Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump shrine from 2.16.0 to 2.19.3 #3662

Merged
merged 2 commits into from
Dec 18, 2019

Conversation

dependabot-preview[bot]
Copy link
Contributor

@dependabot-preview dependabot-preview bot commented Dec 18, 2019

Bumps shrine from 2.16.0 to 2.19.3.

Changelog

Sourced from shrine's changelog.

3.2.0 (2019-12-17) [release notes]

  • validation – Run validation on Attacher#attach & Attacher#attach_cached instead of Attacher#change (@​janko)

  • remove_invalid – Activate also when Attacher#validate is run manually (@​janko)

  • remove_invalid – Fix incompatibility with derivatives plugin (@​janko)

  • type_predicates – Add new plugin with convenient UploadedFile predicate methods based on MIME type (@​janko)

  • core – Allow assigning back current attached file data (@​janko)

  • derivatives – Fix :derivative value inconsistency when derivatives are being promoted (@​janko)

  • add_metadata – Add #add_metadata method for adding metadata to uploaded files (@​janko)

  • derivatives – Add :io and :attacher values to instrumentation event payload (@​janko)

3.1.0 (2019-11-15) [release notes]

  • default_storage – Coerce storage key to symbol in Attacher#cache_key & Attacher#store_key (@​janko)

  • core – Coerce storage key to symbol in Attacher#cache_key & Attacher#store_key (@​janko)

  • add_metadata – Define metadata methods only for the target uploader class (@​janko)

  • derivatives – Add :storage option to Attacher#create_derivatives (@​janko)

  • store_dimensions – Propagate exceptions on loading ruby-vips in :vips analyzer (@​janko)

  • signature – Allow skipping rewinding by passing rewind: false to Shrine.signature (@​janko)

  • derivatives – Add Attacher.derivatives alias for Attacher.derivatives_processor (@​janko)

3.0.1 (2019-10-17) [release notes]

  • metadata_attributes – Fix exception being raised when there is no attached file (@​janko)

  • core – Simplify UploadedFile#inspect output (@​janko)

3.0.0 (2019-10-14) [release notes]

  • derivation_endpoint – Pass action: :derivation when uploading derivation results (@​janko)

  • core – Add Shrine::Attachment[] shorthand for Shrine::Attachment.new (@​janko)

  • core – Add Storage#delete_prefixed method for deleting all files in specified directory (@​jrochkind)

  • linter – Return true in Storage::Linter#call so that it can be used with assert (@​jrochkind)

... (truncated)
Commits
  • d6813a8 Bump to 2.19.3
  • 9834bfe Ignore dimensions extraction errors by default
  • 4945c45 Un-deprecate FileSystem#upload receiving unrecognized options
  • d5661d5 Bump to 2.19.2
  • b1dd6e9 Allow overriding passed options in default_url_options plugin
  • b1868a3 Fix activerecord plugin's after_commit callbacks to work in Rails 3. (#398)
  • 9f6b72b Fix infer_extension not working with pretty_location
  • 1a7d781 Bump to 2.19.1
  • e86c723 Add back support for MRI 2.3
  • eda05bc Bump to 2.19.0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @annaswims.


Note: This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.

You can always request more updates by clicking Bump now in your Dependabot dashboard.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Pull request limits (per update run and/or open at any time)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

@dependabot-preview dependabot-preview bot requested review from a team as code owners December 18, 2019 10:51
@dependabot-preview dependabot-preview bot added the dependencies Pull requests that update a dependency file label Dec 18, 2019
@va-vfs-bot va-vfs-bot temporarily deployed to dependabot/bundler/shrine-2.19.3/master December 18, 2019 11:56 Inactive
@dependabot-preview dependabot-preview bot force-pushed the dependabot/bundler/shrine-2.19.3 branch from 13fbb7a to a2a6084 Compare December 18, 2019 14:33
@va-vfs-bot va-vfs-bot temporarily deployed to dependabot/bundler/shrine-2.19.3/master December 18, 2019 15:15 Inactive
@annaswims
Copy link
Contributor

version 2.18.0 changelog says "Deprecate aws-sdk-s3 version less than 1.14.0 (@janko)" we use aws-sdk-s3 1.9.0 currently

The aws-sdk-s3 version lower than 1.14.0 has been deprecated for Shrine::Storage::S3 and will be removed in Shrine 3.

@annaswims
Copy link
Contributor

@dependabot merge

@dependabot-preview dependabot-preview bot force-pushed the dependabot/bundler/shrine-2.19.3 branch from a2a6084 to 2ed9753 Compare December 18, 2019 16:01
@va-vfs-bot va-vfs-bot temporarily deployed to dependabot/bundler/shrine-2.19.3/master December 18, 2019 16:56 Inactive
@dependabot-preview dependabot-preview bot merged commit 8c58ad0 into master Dec 18, 2019
@dependabot-preview dependabot-preview bot deleted the dependabot/bundler/shrine-2.19.3 branch December 18, 2019 19:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants