[cb-alish]

Summary

Update addressable gem from 2.8.7 → 2.9.0 to fix a Regular Expression Denial of Service (ReDoS) vulnerability.

Vulnerability Details

• Issue: Regular Expression Denial of Service (ReDoS)
• Package: addressable
• Severity: High (CVSS 8.7)
• Fixed in Version: 2.9.0
• Impact: addressable is a transitive dev/test dependency (via webmock). It does not ship to production consumers of the gem.

Changes

• Updated Gemfile.lock: addressable 2.8.7 → 2.9.0

No code changes required.

Made with Cursor

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters: 1

• Gemfile.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Enterprise
• Run ID: dff3e9cf-fc00-41ad-8586-e5b81130781a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}