Skip to content

chore(deps): bump rack from 3.2.6 to 3.2.8 - #355

Merged
ioannisj merged 1 commit into
mainfrom
dependabot/bundler/rack-3.2.8
Nov 11, 2026
Merged

chore(deps): bump rack from 3.2.6 to 3.2.8#355
ioannisj merged 1 commit into
mainfrom
dependabot/bundler/rack-3.2.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 10, 2026

Copy link
Copy Markdown
Contributor

Bumps rack from 3.2.6 to 3.2.8.

Changelog

Sourced from rack's changelog.

[3.2.8] - 2026-10-30

Security

  • GHSA-5v64-555j-wjxm Multipart parser retains parsed data in its scan buffer, allowing denial of service via memory exhaustion.
  • GHSA-wvg4-6p58-3gh3 Rack::Static header rules were matched against an unnormalized path, allowing dot segments to bypass them.
  • GHSA-2j8w-xcrc-x985 Rack::Request#host_with_port, #base_url, and #url returned the raw authority when it was invalid; host_with_port now returns nil in that case.
  • GHSA-p8x9-v4hv-2w4g Multipart requests with more than one boundary parameter were accepted when the first value was empty or began with a quote, semicolon, or comma, bypassing the guard added for CVE-2026-26961.

Fixed

  • Rack::Multipart::UploadedFile now delegates keyword arguments to the wrapped tempfile. Calls such as uploaded_file.readlines(chomp: true) raised TypeError on Ruby 3.0+. (#2481, #2501, @​SeanLF)

[3.2.7] - 2026-08-13

Fixed

  • Restore Ruby 2.4/2.5 compatibility.
Commits
  • 5f511d7 Bump patch version.
  • 3e01d71 Update changelog.
  • a295123 Reject multipart content types with a boundary parameter before the parsed one.
  • 49386f4 Don't leak invalid Host through host_with_port.
  • 18a07fe Normalize static header rule paths before matching.
  • 244e75a Remove parsed bytes from the multipart buffer while reading parts.
  • 3519905 Backport UploadedFile keyword forwarding fix (#2501)
  • 70d2e10 Bump patch version.
  • 9b31adf Fix specs on Ruby 2.4
  • 7c0abab Do not ignore Ruby 2.4/2.5 errors in CI
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
chore(deps): bump rack from 3.2.6 to 3.2.8
d6e4f56 
Bumps [rack](https://github.com/rack/rack) from 3.2.6 to 3.2.8.
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v3.2.6...v3.2.8)

---
updated-dependencies:
- dependency-name: rack
  dependency-version: 3.2.8
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner November 10, 2026 19:53
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Nov 10, 2026
@github-actions

github-actions Bot commented Nov 10, 2026

Copy link
Copy Markdown

posthog-ruby-sync Compliance Report

Date: 2026-11-10T19:55:16.613637+00:00
Duration: 56028ms

⚠️ Some Tests Failed

39/47 tests passed, 8 failed

Capture Tests

⚠️ 23/30 tests passed, 7 failed

View Details
Test Status Duration
Format Validation.Event Has Required Fields ✅ 10ms
Format Validation.Event Has Uuid ✅ 6ms
Format Validation.Event Has Lib Properties ✅ 6ms
Format Validation.Distinct Id Is String ✅ 9ms
Format Validation.Token Is Present ✅ 7ms
Format Validation.Custom Properties Preserved ✅ 7ms
Format Validation.Event Has Timestamp ✅ 8ms
Format Validation.Non Utc Event Timestamp Is Converted To Utc ✅ 8ms
Retry Behavior.Retries On 503 ✅ 5345ms
Retry Behavior.Does Not Retry On 400 ❌ 7ms
Retry Behavior.Does Not Retry On 401 ❌ 6ms
Retry Behavior.Respects Retry After Header ✅ 8013ms
Retry Behavior.Implements Backoff ❌ 287ms
Retry Behavior.Retries On 500 ✅ 5114ms
Retry Behavior.Retries On 502 ✅ 5157ms
Retry Behavior.Retries On 504 ✅ 5117ms
Retry Behavior.Max Retries Respected ❌ 539ms
Deduplication.Generates Unique Uuids ✅ 18ms
Deduplication.Preserves Uuid On Retry ✅ 5112ms
Deduplication.Preserves Uuid And Timestamp On Retry ✅ 10231ms
Deduplication.Preserves Uuid And Timestamp On Batch Retry ✅ 5167ms
Deduplication.No Duplicate Events In Batch ✅ 19ms
Deduplication.Different Events Have Different Uuids ✅ 9ms
Compression.Sends Gzip When Enabled ✅ 7ms
Batch Format.Uses Proper Batch Structure ✅ 6ms
Batch Format.Flush With No Events Sends Nothing ✅ 3ms
Batch Format.Multiple Events Batched Together ❌ 17ms
Error Handling.Does Not Retry On 403 ❌ 5ms
Error Handling.Does Not Retry On 413 ❌ 5ms
Error Handling.Retries On 408 ✅ 5113ms

Failures

retry_behavior.does_not_retry_on_400

500, message='Internal Server Error', url='http://sdk-adapter:8080/capture'

retry_behavior.does_not_retry_on_401

500, message='Internal Server Error', url='http://sdk-adapter:8080/capture'

retry_behavior.implements_backoff

500, message='Internal Server Error', url='http://sdk-adapter:8080/capture'

retry_behavior.max_retries_respected

500, message='Internal Server Error', url='http://sdk-adapter:8080/capture'

batch_format.multiple_events_batched_together

Expected 1 requests, got 5

error_handling.does_not_retry_on_403

500, message='Internal Server Error', url='http://sdk-adapter:8080/capture'

error_handling.does_not_retry_on_413

500, message='Internal Server Error', url='http://sdk-adapter:8080/capture'

Feature_Flags Tests

⚠️ 16/17 tests passed, 1 failed

View Details
Test Status Duration
Request Payload.Request With Person Properties Device Id ✅ 10ms
Request Payload.Flags Request Uses V2 Query Param ✅ 8ms
Request Payload.Flags Request Hits Flags Path Not Decide ✅ 9ms
Request Payload.Flags Request Omits Authorization Header ✅ 7ms
Request Payload.Token In Flags Body Matches Init ✅ 7ms
Request Payload.Groups Round Trip ✅ 6ms
Request Payload.Groups Default To Empty Object ✅ 7ms
Request Payload.Disable Geoip False Propagates As Geoip Disable False ✅ 7ms
Request Payload.Disable Geoip Omitted Defaults To False ❌ 7ms
Request Payload.Flag Keys To Evaluate Contains Only Requested Key ✅ 6ms
Request Lifecycle.No Flags Request On Init Alone ✅ 3ms
Request Lifecycle.No Flags Request On Normal Capture ✅ 7ms
Request Lifecycle.Two Flag Calls Produce Two Remote Requests ✅ 9ms
Request Lifecycle.Mock Response Value Is Returned To Caller ✅ 7ms
Retry Behavior.Retries Flags On 502 ✅ 108ms
Retry Behavior.Retries Flags On 504 ✅ 136ms
Side Effect Events.Get Feature Flag Captures Feature Flag Called Event ✅ 9ms

Failures

request_payload.disable_geoip_omitted_defaults_to_false

Field 'geoip_disable' not found in /flags request body at path 'geoip_disable'. Available keys: ['distinct_id', 'groups', 'person_properties', 'group_properties', 'flag_keys_to_evaluate', 'token']

@github-actions

github-actions Bot commented Nov 10, 2026

Copy link
Copy Markdown

posthog-ruby-async Compliance Report

Date: 2026-11-10T19:56:15.663108+00:00
Duration: 98255ms

⚠️ Some Tests Failed

46/47 tests passed, 1 failed

Capture Tests

✅ 30/30 tests passed

View Details
Test Status Duration
Format Validation.Event Has Required Fields ✅ 10ms
Format Validation.Event Has Uuid ✅ 106ms
Format Validation.Event Has Lib Properties ✅ 108ms
Format Validation.Distinct Id Is String ✅ 106ms
Format Validation.Token Is Present ✅ 108ms
Format Validation.Custom Properties Preserved ✅ 107ms
Format Validation.Event Has Timestamp ✅ 107ms
Format Validation.Non Utc Event Timestamp Is Converted To Utc ✅ 7ms
Retry Behavior.Retries On 503 ✅ 5311ms
Retry Behavior.Does Not Retry On 400 ✅ 2109ms
Retry Behavior.Does Not Retry On 401 ✅ 2109ms
Retry Behavior.Respects Retry After Header ✅ 8116ms
Retry Behavior.Implements Backoff ✅ 15609ms
Retry Behavior.Retries On 500 ✅ 5213ms
Retry Behavior.Retries On 502 ✅ 5212ms
Retry Behavior.Retries On 504 ✅ 5211ms
Retry Behavior.Max Retries Respected ✅ 15522ms
Deduplication.Generates Unique Uuids ✅ 111ms
Deduplication.Preserves Uuid On Retry ✅ 5209ms
Deduplication.Preserves Uuid And Timestamp On Retry ✅ 10415ms
Deduplication.Preserves Uuid And Timestamp On Batch Retry ✅ 5214ms
Deduplication.No Duplicate Events In Batch ✅ 111ms
Deduplication.Different Events Have Different Uuids ✅ 107ms
Compression.Sends Gzip When Enabled ✅ 106ms
Batch Format.Uses Proper Batch Structure ✅ 107ms
Batch Format.Flush With No Events Sends Nothing ✅ 5ms
Batch Format.Multiple Events Batched Together ✅ 112ms
Error Handling.Does Not Retry On 403 ✅ 2108ms
Error Handling.Does Not Retry On 413 ✅ 2109ms
Error Handling.Retries On 408 ✅ 5211ms

Feature_Flags Tests

⚠️ 16/17 tests passed, 1 failed

View Details
Test Status Duration
Request Payload.Request With Person Properties Device Id ✅ 108ms
Request Payload.Flags Request Uses V2 Query Param ✅ 106ms
Request Payload.Flags Request Hits Flags Path Not Decide ✅ 106ms
Request Payload.Flags Request Omits Authorization Header ✅ 106ms
Request Payload.Token In Flags Body Matches Init ✅ 106ms
Request Payload.Groups Round Trip ✅ 107ms
Request Payload.Groups Default To Empty Object ✅ 106ms
Request Payload.Disable Geoip False Propagates As Geoip Disable False ✅ 106ms
Request Payload.Disable Geoip Omitted Defaults To False ❌ 107ms
Request Payload.Flag Keys To Evaluate Contains Only Requested Key ✅ 106ms
Request Lifecycle.No Flags Request On Init Alone ✅ 3ms
Request Lifecycle.No Flags Request On Normal Capture ✅ 106ms
Request Lifecycle.Two Flag Calls Produce Two Remote Requests ✅ 113ms
Request Lifecycle.Mock Response Value Is Returned To Caller ✅ 106ms
Retry Behavior.Retries Flags On 502 ✅ 209ms
Retry Behavior.Retries Flags On 504 ✅ 237ms
Side Effect Events.Get Feature Flag Captures Feature Flag Called Event ✅ 108ms

Failures

request_payload.disable_geoip_omitted_defaults_to_false

Field 'geoip_disable' not found in /flags request body at path 'geoip_disable'. Available keys: ['distinct_id', 'groups', 'person_properties', 'group_properties', 'flag_keys_to_evaluate', 'token']

@github-actions

github-actions Bot commented Nov 10, 2026

Copy link
Copy Markdown

SDK performance: posthog-ruby

Benchmarks completed. No changes flagged for review.

Flags require at least a 5% change in the median and all six pairs agreeing on direction. This is a noise filter, not proof of a performance change or a CI gate.

View all results
Test Measurement Before PR With PR Change Assessment
Capture and deliver events (32-byte payload, burst)
Shard: capture		 Allocated memory per operation — — — unavailable; base:​ unsupported; head:​ unsupported; base:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​; head:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​
Capture and deliver events (4,096-byte payload, burst)
Shard: capture		 Allocated memory per operation — — — unavailable; base:​ unsupported; head:​ unsupported; base:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​; head:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​
Capture and deliver events (32-byte payload, steady)
Shard: capture		 Allocated memory per operation — — — unavailable; base:​ unsupported; head:​ unsupported; base:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​; head:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​
Capture and deliver events (4,096-byte payload, steady)
Shard: capture		 Allocated memory per operation — — — unavailable; base:​ unsupported; head:​ unsupported; base:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​; head:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​
Queue an event (32-byte payload)
Shard: capture		 Allocated memory per operation — — — unavailable; base:​ unsupported; head:​ unsupported; base:​ Background serialization has no public enqueue completion boundary; use completed-delivery workloads for process-wide allocation counts.​; head:​ Background serialization has no public enqueue completion boundary; use completed-delivery workloads for process-wide allocation counts.​
Queue an event (32-byte payload)
Shard: capture		 Allocations per operation — — — unavailable; base:​ unsupported; head:​ unsupported; base:​ Background serialization has no public enqueue completion boundary; use completed-delivery workloads for process-wide allocation counts.​; head:​ Background serialization has no public enqueue completion boundary; use completed-delivery workloads for process-wide allocation counts.​
Queue an event (4,096-byte payload)
Shard: capture		 Allocated memory per operation — — — unavailable; base:​ unsupported; head:​ unsupported; base:​ Background serialization has no public enqueue completion boundary; use completed-delivery workloads for process-wide allocation counts.​; head:​ Background serialization has no public enqueue completion boundary; use completed-delivery workloads for process-wide allocation counts.​
Queue an event (4,096-byte payload)
Shard: capture		 Allocations per operation — — — unavailable; base:​ unsupported; head:​ unsupported; base:​ Background serialization has no public enqueue completion boundary; use completed-delivery workloads for process-wide allocation counts.​; head:​ Background serialization has no public enqueue completion boundary; use completed-delivery workloads for process-wide allocation counts.​
Evaluate all 10 flags
Shard: flags-scaling		 Allocated memory per operation — — — unavailable; base:​ unsupported; head:​ unsupported; base:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​; head:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​
Evaluate all 100 flags
Shard: flags-scaling		 Allocated memory per operation — — — unavailable; base:​ unsupported; head:​ unsupported; base:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​; head:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​
Evaluate all 1,000 flags
Shard: flags-scaling		 Allocated memory per operation — — — unavailable; base:​ unsupported; head:​ unsupported; base:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​; head:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​
Evaluate one boolean flag
Shard: flags-single		 Allocated memory per operation — — — unavailable; base:​ unsupported; head:​ unsupported; base:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​; head:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​
Evaluate a cohort-filtered flag
Shard: flags-single		 Allocated memory per operation — — — unavailable; base:​ unsupported; head:​ unsupported; base:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​; head:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​
Evaluate a flag (early match)
Shard: flags-single		 Allocated memory per operation — — — unavailable; base:​ unsupported; head:​ unsupported; base:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​; head:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​
Evaluate a flag (late match)
Shard: flags-single		 Allocated memory per operation — — — unavailable; base:​ unsupported; head:​ unsupported; base:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​; head:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​
Evaluate a flag (no match)
Shard: flags-single		 Allocated memory per operation — — — unavailable; base:​ unsupported; head:​ unsupported; base:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​; head:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​
Evaluate a property-filtered flag
Shard: flags-single		 Allocated memory per operation — — — unavailable; base:​ unsupported; head:​ unsupported; base:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​; head:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​
Evaluate a regex-filtered flag
Shard: flags-single		 Allocated memory per operation — — — unavailable; base:​ unsupported; head:​ unsupported; base:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​; head:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​
Evaluate a rollout flag
Shard: flags-single		 Allocated memory per operation — — — unavailable; base:​ unsupported; head:​ unsupported; base:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​; head:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​
Evaluate a multivariate flag
Shard: flags-single		 Allocated memory per operation — — — unavailable; base:​ unsupported; head:​ unsupported; base:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​; head:​ Ruby has no cumulative allocated-byte counter here; retained ObjectSpace bytes are not allocation volume.​
Capture and deliver events (32-byte payload, burst)
Shard: capture		 Allocations per operation 56.27 count/op 56.27 count/op No observed change Not flagged
Capture and deliver events (32-byte payload, burst)
Shard: capture		 Time per operation 114.11 µs/op 114.16 µs/op <0.1% more time Not flagged
Capture and deliver events (32-byte payload, burst)
Shard: capture		 Idle process memory (RSS) 28.26 MiB 28.3 MiB 0.1% more memory Not flagged
Capture and deliver events (32-byte payload, burst)
Shard: capture		 Observed peak process memory (RSS) 31.02 MiB 31.06 MiB 0.1% more memory Not flagged
Capture and deliver events (32-byte payload, burst)
Shard: capture		 Managed heap after settling 5.28 MiB 5.28 MiB <0.1% more memory Not flagged
Capture and deliver events (32-byte payload, burst)
Shard: capture		 Process memory after settling (RSS) 30.25 MiB 30.29 MiB 0.1% more memory Not flagged
Capture and deliver events (32-byte payload, burst)
Shard: capture		 Process CPU time per operation 30.37 µs/op 30.47 µs/op 0.3% more time Not flagged
Capture and deliver events (32-byte payload, burst)
Shard: capture		 Lifetime peak process memory (RSS) 30.71 MiB 30.8 MiB 0.3% more memory Not flagged
Capture and deliver events (4,096-byte payload, burst)
Shard: capture		 Allocations per operation 58.65 count/op 58.65 count/op No observed change Not flagged
Capture and deliver events (4,096-byte payload, burst)
Shard: capture		 Time per operation 113.88 µs/op 114.1 µs/op 0.2% more time Not flagged
Capture and deliver events (4,096-byte payload, burst)
Shard: capture		 Idle process memory (RSS) 33.12 MiB 33.15 MiB <0.1% more memory Not flagged
Capture and deliver events (4,096-byte payload, burst)
Shard: capture		 Observed peak process memory (RSS) 42.29 MiB 42.1 MiB 0.5% less memory Not flagged
Capture and deliver events (4,096-byte payload, burst)
Shard: capture		 Managed heap after settling 9.15 MiB 9.15 MiB <0.1% more memory Not flagged
Capture and deliver events (4,096-byte payload, burst)
Shard: capture		 Process memory after settling (RSS) 41.04 MiB 39.88 MiB 2.8% less memory Not flagged
Capture and deliver events (4,096-byte payload, burst)
Shard: capture		 Process CPU time per operation 42.5 µs/op 43.02 µs/op 1.2% more time Not flagged
Capture and deliver events (4,096-byte payload, burst)
Shard: capture		 Lifetime peak process memory (RSS) 42.02 MiB 41.9 MiB 0.3% less memory Not flagged
Capture and deliver events (32-byte payload, steady)
Shard: capture		 Allocations per operation 58.68 count/op 58.68 count/op No observed change Not flagged
Capture and deliver events (32-byte payload, steady)
Shard: capture		 Time per operation 1.02 ms/op 1.02 ms/op <0.1% more time Not flagged
Capture and deliver events (32-byte payload, steady)
Shard: capture		 Idle process memory (RSS) 28.17 MiB 28.18 MiB <0.1% more memory Not flagged
Capture and deliver events (32-byte payload, steady)
Shard: capture		 Observed peak process memory (RSS) 30.31 MiB 30.3 MiB <0.1% less memory Not flagged
Capture and deliver events (32-byte payload, steady)
Shard: capture		 Managed heap after settling 5.28 MiB 5.28 MiB <0.1% more memory Not flagged
Capture and deliver events (32-byte payload, steady)
Shard: capture		 Process memory after settling (RSS) 30.31 MiB 30.3 MiB <0.1% less memory Not flagged
Capture and deliver events (32-byte payload, steady)
Shard: capture		 Process CPU time per operation 40.31 µs/op 40.17 µs/op 0.3% less time Not flagged
Capture and deliver events (32-byte payload, steady)
Shard: capture		 Lifetime peak process memory (RSS) 30.31 MiB 30.3 MiB <0.1% less memory Not flagged
Capture and deliver events (4,096-byte payload, steady)
Shard: capture		 Allocations per operation 58.68 count/op 58.68 count/op No observed change Not flagged
Capture and deliver events (4,096-byte payload, steady)
Shard: capture		 Time per operation 1.02 ms/op 1.02 ms/op <0.1% more time Not flagged
Capture and deliver events (4,096-byte payload, steady)
Shard: capture		 Idle process memory (RSS) 33.13 MiB 33.12 MiB <0.1% less memory Not flagged
Capture and deliver events (4,096-byte payload, steady)
Shard: capture		 Observed peak process memory (RSS) 40.5 MiB 40.47 MiB <0.1% less memory Not flagged
Capture and deliver events (4,096-byte payload, steady)
Shard: capture		 Managed heap after settling 9.15 MiB 9.15 MiB No observed change Not flagged
Capture and deliver events (4,096-byte payload, steady)
Shard: capture		 Process memory after settling (RSS) 40.15 MiB 40.12 MiB <0.1% less memory Not flagged
Capture and deliver events (4,096-byte payload, steady)
Shard: capture		 Process CPU time per operation 50.74 µs/op 50.4 µs/op 0.7% less time Not flagged
Capture and deliver events (4,096-byte payload, steady)
Shard: capture		 Lifetime peak process memory (RSS) 40.66 MiB 40.7 MiB <0.1% more memory Not flagged
Queue an event (32-byte payload)
Shard: capture		 Caller-thread CPU time per operation 13.58 µs/op 13.63 µs/op 0.4% more time Not flagged
Queue an event (32-byte payload)
Shard: capture		 Time per operation 13.58 µs/op 13.63 µs/op 0.4% more time Not flagged
Queue an event (4,096-byte payload)
Shard: capture		 Caller-thread CPU time per operation 13.59 µs/op 13.42 µs/op 1.2% less time Not flagged
Queue an event (4,096-byte payload)
Shard: capture		 Time per operation 13.58 µs/op 13.42 µs/op 1.2% less time Not flagged
Evaluate all 10 flags
Shard: flags-scaling		 Allocations per operation 343.02 count/op 343.02 count/op No observed change Not flagged
Evaluate all 10 flags
Shard: flags-scaling		 Time per operation 167.41 µs/op 170.78 µs/op 2% more time Not flagged
Evaluate all 10 flags
Shard: flags-scaling		 Process CPU time per operation 167.41 µs/op 170.78 µs/op 2% more time Not flagged
Evaluate all 100 flags
Shard: flags-scaling		 Allocations per operation 3,324 count/op 3,324 count/op No observed change Not flagged
Evaluate all 100 flags
Shard: flags-scaling		 Time per operation 1.59 ms/op 1.6 ms/op 0.4% more time Not flagged
Evaluate all 100 flags
Shard: flags-scaling		 Process CPU time per operation 1.59 ms/op 1.6 ms/op 0.4% more time Not flagged
Evaluate all 1,000 flags
Shard: flags-scaling		 Allocations per operation 33,113.62 count/op 33,113.62 count/op No observed change Not flagged
Evaluate all 1,000 flags
Shard: flags-scaling		 Time per operation 17.33 ms/op 17.41 ms/op 0.5% more time Not flagged
Evaluate all 1,000 flags
Shard: flags-scaling		 Process CPU time per operation 17.33 ms/op 17.41 ms/op 0.5% more time Not flagged
Evaluate 1,000 flags under concurrent load
Shard: flags-memory		 Idle process memory (RSS) 38.89 MiB 38.92 MiB <0.1% more memory Not flagged
Evaluate 1,000 flags under concurrent load
Shard: flags-memory		 Observed peak process memory (RSS) 40.26 MiB 40.74 MiB 1.2% more memory Not flagged
Evaluate 1,000 flags under concurrent load
Shard: flags-memory		 Managed heap after settling 7.98 MiB 7.98 MiB <0.1% less memory Not flagged
Evaluate 1,000 flags under concurrent load
Shard: flags-memory		 Process memory after settling (RSS) 39.36 MiB 39.31 MiB 0.1% less memory Not flagged
Evaluate 1,000 flags under concurrent load
Shard: flags-memory		 Lifetime peak process memory (RSS) 39.96 MiB 40.56 MiB 1.5% more memory Not flagged
Refresh 1,000 flag definitions
Shard: flags-memory		 Idle process memory (RSS) 37.73 MiB 37.35 MiB 1% less memory Not flagged
Refresh 1,000 flag definitions
Shard: flags-memory		 Observed peak process memory (RSS) 41.52 MiB 41.5 MiB <0.1% less memory Not flagged
Refresh 1,000 flag definitions
Shard: flags-memory		 Managed heap after settling 9.48 MiB 9.48 MiB <0.1% more memory Not flagged
Refresh 1,000 flag definitions
Shard: flags-memory		 Process memory after settling (RSS) 41.5 MiB 41.5 MiB <0.1% more memory Not flagged
Refresh 1,000 flag definitions
Shard: flags-memory		 Lifetime peak process memory (RSS) 41.5 MiB 41.5 MiB <0.1% more memory Not flagged
