ruby-grape / grape / 26764104388

97%

master: 97%

Pull #2756

github

Tighten dependency lower bounds to their compatibility floors

Grape's dependency floors were loose (zeitwerk and dry-configurable were
unpinned, rack was >= 2). Raise them to the lowest versions Grape is actually
compatible with on its Ruby 3.3 / Rails 7.2 baseline -- not the latest:

- rack:             >= 2 -> >= 2.2.4  (Rails 7.2's floor; avoids rack CVEs < 2.2.4)
- zeitwerk:         unpinned -> >= 2.6  (mirrors Rails 7.2's `zeitwerk ~> 2.6`)
- dry-configurable: unpinned -> >= 1.0  (the `setting ..., default:` keyword API)

dry-types stays at >= 1.1. Floors only, no upper bounds; resolved versions
are unchanged.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

1112 of 1205 branches covered (92.28%)

Branch coverage included in aggregate %.

3540 of 3603 relevant lines covered (98.25%)

17440.45 hits per line