Bump business from 1.0.0 to 2.3.0 in /ruby by dependabot[bot] · Pull Request #6 · Sottti/dependabot · GitHub
Skip to content

Bump business from 1.0.0 to 2.3.0 in /ruby - #6

Merged
Sottti merged 2 commits into
developfrom
dependabot/bundler/ruby/business-2.3.0
Oct 22, 2026
Merged

Bump business from 1.0.0 to 2.3.0 in /ruby#6
Sottti merged 2 commits into
developfrom
dependabot/bundler/ruby/business-2.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 27, 2025 •
edited by Sottti
Loading

Copy link
Copy Markdown

Summary

Update business from 1.0.0 to 2.3.0 in the Ruby dependency manifest and lockfile. Resolve the conflicts by preserving the already merged uk_phone_numbers 0.1.1 update and all other current develop content. This demo has no Ruby consumers or calendar configuration to migrate for business 2.x's removal of bundled calendars.

Details

Original Dependabot description

Bumps business from 1.0.0 to 2.3.0.

Release notes

Sourced from business's releases.

v2.3.0

What's Changed

New Contributors

Full Changelog: gocardless/business@v2.2.1...v2.3.0

v2.2.1

  • Fix regression on Calendar#new #83 - thanks @​ineu!

v2.2.0

Add Business::Calendar#name - thanks @​mattmcf!

V2.1.0

  • Add separate working_day? and holiday? methods to the calendar

v2.0.0

🚨 BREAKING CHANGES 🚨

For more on the breaking changes that have been introduced in v2.0.0 please see the readme.

  • Remove bundled calendars see this pr for more context. If you need to use any of the previously bundled calendars, see here
  • Business::Calendar.load_paths= is now required

v1.18.0

  • Drop support for Ruby < 2.4.x
  • Fix Danish public holiday calendar

v1.17.1

  • Add holiday calendar for US ACH
  • Add holiday calendar for France SEPA
  • Update UK May Day 2020

Add Canadian PAD holiday calendar

Add Canadian national holiday calendar for PAD

v1.14.0

Added calendar for New Zealand's public holidays under BecsNZ.

v1.13.0

  • Add support for specifying extra_working_dates (special dates that are "working days", even though they are not one of the specified days, for example weekend dates that are considered to be working days)

v1.11.1

No release notes provided.

v1.11.0

Add banking holidays for BECS for 2017 and 2018.

... (truncated)

Changelog

Sourced from business's changelog.

2.3.0 - Jan 31, 2022

  • Added permitted classes to YAML's safe_load #112 - thanks @​attack
  • Removed support for Ruby 2.4, 2.5

2.2.1 - March 9, 2021

  • Fix regression on Calendar#new #83 - thanks @​ineu!

2.2.0 - March 4, 2021

2.1.0 - June 8, 2020

  • Add seperate working_day? and holiday? methods to the calendar

2.0.0 - May 4, 2020

🚨 BREAKING CHANGES 🚨

For more on the breaking changes that have been introduced in v2.0.0 please see the readme.

  • Remove bundled calendars see this pr for more context. If you need to use any of the previously bundled calendars, see here
  • Business::Calendar.load_paths= is now required

1.18.0 - April 30, 2020

Note we have dropped support for Ruby < 2.4.x

  • Correct Danish public holidays

1.17.1 - November 19, 2019

  • Change May Bank Holiday 2020 for UK (Bacs) - this was moved to the 8th.
  • Add 2020 holidays for PAD.

1.17.0 - October 30, 2019

  • Add holiday calendar for France (Target(SEPA) + French bank holidays)

1.16.1 - September 2, 2019

  • Fix holiday calendar for ACH U.S.

1.16.0 - January 17, 2019

  • Add holiday calendar for ACH U.S.

