grafana / grafana/ruby-sinatra-app

Dependency Dashboard

Open
#16 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Ruby
Stars
3
Forks
2
PR merge metrics
No merged PRs in 30d

Description

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.

## Repository Problems

Renovate tried to run on this repository, but found these problems.

- ⚠️ WARN: Detected empty commit - aborting git push

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] chore(deps): lock file maintenance

## Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

- [ ] fix(security/high/): update dependency sinatra to v4 [security]
- [ ] chore(deps): update dependency prometheus-client to v4

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): pin ruby docker tag to c052b6b](../pull/18)
- [ ] [chore(deps): update ruby docker tag to v2.7.8](../pull/19)
- [ ] [chore(deps): update ruby docker tag to v4](../pull/20)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Vulnerabilities

> [!IMPORTANT]
> `4`/`4` CVEs have Renovate fixes.

bundler

Gemfile

sinatra

- [GHSA-2x8x-jmrp-phxw](https://osv.dev/vulnerability/GHSA-2x8x-jmrp-phxw) (fixed in >= 2.2.3)
- [GHSA-hxx2-7vcw-mqr3](https://osv.dev/vulnerability/GHSA-hxx2-7vcw-mqr3) (fixed in >= 4.1.0)
- [GHSA-mr3q-g2mv-mr4q](https://osv.dev/vulnerability/GHSA-mr3q-g2mv-mr4q) (fixed in >= 4.2.0)
- [GHSA-qp49-3pvw-x4m5](https://osv.dev/vulnerability/GHSA-qp49-3pvw-x4m5) (fixed in >= 2.2.0)

## Detected Dependencies

bundler (1)

Gemfile (3)

- `ruby 2.7.2` → [Updates: `2.7.8`, `4.0.5`]
- `sinatra lock file @ 2.1.0` → [Updates: `undefined`]
- `prometheus-client lock file @ 2.1.0` → [Updates: `undefined`]

dockerfile (1)

Dockerfile (1)

- `ruby 2.7.2-alpine` → [Updates: `2.7.8-alpine`, `4.0.5-alpine`, `2.7.2-alpine`]

---
## Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.