Bump csv from 3.3.4 to 3.3.5 #2327

Closed
dependabot[bot] wants to merge 1 commits from dependabot/bundler/csv-3.3.5 into main
dependabot[bot] commented 2025-06-02 15:50:31 +08:00 (Migrated from github.com)

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps csv from 3.3.4 to 3.3.5.

Release notes

Sourced from csv's releases.

csv 3.3.5 - 2025-06-01

Improvements

  • docs: Fixed StringScanner document URL.
    • GH-343
    • Patch by Petrik de Heus

Thanks

  • Petrik de Heus
Changelog

Sourced from csv's changelog.

3.3.5 - 2025-06-01

Improvements

  • docs: Fixed StringScanner document URL.
    • GH-343
    • Patch by Petrik de Heus

Thanks

  • Petrik de Heus
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
[//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [csv](https://github.com/ruby/csv) from 3.3.4 to 3.3.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/ruby/csv/releases">csv's releases</a>.</em></p> <blockquote> <h2>csv 3.3.5 - 2025-06-01</h2> <h3>Improvements</h3> <ul> <li>docs: Fixed <code>StringScanner</code> document URL. <ul> <li><a href="https://redirect.github.com/ruby/csv/issues/343">GH-343</a></li> <li>Patch by Petrik de Heus</li> </ul> </li> </ul> <h3>Thanks</h3> <ul> <li>Petrik de Heus</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ruby/csv/blob/main/NEWS.md">csv's changelog</a>.</em></p> <blockquote> <h2>3.3.5 - 2025-06-01</h2> <h3>Improvements</h3> <ul> <li>docs: Fixed <code>StringScanner</code> document URL. <ul> <li><a href="https://redirect.github.com/ruby/csv/issues/343">GH-343</a></li> <li>Patch by Petrik de Heus</li> </ul> </li> </ul> <h3>Thanks</h3> <ul> <li>Petrik de Heus</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ruby/csv/commit/ecdc355b9efc1168d6aad540de4089cd7ef280ea"><code>ecdc355</code></a> Add 3.3.5 entry</li> <li><a href="https://github.com/ruby/csv/commit/69d9886238a504bfac60fa516cd08ad2a855a2a8"><code>69d9886</code></a> Use <code>Ractor#value</code> as <code>Ractor#take</code> is removed (<a href="https://redirect.github.com/ruby/csv/issues/344">#344</a>)</li> <li><a href="https://github.com/ruby/csv/commit/be2189b64c0d6b06b9ac0c80572f98ad846d9752"><code>be2189b</code></a> Replace link to ruby-doc.org with docs.ruby-lang.org (<a href="https://redirect.github.com/ruby/csv/issues/343">#343</a>)</li> <li><a href="https://github.com/ruby/csv/commit/cfd5fe807c581e012aa1d062b5e813b56d7f0845"><code>cfd5fe8</code></a> Bump version</li> <li>See full diff in <a href="https://github.com/ruby/csv/compare/v3.3.4...v3.3.5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=csv&package-manager=bundler&previous-version=3.3.4&new-version=3.3.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
dependabot[bot] commented 2025-06-09 21:54:03 +08:00 (Migrated from github.com)

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting `@dependabot ignore this major version` or `@dependabot ignore this minor version`. You can also ignore all major, minor, or patch releases for a dependency by adding an [`ignore` condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore) with the desired `update_types` to your config file. If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

Pull request closed

Sign in to join this conversation.