1.15.0 - October 24, 2018

... (truncated)

Commits
  • 6f50233 Merge pull request #110 from gocardless/dependabot/bundler/gc_ruboconfig-tw-2...
  • 4a2406e gc_rubocop autocorrect v2.31.0
  • 8f08da4 Update gc_ruboconfig requirement from ~> 2.30.0 to ~> 2.31.0
  • 3a95929 Merge pull request #111 from gocardless/dependabot/bundler/rubocop-tw-1.25.0
  • 126a5f9 Merge pull request #113 from gocardless/joesouthan/ruby-31
  • 45fd077 Bump v2.3.0
  • 930a5dc Add support for Ruby 3.1, remove Ruby 2.5
  • 11ef1e0 Merge pull request #112 from attack/safe-load
  • 53bb953 Use YAML#safe_load_file with permitted_classes
  • d1e6b8b Update rubocop requirement from ~> 1.24.1 to ~> 1.25.0
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Verification

  • Tested revision: 8569079ad25285692822bc8cac362f35ff411bb6 against develop at 8a168f62e789597486c88e25fd07fd2c2f560822.
  • Local checks — passed. Frozen installation of unchanged committed lock under Ruby 2.6.10/Bundler 2.4.22; business 2.3.0 and uk_phone_numbers 0.1.1 load; weekday/weekend, holidays, date arithmetic and named hash-calendar smoke pass; complete effective-diff/preservation and stable source checks pass. Bundler 2.7.2/Ruby 3.x and YAML-file loading on a newer Psych are not exercised.
  • Required build CI — passed on the tested revision. This demo workflow checks out the repository and configures Java; it does not compile an Android application.
  • Hosted Codex review — completed on the tested revision with no open findings.

CMD own peer review

Reviewed head 8569079ad25285692822bc8cac362f35ff411bb6 against base 8a168f62e789597486c88e25fd07fd2c2f560822. Completed clean pass, including the final hosted feedback and actual verification. No open defects, acceptance gaps, disputes or optional dispositions.

The greeting and historical review request/receipts contain no actionable concerns. Adding Ruby CI, a Ruby runtime pin or application code is declined as outside this dependency-only update. Local verification explicitly uses Ruby 2.6.10 and compatible Bundler 2.4.22 with BUNDLER_VERSION=2.4.22, frozen/deployment mode and isolated gem/config paths; it preserves the committed BUNDLED WITH 2.7.2 metadata. This does not verify Bundler 2.7.2 or Ruby 3.x. The host's Psych 3.1.0 lacks YAML.safe_load_file, so YAML-file calendar loading is not exercised; programmatic and named hash-calendar results are reported separately. Do not ask Dependabot to recreate or rebase this manually resolved branch before merge.

CMD own delivery state

  • Head: 8569079ad25285692822bc8cac362f35ff411bb6. Mode: merge.
  • Stage: merge_confirmed (done).
  • Ready to merge: no. Open items: 0. Review/check waivers: 0.
  • Applicable reused evidence: 0 result(s).
  • Peer review: accepted.
  • Feedback: 6 assessment(s), 0 issue reference(s), 6 disposition(s).
  • Transition: merged; origin: agent.

@dependabot
Bump business from 1.0.0 to 2.3.0 in /ruby
0fc47c0 
Bumps [business](https://github.com/gocardless/business) from 1.0.0 to 2.3.0.
- [Release notes](https://github.com/gocardless/business/releases)
- [Changelog](https://github.com/gocardless/business/blob/master/CHANGELOG.md)
- [Commits](gocardless/business@v1.0.0...v2.3.0)

---
updated-dependencies:
- dependency-name: business
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Oct 27, 2025
@github-actions

github-actions Bot commented Oct 27, 2025

Copy link
Copy Markdown

@Sottti ChatGPT Codex Connector

Sottti commented Oct 21, 2026

Copy link
Copy Markdown
Owner

@codex review

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 21, 2026 •
edited
Loading

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-22T08:34:50.040010Z 8569079 New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 21, 2026

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. 🚀

Reviewed commit: 0fc47c0b4a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@Sottti
Sottti changed the base branch from main to develop October 21, 2026 14:41
@Sottti ChatGPT Codex Connector

Sottti commented Oct 22, 2026

Copy link
Copy Markdown
Owner

CMD own ownership v1
event: claim
token: 6ce1c90d-89db-49ab-82cd-94aa06599595
agent: Codex
branch: dependabot/bundler/ruby/business-2.3.0
pr: #6
supersedes: none

@Sottti
Sottti merged commit cf2063f into develop Oct 22, 2026
1 check passed
@dependabot
dependabot Bot deleted the dependabot/bundler/ruby/business-2.3.0 branch October 22, 2026 08:39
@Sottti ChatGPT Codex Connector

Sottti commented Oct 22, 2026

Copy link
Copy Markdown
Owner

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Sottti