chore: resolve open dependabot security alerts

[jonathannorris]

Summary

• Resolved 9 open Dependabot security alerts by bumping vulnerable dependencies across affected provider lockfiles.
• Additionally fixed a pre-existing simplecov gemspec/Gemfile version conflict in openfeature-flagsmith-provider (unrelated to Dependabot, but needed so bundle install doesn't fail on this branch after rebasing onto main).

Dependabot Alerts Resolved

Alert	Package	Manifest	Severity	Fix
#47	faraday	providers/openfeature-go-feature-flag-provider/Gemfile.lock	high	Bumped 2.14.2 to 2.14.3
#46	faraday	providers/openfeature-ofrep-provider/Gemfile.lock	high	Bumped 2.14.2 to 2.14.3
#45	faraday	providers/openfeature-flagsmith-provider/Gemfile.lock	high	Bumped 2.14.2 to 2.14.3
#41	faraday	providers/openfeature-go-feature-flag-provider/Gemfile.lock	low	Bumped 2.14.1 to 2.14.3
#40	faraday	providers/openfeature-ofrep-provider/Gemfile.lock	low	Bumped 2.14.1 to 2.14.3
#39	faraday	providers/openfeature-flagsmith-provider/Gemfile.lock	low	Bumped 2.14.1 to 2.14.3
#35	addressable	providers/openfeature-flagsmith-provider/Gemfile.lock	high	Bumped 2.8.9 to 2.9.0
#34	addressable	providers/openfeature-go-feature-flag-provider/Gemfile.lock	high	Bumped 2.8.7 to 2.9.0
#29	json	providers/openfeature-meta_provider/Gemfile.lock	high	Bumped 2.19.0 to 2.19.7

Verification

• bundle exec rspec and bundle exec rubocop pass on each affected provider: go-feature-flag (82 examples), ofrep (44 examples), flagsmith (89 examples), meta_provider (58 examples).

[gemini-code-assist]

Code Review

This pull request updates several dependency versions across multiple Gemfile.lock files for various OpenFeature providers, including openfeature-flagsmith-provider, openfeature-go-feature-flag-provider, openfeature-meta_provider, and openfeature-ofrep-provider. Specifically, it bumps versions for dependencies such as addressable, faraday, faraday-net_http, json, and public_suffix. There are no review comments, and I have no feedback to provide.

[Copilot]

Copilot wasn't able to review any files in this pull request.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: b33097ed-e175-4fcf-be91-6b10c13f07cd

📥 Commits

Reviewing files that changed from the base of the PR and between 50c0623 and 41e5e85.

⛔ Files ignored due to path filters (8)

• hooks/openfeature-otel-hook/Gemfile.lock is excluded by !**/*.lock
• providers/openfeature-flagd-provider/Gemfile.lock is excluded by !**/*.lock
• providers/openfeature-flagsmith-provider/Gemfile.lock is excluded by !**/*.lock
• providers/openfeature-flipt-provider/Gemfile.lock is excluded by !**/*.lock
• providers/openfeature-go-feature-flag-provider/Gemfile.lock is excluded by !**/*.lock
• providers/openfeature-meta_provider/Gemfile.lock is excluded by !**/*.lock
• providers/openfeature-ofrep-provider/Gemfile.lock is excluded by !**/*.lock
• providers/openfeature-optimizely-provider/Gemfile.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

• providers/openfeature-flagsmith-provider/openfeature-flagsmith-provider.gemspec

🚧 Files skipped from review as they are similar to previous changes (1)

• providers/openfeature-flagsmith-provider/openfeature-flagsmith-provider.gemspec

---

📝 Walkthrough

Walkthrough

The provider gemspec updates its SimpleCov development dependency constraint from ~> 0.22 to ~> 1.0.

Changes

SimpleCov Dependency

Layer / File(s)	Summary
Update SimpleCov constraint providers/openfeature-flagsmith-provider/openfeature-flagsmith-provider.gemspec	Changes the development dependency constraint for simplecov from ~> 0.22 to ~> 1.0.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: zaimwa9, josecolella, dabeeeenster

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately summarizes the dependency/security alert cleanup in this changeset.
Description check	✅ Passed	The description is directly related and matches the dependency bumps and gemspec conflict fix in the PR.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[Zaimwa9]

Thanks!