From cf2d0162db93c0acca63b80bcbbde3b226c46055 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 7 Oct 2025 19:42:52 +0000 Subject: [PATCH 1/2] Bump tmp from 0.2.3 to 0.2.4 Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.3 to 0.2.4. - [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md) - [Commits](https://github.com/raszi/node-tmp/compare/v0.2.3...v0.2.4) --- updated-dependencies: - dependency-name: tmp dependency-version: 0.2.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- yarn.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/yarn.lock b/yarn.lock index e01f051c9e..ec52161252 100644 --- a/yarn.lock +++ b/yarn.lock @@ -4183,9 +4183,9 @@ tinymce@^7.2.0: integrity sha512-R460NlE4REIFuLcZd9mpHK8zRsHdOueLV2m6Wsn0JHfGhDWMcfB1IqUX2QGrSbJga93ygJbJbNMwb2sakFlE/g== tmp@^0.2.1: - version "0.2.3" - resolved "https://registry.yarnpkg.com/tmp/-/tmp-0.2.3.tgz#eb783cc22bc1e8bebd0671476d46ea4eb32a79ae" - integrity sha512-nZD7m9iCPC5g0pYmcaxogYKggSfLsdxl8of3Q/oIbqCqLLIO9IAF0GWjX1z9NZRHPiXv8Wex4yDCaZsgEw0Y8w== + version "0.2.5" + resolved "https://registry.yarnpkg.com/tmp/-/tmp-0.2.5.tgz#b06bcd23f0f3c8357b426891726d16015abfd8f8" + integrity sha512-voyz6MApa1rQGUxT3E+BK7/ROe8itEx7vD8/HEvt4xwXucvQ5G5oeEiHkmHZJuBO21RpOf+YYm9MOivj709jow== to-regex-range@^5.0.1: version "5.0.1" From ca27c5952ee5ee2eba58b6e0897c493f9309555a Mon Sep 17 00:00:00 2001 From: aaronskiba Date: Tue, 7 Oct 2025 14:01:14 -0600 Subject: [PATCH 2/2] Add Dependabot security PRs to Changelog --- CHANGELOG.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 673d1a0446..28f2420d98 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,12 @@ - Validate CSV Separator [#3569](https://github.com/DMPRoadmap/roadmap/pull/3569) - Fix rendering of `confirm_merge` partial [#3567](https://github.com/DMPRoadmap/roadmap/pull/3567) - Improve CI configuration [#3551](https://github.com/DMPRoadmap/roadmap/issues/3551) +- Bump nokogiri from 1.17.2 to 1.18.9 [#3547](https://github.com/DMPRoadmap/roadmap/pull/3547) +- Bump activerecord from 7.1.5.1 to 7.1.5.2 [#3549](https://github.com/DMPRoadmap/roadmap/pull/3549) +- Bump rack-session from 2.1.0 to 2.1.1 [#3524](https://github.com/DMPRoadmap/roadmap/pull/3524) +- Bump net-imap from 0.4.19 to 0.4.20 [#3518](https://github.com/DMPRoadmap/roadmap/pull/3518) +- Bump rexml from 3.4.1 to 3.4.2 [#3562](https://github.com/DMPRoadmap/roadmap/pull/3562) +- Bump tmp from 0.2.3 to 0.2.4 [#3548](https://github.com/DMPRoadmap/roadmap/pull/3548) ## v5.0.1 - Updated seeds.rb file for identifier_schemes to include context value and removed logo_url and idenitifier_prefix for Shibboleth (as it was causing issues with SSO). [#3525](https://github.com/DMPRoadmap/roadmap/pull/3525)