Repository navigation
build(deps): Bump addressable to 2.9.2 in macOS sample to resolve advisories - #7029
Merged
Merged
Conversation
…isories Refresh the macOS sample Gemfile.lock to move addressable onto a patched release (Dependabot already bumped the other samples): - addressable: 2.9.0 -> 2.9.2 [#750-#755] Transitive dev/CI-tooling dependency (Ruby gem for the sample app build tooling); not shipped in @sentry/react-native. Stays within the existing ~> 2.8 range. Dependabot skipped this sample because its Gemfile pins Ruby 3.3.0; regenerated via `bundle lock --update=addressable`. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Contributor
Semver Impact of This PR⚪ None (no version bump detected) 📋 Changelog PreviewThis is how your changes will appear in the changelog.
🤖 This preview updates automatically when you update the PR. |
Contributor
antonis
marked this pull request as ready for review
November 13, 2026 10:10
alwx
approved these changes
Nov 13, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
📢 Type of change
📜 Description
Refreshes the macOS sample
Gemfile.lockto moveaddressableonto a patched release. Stays within the existing~> 2.8constraint.samples/react-native-macos/Gemfile.lockDependabot already bumped
addressablein the other samples (react-native #7027, tvos #7028, visionos #7026). It skipped the macOS sample because thatGemfilepins Ruby3.3.0, which blocksbundle updateunder a newer local Ruby — so this lock was regenerated withbundle lock --update=addressable(which does not enforce the Ruby directive). Only theaddressableline changes;RUBY VERSION/BUNDLED WITHare left as-is.💡 Motivation and Context
Resolves the remaining open Dependabot alerts #750–#755 (six advisories, all patched at addressable 2.9.1+).
addressableis a transitive dev/CI-tooling dependency (Ruby gem for the sample app's build tooling) — not a dependency of the shipped@sentry/react-nativepackage (packages/core), so nothing reaches end-user apps.💚 How did you test it?
bundle lock --update=addressableinsamples/react-native-macos; verified the lock resolves addressable to 2.9.2 (>= the patched 2.9.1) and that only theaddressableentry changed.📝 Checklist
sendDefaultPIIis enabled.🔮 Next steps
Nothing shipped to SDK users changes — lockfile-only refresh of a sample-app tooling dependency.
🤖 Generated with Claude Code