Skip to content

Bump the production-dependencies-minor group across 1 directory with 30 updates #1303

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
dependabot wants to merge 2 commits into from
Closed

Bump the production-dependencies-minor group across 1 directory with 30 updates #1303

dependabot wants to merge 2 commits into from

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Nov 3, 2025 •
edited
Loading

Bumps the production-dependencies-minor group with 28 updates in the / directory:

Package From To
rake 13.2.1 13.3.1
rails 7.1.5.2 7.1.6
jbuilder 2.13.0 2.14.1
bootsnap 1.18.4 1.18.6
test-unit 3.2.7 3.7.0
aws-sdk-s3 1.113.0 1.202.0
json 2.12.2 2.15.2
rack-attack 6.5.0 6.8.0
pg 1.5.9 1.6.2
dalli 3.2.3 3.2.8
carrierwave 3.1.1 3.1.2
mini_magick 5.2.0 5.3.1
httparty 0.21.0 0.23.2
devise-two-factor 6.1.0 6.2.0
geocoder 1.6.1 1.8.6
table_print 1.5.4 1.5.7
rexml 3.4.2 3.4.4
csv 3.3.4 3.3.5
maintenance_tasks 2.12.0 2.13.0
terser 1.2.5 1.2.6
rails-autoscale-web 1.11.1 1.12.1
lograge 0.3.6 0.14.0
recaptcha 5.19.0 5.21.1
connection_pool 2.5.3 2.5.4
barnes 0.0.8 0.0.9
has_scope 0.8.2 0.9.0
globalid 1.2.1 1.3.0
js-routes 2.2.7 2.3.5

Updates rake from 13.2.1 to 13.3.1

Commits
  • f0001c3 v13.3.1
  • a644c80 Merge pull request #483 from luke-gru/fix_test_warnings
  • 2465ea5 silence warnings during execution of rake tasks in Rakefile (ex: rake test)
  • df25fb1 Merge pull request #610 from pvdb/fix_testhelper_require
  • ec12ac9 Merge pull request #635 from nevans/deconstruct_keys-for-nil-keys
  • 4664a69 Merge pull request #666 from ruby/dependabot/github_actions/ruby/setup-ruby-1...
  • 7a0bf15 Bump ruby/setup-ruby from 1.265.0 to 1.266.0
  • b3ed789 Merge pull request #665 from ruby/dependabot/github_actions/ruby/setup-ruby-1...
  • 1e7ef52 Bump ruby/setup-ruby from 1.263.0 to 1.265.0
  • 77225e1 Merge pull request #664 from ruby/dependabot/github_actions/ruby/setup-ruby-1...
  • Additional commits viewable in compare view

Updates rails from 7.1.5.2 to 7.1.6

Release notes

Sourced from rails's releases.

7.1.6

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • Gracefully handle Timeout.timeout firing during connection configuration.

    Use of Timeout.timeout could result in improperly initialized database connection.

    This could lead to a partially configured connection being used, resulting in various exceptions, the most common being with the PostgreSQLAdapter raising undefined method key?' for nilorTypeError: wrong argument type nil (expected PG::TypeMap)`.

    Jean Boussier

  • Fix error handling during connection configuration.

    Active Record wasn't properly handling errors during the connection configuration phase. This could lead to a partially configured connection being used, resulting in various exceptions, the most common being with the PostgreSQLAdapter raising undefined method key?' for nilorTypeError: wrong argument type nil (expected PG::TypeMap)`.

    Jean Boussier

  • Fix prepared statements on mysql2 adapter.

    Jean Boussier

  • Fix a race condition in ActiveRecord::Base#method_missing when lazily defining attributes.

    If multiple thread were concurrently triggering attribute definition on the same model, it could result in a NoMethodError being raised.

    Jean Boussier

Action View

  • No changes.

