Skip to content

Bump bootsnap from 1.9.4 to 1.10.1

George Koltsov requested to merge dependabot-bundler-bootsnap-1.10.1 into master

Bumps bootsnap from 1.9.4 to 1.10.1.

Changelog

Sourced from bootsnap's changelog.

1.10.1

  • Fix Kernel#autoload's fallback path always being executed.
  • Consider unlink failing with ENOENT as a success.

1.10.0

  • Delay requiring FileUtils. (#285) FileUtils can be installed as a gem, so it's best to wait for bundler to have setup the load path before requiring it.

  • Improve support of Psych 4. (#392) Since 1.8.0, YAML.load_file was no longer cached when Psych 4 was used. This is because load_file loads in safe mode by default, so the Bootsnap cache could defeat that safety. Now when precompiling YAML files, Bootsnap first try to parse them in safe mode, and if it can't fallback to unsafe mode, and the cache contains a flag that records wether it was generated in safe mode or not. YAML.unsafe_load_file will use safe caches just fine, but YAML.load_file will fallback to uncached YAML parsing if the cache was generated using unsafe parsing.

  • Minimize the Kernel.require extra stack frames. (#393) This should reduce the noise generated by bootsnap on LoadError.

Commits
  • d5db496 Release 1.10.1
  • f8390ec Fix Kernel#autoload's fallback path always bing executed
  • 9fbc008 bs_fetch: consider unlink ENOENT as a success
  • b24dd40 Release 1.10.0
  • b4a007a Restore the workaround to avoid LoadError having FallbackScan as cause
  • 1535b6b Delay requiring fileutils [fix #285]
  • cd68c7c Depend on msgpack ~> 1.2
  • f208227 Move development dependencies to the Gemfile
  • bd5cff3 Fix an unused variable warning in the test suite
  • 91b81c9 Merge pull request #392 from Shopify/fix-yaml-cache-psych-4-safe-load
  • Additional commits viewable in compare view


Dependabot commands
You can trigger Dependabot actions by commenting on this MR
  • @dependabot-bot rebase will rebase this MR
  • @dependabot-bot recreate will recreate this MR rewriting all the manual changes and resolving conflicts

Merge request reports