app pins Ruby 4.0.6, so it is satisfied with room to spare). Everything else is dev-tooling behavior: PostgreSQL bind-parameter recording, CSP nonce support for flamegraphs, Turbo Drive badge fix, and advanced debugging tools now off by default in Rails development. Nothing removes or changes an API. Usage in this repository
Local validation (worktree at the PR head)
Compatibility assessmentCompatible. The single breaking change (Ruby version) is already satisfied, the gem is dev-only with default configuration, and the one behavior change you will notice (debugging tools off by default in development) is deliberate upstream and easily re-enabled if you ever miss the advanced tools. ConfidenceHigh. |
mroderick
left a comment
There was a problem hiding this comment.
Approved. See analysis comment above.
Bumps rack-mini-profiler from 4.0.1 to 5.0.0.
Changelog
Sourced from rack-mini-profiler's changelog.
Commits
d95511fnew asset versionc7405d0update changelog1d94d62fix: prevent unhandled fetch rejectionsabc2a3aRecord PostgreSQL bind parameters8fa266aAdd test for bind mapping964d2d1Support simple bind parameters (#657)32cf225Add missing red test for #6412eb6460Fix: Prevent request deauthorization when loading assets (#641)0c05831Add CSP nonce support for flamegraph rendering (#648)435dd60Fix missing badge for Turbo Drive page loads (#631)