Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 18, 2025

@mayorova:

This upgrade has a couple of issues:

  1. The line https://github.com/3scale/porta/blob/dependabot/bundler/aws-sdk-s3-1.208.0/test/unit/profile_test.rb#L119 fails with:
expected params to be a hash, got class TrueClass instead.
/opt/ci/workdir/vendor/bundle/ruby/3.1.0/gems/aws-sdk-core-3.240.0/lib/aws-sdk-core/param_validator.rb:35:in `validate!'
/opt/ci/workdir/vendor/bundle/ruby/3.1.0/gems/aws-sdk-core-3.240.0/lib/aws-sdk-core/client_stubs.rb:278:in `data_to_http_resp'
/opt/ci/workdir/vendor/bundle/ruby/3.1.0/gems/aws-sdk-core-3.240.0/lib/aws-sdk-core/client_stubs.rb:263:in `http_response_stub'
/opt/ci/workdir/vendor/bundle/ruby/3.1.0/gems/aws-sdk-core-3.240.0/lib/aws-sdk-core/client_stubs.rb:251:in `convert_stub'
/opt/ci/workdir/vendor/bundle/ruby/3.1.0/gems/aws-sdk-core-3.240.0/lib/aws-sdk-core/client_stubs.rb:248:in `convert_stub'
/opt/ci/workdir/vendor/bundle/ruby/3.1.0/gems/aws-sdk-core-3.240.0/lib/aws-sdk-core/client_stubs.rb:229:in `next_stub'
/opt/ci/workdir/vendor/bundle/ruby/3.1.0/gems/aws-sdk-core-3.240.0/lib/aws-sdk-core/plugins/stub_responses.rb:88:in `stub_responses'
/opt/ci/workdir/vendor/bundle/ruby/3.1.0/gems/aws-sdk-core-3.240.0/lib/aws-sdk-core/plugins/stub_responses.rb:79:in `block in call'
/opt/ci/workdir/vendor/bundle/ruby/3.1.0/gems/aws-sdk-core-3.240.0/lib/aws-sdk-core/plugins/stub_responses.rb:144:in `block in span_wrapper'

But this can be fixed easily by returning a hash (e.g. {} or Hash.new) within the stub_responses, after assert_equal. I understand that we don't actually care about the stubbed values anyway, we just use this method to verify that the acl mode is private.

  1. There is a following deprecation:
#################### DEPRECATION WARNING ####################
Called deprecated method `upload_file` of Aws::S3::Object. Use `Aws::S3::TransferManager#upload_file` instead.
Method `upload_file` will be removed in next major version.
#############################################################
/home/dmayorov/.asdf/installs/ruby/3.1.5/lib/ruby/gems/3.1.0/gems/kt-paperclip-7.2.1/lib/paperclip/storage/s3.rb:389:in `block in flush_writes'
/home/dmayorov/.asdf/installs/ruby/3.1.5/lib/ruby/gems/3.1.0/gems/kt-paperclip-7.2.1/lib/paperclip/storage/s3.rb:359:in `each'
/home/dmayorov/.asdf/installs/ruby/3.1.5/lib/ruby/gems/3.1.0/gems/kt-paperclip-7.2.1/lib/paperclip/storage/s3.rb:359:in `flush_writes'
/home/dmayorov/.asdf/installs/ruby/3.1.5/lib/ruby/gems/3.1.0/gems/kt-paperclip-7.2.1/lib/paperclip/attachment.rb:240:in `save'
/home/dmayorov/.asdf/installs/ruby/3.1.5/lib/ruby/gems/3.1.0/gems/kt-paperclip-7.2.1/lib/paperclip/has_attached_file.rb:92:in `block in add_active_record_callbacks'

Apparently, it's a known issue in kt-paperclip, but the fix is not merged or released: kreeti/kt-paperclip#155

Probably we need to wait until this is released, because having this warning is really ugly.


Bumps aws-sdk-s3 from 1.114.0 to 1.208.0.

Changelog

Sourced from aws-sdk-s3's changelog.

1.208.0 (2025-12-16)

  • Feature - Updates to the S3 Encryption Client. The V3 S3 Encryption Client now requires key committing algorithm suites by default.

1.207.0 (2025-12-15)

  • Feature - This release adds support for the new optional field 'LifecycleExpirationDate' in S3 Inventory configurations.

1.206.0 (2025-12-02)

  • Feature - New S3 Storage Class FSX_ONTAP

1.205.0 (2025-11-20)

  • Feature - Enable / Disable ABAC on a general purpose bucket.

1.204.0 (2025-11-19)

  • Feature - Adds support for blocking SSE-C writes to general purpose buckets.

1.203.1 (2025-11-10)

  • Issue - Deprecated :checksum_mode parameter in FileDownloader#download. When set to "DISABLED", a deprecation warning is issued and the parameter is ignored. Use :response_checksum_validation on the S3 client instead to control checksum validation behavior.

1.203.0 (2025-11-05)

  • Feature - Launch IPv6 dual-stack support for S3 Express

1.202.0 (2025-10-28)

  • Feature - Amazon Simple Storage Service / Features: Add conditional writes in CopyObject on destination key to prevent unintended object modifications.

1.201.0 (2025-10-21)

  • Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

  • Issue - Fix multipart upload to respect request_checksum_calculation when_required mode.

1.200.0 (2025-10-15)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Dec 18, 2025
Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) from 1.114.0 to 1.208.0.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

---
updated-dependencies:
- dependency-name: aws-sdk-s3
  dependency-version: 1.208.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@mayorova mayorova force-pushed the dependabot/bundler/aws-sdk-s3-1.208.0 branch from 93a23dd to 2babf01 Compare December 31, 2025 10:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant