Skip to content

MAT-10345 [Snyk] Fix for 1 vulnerabilities - #48

Open
riddhi-desai wants to merge 3 commits into
developfrom
snyk-fix-f67986d9f521ea90e88d30fb4489dc8e
Open

MAT-10345 [Snyk] Fix for 1 vulnerabilities#48
riddhi-desai wants to merge 3 commits into
developfrom
snyk-fix-f67986d9f521ea90e88d30fb4489dc8e

Conversation

@riddhi-desai

Copy link
Copy Markdown
Contributor

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

  • Gemfile
⚠️ Warning
Failed to update the Gemfile.lock, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Use After Free
SNYK-RUBY-JSON-18599450
  124  

Breaking Change Risk

Merge Risk: Medium

Notice: This assessment is enhanced by AI.


Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Use After Free

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-RUBY-JSON-18599450
@riddhi-desai
riddhi-desai requested a review from a team as a code owner August 10, 2026 13:13
@riddhi-desai

Copy link
Copy Markdown
Contributor Author

Merge Risk: Medium

This update includes a minor version bump for mongoid and a patch update for cqm-reports.

mongoid@9.0.11 → 9.1.0

Risk: Medium

This is a minor version upgrade that introduces changes to default configurations which could be breaking for some applications.

Key Changes:

  • allow_reparenting_via_nested_attributes: The default for this configuration has been changed to false. If your application relies on reparenting has_many records through nested attributes, you will need to explicitly set Mongoid::Config.allow_reparenting_via_nested_attributes = true to maintain the previous behavior. This option will be removed in Mongoid v10.
  • autosave_saves_unchanged_documents: The default for this configuration has also been changed to false. To restore the previous behavior of saving unchanged documents, you must set Mongoid.autosave_saves_unchanged_documents = true. This option will also be removed in Mongoid v10.
  • New Features: This release adds several new features, including the Criteria#raw method for retrieving raw hash results and support for auto-embedding fields for vector search.
  • Deprecations: The Criteria#max_scan method is now deprecated.

Recommendation:
Review your application's use of nested attributes and autosave functionality to determine if the new default settings will impact your code. Update your configuration if necessary.

Source: Mongoid 9.1.0 Release Notes

cqm-reports@4.1.7 → 4.1.8

Risk: Medium

This is a patch version upgrade. Specific release notes or a changelog for this version could not be located. Due to the lack of information, the risk is assessed as medium due to uncertainty.

Recommendation:
Proceed with caution and ensure thorough testing is performed after this upgrade to validate that there is no impact on functionality.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

@codacy-production

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results
Complexity 0
Duplication 0

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

@riddhi-desai riddhi-desai changed the title [Snyk] Fix for 1 vulnerabilities MAT-10345 [Snyk] Fix for 1 vulnerabilities Aug 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants