Skip to content

[10.0] deps(stdlib): bump erb from 4.0.4 to 4.0.4.1 to resolve CVE-2026-41316#9389

Merged
headius merged 1 commit into
jruby:jruby-10.0from
chadlwilson:bump-erb-10.0
Apr 22, 2026
Merged

[10.0] deps(stdlib): bump erb from 4.0.4 to 4.0.4.1 to resolve CVE-2026-41316#9389
headius merged 1 commit into
jruby:jruby-10.0from
chadlwilson:bump-erb-10.0

Conversation

@chadlwilson

Copy link
Copy Markdown
Contributor

MRI tests synced as at ruby/erb@6a2e4a7

@chadlwilson chadlwilson changed the title deps(stdlib): bump erb from 4.0.4 to 4.0.4.1 to resolve CVE-2026-41316 [10.0] deps(stdlib): bump erb from 4.0.4 to 4.0.4.1 to resolve CVE-2026-41316 Apr 22, 2026
@chadlwilson

Copy link
Copy Markdown
Contributor Author

Sequel tests failing due to unrelated change upstream in minitest: jeremyevans/sequel#2360

@headius headius merged commit 5eb42a0 into jruby:jruby-10.0 Apr 22, 2026
106 of 107 checks passed
@headius headius added this to the JRuby 10.0.6.0 milestone Apr 22, 2026
@chadlwilson chadlwilson deleted the bump-erb-10.0 branch April 22, 2026 08:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants