Skip to content

Bump image_processing from 2.0.2 to 2.0.3 - #6828

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/bundler/image_processing-2.0.3
Aug 10, 2026
Merged

Bump image_processing from 2.0.2 to 2.0.3#6828
github-actions[bot] merged 1 commit into
mainfrom
dependabot/bundler/image_processing-2.0.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps image_processing from 2.0.2 to 2.0.3.

Changelog

Sourced from image_processing's changelog.

2.0.3 (2026-06-08)

  • Prevent remote code execution when operation names come from user input, closing bypasses through the #operation meta-builder, #method_missing, and nested #send calls (reported by @​szymonsec)

  • [minimagick] Prevent remote code execution through unsafe public methods (e.g. #instance_eval, #send) passed as loader/saver option names

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Aug 10, 2026
@codacy-production

codacy-production Bot commented Aug 10, 2026

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity

Metric Results
Complexity 0

View in Codacy

🟢 Coverage ∅ diff coverage

Metric Results
Coverage variation Report missing for 71df6571
Diff coverage diff coverage

View coverage diff in Codacy

Coverage variation details
Coverable lines Covered lines Coverage
Common ancestor commit (71df657) Report Missing Report Missing Report Missing
Head commit (0b02b77) 7609 6316 83.01%

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details
Coverable lines Covered lines Diff coverage
Pull request (#6828) 0 0 ∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

1 Codacy didn't receive coverage data for the commit, or there was an error processing the received data. Check your integration for errors and validate that your coverage setup is correct.

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

@github-actions
github-actions Bot enabled auto-merge August 10, 2026 09:57
Bumps [image_processing](https://github.com/janko/image_processing) from 2.0.2 to 2.0.3.
- [Changelog](https://github.com/janko/image_processing/blob/master/CHANGELOG.md)
- [Commits](janko/image_processing@v2.0.2...v2.0.3)

---
updated-dependencies:
- dependency-name: image_processing
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bundler/image_processing-2.0.3 branch from 911495a to 0b02b77 Compare August 10, 2026 10:27
@github-actions
github-actions Bot merged commit 2d8993a into main Aug 10, 2026
15 checks passed
@github-actions
github-actions Bot deleted the dependabot/bundler/image_processing-2.0.3 branch August 10, 2026 10:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants