Skip to content

Bump sqlite3 to v2.9.6 - #2698

Merged
KaanOzkan merged 1 commit into
mainfrom
ko-bump-sqlite3
Aug 18, 2026
Merged

Bump sqlite3 to v2.9.6#2698
KaanOzkan merged 1 commit into
mainfrom
ko-bump-sqlite3

Conversation

@KaanOzkan

Copy link
Copy Markdown
Contributor

Motivation

Resolves a minor security alert

Implementation

Tests

@KaanOzkan KaanOzkan changed the title Bump sqlite3 to 2.9.6 Bump sqlite3 to v2.9.6 Aug 17, 2026
Comment thread sorbet/tapioca/config.yml Outdated
gem:
exclude: []
exclude:
- mini_portile2

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Package proxy has the precompiled sqlite3 v2.9.6 gem for ARM macOS but not Linux 🤷 . Bundler therefore uses the precompiled gem locally and the generic source gem in Linux CI, where mini_portile2 is activated. This causes Tapioca to generate different RBI sets across platforms and fail gem --verify.

I excluded mini_portile2 because it is only a transitive build dependency and we do not use its API.

@KaanOzkan
KaanOzkan marked this pull request as ready for review August 17, 2026 20:30
@KaanOzkan
KaanOzkan requested a review from a team as a code owner August 17, 2026 20:30
@jesse-shopify jesse-shopify added the dependencies Pull requests that update a dependency file label Aug 17, 2026
@KaanOzkan
KaanOzkan merged commit 56c8d6c into main Aug 18, 2026
17 checks passed
@KaanOzkan
KaanOzkan deleted the ko-bump-sqlite3 branch August 18, 2026 13:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

chore dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants