Skip to content

build(deps): Bump image_processing from 2.0.2 to 2.1.0 - #39

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/image_processing-2.1.0
Open

build(deps): Bump image_processing from 2.0.2 to 2.1.0#39
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/image_processing-2.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps image_processing from 2.0.2 to 2.1.0.

Changelog

Sourced from image_processing's changelog.

2.1.0 (2026-09-01)

  • [minimagick] Add inherit_fds: so a loader can name an already-open input (thanks to @​flavorjones)

2.0.3 (2026-08-06)

  • Prevent remote code execution when operation names come from user input, closing bypasses through the #operation meta-builder, #method_missing, and nested #send calls (reported by @​szymonsec)

  • [minimagick] Prevent remote code execution through unsafe public methods (e.g. #instance_eval, #send) passed as loader/saver option names

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Sep 9, 2026
@dependabot dependabot Bot changed the title Bump image_processing from 2.0.2 to 2.1.0 build(deps): Bump image_processing from 2.0.2 to 2.1.0 Sep 13, 2026
@dependabot
dependabot Bot force-pushed the dependabot/bundler/image_processing-2.1.0 branch from dd7e278 to d74d6e5 Compare September 13, 2026 21:29
Bumps [image_processing](https://github.com/janko/image_processing) from 2.0.2 to 2.1.0.
- [Changelog](https://github.com/janko/image_processing/blob/master/CHANGELOG.md)
- [Commits](janko/image_processing@v2.0.2...v2.1.0)

---
updated-dependencies:
- dependency-name: image_processing
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bundler/image_processing-2.1.0 branch from d74d6e5 to e611773 Compare September 13, 2026 21:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants