Skip to content

build(deps-dev): bump webmock from 3.26.4 to 3.29.0 - #5549

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/webmock-3.29.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/webmock-3.29.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps webmock from 3.26.4 to 3.29.0.

Release notes

Sourced from webmock's releases.

3.29.0

  • Show a body diff for JSON requests whose content type has a +json suffix, such as application/vnd.api+json, and for the other content types WebMock already matches as JSON (#734)

    Thanks to Olivier Brisse

  • Ignore the case of JSON, XML and url-encoded content types when matching request bodies, and match bodies of any +json or +xml media type, such as image/svg+xml, as JSON or XML

  • Suggest declaring a JSON body as a hash when a request fails to match only because the JSON is formatted differently (#649)

    A body declared as a string must match the request body exactly, including key order and whitespace. When that is the only difference, the error for an unregistered request and the failure message of a request expectation now say so, and suggest with(body: JSON.parse(json_string)). Matching JSON strings regardless of key order by default is planned for the next major version (#485).

3.28.0

  • Fix to_rack apps receiving a rack.session they did not set up (#985)

    WebMock used to add a session hash to the Rack env, shared by every request to the same stub. This confused apps that check whether a session is present, such as Rails API-only apps, and carried session data over between requests. WebMock now leaves rack.session and rack.session.options unset, as a real server does. If your app needs a session, include session middleware in the app you pass to to_rack. RackResponse#session and RackResponse#session_options have been removed.

    Thanks to Jan Graichen

  • Fix crash when matching a hash body pattern against a JSON or XML request that has no body

    Thanks to Chris

  • No longer warn about curb versions newer than the last one tested

  • Document regexp values in hash_including

    Thanks to Christian Bruckmayer

  • Remove unused RequestSignatureSnippet#request_params

    Thanks to Daniel Pepper

3.27.0

  • Fix crash in async-http adapter when a request header has a nil value

    Thanks to hikmetba-bit

  • The async-http adapter now matches stubs against raw request header values instead of values parsed by protocol-http, consistent with the other adapters

  • Add RSpec hash_excluding support to body matching

    Thanks to Chris Gunther

  • Fix hash_excluding ignoring keys given without a value and regexp values, in both query and body matching

  • Fix crash when matching a request that has more than one Content-Type header

Changelog

Sourced from webmock's changelog.

3.29.0

  • Show a body diff for JSON requests whose content type has a +json suffix, such as application/vnd.api+json, and for the other content types WebMock already matches as JSON (#734)

    Thanks to Olivier Brisse

  • Ignore the case of JSON, XML and url-encoded content types when matching request bodies, and match bodies of any +json or +xml media type, such as image/svg+xml, as JSON or XML

  • Suggest declaring a JSON body as a hash when a request fails to match only because the JSON is formatted differently (#649)

    A body declared as a string must match the request body exactly, including key order and whitespace. When that is the only difference, the error for an unregistered request and the failure message of a request expectation now say so, and suggest with(body: JSON.parse(json_string)). Matching JSON strings regardless of key order by default is planned for the next major version (#485).

3.28.0

  • Fix to_rack apps receiving a rack.session they did not set up (#985)

    WebMock used to add a session hash to the Rack env, shared by every request to the same stub. This confused apps that check whether a session is present, such as Rails API-only apps, and carried session data over between requests. WebMock now leaves rack.session and rack.session.options unset, as a real server does. If your app needs a session, include session middleware in the app you pass to to_rack. RackResponse#session and RackResponse#session_options have been removed.

    Thanks to Jan Graichen

  • Fix crash when matching a hash body pattern against a JSON or XML request that has no body

    Thanks to Chris

  • No longer warn about curb versions newer than the last one tested

  • Document regexp values in hash_including

    Thanks to Christian Bruckmayer

  • Remove unused RequestSignatureSnippet#request_params

    Thanks to Daniel Pepper

3.27.0

  • Fix crash in async-http adapter when a request header has a nil value

    Thanks to hikmetba-bit

  • The async-http adapter now matches stubs against raw request header values instead of values parsed by protocol-http, consistent with the other adapters

  • Add RSpec hash_excluding support to body matching

    Thanks to Chris Gunther

  • Fix hash_excluding ignoring keys given without a value and regexp values, in both query and body matching

  • Fix crash when matching a request that has more than one Content-Type header

Commits
  • 664309c Version 3.29.0
  • 5fc01c3 Only check that an oddly encoded JSON body does not raise
  • b8dfa96 Suggest declaring a JSON body as a hash when only its formatting differs
  • d78f3cf Restore the body diff setting after errors_spec turns it off
  • 55d7fec Recognize JSON content types consistently in body diffs
  • 8c1feb6 Version 3.28.0
  • 875e348 Create the GitHub release as part of rake release
  • f7639f4 Stop warning about curb versions newer than the last one checked
  • 31d9526 Test regexp values in hash_including and array body patterns
  • 3316276 Document that to_rack does not provide a session
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [webmock](https://github.com/bblimke/webmock) from 3.26.4 to 3.29.0.
- [Release notes](https://github.com/bblimke/webmock/releases)
- [Changelog](https://github.com/bblimke/webmock/blob/master/CHANGELOG.md)
- [Commits](bblimke/webmock@v3.26.4...v3.29.0)

---
updated-dependencies:
- dependency-name: webmock
  dependency-version: 3.29.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Oct 14, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants