Bump the minor-and-patch group across 1 directory with 3 updates

[dependabot]

Bumps the minor-and-patch group with 3 updates in the / directory: acts_as_tenant, madmin and webmock.

Updates acts_as_tenant from 2.0.2 to 2.2.0

Release notes

Sourced from acts_as_tenant's releases.

v2.2.0

What's Changed

• Fix CI lockfiles broken by the release version bump by @​excid3 in ErwinM/acts_as_tenant#392
• Fix association validation for composite foreign keys by @​jp-roy in ErwinM/acts_as_tenant#391
• Tidy belongs_to tenant validation and raise on composite key mismatch by @​excid3 in ErwinM/acts_as_tenant#393
• Make the belongs_to tenant validation configurable by @​garrettblehm in ErwinM/acts_as_tenant#389

New Contributors

• @​jp-roy made their first contribution in ErwinM/acts_as_tenant#391

Full Changelog: ErwinM/acts_as_tenant@v2.1.0...v2.2.0

v2.1.0

What's Changed

• Make tenant validation error messages translatable by @​garrettblehm in ErwinM/acts_as_tenant#387

New Contributors

• @​garrettblehm made their first contribution in ErwinM/acts_as_tenant#387

Full Changelog: ErwinM/acts_as_tenant@v2.0.2...v2.1.0

Changelog

Sourced from acts_as_tenant's changelog.

2.2.0

• Fix belongs_to association validation raising NoMethodError for associations with a composite foreign key, which Rails supports since 7.1. The associated record is now looked up by all key columns. #390
• Make the belongs_to tenant validation customizable. #388
  • Override the tenant_validation_scope class method to change the query that finds associated records, for example to include soft-deleted records.
  • Override the validate_tenant_association? instance method to skip the validation of an association.
  • The tenants of the record and the associated record are now always compared, also when a tenant is set, so a custom lookup scope cannot accept records of another tenant. A record without a tenant can only refer to records of the current tenant.

2.1.0

• Make the tenant and association validation error messages translatable. They are now added as :"acts_as_tenant.tenant_mismatch" and :"acts_as_tenant.association_invalid" and can be overridden under activerecord.errors.messages.acts_as_tenant in your locale files. The default messages are unchanged, but errors.details now returns these symbols instead of the message strings, and errors.added? no longer matches the old strings. #386

Commits

• 4a9a69f Version bump
• 48a7810 Make the belongs_to tenant validation customizable (#389)
• 167fd12 Tidy belongs_to tenant validation and raise on composite key mismatch (#393)
• 47fdd69 Fix association validation for composite foreign keys (#391)
• 3536375 Fix CI lockfiles broken by the release version bump (#392)
• ce019ad Version bump
• 1929796 Make tenant validation error messages translatable (#387)
• 7136b2d Add publish gem workflow using RubyGems trusted publishing
• See full diff in compare view

Updates madmin from 3.2.0 to 3.3.0

Release notes

Sourced from madmin's releases.

v3.3.0

What's Changed

• Pass record names to delete and remove confirmations by @​excid3 in excid3/madmin#393
• Draw form field borders with border and outline invalid fields by @​excid3 in excid3/madmin#394

Full Changelog: excid3/madmin@v3.2.0...v3.3.0

Changelog

Sourced from madmin's changelog.

3.3.0

• Draw form field borders with border instead of an inset box-shadow, so fields stay outlined in forced colors (high contrast) mode and match Lexxy and Trix. Field sizes are unchanged. Fields that an app's field_error_proc marks with .error (inputs, selects, textareas and Lexxy/Trix editors) now get a red border instead of red text, which also tinted Lexxy's toolbar. .error messages are still red
• Pass resource and name to the madmin.confirmations.delete translation and name (the filename) to madmin.confirmations.remove_with_changes, so apps can say what is being deleted, e.g. delete: "Delete %{name}?". The default messages are unchanged #392

Commits

• 3c2ccf8 Version bump
• 5d5d29f Draw form field borders with border and outline invalid fields (#394)
• 5925f58 Pass record names to delete and remove confirmations (#393)
• See full diff in compare view

Updates webmock from 3.26.4 to 3.30.0

Release notes

Sourced from webmock's releases.

3.30.0

• Allow narrowing an RSpec expectation on a stub with with, as in expect(stub).to have_been_requested.once.with(body: "abc") (#1128)

  The expectation counts only the requests that match both the stub and the conditions given to with. The stub itself does not change.

  Thanks to Sébastien S.

• Show the JSON body hint for expectations narrowed with with too, and no longer show it when a block is given to the stub or expectation, since checking would mean calling the block

• Allow a full URL with a path in disable_net_connect!(allow: ...), as in allow: "https://github.com/mozilla/geckodriver/releases/latest" (#977)

  URLs are compared the same way as in stubs, so the default port, letter case in the host, and the order and encoding of query parameters don't matter. A URL without a path or query allows every path on that scheme, host and port; a trailing slash restricts requests to / with no query string. Credentials in either URL are ignored.

  Thanks to Henry Blyth

3.29.0

• Show a body diff for JSON requests whose content type has a +json suffix, such as application/vnd.api+json, and for the other content types WebMock already matches as JSON (#734)

  Thanks to Olivier Brisse

• Ignore the case of JSON, XML and url-encoded content types when matching request bodies, and match bodies of any +json or +xml media type, such as image/svg+xml, as JSON or XML

• Suggest declaring a JSON body as a hash when a request fails to match only because the JSON is formatted differently (#649)

  A body declared as a string must match the request body exactly, including key order and whitespace. When that is the only difference, the error for an unregistered request and the failure message of a request expectation now say so, and suggest with(body: JSON.parse(json_string)). Matching JSON strings regardless of key order by default is planned for the next major version (#485).

3.28.0

• Fix to_rack apps receiving a rack.session they did not set up (#985)

  WebMock used to add a session hash to the Rack env, shared by every request to the same stub. This confused apps that check whether a session is present, such as Rails API-only apps, and carried session data over between requests. WebMock now leaves rack.session and rack.session.options unset, as a real server does. If your app needs a session, include session middleware in the app you pass to to_rack. RackResponse#session and RackResponse#session_options have been removed.

  Thanks to Jan Graichen

• Fix crash when matching a hash body pattern against a JSON or XML request that has no body

  Thanks to Chris

• No longer warn about curb versions newer than the last one tested

• Document regexp values in hash_including

  Thanks to Christian Bruckmayer

• Remove unused RequestSignatureSnippet#request_params

  Thanks to Daniel Pepper

3.27.0

• Fix crash in async-http adapter when a request header has a nil value

... (truncated)

Changelog

Sourced from webmock's changelog.

3.30.0

• Allow narrowing an RSpec expectation on a stub with with, as in expect(stub).to have_been_requested.once.with(body: "abc") (#1128)

  The expectation counts only the requests that match both the stub and the conditions given to with. The stub itself does not change.

  Thanks to Sébastien S.

• Show the JSON body hint for expectations narrowed with with too, and no longer show it when a block is given to the stub or expectation, since checking would mean calling the block

• Allow a full URL with a path in disable_net_connect!(allow: ...), as in allow: "https://github.com/mozilla/geckodriver/releases/latest" (#977)

  URLs are compared the same way as in stubs, so the default port, letter case in the host, and the order and encoding of query parameters don't matter. A URL without a path or query allows every path on that scheme, host and port; a trailing slash restricts requests to / with no query string. Credentials in either URL are ignored.

  Thanks to Henry Blyth

3.29.0

• Show a body diff for JSON requests whose content type has a +json suffix, such as application/vnd.api+json, and for the other content types WebMock already matches as JSON (#734)

  Thanks to Olivier Brisse

• Ignore the case of JSON, XML and url-encoded content types when matching request bodies, and match bodies of any +json or +xml media type, such as image/svg+xml, as JSON or XML

• Suggest declaring a JSON body as a hash when a request fails to match only because the JSON is formatted differently (#649)

  A body declared as a string must match the request body exactly, including key order and whitespace. When that is the only difference, the error for an unregistered request and the failure message of a request expectation now say so, and suggest with(body: JSON.parse(json_string)). Matching JSON strings regardless of key order by default is planned for the next major version (#485).

3.28.0

• Fix to_rack apps receiving a rack.session they did not set up (#985)

  WebMock used to add a session hash to the Rack env, shared by every request to the same stub. This confused apps that check whether a session is present, such as Rails API-only apps, and carried session data over between requests. WebMock now leaves rack.session and rack.session.options unset, as a real server does. If your app needs a session, include session middleware in the app you pass to to_rack. RackResponse#session and RackResponse#session_options have been removed.

  Thanks to Jan Graichen

• Fix crash when matching a hash body pattern against a JSON or XML request that has no body

  Thanks to Chris

• No longer warn about curb versions newer than the last one tested

• Document regexp values in hash_including

  Thanks to Christian Bruckmayer

• Remove unused RequestSignatureSnippet#request_params

  Thanks to Daniel Pepper

... (truncated)

Commits

• d57be75 Version 3.30.0
• 37ab875 Compare allowed URLs in the net connect allow list the same way as stub URLs
• 686f411 Keep allowing every path for scheme://host in the net connect allow list
• 76b020c Merge pull request #978 from henrahmagix/patch-1
• 0a6b7f4 Show the JSON body hint for expectations narrowed with with
• 71acb1b Stop with on stub expectations from changing the stub
• 8369a56 Merge pull request #1128 from inkstak/feature-have_been_requested_with_body
• 664309c Version 3.29.0
• 5fc01c3 Only check that an oddly encoded JSON body does not raise
• b8dfa96 Suggest declaring a JSON body as a hash when only its formatting differs
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions