Skip to content

Update json gem security patch - #41

Merged
erickdronski merged 1 commit into
mainfrom
codex/fix-json-dependabot-20260809
Aug 10, 2026
Merged

Update json gem security patch#41
erickdronski merged 1 commit into
mainfrom
codex/fix-json-dependabot-20260809

Conversation

@erickdronski

Copy link
Copy Markdown
Owner

What changed

  • Updates the Rubygems json lockfile entry from 2.21.1 to patched 2.21.2.
  • Updates the Bundler checksum to the SHA-256 of the published json-2.21.2.gem.

Why

Validation

  • git diff --check
  • Verified Gemfile.lock only changes json version/checksum.
  • Verified local SHA-256 for /private/tmp/json-2.21.2.gem: 1f1d3b7cf2b3ba1a69beca0bb6db13d5438b80bff3cd54cdaaa620b9b07c1c6a.
  • Local Bundler validation could not run because system Ruby is 2.6 and Bundler 4.0.11 is not installed; GitHub Actions will validate with the repo CI environment.

@erickdronski
erickdronski merged commit 8f2a90a into main Aug 10, 2026
7 checks passed
@erickdronski
erickdronski deleted the codex/fix-json-dependabot-20260809 branch August 10, 2026 00:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant