Skip to content

Bump vcr from 3.0.3 to 6.4.0#8

Merged
github-actions[bot] merged 1 commit into
masterfrom
dependabot/bundler/vcr-6.4.0
May 12, 2026
Merged

Bump vcr from 3.0.3 to 6.4.0#8
github-actions[bot] merged 1 commit into
masterfrom
dependabot/bundler/vcr-6.4.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 12, 2026

Bumps vcr from 3.0.3 to 6.4.0.

Release notes

Sourced from vcr's releases.

v6.4.0

What's Changed

New Contributors

Full Changelog: vcr/vcr@v6.3.1...v6.4.0

v6.3.1

What's Changed

Full Changelog: vcr/vcr@v6.3.0...v6.3.1

v6.3.0

What's Changed

... (truncated)

Changelog

Sourced from vcr's changelog.

6.4.0 (Dec 11, 2025)

Full Changelog

6.3.1 (Aug 20, 2024)

Full Changelog

6.3.0 (Aug 19, 2024)

Full Changelog

6.2.0 (June 26, 2023)

Full Changelog

6.1.0 (March 13, 2022)

Full Changelog

  • [breaking] Remove support for Ruby 2.4, require Ruby 2.5 or newer (#900) by @​aka47
  • [breaking] JSON-serializer generates pretty-formatted output. (#840) by @​mainameiz
  • [breaking] Drop support for ancient typhoeus 0.4 (#905) by @​aka47
  • [new] Add VCR.turned_on similar to VCR.turned_off (#835) by @​hirowatari
  • [fix] cassettes will match URIs with trailing dot. eg example.com. (#838) by @​hirowatari
  • [fix] Use YAML.unsafe_load if available to load cassette data (better compatibility with Psych 4.0). (#911) by @​casperisfine
  • [patch] Improve error message for syntax error in ERB-using cassettes (#909) by @​sambostock
  • [patch] Handle use_cassette(..., erb: {}) (#908) by @​sambostock
  • [fix] Use fiber-local for global_hook_disabled_requests (#907) by @​jhawthorn

... (truncated)

Upgrade guide

Sourced from vcr's upgrade guide.

See the Changelog for a complete list of changes from VCR 1.x to 2.0. This file simply lists the most pertinent ones to upgrading.

Supported Rubies

Ruby 1.8.6 and 1.9.1 are no longer supported.

Configuration Changes

In VCR 1.x, your configuration block would be something like this:

VCR.config do |c|
  c.cassette_library_dir = 'cassettes'
  c.stub_with :fakeweb, :typhoeus
end

This will continue to work in VCR 2.0 but will generate deprecation warnings. Instead, you should change this to:

VCR.configure do |c|
  c.cassette_library_dir = 'cassettes'
  c.hook_into :fakeweb, :typhoeus
end

New Cassette Format

The cassette format has changed between VCR 1.x and VCR 2.0. VCR 1.x cassettes cannot be used with VCR 2.0.

The easiest way to upgrade is to simply delete your cassettes and re-record all of them. VCR also provides a rake task that attempts to upgrade your 1.x cassettes to the new 2.0 format. To use it, add the following line to your Rakefile:

load 'vcr/tasks/vcr.rake'

Then run rake vcr:migrate_cassettes DIR=path/to/your/cassettes/directory to upgrade your cassettes. Note that this rake task may be unable to upgrade some cassettes that make extensive use of ERB. In addition, now that VCR 2.0 does less normalization then before, it may not be able to migrate the cassette perfectly. It's recommended that you delete and re-record your cassettes if you are able.

Custom Request Matchers

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [vcr](https://github.com/vcr/vcr) from 3.0.3 to 6.4.0.
- [Release notes](https://github.com/vcr/vcr/releases)
- [Changelog](https://github.com/vcr/vcr/blob/master/CHANGELOG.md)
- [Upgrade guide](https://github.com/vcr/vcr/blob/master/Upgrade.md)
- [Commits](vcr/vcr@v3.0.3...v6.4.0)

---
updated-dependencies:
- dependency-name: vcr
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels May 12, 2026
@github-actions github-actions Bot merged commit 2d3f53f into master May 12, 2026
1 check passed
@dependabot dependabot Bot deleted the dependabot/bundler/vcr-6.4.0 branch May 12, 2026 22:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants