Skip to content

chore: resolve open dependabot security alerts - #203

Merged
josecolella merged 1 commit into
mainfrom
chore/dependabot-alerts
Aug 10, 2026
Merged

chore: resolve open dependabot security alerts#203
josecolella merged 1 commit into
mainfrom
chore/dependabot-alerts

Conversation

@jonathannorris

Copy link
Copy Markdown
Member

Summary

  • Resolved 7 open Dependabot security alerts by bumping json from 2.21.1 to 2.21.2 across all affected gems

Dependabot Alerts Resolved

Alert Package Severity Fix
#66 json low Bumped to 2.21.2 in providers/openfeature-optimizely-provider via bundle update json
#65 json low Bumped to 2.21.2 in providers/openfeature-meta_provider via bundle update json
#64 json low Bumped to 2.21.2 in providers/openfeature-flipt-provider via bundle update json
#63 json low Bumped to 2.21.2 in providers/openfeature-go-feature-flag-provider via bundle update json
#62 json low Bumped to 2.21.2 in providers/openfeature-ofrep-provider via bundle update json
#61 json low Bumped to 2.21.2 in providers/openfeature-flagd-provider via bundle update json
#60 json low Bumped to 2.21.2 in hooks/openfeature-otel-hook via bundle update json

- json 2.21.1 -> 2.21.2 in providers/openfeature-optimizely-provider (low, alert #66)
- json 2.21.1 -> 2.21.2 in providers/openfeature-meta_provider (low, alert #65)
- json 2.21.1 -> 2.21.2 in providers/openfeature-flipt-provider (low, alert #64)
- json 2.21.1 -> 2.21.2 in providers/openfeature-go-feature-flag-provider (low, alert #63)
- json 2.21.1 -> 2.21.2 in providers/openfeature-ofrep-provider (low, alert #62)
- json 2.21.1 -> 2.21.2 in providers/openfeature-flagd-provider (low, alert #61)
- json 2.21.1 -> 2.21.2 in hooks/openfeature-otel-hook (low, alert #60)

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>
@coderabbitai

coderabbitai Bot commented Aug 10, 2026

Copy link
Copy Markdown

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (7)
  • hooks/openfeature-otel-hook/Gemfile.lock is excluded by !**/*.lock
  • providers/openfeature-flagd-provider/Gemfile.lock is excluded by !**/*.lock
  • providers/openfeature-flipt-provider/Gemfile.lock is excluded by !**/*.lock
  • providers/openfeature-go-feature-flag-provider/Gemfile.lock is excluded by !**/*.lock
  • providers/openfeature-meta_provider/Gemfile.lock is excluded by !**/*.lock
  • providers/openfeature-ofrep-provider/Gemfile.lock is excluded by !**/*.lock
  • providers/openfeature-optimizely-provider/Gemfile.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 2241e21c-f540-4d84-9384-1f57713c6823

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@josecolella
josecolella merged commit a1ab3a3 into main Aug 10, 2026
24 checks passed
@josecolella
josecolella deleted the chore/dependabot-alerts branch August 10, 2026 23:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants