Bump sprockets from 4.0.3 to 4.2.0

[dependabot]

Bumps sprockets from 4.0.3 to 4.2.0.

Release notes

Sourced from sprockets's releases.

v4.1.1

• Fix Sprockets::Server to return response headers to compatible with with Rack::Lint 2.0.

Full Changelog: rails/sprockets@v4.1.0...v4.1.1

v4.1.0

What's Changed

• Lowercase all response headers by @​amatsuda in rails/sprockets#744
• Ensure compatibility with esbuilds' base32 digests by @​dhh in rails/sprockets#726
• cache nil values in the CachedEnvironment by @​lsylvester in rails/sprockets#723
• Explain configuration for Rails engines by @​pjmorse in rails/sprockets#694
• Get rid off undefined method `start_with?' for nil:NilClass error by @​dakolech in rails/sprockets#684
• Added support for ERB in webmanifest files by @​mashedkeyboard in rails/sprockets#608
• Set application/js-sourcemap+json charset to unicode by @​andresakata in rails/sprockets#669
• Adding directive depends_on_directory by @​jessecollier in rails/sprockets#668
• Fix cache key for coffee script processor by @​code-constructor in rails/sprockets#670
• Add text/ejs to register_transformer_suffix for ERBProcessor by @​cgunther in rails/sprockets#674
• Allow age to be altered in clean_assets rake task by @​nikolai-b in rails/sprockets#677

New Contributors

• @​dhh made their first contribution in rails/sprockets#726
• @​lsylvester made their first contribution in rails/sprockets#723
• @​pjmorse made their first contribution in rails/sprockets#694
• @​dakolech made their first contribution in rails/sprockets#684
• @​mashedkeyboard made their first contribution in rails/sprockets#608
• @​andresakata made their first contribution in rails/sprockets#669
• @​jessecollier made their first contribution in rails/sprockets#668
• @​code-constructor made their first contribution in rails/sprockets#670
• @​cgunther made their first contribution in rails/sprockets#674
• @​nikolai-b made their first contribution in rails/sprockets#677

Full Changelog: rails/sprockets@v4.0.3...v4.1.0

Changelog

Sourced from sprockets's changelog.

4.2.0

• Rack 3 compatibility. #758
• Fix thread safety of Sprockets::CachedEnvironment and Sprockets::Cache::MemoryStore. #771
• Add support for Rack 3.0. Headers set by sprockets will now be lower case. #758
• Make Sprockets::Utils.module_include thread safe on JRuby. #759

4.1.0

• Allow age to be altered in asset:clean rake task.
• Fix Sprockets::Server to return lower-cased response headers to comply with Rack::Lint 3.0. #744
• Adding new directive depend_on_directory #668
• Fix application/js-sourcemap+json charset #669
• Fix CachedEnvironment caching nil values #723
• Process *.jst.ejs.erb files with ERBProcessor #674
• Fix cache key for coffee script processor to be dependent on the filename #670

Commits

• eafbd11 Prepare for 4.2.0
• cce2c0a Merge pull request #771 from eregon/thread-safe-CachedEnvironment
• 39490de Make the URI tests pass with ruby-head
• 58eb15d Add TruffleRuby in CI
• d503c9b Add ChangeLog entry
• 9d461f1 Make Sprockets::Cache::MemoryStore thread-safe by using a Mutex
• 4e74e3a Use Concurrent::Map#fetch_or_store
• 2d454bc Make Sprockets::CachedEnvironment thread-safe by using Concurrent::Map
• 1276b43 Merge pull request #759 from ntkme/module-include-thread-safety
• 722d587 Make Sprockets::Utils.module_include thread safe
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[awwaiid]

@dorner you had specifically used sprockets 4.0 in a previous PR instead of 4.2 and I didn't know what the reason was. All the tests pass with this at 4.2, I can do some further testing if it would help.

[dorner]

@awwaiid it's because of this issue rails/sprockets#749 - it affects development, not any of the other environments.

[awwaiid]

@dorner Well .... what do you think of this in-code patch to sprockets to work around this? I looked at the upstream sprockets issue and code and didn't see any obvious PR that I should submit there.

[dorner]

Ouch, that's super hacky. :) I'd much rather get a fix for this on the sprockets side. I'm sure it's possible, it's just not easy to do.

[awwaiid]

I'm going to look into the vendoring work around mentioned in hotwired/stimulus-rails#108

[awwaiid]

One of the upstream projects closed the related bug-report, saying that this isn't an issue with newer rails. I'm not sure if that is really true, but might be worth re-evaluating. Still -- we could vendorize the one file and that might at least get this mergeable.

[dorner]

I'd rather not monkey patch if there isn't a really good reason. Just tried it with latest Rails and it seems to still be a problem.

[dorner]

Tried vendoring it as well and it doesn't seem to work either ☹️

[dorner]

ok, figured it out. No idea why they're saying this isn't happening any more. Wondering if the "stock app" they're testing on has some kind of different setting than ours. I'll put up a PR.

[dorner]

Closing in favor of #3704 .

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.