Evaluate one boolean flag
Shard: flags-single		 Allocations per operation 38 count/op 38 count/op No observed change Not flagged
Evaluate one boolean flag
Shard: flags-single		 Time per operation 9.23 µs/op 9.19 µs/op 0.5% less time Not flagged
Evaluate one boolean flag
Shard: flags-single		 Process CPU time per operation 9.23 µs/op 9.19 µs/op 0.5% less time Not flagged
Evaluate a cohort-filtered flag
Shard: flags-single		 Allocations per operation 38 count/op 38 count/op No observed change Not flagged
Evaluate a cohort-filtered flag
Shard: flags-single		 Time per operation 11.42 µs/op 11.51 µs/op 0.7% more time Not flagged
Evaluate a cohort-filtered flag
Shard: flags-single		 Process CPU time per operation 11.42 µs/op 11.51 µs/op 0.7% more time Not flagged
Evaluate a flag (early match)
Shard: flags-single		 Allocations per operation 55 count/op 55 count/op No observed change Not flagged
Evaluate a flag (early match)
Shard: flags-single		 Time per operation 16.2 µs/op 16.18 µs/op 0.2% less time Not flagged
Evaluate a flag (early match)
Shard: flags-single		 Process CPU time per operation 16.21 µs/op 16.17 µs/op 0.2% less time Not flagged
Evaluate a flag (late match)
Shard: flags-single		 Allocations per operation 76 count/op 76 count/op No observed change Not flagged
Evaluate a flag (late match)
Shard: flags-single		 Time per operation 22.67 µs/op 22.82 µs/op 0.6% more time Not flagged
Evaluate a flag (late match)
Shard: flags-single		 Process CPU time per operation 22.67 µs/op 22.81 µs/op 0.6% more time Not flagged
Evaluate a flag (no match)
Shard: flags-single		 Allocations per operation 67 count/op 67 count/op No observed change Not flagged
Evaluate a flag (no match)
Shard: flags-single		 Time per operation 20.89 µs/op 20.87 µs/op <0.1% less time Not flagged
Evaluate a flag (no match)
Shard: flags-single		 Process CPU time per operation 20.89 µs/op 20.87 µs/op <0.1% less time Not flagged
Evaluate a property-filtered flag
Shard: flags-single		 Allocations per operation 34 count/op 34 count/op No observed change Not flagged
Evaluate a property-filtered flag
Shard: flags-single		 Time per operation 9.49 µs/op 9.38 µs/op 1.1% less time Not flagged
Evaluate a property-filtered flag
Shard: flags-single		 Process CPU time per operation 9.49 µs/op 9.38 µs/op 1.1% less time Not flagged
Evaluate a regex-filtered flag
Shard: flags-single		 Allocations per operation 99 count/op 99 count/op No observed change Not flagged
Evaluate a regex-filtered flag
Shard: flags-single		 Time per operation 25.93 µs/op 25.93 µs/op <0.1% less time Not flagged
Evaluate a regex-filtered flag
Shard: flags-single		 Process CPU time per operation 25.93 µs/op 25.93 µs/op <0.1% less time Not flagged
Evaluate a rollout flag
Shard: flags-single		 Allocations per operation 31 count/op 31 count/op No observed change Not flagged
Evaluate a rollout flag
Shard: flags-single		 Time per operation 8.25 µs/op 8.31 µs/op 0.8% more time Not flagged
Evaluate a rollout flag
Shard: flags-single		 Process CPU time per operation 8.24 µs/op 8.31 µs/op 0.9% more time Not flagged
Evaluate a multivariate flag
Shard: flags-single		 Allocations per operation 37 count/op 37 count/op No observed change Not flagged
Evaluate a multivariate flag
Shard: flags-single		 Time per operation 10.43 µs/op 10.34 µs/op 0.9% less time Not flagged
Evaluate a multivariate flag
Shard: flags-single		 Process CPU time per operation 10.43 µs/op 10.34 µs/op 0.9% less time Not flagged

Values are medians of paired measurements. Not flagged does not mean unchanged. Unavailable means a measurement could not be provided, not zero. Estimated allocation measurements retain their instrumentation uncertainty. RSS measures the whole process, not just SDK allocations; observed peaks are sampled checkpoints. Paired ranges in the diagnostics describe variability, not confidence intervals.

Each shard uses its own runner; compare Before PR against With PR within a row, not across shards.

Compared 1afb5eaae310be85f37629cd90e82838e9235cfc → d6e4f56950fdfe6c4455bc9b2161ede092c231c5.

Full report and diagnostics

102 metric rows; 102 rows shown in all results. Omitted or shortened data remain in comparison.json, including per-runner environments, resource limits, measurement methods, samples and checkpoints.

@ioannisj
ioannisj merged commit ac6b50f into main Nov 11, 2026
30 checks passed
@ioannisj
ioannisj deleted the dependabot/bundler/rack-3.2.8 branch November 11, 2026 06:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ioannisj ioannisj ioannisj approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ioannisj