Skip to content

chore(deps): bump sprockets from 4.2.2 to 4.4.1 - #3053

Merged
mroderick merged 1 commit into
masterfrom
upgrade/sprockets-4-4-1
Oct 22, 2026
Merged

mroderick merged 1 commit into
masterfrom
upgrade/sprockets-4-4-1

Conversation

@mroderick

Copy link
Copy Markdown
Collaborator

Bumps sprockets 4.2.2 → 4.4.1. This is the second prerequisite for the json 3.x bump in #3051: sprockets 4.2.2 passes create_additions: to JSON.parse, which json 3.x rejects as an unknown keyword, so the app fails to boot as soon as json 3 enters the lock. Sprockets 4.3.0 fixed json 3 compatibility (rails/sprockets#829).

  • Diff: Gemfile.lock only, three lines. json stays at 2.21.2 here.
  • 4.4.0 and 4.4.1 add the ignore_mtime option and a cache-limit opt-out; the changelog has no breaking changes, and runtime dependencies are unchanged.
  • Merge order matters: merge this first, then trigger @dependabot rebase on chore(deps): bump json from 2.21.2 to 3.1.0 #3051. The other way round leaves master unable to boot.

Review notes

  • Look at first: the lockfile diff is only the sprockets version and its checksum lines, and the changelog review above covers 4.2.2 → 4.4.1.
  • Deliberately not done: the json bump stays in chore(deps): bump json from 2.21.2 to 3.1.0 #3051; the stale json pin comment in the Gemfile belongs to that PR.

Sprockets 4.2.2 calls JSON.parse with a create_additions option,
which json 3.x rejects as an unknown keyword, so the app fails to
boot once json 3 is in the lock. Sprockets 4.3.0 added json 3
compatibility (rails/sprockets#829); 4.4.0 and 4.4.1 add the
ignore_mtime option and a cache-limit opt-out.

Unblocks the dependabot json bump in #3051: merge this first,
then rebase #3051.
@mroderick
mroderick marked this pull request as ready for review October 22, 2026 14:41

@olleolleolle olleolleolle left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanking them for keeping it up-to-date.

@mroderick
mroderick enabled auto-merge October 22, 2026 15:21
@mroderick
mroderick merged commit 59f1c43 into master Oct 22, 2026
20 checks passed
@mroderick
mroderick deleted the upgrade/sprockets-4-4-1 branch October 22, 2026 15:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants