GitHub
06/18/2026, 8:52 PMGitHub
06/19/2026, 1:39 AM<https://github.com/pact-foundation/pact-standalone/tree/master|master> by JP-Ellis
<https://github.com/pact-foundation/pact-standalone/commit/0dffb90ce691afe0f0036f91bb86f32576229cee|0dffb90c> - chore(deps): update dependency pact_broker-client to v1.78.0
pact-foundation/pact-standaloneGitHub
06/19/2026, 1:39 AM<https://github.com/pact-foundation/pact-standalone/tree/master|master> by JP-Ellis
<https://github.com/pact-foundation/pact-standalone/commit/4647d1859fa4dcb03d91d0ca4ed5f04661a74a38|4647d185> - chore(deps): update actions/checkout action to v7
pact-foundation/pact-standaloneGitHub
06/20/2026, 4:51 PMGitHub
06/22/2026, 1:01 AM<https://github.com/pact-foundation/pact-standalone/tree/master|master> by JP-Ellis
<https://github.com/pact-foundation/pact-standalone/commit/bce3203390f99cab93f0899fe4de1631f48b7d56|bce32033> - chore(deps): update ruby/setup-ruby action to v1.314.0
pact-foundation/pact-standaloneGitHub
06/22/2026, 1:02 AMv2.14.3
Security Note
This release contains a security fix, we recommend all users to upgrade as soon as possible. A Security Advisory with more details will be posted shortly.
What's Changed
• Upgrade CI lint step from Ruby 3 to 4 by `@larouxn` in lostisland/faraday#1673
• feat(test): add Stubs#clear to remove all stubs by `@SAY-5` in lostisland/faraday#1675
New Contributors
• `@SAY-5` made their first contribution in lostisland/faraday#1675
Full Changelog: lostisland/faraday@v2.14.2...v2.14.3Commits • `f1ace87` Version bump to 2.14.3 • `36764bf` Merge commit from fork • `59334e0` feat(test): add Stubs#clear to remove all stubs (#1675) • `469f25c` Upgrade CI lint step from Ruby 3 to 4 (#1673) • See full diff in compare view Dependabot compatibility score Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.
pact-foundation/pact-standaloneGitHub
06/22/2026, 1:12 AMGitHub
06/22/2026, 1:13 AM<https://github.com/pact-foundation/pact-standalone/tree/master|master> by JP-Ellis
<https://github.com/pact-foundation/pact-standalone/commit/188db572438b81b17e7aaf952fa3daba0ce98c26|188db572> - chore: set user-agent
pact-foundation/pact-standaloneGitHub
06/22/2026, 1:15 AM<https://github.com/pact-foundation/pact-standalone/tree/master|master> by github-actions[bot]
<https://github.com/pact-foundation/pact-standalone/commit/b85bd956ec871a91d5ebd42e55e601879c078146|b85bd956> - chore(release): version 2.6.3
pact-foundation/pact-standaloneGitHub
06/22/2026, 1:15 AMcurl -fsSL <https://raw.githubusercontent.com/pact-foundation/pact-standalone/master/install.sh> | PACT_CLI_VERSION=v2.6.3 bash
MacOS
x86_64
curl -LO <https://github.com/pact-foundation/pact-standalone/releases/download/v2.6.3/pact-2.6.3-osx-x86_64.tar.gz>
tar xzf pact-2.6.3-osx-x86_64.tar.gz
arm64
curl -LO <https://github.com/pact-foundation/pact-standalone/releases/download/v2.6.3/pact-2.6.3-osx-arm64.tar.gz>
tar xzf pact-2.6.3-osx-arm64.tar.gz
Linux
x86_64
curl -LO <https://github.com/pact-foundation/pact-standalone/releases/download/v2.6.3/pact-2.6.3-linux-x86_64.tar.gz>
tar xzf pact-2.6.3-linux-x86_64.tar.gz
arm64
curl -LO <https://github.com/pact-foundation/pact-standalone/releases/download/v2.6.3/pact-2.6.3-linux-arm64.tar.gz>
tar xzf pact-2.6.3-linux-arm64.tar.gz
Windows
x86_64
curl -LO <https://github.com/pact-foundation/pact-standalone/releases/download/v2.6.3/pact-2.6.3-windows-x86_64.zip>
unzip pact-2.6.3-windows-x86_64.zip
Pact Standalone
Build
Creates a standalone pact command line executable containing
• The ruby pact implementation via Traveling Ruby
Package contents
This version (2.6.3) of the Pact standalone executables package contains:
• pact gem 1.67.5
• pact-mock_service gem 3.12.4
• pact-support gem 1.21.2
• pact-provider-verifier gem 1.39.1
• pact_broker-client gem 1.78.0
• pact-message gem 0.11.1
Binaries will be extracted into `pact/bin`:
./pact/bin/
├── pact-broker
├── pactflow
├── pact-message
├── pact-mock-service
├── pact-provider-verifier
└── pact-stub-service
[!NOTE]
We have recently removed the bundled Rust tools from the Pact (Ruby) standalone. You can find the Rust tools at pact-foundation/pact-cli.
Windows Users
Please append .bat to any of the provided ruby-based binaries
eg.
.\pact\bin\pact-broker.bat
Installation
See the release page.
Supported Platforms
Ruby is not required on the host platform, Ruby 3.3.9 is provided in the distributable.
| OS | Ruby | Architecture | Supported |
| ------- | ----- | --------------- | --------- |
| MacOS | 3.3.9 | x86_64 | ✅ |
| MacOS | 3.3.9 | aarch64 (arm64) | ✅ |
| Linux | 3.3.9 | x86_64 | ✅ |
| Linux | 3.3.9 | aarch64 (arm64) | ✅ |
| Windows | 3.3.9 | x86_64 | ✅ |
| Windows | 3.3.9 | aarch64 (arm64) | 🚧 |
🚧 - Tested under emulation mode x86_64 in Windows on ARM
Usage
pact-mock-service
Commands:
pact-mock-service control # Run a Pact mock service control s...
pact-mock-service control-restart # Start a Pact mock service control...
pact-mock-service control-start # Start a Pact mock service control...
pact-mock-service control-stop # Stop a Pact mock service control ...
pact-mock-service help [COMMAND] # Describe available commands or on...
pact-mock-service restart # Start or restart a mock service. ...
pact-mock-service service # Start a mock service. If the cons...
pact-mock-service start # Start a mock service. If the cons...
pact-mock-service stop -p, --port=PORT # Stop a Pact mock service
pact-mock-service tree # Print a tree of all available commands
pact-mock-service version # Show the pact-mock-service gem version
Usage:
pact-mock-service service
Options:
[--consumer=CONSUMER] # Consumer name
[--provider=PROVIDER] # Provider name
-p, [--port=PORT] # Port on which to run the service
-h, [--host=HOST] # Host on which to bind the service
# Default: localhost
-d, [--pact-dir=PACT_DIR] # Directory to which the pacts will be written
-m, [--pact-file-write-mode=PACT_FILE_WRITE_MODE] # `overwrite` or `merge`. Use `merge` when running multiple mock service instances in parallel for the same consumer/provider pair. Ensure the pact file is deleted before running tests when using this option so that interactions deleted from the code are not maintained in the file.
# Default: overwrite
-i, [--pact-specification-version=PACT_SPECIFICATION_VERSION] # The pact specification version to use when writing the pact. Note that only versions 1 and 2 are currently supported.
# Default: 2
-l, [--log=LOG] # File to which to log output
[--log-level=LOG_LEVEL] # Log level. Options are DEBUG INFO WARN ERROR
# Default: DEBUG
-o, [--cors=CORS] # Support browser security in tests by responding to OPTIONS requests and adding CORS headers to mocked responses
[--ssl], [--no-ssl], [--skip-ssl] # Use a self-signed SSL cert to run the service over HTTPS
# Default: false
[--sslcert=SSLCERT] # Specify the path to the SSL cert to use when running the service over HTTPS
[--sslkey=SSLKEY] # Specify the path to the SSL key to use when running the service over HTTPS
Start a mock service. If the consumer, provider and pact-dir options are provided, the pact will be written automatically on shutdown (INT).
pact-stub-service
```
Usage:
pact-stub-service PACT_URI ...
Options:
-p, [--port=PORT] # Port on which to run the service
-h, [--host=HOST] # Host on which to bind the service
# Default: localhost
-l, [--log=LOG] # File to which to log output
-n, [--broker-username=BROKER_USERNAME] # Pact Broker basic auth username
-p, [--broker-password=BROKER_PASSWORD] # Pact Broker basic auth password
-k, [--broker-token=BROKER_TOKEN] # Pact Broker bearer token (can also be set using the PACT_BROKER_TOKEN environment variable)
[--log-level=LOG_LEVEL] # Log level. Options are DEBUG INFO WARN ERROR
# Default: DEBUG
-o, [--cors=CORS] # Support browser security in tests by responding to OPTIONS requests and adding CORS headers to mocked responses
[--ssl], [--no-ssl], [--skip-ssl] # Use a self-signed SSL cert to run the service over HTTPS
# Default: false
[--sslcert=SSLCERT] # Specify the path to the SSL cert to use when running the service over HTTPS
[--sslkey=SSLKEY] # Specify the path to the SSL key to use when running the service over HTTPS
Description:
Start a stub service with the given pact file(s) or directories. Pact URIs
may be local file or directory paths, or HTTP. Include any basic auth details
in the URL using the format <h…
pact-foundation/pact-standaloneGitHub
06/23/2026, 1:51 PMGitHub
06/29/2026, 12:50 PMGitHub
06/29/2026, 12:55 PM<https://github.com/pact-foundation/pact-standalone/tree/master|master> by YOU54F
<https://github.com/pact-foundation/pact-standalone/commit/a408c913be78149502a883269f4e478c989ffc80|a408c913> - Revert "chore(deps): update dependency json to v2.19.9"
pact-foundation/pact-standaloneGitHub
06/29/2026, 12:55 PM<https://github.com/pact-foundation/pact-standalone/tree/master|master> by YOU54F
<https://github.com/pact-foundation/pact-standalone/commit/6eec20768cee3706dea72ede10e90c274299d841|6eec2076> - fix: Remove leftover shared object and bundle files
pact-foundation/pact-standaloneGitHub
06/29/2026, 12:59 PM<https://github.com/pact-foundation/pact-standalone/tree/master|master> by github-actions[bot]
<https://github.com/pact-foundation/pact-standalone/commit/e47465533ecb0197cf916692cd92b2ccae3b095b|e4746553> - chore(release): version 2.6.4
pact-foundation/pact-standaloneGitHub
06/29/2026, 12:59 PMcurl -fsSL <https://raw.githubusercontent.com/pact-foundation/pact-standalone/master/install.sh> | PACT_CLI_VERSION=v2.6.4 bash
MacOS
x86_64
curl -LO <https://github.com/pact-foundation/pact-standalone/releases/download/v2.6.4/pact-2.6.4-osx-x86_64.tar.gz>
tar xzf pact-2.6.4-osx-x86_64.tar.gz
arm64
curl -LO <https://github.com/pact-foundation/pact-standalone/releases/download/v2.6.4/pact-2.6.4-osx-arm64.tar.gz>
tar xzf pact-2.6.4-osx-arm64.tar.gz
Linux
x86_64
curl -LO <https://github.com/pact-foundation/pact-standalone/releases/download/v2.6.4/pact-2.6.4-linux-x86_64.tar.gz>
tar xzf pact-2.6.4-linux-x86_64.tar.gz
arm64
curl -LO <https://github.com/pact-foundation/pact-standalone/releases/download/v2.6.4/pact-2.6.4-linux-arm64.tar.gz>
tar xzf pact-2.6.4-linux-arm64.tar.gz
Windows
x86_64
curl -LO <https://github.com/pact-foundation/pact-standalone/releases/download/v2.6.4/pact-2.6.4-windows-x86_64.zip>
unzip pact-2.6.4-windows-x86_64.zip
Pact Standalone
Build
Creates a standalone pact command line executable containing
• The ruby pact implementation via Traveling Ruby
Package contents
This version (2.6.4) of the Pact standalone executables package contains:
• pact gem 1.67.5
• pact-mock_service gem 3.12.4
• pact-support gem 1.21.2
• pact-provider-verifier gem 1.39.1
• pact_broker-client gem 1.78.0
• pact-message gem 0.11.1
Binaries will be extracted into `pact/bin`:
./pact/bin/
├── pact-broker
├── pactflow
├── pact-message
├── pact-mock-service
├── pact-provider-verifier
└── pact-stub-service
[!NOTE]
We have recently removed the bundled Rust tools from the Pact (Ruby) standalone. You can find the Rust tools at pact-foundation/pact-cli.
Windows Users
Please append .bat to any of the provided ruby-based binaries
eg.
.\pact\bin\pact-broker.bat
Installation
See the release page.
Supported Platforms
Ruby is not required on the host platform, Ruby 3.3.9 is provided in the distributable.
| OS | Ruby | Architecture | Supported |
| ------- | ----- | --------------- | --------- |
| MacOS | 3.3.9 | x86_64 | ✅ |
| MacOS | 3.3.9 | aarch64 (arm64) | ✅ |
| Linux | 3.3.9 | x86_64 | ✅ |
| Linux | 3.3.9 | aarch64 (arm64) | ✅ |
| Windows | 3.3.9 | x86_64 | ✅ |
| Windows | 3.3.9 | aarch64 (arm64) | 🚧 |
🚧 - Tested under emulation mode x86_64 in Windows on ARM
Usage
pact-mock-service
Commands:
pact-mock-service control # Run a Pact mock service control s...
pact-mock-service control-restart # Start a Pact mock service control...
pact-mock-service control-start # Start a Pact mock service control...
pact-mock-service control-stop # Stop a Pact mock service control ...
pact-mock-service help [COMMAND] # Describe available commands or on...
pact-mock-service restart # Start or restart a mock service. ...
pact-mock-service service # Start a mock service. If the cons...
pact-mock-service start # Start a mock service. If the cons...
pact-mock-service stop -p, --port=PORT # Stop a Pact mock service
pact-mock-service tree # Print a tree of all available commands
pact-mock-service version # Show the pact-mock-service gem version
Usage:
pact-mock-service service
Options:
[--consumer=CONSUMER] # Consumer name
[--provider=PROVIDER] # Provider name
-p, [--port=PORT] # Port on which to run the service
-h, [--host=HOST] # Host on which to bind the service
# Default: localhost
-d, [--pact-dir=PACT_DIR] # Directory to which the pacts will be written
-m, [--pact-file-write-mode=PACT_FILE_WRITE_MODE] # `overwrite` or `merge`. Use `merge` when running multiple mock service instances in parallel for the same consumer/provider pair. Ensure the pact file is deleted before running tests when using this option so that interactions deleted from the code are not maintained in the file.
# Default: overwrite
-i, [--pact-specification-version=PACT_SPECIFICATION_VERSION] # The pact specification version to use when writing the pact. Note that only versions 1 and 2 are currently supported.
# Default: 2
-l, [--log=LOG] # File to which to log output
[--log-level=LOG_LEVEL] # Log level. Options are DEBUG INFO WARN ERROR
# Default: DEBUG
-o, [--cors=CORS] # Support browser security in tests by responding to OPTIONS requests and adding CORS headers to mocked responses
[--ssl], [--no-ssl], [--skip-ssl] # Use a self-signed SSL cert to run the service over HTTPS
# Default: false
[--sslcert=SSLCERT] # Specify the path to the SSL cert to use when running the service over HTTPS
[--sslkey=SSLKEY] # Specify the path to the SSL key to use when running the service over HTTPS
Start a mock service. If the consumer, provider and pact-dir options are provided, the pact will be written automatically on shutdown (INT).
pact-stub-service
```
Usage:
pact-stub-service PACT_URI ...
Options:
-p, [--port=PORT] # Port on which to run the service
-h, [--host=HOST] # Host on which to bind the service
# Default: localhost
-l, [--log=LOG] # File to which to log output
-n, [--broker-username=BROKER_USERNAME] # Pact Broker basic auth username
-p, [--broker-password=BROKER_PASSWORD] # Pact Broker basic auth password
-k, [--broker-token=BROKER_TOKEN] # Pact Broker bearer token (can also be set using the PACT_BROKER_TOKEN environment variable)
[--log-level=LOG_LEVEL] # Log level. Options are DEBUG INFO WARN ERROR
# Default: DEBUG
-o, [--cors=CORS] # Support browser security in tests by responding to OPTIONS requests and adding CORS headers to mocked responses
[--ssl], [--no-ssl], [--skip-ssl] # Use a self-signed SSL cert to run the service over HTTPS
# Default: false
[--sslcert=SSLCERT] # Specify the path to the SSL cert to use when running the service over HTTPS
[--sslkey=SSLKEY] # Specify the path to the SSL key to use when running the service over HTTPS
Description:
Start a stub service with the given pact file(s) or directories. Pact URIs
may be local file or directory paths, or HTTP. Include any basic auth details
in the URL using the format <h…
pact-foundation/pact-standaloneGitHub
06/30/2026, 5:04 PMGitHub
06/30/2026, 5:04 PMGitHub
07/12/2026, 8:59 AMGitHub
07/27/2026, 12:13 AMv2.19.9
• Fix buffer overflow that could lead to a crash when writing JSON directly into an IO with. [CVE-2026-54696].JSON.generate(object, io)
Full Changelog: ruby/json@v2.19.8...v2.19.9Changelog Sourced from json's changelog.
2026-06-11 (2.19.9)
• Fix buffer overflow that could lead to a crash when writing JSON directly into an IO withCommits • `2cff267` Release 2.19.9 • `fd6a65b` generator.c: don't start with a stack buffer in IO case • See full diff in compare view Dependabot compatibility score Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting. [CVE-2026-54696].JSON.generate(object, io)
@dependabot rebase.
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.
pact-foundation/pact-standaloneGitHub
07/27/2026, 12:13 AMJSON.dump(obj, io) and JSON::State#generate(obj, io) can write past the
internal JSON generator buffer when a streamed object contains an
attacker-controlled string near 16 KB. The issue is a heap out-of-bounds write
in the IO-streaming path and is demonstrated as a reliable process crash /
denial of service.
This was triaged on HackerOne as report #3785370. The issue was confirmed there
and I was asked to open it here.
Details
Root cause is in ext/json/fbuffer/fbuffer.h, fbuffer_do_inc_capa().
On the IO path, the buffer is grown to FBUFFER_IO_BUFFER_SIZE (16383), but the
early return checks total capacity instead of remaining capacity:
if (RB_UNLIKELY(fb->io)) {
if (fb->capa < FBUFFER_IO_BUFFER_SIZE) {
fbuffer_realloc(fb, FBUFFER_IO_BUFFER_SIZE);
} else {
fbuffer_flush(fb);
}
if (RB_LIKELY(requested < fb->capa)) {
return;
}
}
If fb->len already contains JSON syntax bytes, and a string flush has
16383 - fb->len <= requested < 16383, this check returns even though there is
not enough space left. fbuffer_append_reserved() then writes past the buffer:
MEMCPY(fb->ptr + fb->len, newstr, char, len);
The minimal fix is to compare against the remaining capacity:
- if (RB_LIKELY(requested < fb->capa)) {
+ if (RB_LIKELY(requested <= fb->capa - fb->len)) {
return;
}
PoC
require "json"
require "stringio"
io = StringIO.new
big = "a" * 16385
big[16382] = '"' # escapable byte near the buffer boundary
JSON.dump([big], io)
Verified results:
Ruby 4.0.5 / bundled json 2.18.0:
malloc(): invalid size (unsorted)
.../json/common.rb:956: [BUG] Aborted
ruby/ruby master c78418b7a0 / json 2.19.8 / ASan:
heap-buffer-overflow WRITE of size 16382
fbuffer_append_reserved ext/json/fbuffer/fbuffer.h:145
search_flush ext/json/generator/generator.c:139
convert_UTF8_to_JSON ext/json/generator/generator.c:231
raw_generate_json_string ext/json/generator/generator.c:922
cState_m_generate ext/json/generator/generator.c:1891
Control: the same data through JSON.dump([big]) without an IO argument returns
normally. The bug is specific to the IO-streaming path.
Impact
A remote attacker can trigger a heap out-of-bounds write if they control a
string field that an application serializes through JSON.dump(obj, io) or
JSON::State#generate(obj, io). The demonstrated impact is reliable denial of
service. I am not claiming code execution or information disclosure.
Severity
• CVSS Score: 3.7 / 10 (Low)
• Vector String: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
References
• https://github.com/ruby/json/security/advisories/GHSA-x2f5-4prf-w687
• https://nvd.nist.gov/vuln/detail/CVE-2026-54696
• https://github.com/ruby/json/commit/996bac686d64e4e3aaeae03b14a7f9ee9695ebdb
• https://github.com/ruby/json/releases/tag/v2.19.9
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/json/CVE-2026-54696.yml
• https://github.com/advisories/GHSA-x2f5-4prf-w687
This data is provided by the GitHub Advisory Database (CC-BY 4.0).
---
Configuration
📅 Schedule: (UTC)
• Branch creation
• At any time (no schedule defined)
• Automerge
• At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻️ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
---
• If you want to rebase/retry this PR, check this box
---
This PR was generated by <https://mend.io/renovate/|…
pact-foundation/pact-standaloneGitHub
08/08/2026, 10:00 AMGitHub
08/10/2026, 11:17 PM<https://github.com/pact-foundation/pact-standalone/tree/master|master> by JP-Ellis
<https://github.com/pact-foundation/pact-standalone/commit/cba0862d1f5cd0f055b97e1a893f9e41aa09bbe4|cba0862d> - chore(deps): bump faraday from 2.14.2 to 2.14.3 (#244)
pact-foundation/pact-standaloneGitHub
08/10/2026, 11:17 PMv2.14.3
Security Note
This release contains a security fix, we recommend all users to upgrade as soon as possible. A Security Advisory with more details will be posted shortly.
What's Changed
• Upgrade CI lint step from Ruby 3 to 4 by `@larouxn` in lostisland/faraday#1673
• feat(test): add Stubs#clear to remove all stubs by `@SAY-5` in lostisland/faraday#1675
New Contributors
• `@SAY-5` made their first contribution in lostisland/faraday#1675
Full Changelog: lostisland/faraday@v2.14.2...v2.14.3Commits • `f1ace87` Version bump to 2.14.3 • `36764bf` Merge commit from fork • `59334e0` feat(test): add Stubs#clear to remove all stubs (#1675) • `469f25c` Upgrade CI lint step from Ruby 3 to 4 (#1673) • See full diff in compare view Dependabot compatibility score Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.
pact-foundation/pact-standaloneGitHub
08/10/2026, 11:17 PM<https://github.com/pact-foundation/pact-standalone/tree/master|master> by JP-Ellis
<https://github.com/pact-foundation/pact-standalone/commit/95dcf0e93716b765c8d30f10898c74358cde12a6|95dcf0e9> - chore(deps): update ruby/setup-ruby action to v1.321.0 (#250)
pact-foundation/pact-standaloneGitHub
08/10/2026, 11:17 PMGitHub
08/10/2026, 11:17 PM<https://github.com/pact-foundation/pact-standalone/tree/master|master> by JP-Ellis
<https://github.com/pact-foundation/pact-standalone/commit/30607777860c84e4c94974a976ea298f842b0f96|30607777> - chore(deps): bump json from 2.19.8 to 2.19.9 in /packaging (#252)
pact-foundation/pact-standaloneGitHub
08/10/2026, 11:17 PM<https://github.com/pact-foundation/pact-standalone/tree/master|master> by JP-Ellis
<https://github.com/pact-foundation/pact-standalone/commit/868bc4ff6e17575774bf6e9461cf7722e40c7c10|868bc4ff> - chore(deps): update dependency json to v2.19.9 [security] (#253)
pact-foundation/pact-standaloneGitHub
08/10/2026, 11:21 PMGitHub
08/11/2026, 12:15 AMv2.14.3
Security Note
This release contains a security fix, we recommend all users to upgrade as soon as possible. A Security Advisory with more details will be posted shortly.
What's Changed
• Upgrade CI lint step from Ruby 3 to 4 by `@larouxn` in lostisland/faraday#1673
• feat(test): add Stubs#clear to remove all stubs by `@SAY-5` in lostisland/faraday#1675
New Contributors
• `@SAY-5` made their first contribution in lostisland/faraday#1675
Full Changelog: lostisland/faraday@v2.14.2...v2.14.3Commits • `f1ace87` Version bump to 2.14.3 • `36764bf` Merge commit from fork • `59334e0` feat(test): add Stubs#clear to remove all stubs (#1675) • `469f25c` Upgrade CI lint step from Ruby 3 to 4 (#1673) • See full diff in compare view Dependabot compatibility score Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.
pact-foundation/pact-standalone