Skip to content

update pagy gem from 9.x to 43 and fix vulnerabilities#31

Merged
dadachi merged 2 commits intomainfrom
chore/update-pagy-gem
Apr 2, 2026
Merged

update pagy gem from 9.x to 43 and fix vulnerabilities#31
dadachi merged 2 commits intomainfrom
chore/update-pagy-gem

Conversation

@dadachi
Copy link
Copy Markdown
Contributor

@dadachi dadachi commented Apr 2, 2026

Summary

  • Upgrade pagy gem from 9.4.0 to 43.4.4 with breaking change migrations
  • Fix bundler-audit vulnerabilities: rails 8.1.3, action_text-trix 2.1.18, mcp
  • Pagy::BackendPagy::Method, removed discontinued cycle: true option
  • Ignore devise CVE-2026-32700 (blocked by devise_token_auth pinning devise < 5)

Test plan

  • All 398 tests pass
  • RuboCop clean
  • Verify display page pagination works correctly in staging

🤖 Generated with Claude Code

dadachi and others added 2 commits April 3, 2026 07:49
- pagy 9.4.0 → 43.4.4: Pagy::Backend → Pagy::Method, removed cycle option
- rails 8.1.2 → 8.1.3: fixes activestorage CVE-2026-33658
- action_text-trix 2.1.17 → 2.1.18: fixes GHSA-53p3-c7vp-4mcc
- mcp updated: fixes CVE-2026-33946
- devise CVE-2026-32700: ignored (devise_token_auth pins devise < 5)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@dadachi dadachi merged commit da27cc4 into main Apr 2, 2026
3 checks passed
@dadachi dadachi deleted the chore/update-pagy-gem branch April 2, 2026 23:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant