build(deps): bump newrelic_rpm from 9.19.0 to 9.20.0 #204

Closed

dependabot[bot] wants to merge 1 commit from dependabot/bundler/newrelic_rpm-9.20.0 into dev

dependabot[bot] commented

2025-07-31 20:19:35 +00:00

(Migrated from github.com)

Bumps newrelic_rpm from 9.19.0 to 9.20.0.

Changelog

Sourced from newrelic_rpm's changelog.

v9.20.0

Feature: Add ECS Docker ID for Fargate

Previously, the Ruby agent did not record the Docker ID when running in an AWS ECS Fargate environment. The Docker ID will now be recorded correctly. PR#3172

Feature: Add NewRelic::Helper.version_satisfied?

The agent has a new helper method to simplify version comparison. NewRelic::Helper.version_satisfied? accepts three arguments: a left-side version number, the comparison operator as a string, and a right-side version number. Our thanks go to @kekke-n for this contribution. PR#3182

Feature: Add code.stacktrace attribute on datastore spans when duration exceeds configured threshold

The agent will now add the code.stacktrace attribute to datastore spans when the duration exceeds the configured threshold. The threshold is configured using the transaction_tracer.stack_trace_threshold configuration option. PR#3220

Feature: Consolidate "Unknown" constant values

All references to the various capitalization styles for "Unknown" have been consolidated into two constants: NewRelic::UNKNOWN and NewRelic::UNKNOWN_LOWER. Thank you, @tsubasa1122, for your contribution! PR#3185

Bugfix: Fix Brewfile source links

Previously, the multiverse README's links to the Brewfile were broken. Our thanks go to @emmanuel-ferdman for submitting a PR to fix them! PR#3191

Bugfix: Fix error when using HTTPX 1.5.0

The agent previously encountered an error when using the new HTTPX version 1.5.0. This was due to a change in the way HTTPX stores the response. The agent has been updated to handle this change correctly, and no longer encounters an error when using HTTPX 1.5.0. PR#3203

Bugfix: Bugfixes and improvements to debug level agent logs

Improves the information logged at the debug level by the agent when the agent reads in a configuration source. PR#3221

Bugfix: Fix risk of server-side forgery for Slack workflow script

Internally, we keep track of gems that are released using a GitHub actions workflow that posts updates on Slack. [@odaysec] identified a way we could reduce the risk of server-side forgery for this workflow. Thank you! PR#3184

Bugfix: Replace JSON.load calls with JSON.parse

Generally, JSON.parse is seen as safer than JSON.load. Thank you, @odaysec, for bringing this to our attention! PR#3183 PR#3230

Commits

0a677f4 Merge pull request #3241 from newrelic/add-unknown-changelog-entry
7fc6758 Add unknown constant changelog entry
3da4203 Merge pull request #3232 from newrelic/prerelease_updates_9.20.0-pre
9375b93 Merge pull request #3239 from newrelic/pather-panchali
9ff6050 Merge pull request #3238 from newrelic/exempt-bot-from-community-label
406b31d Update newrelic.yml to remove \t chars
6b83d97 Merge branch 'dev' into prerelease_updates_9.20.0-pre
388f057 Merge pull request #3235 from newrelic/yml_fix_tabs
9ecfdfe 🍵 ❤️
abac05a Use delete! instead of gsub!
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [newrelic_rpm](https://github.com/newrelic/newrelic-ruby-agent) from 9.19.0 to 9.20.0. <details> <summary>Changelog</summary> Sourced from <a href="https://github.com/newrelic/newrelic-ruby-agent/blob/dev/CHANGELOG.md">newrelic_rpm's changelog</a>. <blockquote> <h2>v9.20.0</h2> <ul> <li> Feature: Add ECS Docker ID for Fargate Previously, the Ruby agent did not record the Docker ID when running in an AWS ECS Fargate environment. The Docker ID will now be recorded correctly. <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3172">PR#3172</a> </li> <li> Feature: Add NewRelic::Helper.version_satisfied? The agent has a new helper method to simplify version comparison. <code>NewRelic::Helper.version_satisfied?</code> accepts three arguments: a left-side version number, the comparison operator as a string, and a right-side version number. Our thanks go to <a href="https://github.com/kekke-n"><code>@kekke-n</code></a> for this contribution. <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3182">PR#3182</a> </li> <li> Feature: Add code.stacktrace attribute on datastore spans when duration exceeds configured threshold The agent will now add the <code>code.stacktrace</code> attribute to datastore spans when the duration exceeds the configured threshold. The threshold is configured using the <code>transaction_tracer.stack_trace_threshold</code> configuration option. <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3220">PR#3220</a> </li> <li> Feature: Consolidate "Unknown" constant values All references to the various capitalization styles for "Unknown" have been consolidated into two constants: <code>NewRelic::UNKNOWN</code> and <code>NewRelic::UNKNOWN_LOWER</code>. Thank you, <a href="https://github.com/@tsubasa1122"><code>@tsubasa1122</code></a>, for your contribution! <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3185">PR#3185</a> </li> <li> Bugfix: Fix Brewfile source links Previously, the multiverse README's links to the Brewfile were broken. Our thanks go to <a href="https://github.com/emmanuel-ferdman"><code>@emmanuel-ferdman</code></a> for submitting a PR to fix them! <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3191">PR#3191</a> </li> <li> Bugfix: Fix error when using HTTPX 1.5.0 The agent previously encountered an error when using the new HTTPX version 1.5.0. This was due to a change in the way HTTPX stores the response. The agent has been updated to handle this change correctly, and no longer encounters an error when using HTTPX 1.5.0. <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3203">PR#3203</a> </li> <li> Bugfix: Bugfixes and improvements to debug level agent logs Improves the information logged at the debug level by the agent when the agent reads in a configuration source. <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3221">PR#3221</a> </li> <li> Bugfix: Fix risk of server-side forgery for Slack workflow script Internally, we keep track of gems that are released using a GitHub actions workflow that posts updates on Slack. [<a href="https://github.com/odaysec"><code>@odaysec</code></a>] identified a way we could reduce the risk of server-side forgery for this workflow. Thank you! <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3184">PR#3184</a> </li> <li> Bugfix: Replace JSON.load calls with JSON.parse Generally, JSON.parse is seen as safer than JSON.load. Thank you, <a href="https://github.com/odaysec"><code>@odaysec</code></a>, for bringing this to our attention! <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3183">PR#3183</a> <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/pull/3230">PR#3230</a> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/newrelic/newrelic-ruby-agent/commit/0a677f4dac449247caf9b854fbe1a403ba680328"><code>0a677f4</code></a> Merge pull request <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/issues/3241">#3241</a> from newrelic/add-unknown-changelog-entry</li> <li><a href="https://github.com/newrelic/newrelic-ruby-agent/commit/7fc67585af7a75b84cd7ec3d5a0c207d7eecc14f"><code>7fc6758</code></a> Add unknown constant changelog entry</li> <li><a href="https://github.com/newrelic/newrelic-ruby-agent/commit/3da4203f19f28d271722200bab73dce53e1c926f"><code>3da4203</code></a> Merge pull request <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/issues/3232">#3232</a> from newrelic/prerelease_updates_9.20.0-pre</li> <li><a href="https://github.com/newrelic/newrelic-ruby-agent/commit/9375b93bc38e99f6199555d85ba7800fad2cbf65"><code>9375b93</code></a> Merge pull request <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/issues/3239">#3239</a> from newrelic/pather-panchali</li> <li><a href="https://github.com/newrelic/newrelic-ruby-agent/commit/9ff605070ceaedf5cb54194f267df7ab81153fd5"><code>9ff6050</code></a> Merge pull request <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/issues/3238">#3238</a> from newrelic/exempt-bot-from-community-label</li> <li><a href="https://github.com/newrelic/newrelic-ruby-agent/commit/406b31d20939811b03abdeea72f122689c66fdc6"><code>406b31d</code></a> Update newrelic.yml to remove \t chars</li> <li><a href="https://github.com/newrelic/newrelic-ruby-agent/commit/6b83d9711ff9d0f7d454aca28663f6aa70e25082"><code>6b83d97</code></a> Merge branch 'dev' into prerelease_updates_9.20.0-pre</li> <li><a href="https://github.com/newrelic/newrelic-ruby-agent/commit/388f0572603958c0f1a2172aaf066a26c7b5f12f"><code>388f057</code></a> Merge pull request <a href="https://redirect.github.com/newrelic/newrelic-ruby-agent/issues/3235">#3235</a> from newrelic/yml_fix_tabs</li> <li><a href="https://github.com/newrelic/newrelic-ruby-agent/commit/9ecfdfe7add61021b4809e3a618d030e644e88b3"><code>9ecfdfe</code></a> :tea: :heart:</li> <li><a href="https://github.com/newrelic/newrelic-ruby-agent/commit/abac05a4df6d33630e89da51f91c4a5a426d0425"><code>abac05a</code></a> Use delete! instead of gsub!</li> <li>Additional commits viewable in <a href="https://github.com/newrelic/newrelic-ruby-agent/compare/9.19.0...9.20.0">compare view</a></li> </ul> </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=newrelic_rpm&package-manager=bundler&previous-version=9.19.0&new-version=9.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

dependabot[bot] commented

2025-08-28 19:27:23 +00:00

(Migrated from github.com)

Superseded by #218.