Action Pack

... (truncated)

Commits
  • ffcbf6f Preparing for 7.1.6 release
  • 10a0f90 Upgrade sigstore gem to 0.2.2
  • 4df996b Sync changelog
  • 310c904 Merge pull request #55570 from zzak/8-0-sidekiq-issues
  • c274de0 Merge pull request #55747 from skipkayhil/hm-kwzpqqkssmwtsunu
  • 1d82970 Add the Action Cable configuration
  • 8323dd6 Merge pull request #54164 from zzak/asto-test-mini_magick-deprecation-warning
  • 4eb8085 Merge pull request #55812 from yahonda/bump-microsoftedge-version-to-latest
  • d100e46 Don't load action cable in the activestorage dummy app
  • 91fc9b2 Don't load sprockets-rails and propshaft in the same application
  • Additional commits viewable in compare view

Updates jbuilder from 2.13.0 to 2.14.1

Release notes

Sourced from jbuilder's releases.

v2.14.1

What's Changed

New Contributors

Full Changelog: rails/jbuilder@v2.14.0...v2.14.1

v2.14.0

What's Changed

New Contributors

Full Changelog: rails/jbuilder@v2.13.0...v2.14.0

Commits
  • 38339ad Prepare for 2.14.1
  • 2400fd9 Merge pull request #601 from flavorjones/flavorjones/fix-encode-arguments
  • a6863b5 Ensure that Jbuilder.encode properly forwards arguments to .new
  • 30ba7df Prepare for 2.14.0
  • 5f4af71 Merge pull request #591 from moberegger/moberegger/optimize_options_merges
  • 6fd6c06 Small _set_inline_partial optimization
  • b7b5abb Stop mutating options in partial! method
  • 7e16adf Stop mutating options in set! method
  • 8474b41 Remove _partial micro-optimization
  • 9ffacf7 Merge pull request #574 from pixeltrix/fix-warnings-and-version-constant
  • Additional commits viewable in compare view

Updates bootsnap from 1.18.4 to 1.18.6

Changelog

Sourced from bootsnap's changelog.

1.18.6

  • Fix cgroup CPU limits detection in CLI.

1.18.5

  • Attempt to detect a QEMU bug that can cause bootsnap precompile to hang forever when building ARM64 docker images from x86_64 machines. See #495.
  • Improve CLI to detect cgroup CPU limits and avoid spawning too many worker processes.
Commits
  • 86efe7d Release 1.18.6
  • dc98453 Fix cgroup CPU limits detection in CLI.
  • 11dbc37 Release 1.18.5
  • dcd9327 Merge pull request #501 from Shopify/improve-parallelism
  • abe4ec3 Bump bundler cache on CI
  • d603b70 Attempt to detect QEMU hangs
  • 5e87800 cli: improve automatic parallelism to respect cgroup limits
  • 0dc269d Merge pull request #499 from p8/docs/link-to-official-docs
  • 5fb9098 Link to official Ruby documentation
  • 252cf48 Add config/ dir to precompile example
  • See full diff in compare view

Updates test-unit from 3.2.7 to 3.7.0

Release notes

Sourced from test-unit's releases.

test-unit 3.7.0 - 2025-07-06

Fixes

  • Fixed a bug that Test::Unit::TestCase and Test::Unit::AutoRunner aren't loaded when they are redefined by open class before referring to these constants.

Thanks

  • Mamoru TASAKA

test-unit 3.6.9 - 2025-06-29

Improvements

  • doc: test: Added one-line style to declare Ractor test.

  • Used require_relative instead of require for internal library files.

  • Added the --version option.

Thanks

  • MSP-Greg

test-unit 3.6.8 - 2025-04-05

Improvements

  • test-unit: Added. You can use this instead of creating a custom test run script.

  • Updated the "how to" document.

... (truncated)

Commits

Updates aws-sdk-s3 from 1.113.0 to 1.202.0

Changelog

Sourced from aws-sdk-s3's changelog.

1.202.0 (2025-10-28)

  • Feature - Amazon Simple Storage Service / Features: Add conditional writes in CopyObject on destination key to prevent unintended object modifications.

1.201.0 (2025-10-21)

  • Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

  • Issue - Fix multipart upload to respect request_checksum_calculation when_required mode.

1.200.0 (2025-10-15)

  • Feature - Add lightweight thread pool executor for multipart download_file, upload_file and upload_stream.

  • Feature - Add custom executor support for Aws::S3::TransferManager.

1.199.1 (2025-09-25)

  • Issue - Update TransferManager#download_file and Object#download_file documentation regarding temporary file usage and failure handling for different destination types.

1.199.0 (2025-09-08)

  • Feature - This release includes backward compatibility work on the "Expires" parameter.

1.198.0 (2025-08-26)

  • Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

  • Issue - Fix multipart download_file to support Pathname, File and Tempfile objects as download destinations.

1.197.0 (2025-08-19)

  • Issue - When multipart stream uploader fails to complete multipart upload, it calls abort multipart upload.

  • Issue - For Aws::S3::Object class, the following methods have been deprecated: download_file, upload_file and upload_stream. Use Aws::S3::TransferManager instead.

  • Feature - Add Aws::S3::TransferManager, a S3 transfer utility that provides upload/download capabilities with automatic multipart handling, progress tracking, and handling of large files.

1.196.1 (2025-08-05)

  • Issue - Add range validation to multipart download to ensure all parts are successfully processed.

... (truncated)

Commits

Updates json from 2.12.2 to 2.15.2

Release notes

Sourced from json's releases.

v2.15.2

What's Changed

  • Fix JSON::Coder to have one dedicated depth counter per invocation. After encountering a circular reference in JSON::Coder#dump, any further #dump call would raise JSON::NestingError.

Full Changelog: ruby/json@v2.15.1...v2.15.2

v2.15.1

What's Changed

  • Fix incorrect escaping in the JRuby extension when encoding shared strings.

Full Changelog: ruby/json@v2.15.0...v2.15.1

v2.15.0

What's Changed

  • JSON::Coder callback now receive a second argument to convey whether the object is a hash key.
  • Tuned the floating point number generator to not use scientific notation as aggressively.

Full Changelog: ruby/json@v2.14.1...v2.15.0

v2.14.1

What's Changed

  • Fix IndexOutOfBoundsException in the JRuby extension when encoding shared strings.

Full Changelog: ruby/json@v2.14.0...v2.14.1

v2.14.0

What's Changed

  • Add new allow_duplicate_key generator options. By default a warning is now emitted when a duplicated key is encountered. In json 3.0 an error will be raised. 
    >> Warning[:deprecated] = true
>> puts JSON.generate({ foo: 1, "foo" => 2 })
(irb):2: warning: detected duplicate key "foo" in {foo: 1, "foo" => 2}.
This will raise an error in json 3.0 unless enabled via `allow_duplicate_key: true`
{"foo":1,"foo":2}
>> JSON.generate({ foo: 1, "foo" => 2 }, allow_duplicate_key: false)
detected duplicate key "foo" in {foo: 1, "foo" => 2} (JSON::GeneratorError)
  • Fix JSON.generate strict: true mode to also restrict hash keys.
  • Fix JSON::Coder to also invoke block for hash keys that aren't strings nor symbols.
  • Fix JSON.unsafe_load usage with proc
  • Fix the parser to more consistently reject invalid UTF-16 surogate pairs.

... (truncated)

Changelog

Sourced from json's changelog.

2025-10-25 (2.15.2)

  • Fix JSON::Coder to have one dedicated depth counter per invocation. After encountering a circular reference in JSON::Coder#dump, any further #dump call would raise JSON::NestingError.

2025-10-07 (2.15.1)

  • Fix incorrect escaping in the JRuby extension when encoding shared strings.

2025-09-22 (2.15.0)

  • JSON::Coder callback now receive a second argument to convey whether the object is a hash key.
  • Tuned the floating point number generator to not use scientific notation as aggressively.

2025-09-18 (2.14.1)

  • Fix IndexOutOfBoundsException in the JRuby extension when encoding shared strings.

2025-09-18 (2.14.0)

  • Add new allow_duplicate_key generator options. By default a warning is now emitted when a duplicated key is encountered. In json 3.0 an error will be raised. 
    >> Warning[:deprecated] = true
>> puts JSON.generate({ foo: 1, "foo" => 2 })
(irb):2: warning: detected duplicate key "foo" in {foo: 1, "foo" => 2}.
This will raise an error in json 3.0 unless enabled via `allow_duplicate_key: true`
{"foo":1,"foo":2}
>> JSON.generate({ foo: 1, "foo" => 2 }, allow_duplicate_key: false)
detected duplicate key "foo" in {foo: 1, "foo" => 2} (JSON::GeneratorError)
  • Fix JSON.generate strict: true mode to also restrict hash keys.
  • Fix JSON::Coder to also invoke block for hash keys that aren't strings nor symbols.
  • Fix JSON.unsafe_load usage with proc
  • Fix the parser to more consistently reject invalid UTF-16 surogate pairs.
  • Stop defining String.json_create, String#to_json_raw, String#to_json_raw_object when json/add isn't loaded.

2025-07-28 (2.13.2)

  • Improve duplicate key warning and errors to include the key name and point to the right caller.

2025-07-24 (2.13.1)

  • Fix support for older compilers without __builtin_cpu_supports.

2025-07-17 (2.13.0)

  • Add new allow_duplicate_key parsing options. By default a warning is now emitted when a duplicated key is encountered. In json 3.0 an error will be raised.
  • Optimize parsing further using SIMD to scan strings.
Commits

Updates rack-attack from 6.5.0 to 6.8.0

Release notes

Sourced from rack-attack's releases.

v6.8.0

What's Changed

Changed

  • Avoid RedisCacheStore#increment on Rails 6+ (which might improve performance) by @​jdelStrother (#597)

Fixed

Deprecated

  • Soft deprecate integration with rack 1.x, may or may not work with it.
  • Soft deprecate integration with rails 5.2 or less, may or may not work with it.

Removed

New Contributors

Full Changelog: rack/rack-attack@v6.7.0...v6.8.0

v6.7.0

What's Changed

New Contributors

Full Changelog: rack/rack-attack@v6.6.1...v6.7.0

... (truncated)

Changelog

Sourced from rack-attack's changelog.

[6.8.0] - 2025-10-14

Changed

  • Avoid RedisCacheStore#increment on Rails 6+ (which might improve performance) by @​jdelStrother (#597)

Fixed

Deprecated

  • Soft deprecate integration with rack 1.x, may or may not work with it.
  • Soft deprecate integration with rails 5.2 or less, may or may not work with it.

Removed

[6.7.0] - 2023-07-26

[6.6.1] - 2022-04-14

Fixed

  • Fixes deprecation warning in redis 4.6+ ([@​ixti])

[6.6.0] - 2022-01-29

Added

  • Ability to have access to the request object instead of only env (still can access env with request.env) when customizing throttle and blocklist responses with new methods Rack::Attack.blocklisted_responder= and Rack::Attack.throttled_responder= which yield the request to your lambda. ([@​NikolayRys])

Deprecated

  • Rack::Attack.blocklisted_response=
  • Rack::Attack.throttled_response=
Commits

Updates pg from 1.5.9 to 1.6.2

Changelog

Sourced from pg's changelog.

v1.6.2 [2025-09-02] Lars Kanis lars@greiz-reinsdorf.de

  • Remove several absolute paths from native binaries which pointed to build directories. #668
  • Fix bad fallback path to pg_service.conf. #666
  • Use rbpg_ prefix for base64_* functions to avoid name clashes with functions provided by other libraries like Heimdal on Macos. #667
  • Raise a more descriptive error message in case of pg_ext LoadError. #664
  • Freeze some constants to make them available in a Ractor context. #660
  • Several documentation improvements.
  • Update native binary gems to OpenSSL-3.5.2, krb5-1.22.1 and PostgreSQL-17.6.

v1.6.1 [2025-08-03] Lars Kanis lars@greiz-reinsdorf.de

  • Add binary gems for platforms aarch64-linux-musl and x86_64-linux-musl without the need to install package gcompat. #657.
  • Serialize CompositeCoder#dimensions only when set. #652 This fixes the compatibility to pg-1.5.9, when deserializing Marshal data from pg-1.6, as long as the new attribute isn't used.
  • Remove dependency to MSYS2 package "postgresql" from binary Windows gem #654

v1.6.0 [2025-07-27] Lars Kanis lars@greiz-reinsdorf.de

Added:

  • Add binary gems for Ruby 3.4.
  • Add fat binary gem for platform aarch64-mingw-ucrt aka Windows on ARM #626, for platform Macos on Intel and ARM #643, for platform aarch64-linux #646 and for platform x86_64-linux #551.
  • Update fat binary gem to OpenSSL-3.5.1 and PostgreSQL-17.5.
  • Add a patch to libpq to avoid starvation on bigger SSL records, which some database engines other than vanilla PostgreSQL use. This patch applies to platform specific binary gems only. #616
  • Add support for new query cancel functions of PostgreSQL-17. This adds the new class PG::CancelConnection which provides the ability to cancel a query per blocking or per non-blocking functions. If the new functions are available they are used and the older are no longer compiled in. This way we can get rid of reading out the internal PGcancel struct by Connection#backend_key. #614
  • Add PG::BinaryDecoder::Array and PG::BinaryEncoder::Array to parse and encode PostgreSQL arrays in binary format. #603
  • Add possibility to define the number of array dimensions to be encoded. Setting dimensions is especially useful, when a Record shall be encoded into an Array, since the Array encoder can not distinguish if the array shall be encoded as a higher dimension or as a record otherwise. #622
  • Add Connection#set_chunked_rows_mode #610
  • Add PG::Connection#close_prepared, PG::Connection#close_portal, PG::Connection#send_close_prepared and PG::Connection#send_close_portal which are new in PostgreSQL-17. #611
  • Add Connection#send_pipeline_sync, async_pipeline_sync and release GVL at PQ(sendP|P)ipelineSync. #612
  • Add MINGW package dependency which is resolved by RubyInstaller. #617
  • Change conn.server_version and conn.protocol_version to raise instead of return 0 on error. #632
  • Fix connecting to multiple hosts after connnect_timeout. #637

... (truncated)

Commits
  • c75ed8d Bump VERSION to 1.6.2
  • 90a00e5 Update CHANGELOG for pg-1.6.2
  • c584348 Merge pull request #670 from larskanis/update-deps
  • 227653d Update dependencies
  • 428415d Prepare CHANGELOG for 1.6.2 [skip ci]
  • 4282e5c Merge pull request #669 from larskanis/test-rpath
  • 19a3547 Strip darwin C-ext to remove paths to C files
  • 5e2ac6e Temporary enable head version of rake-compiler-dock
  • 70551b9 Add spec/pg_spec.rb to tests
  • 35b2704 Add tests for rpath or other build related paths
  • Additional commits viewable in compare view

Updates dalli from 3.2.3 to 3.2.8

Changelog

Sourced from dalli's changelog.

3.2.8

  • Handle IO::TimeoutError when establishing connection (eugeneius)
  • Drop dependency on base64 gem (Earlopain)
  • Address incompatibility with resolv-replace (y9v)
  • Add rubygems.org metadata (m-nakamura145)

3.2.7

  • Fix cascading error when there's an underlying network error in a pipelined get (eugeneius)
  • Ruby 3.4/head compatibility by adding base64 to gemspec (tagliala)
  • Add Ruby 3.3 to CI (m-nakamura145)
  • Use Socket's connect_timeout when available, and pass timeout to the socket's send and receive timeouts (mlarraz)

3.2.6

  • Rescue IO::TimeoutError raised by Ruby since 3.2.0 on blocking reads/writes (skaes)
  • Fix rubydoc link (JuanitoFatas)

3.2.5

  • Better handle memcached requests being interrupted by Thread#raise or Thread#kill (byroot)
  • Unexpected errors are no longer treated as Dalli::NetworkError, including errors raised by Timeout.timeout (byroot)

3.2.4

  • Cache PID calls for performance since glibc no longer caches in recent versions (byroot)
  • Preallocate the read buffer in Socket#readfull (byroot)
Commits

Updates carrierwave from 3.1.1 to 3.1.2

Release notes

Sourced from carrierwave's releases.

3.1.2

Fixed

  • Fix failing to remove existing files on updating by #remove_#{column}=, ##{column}_cache=, and #remote_#{column}_url= (@​mshibuya 7b2ce50, #2778, #2779)
Changelog

Sourced from carrierwave's changelog.

3.1.2 - 2025-04-13

Fixed

  • Fix failing to remove existing files on updating by #remove_#{column}=, ##{column}_cache=, and #remote_#{column}_url= (@​mshibuya 7b2ce50, #2778, #2779)
Commits
  • 8e5db8c Version 3.1.2
  • 7b2ce50 Fix failing to remove existing files on updating by #remove_#{column}=, `##...
  • 9001ab7 Fix specs breaking with MiniMagick 5.x
  • See full diff in compare view

Updates mini_magick from 5.2.0 to 5.3.1

Release notes

Sourced from mini_magick's releases.

v5.3.1

  • Fixed MiniMagick.cli_prefix being mutated when set to an array.

v5.3.0

  • Actually require Ruby 2.5+ in the gemspec.
  • Fix Ruby 2.5 compatibility when using MiniMagick.restricted_env configuration.
  • Drop benchmark dependency.
  • Fix keyword argument forwarding when trying to call MiniMagick.compare(errors: false)
Commits

Updates httparty from 0.21.0 to 0.23.2

Release notes

Sourced from httparty's releases.

0.23.2

What's Changed

New Contributors

Full Changelog: jnunemaker/httparty@v0.23.1...v0.23.2

v0.23.1

Full Changelog: jnunemaker/httparty@v0.23.0...v0.23.1

v0.23.0

What's Changed

New Contributors

Full Changelog: https://github.com/jnunemaker/httparty/compare...

Description has been truncated

@dependabot
Bump the production-dependencies-minor group across 1 directory with …
28aac30 
…30 updates

Bumps the production-dependencies-minor group with 28 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [rake](https://github.com/ruby/rake) | `13.2.1` | `13.3.1` |
| [rails](https://github.com/rails/rails) | `7.1.5.2` | `7.1.6` |
| [jbuilder](https://github.com/rails/jbuilder) | `2.13.0` | `2.14.1` |
| [bootsnap](https://github.com/Shopify/bootsnap) | `1.18.4` | `1.18.6` |
| [test-unit](https://github.com/test-unit/test-unit) | `3.2.7` | `3.7.0` |
| [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) | `1.113.0` | `1.202.0` |
| [json](https://github.com/ruby/json) | `2.12.2` | `2.15.2` |
| [rack-attack](https://github.com/rack/rack-attack) | `6.5.0` | `6.8.0` |
| [pg](https://github.com/ged/ruby-pg) | `1.5.9` | `1.6.2` |
| [dalli](https://github.com/petergoldstein/dalli) | `3.2.3` | `3.2.8` |
| [carrierwave](https://github.com/carrierwaveuploader/carrierwave) | `3.1.1` | `3.1.2` |
| [mini_magick](https://github.com/minimagick/minimagick) | `5.2.0` | `5.3.1` |
| [httparty](https://github.com/jnunemaker/httparty) | `0.21.0` | `0.23.2` |
| [devise-two-factor](https://github.com/tinfoil/devise-two-factor) | `6.1.0` | `6.2.0` |
| [geocoder](https://github.com/alexreisner/geocoder) | `1.6.1` | `1.8.6` |
| [table_print](https://github.com/arches/table_print) | `1.5.4` | `1.5.7` |
| [rexml](https://github.com/ruby/rexml) | `3.4.2` | `3.4.4` |
| [csv](https://github.com/ruby/csv) | `3.3.4` | `3.3.5` |
| [maintenance_tasks](https://github.com/Shopify/maintenance_tasks) | `2.12.0` | `2.13.0` |
| [terser](https://github.com/ahorek/terser-ruby) | `1.2.5` | `1.2.6` |
| [rails-autoscale-web](https://github.com/judoscale/judoscale-ruby) | `1.11.1` | `1.12.1` |
| [lograge](https://github.com/roidrage/lograge) | `0.3.6` | `0.14.0` |
| [recaptcha](https://github.com/ambethia/recaptcha) | `5.19.0` | `5.21.1` |
| [connection_pool](https://github.com/mperham/connection_pool) | `2.5.3` | `2.5.4` |
| [barnes](https://github.com/heroku/barnes) | `0.0.8` | `0.0.9` |
| [has_scope](https://github.com/heartcombo/has_scope) | `0.8.2` | `0.9.0` |
| [globalid](https://github.com/rails/globalid) | `1.2.1` | `1.3.0` |
| [js-routes](https://github.com/railsware/js-routes) | `2.2.7` | `2.3.5` |



Updates `rake` from 13.2.1 to 13.3.1
- [Release notes](https://github.com/ruby/rake/releases)
- [Changelog](https://github.com/ruby/rake/blob/master/History.rdoc)
- [Commits](ruby/rake@v13.2.1...v13.3.1)

Updates `rails` from 7.1.5.2 to 7.1.6
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](rails/rails@v7.1.5.2...v7.1.6)

Updates `jbuilder` from 2.13.0 to 2.14.1
- [Release notes](https://github.com/rails/jbuilder/releases)
- [Commits](rails/jbuilder@v2.13.0...v2.14.1)

Updates `bootsnap` from 1.18.4 to 1.18.6
- [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md)
- [Commits](rails/bootsnap@v1.18.4...v1.18.6)

Updates `test-unit` from 3.2.7 to 3.7.0
- [Release notes](https://github.com/test-unit/test-unit/releases)
- [Commits](test-unit/test-unit@3.2.7...3.7.0)

Updates `aws-sdk-s3` from 1.113.0 to 1.202.0
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `json` from 2.12.2 to 2.15.2
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](ruby/json@v2.12.2...v2.15.2)

Updates `rack-attack` from 6.5.0 to 6.8.0
- [Release notes](https://github.com/rack/rack-attack/releases)
- [Changelog](https://github.com/rack/rack-attack/blob/main/CHANGELOG.md)
- [Commits](rack/rack-attack@v6.5.0...v6.8.0)

Updates `pg` from 1.5.9 to 1.6.2
- [Changelog](https://github.com/ged/ruby-pg/blob/master/CHANGELOG.md)
- [Commits](ged/ruby-pg@v1.5.9...v1.6.2)

Updates `dalli` from 3.2.3 to 3.2.8
- [Changelog](https://github.com/petergoldstein/dalli/blob/main/CHANGELOG.md)
- [Commits](petergoldstein/dalli@v3.2.3...v3.2.8)

Updates `carrierwave` from 3.1.1 to 3.1.2
- [Release notes](https://github.com/carrierwaveuploader/carrierwave/releases)
- [Changelog](https://github.com/carrierwaveuploader/carrierwave/blob/master/CHANGELOG.md)
- [Commits](carrierwaveuploader/carrierwave@v3.1.1...v3.1.2)

Updates `mini_magick` from 5.2.0 to 5.3.1
- [Release notes](https://github.com/minimagick/minimagick/releases)
- [Commits](minimagick/minimagick@v5.2.0...v5.3.1)

Updates `httparty` from 0.21.0 to 0.23.2
- [Release notes](https://github.com/jnunemaker/httparty/releases)
- [Changelog](https://github.com/jnunemaker/httparty/blob/main/Changelog.md)
- [Commits](jnunemaker/httparty@v0.21.0...v0.23.2)

Updates `devise-two-factor` from 6.1.0 to 6.2.0
- [Changelog](https://github.com/devise-two-factor/devise-two-factor/blob/main/CHANGELOG.md)
- [Commits](devise-two-factor/devise-two-factor@v6.1.0...v6.2.0)

Updates `geocoder` from 1.6.1 to 1.8.6
- [Changelog](https://github.com/alexreisner/geocoder/blob/master/CHANGELOG.md)
- [Commits](alexreisner/geocoder@v1.6.1...v1.8.6)

Updates `table_print` from 1.5.4 to 1.5.7
- [Commits](https://github.com/arches/table_print/commits)

Updates `rexml` from 3.4.2 to 3.4.4
- [Release notes](https://github.com/ruby/rexml/releases)
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md)
- [Commits](ruby/rexml@v3.4.2...v3.4.4)

Updates `csv` from 3.3.4 to 3.3.5
- [Release notes](https://github.com/ruby/csv/releases)
- [Changelog](https://github.com/ruby/csv/blob/main/NEWS.md)
- [Commits](ruby/csv@v3.3.4...v3.3.5)

Updates `maintenance_tasks` from 2.12.0 to 2.13.0
- [Release notes](https://github.com/Shopify/maintenance_tasks/releases)
- [Commits](Shopify/maintenance_tasks@v2.12.0...v2.13.0)

Updates `terser` from 1.2.5 to 1.2.6
- [Release notes](https://github.com/ahorek/terser-ruby/releases)
- [Changelog](https://github.com/ahorek/terser-ruby/blob/master/CHANGELOG.md)
- [Commits](ahorek/terser-ruby@1.2.5...1.2.6)

Updates `rails-autoscale-web` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/judoscale/judoscale-ruby/releases)
- [Changelog](https://github.com/judoscale/judoscale-ruby/blob/main/CHANGELOG.md)
- [Commits](judoscale/judoscale-ruby@v1.11.1...v1.12.1)

Updates `lograge` from 0.3.6 to 0.14.0
- [Release notes](https://github.com/roidrage/lograge/releases)
- [Changelog](https://github.com/roidrage/lograge/blob/master/CHANGELOG.md)
- [Commits](roidrage/lograge@v0.3.6...v0.14.0)

Updates `recaptcha` from 5.19.0 to 5.21.1
- [Changelog](https://github.com/ambethia/recaptcha/blob/master/CHANGELOG.md)
- [Commits](ambethia/recaptcha@v5.19.0...v5.21.1)

Updates `connection_pool` from 2.5.3 to 2.5.4
- [Changelog](https://github.com/mperham/connection_pool/blob/main/Changes.md)
- [Commits](mperham/connection_pool@v2.5.3...v2.5.4)

Updates `barnes` from 0.0.8 to 0.0.9
- [Release notes](https://github.com/heroku/barnes/releases)
- [Changelog](https://github.com/heroku/barnes/blob/main/CHANGELOG.md)
- [Commits](heroku/barnes@v0.0.8...v0.0.9)

Updates `has_scope` from 0.8.2 to 0.9.0
- [Release notes](https://github.com/heartcombo/has_scope/releases)
- [Changelog](https://github.com/heartcombo/has_scope/blob/main/CHANGELOG.md)
- [Commits](heartcombo/has_scope@v0.8.2...v0.9.0)

Updates `globalid` from 1.2.1 to 1.3.0
- [Release notes](https://github.com/rails/globalid/releases)
- [Commits](rails/globalid@v1.2.1...v1.3.0)

Updates `js-routes` from 2.2.7 to 2.3.5
- [Release notes](https://github.com/railsware/js-routes/releases)
- [Changelog](https://github.com/railsware/js-routes/blob/main/CHANGELOG.md)
- [Commits](railsware/js-routes@v2.2.7...v2.3.5)

Updates `actionpack` from 7.1.5.2 to 7.1.6
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.1/actionpack/CHANGELOG.md)
- [Commits](rails/rails@v7.1.5.2...v7.1.6)

Updates `activerecord` from 7.1.5.2 to 7.1.6
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.1/activerecord/CHANGELOG.md)
- [Commits](rails/rails@v7.1.5.2...v7.1.6)

---
updated-dependencies:
- dependency-name: rake
  dependency-version: 13.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: rails
  dependency-version: 7.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: jbuilder
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: bootsnap
  dependency-version: 1.18.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: test-unit
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: aws-sdk-s3
  dependency-version: 1.202.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: json
  dependency-version: 2.15.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: rack-attack
  dependency-version: 6.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: pg
  dependency-version: 1.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: dalli
  dependency-version: 3.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: carrierwave
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: mini_magick
  dependency-version: 5.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: httparty
  dependency-version: 0.23.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: devise-two-factor
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: geocoder
  dependency-version: 1.8.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: table_print
  dependency-version: 1.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: rexml
  dependency-version: 3.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: csv
  dependency-version: 3.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: maintenance_tasks
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: terser
  dependency-version: 1.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: rails-autoscale-web
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: lograge
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: recaptcha
  dependency-version: 5.21.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: connection_pool
  dependency-version: 2.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: barnes
  dependency-version: 0.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: has_scope
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: globalid
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: js-routes
  dependency-version: 2.3.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: actionpack
  dependency-version: 7.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: activerecord
  dependency-version: 7.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Nov 3, 2025
@dependabot dependabot bot requested a review from wwahammy as a code owner November 3, 2025 02:11
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Nov 3, 2025
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Nov 17, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Dec 8, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 8, 2025
@dependabot dependabot bot deleted the dependabot/bundler/production-dependencies-minor-6d91036fd3 branch December 8, 2025 02:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@wwahammy wwahammy Awaiting requested review from wwahammy wwahammy is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@wwahammy