Skip to content

build(deps-dev): bump webmock from 3.26.4 to 3.30.0 - #5552

Merged
moleske merged 1 commit into
mainfrom
dependabot/bundler/webmock-3.30.0
Oct 18, 2026
Merged

moleske merged 1 commit into
mainfrom
dependabot/bundler/webmock-3.30.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026

Copy link
Copy Markdown
Contributor

Bumps webmock from 3.26.4 to 3.30.0.

Release notes

Sourced from webmock's releases.

3.30.0

  • Allow narrowing an RSpec expectation on a stub with with, as in expect(stub).to have_been_requested.once.with(body: "abc") (#1128)

    The expectation counts only the requests that match both the stub and the conditions given to with. The stub itself does not change.

    Thanks to Sébastien S.

  • Show the JSON body hint for expectations narrowed with with too, and no longer show it when a block is given to the stub or expectation, since checking would mean calling the block

  • Allow a full URL with a path in disable_net_connect!(allow: ...), as in allow: "https://github.com/mozilla/geckodriver/releases/latest" (#977)

    URLs are compared the same way as in stubs, so the default port, letter case in the host, and the order and encoding of query parameters don't matter. A URL without a path or query allows every path on that scheme, host and port; a trailing slash restricts requests to / with no query string. Credentials in either URL are ignored.

    Thanks to Henry Blyth

3.29.0

  • Show a body diff for JSON requests whose content type has a +json suffix, such as application/vnd.api+json, and for the other content types WebMock already matches as JSON (#734)

    Thanks to Olivier Brisse

  • Ignore the case of JSON, XML and url-encoded content types when matching request bodies, and match bodies of any +json or +xml media type, such as image/svg+xml, as JSON or XML

  • Suggest declaring a JSON body as a hash when a request fails to match only because the JSON is formatted differently (#649)

    A body declared as a string must match the request body exactly, including key order and whitespace. When that is the only difference, the error for an unregistered request and the failure message of a request expectation now say so, and suggest with(body: JSON.parse(json_string)). Matching JSON strings regardless of key order by default is planned for the next major version (#485).

3.28.0

  • Fix to_rack apps receiving a rack.session they did not set up (#985)

    WebMock used to add a session hash to the Rack env, shared by every request to the same stub. This confused apps that check whether a session is present, such as Rails API-only apps, and carried session data over between requests. WebMock now leaves rack.session and rack.session.options unset, as a real server does. If your app needs a session, include session middleware in the app you pass to to_rack. RackResponse#session and RackResponse#session_options have been removed.

    Thanks to Jan Graichen

  • Fix crash when matching a hash body pattern against a JSON or XML request that has no body

    Thanks to Chris

  • No longer warn about curb versions newer than the last one tested

  • Document regexp values in hash_including

    Thanks to Christian Bruckmayer

  • Remove unused RequestSignatureSnippet#request_params

    Thanks to Daniel Pepper

3.27.0

  • Fix crash in async-http adapter when a request header has a nil value

... (truncated)

Changelog

Sourced from webmock's changelog.

3.30.0

  • Allow narrowing an RSpec expectation on a stub with with, as in expect(stub).to have_been_requested.once.with(body: "abc") (#1128)

    The expectation counts only the requests that match both the stub and the conditions given to with. The stub itself does not change.

    Thanks to Sébastien S.

  • Show the JSON body hint for expectations narrowed with with too, and no longer show it when a block is given to the stub or expectation, since checking would mean calling the block

  • Allow a full URL with a path in disable_net_connect!(allow: ...), as in allow: "https://github.com/mozilla/geckodriver/releases/latest" (#977)

    URLs are compared the same way as in stubs, so the default port, letter case in the host, and the order and encoding of query parameters don't matter. A URL without a path or query allows every path on that scheme, host and port; a trailing slash restricts requests to / with no query string. Credentials in either URL are ignored.

    Thanks to Henry Blyth

3.29.0

  • Show a body diff for JSON requests whose content type has a +json suffix, such as application/vnd.api+json, and for the other content types WebMock already matches as JSON (#734)

    Thanks to Olivier Brisse

  • Ignore the case of JSON, XML and url-encoded content types when matching request bodies, and match bodies of any +json or +xml media type, such as image/svg+xml, as JSON or XML

  • Suggest declaring a JSON body as a hash when a request fails to match only because the JSON is formatted differently (#649)

    A body declared as a string must match the request body exactly, including key order and whitespace. When that is the only difference, the error for an unregistered request and the failure message of a request expectation now say so, and suggest with(body: JSON.parse(json_string)). Matching JSON strings regardless of key order by default is planned for the next major version (#485).

3.28.0

  • Fix to_rack apps receiving a rack.session they did not set up (#985)

    WebMock used to add a session hash to the Rack env, shared by every request to the same stub. This confused apps that check whether a session is present, such as Rails API-only apps, and carried session data over between requests. WebMock now leaves rack.session and rack.session.options unset, as a real server does. If your app needs a session, include session middleware in the app you pass to to_rack. RackResponse#session and RackResponse#session_options have been removed.

    Thanks to Jan Graichen

  • Fix crash when matching a hash body pattern against a JSON or XML request that has no body

    Thanks to Chris

  • No longer warn about curb versions newer than the last one tested

  • Document regexp values in hash_including

    Thanks to Christian Bruckmayer

  • Remove unused RequestSignatureSnippet#request_params

    Thanks to Daniel Pepper

... (truncated)

Commits
  • d57be75 Version 3.30.0
  • 37ab875 Compare allowed URLs in the net connect allow list the same way as stub URLs
  • 686f411 Keep allowing every path for scheme://host in the net connect allow list
  • 76b020c Merge pull request #978 from henrahmagix/patch-1
  • 0a6b7f4 Show the JSON body hint for expectations narrowed with with
  • 71acb1b Stop with on stub expectations from changing the stub
  • 8369a56 Merge pull request #1128 from inkstak/feature-have_been_requested_with_body
  • 664309c Version 3.29.0
  • 5fc01c3 Only check that an oddly encoded JSON body does not raise
  • b8dfa96 Suggest declaring a JSON body as a hash when only its formatting differs
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [webmock](https://github.com/bblimke/webmock) from 3.26.4 to 3.30.0.
- [Release notes](https://github.com/bblimke/webmock/releases)
- [Changelog](https://github.com/bblimke/webmock/blob/master/CHANGELOG.md)
- [Commits](bblimke/webmock@v3.26.4...v3.30.0)

---
updated-dependencies:
- dependency-name: webmock
  dependency-version: 3.30.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Oct 16, 2026
@moleske
moleske merged commit ec3ee78 into main Oct 18, 2026
12 checks passed
@dependabot
dependabot Bot deleted the dependabot/bundler/webmock-3.30.0 branch October 18, 2026 00:06
ari-wg-gitbot added a commit to cloudfoundry/capi-release that referenced this pull request Oct 18, 2026
…udfoundry.org/tps

Dependency updates in cloud_controller_ng:

- build(deps-dev): bump webmock from 3.26.4 to 3.30.0
    PR: cloudfoundry/cloud_controller_ng#5552
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

- build(deps): bump json from 3.0.2 to 3.1.0
    PR: cloudfoundry/cloud_controller_ng#5553
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Dependency updates in code.cloudfoundry.org/cc-uploader:

- Bump code.cloudfoundry.org/tlsconfig from 0.68.0 to 0.69.0
    PR: cloudfoundry/cc-uploader#477
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

- Bump code.cloudfoundry.org/debugserver from 0.118.0 to 0.119.0
    PR: cloudfoundry/cc-uploader#475
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Dependency updates in code.cloudfoundry.org/tps:

- Bump code.cloudfoundry.org/clock from 1.90.0 to 1.92.0
    PR: cloudfoundry/tps#559
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

- Bump code.cloudfoundry.org/diego-logging-client from 0.127.0 to 0.129.0
    PR: cloudfoundry/tps#560
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant