Update bundler non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
bootsnap	1.20.1 → 1.21.1
graphql (source, changelog)	2.5.16 → 2.5.18
pagy (source, changelog)	43.2.3 → 43.2.8
parser (changelog)	3.3.10.0 → 3.3.10.1
puma	7.1.0 → 7.2.0
rubocop (source, changelog)	1.82.1 → 1.84.0
selenium-webdriver (source, changelog)	4.39.0 → 4.40.0
sentry-rails (source, changelog)	6.2.0 → 6.3.0
sentry-ruby (source, changelog)	6.2.0 → 6.3.0
sqlite3	2.9.0-aarch64-linux-gnu → 2.9.0
turbo-rails (changelog)	2.0.20 → 2.0.22

---

Release Notes

rmosolgo/graphql-ruby (graphql)

v2.5.18

Compare Source

• GraphQL::Dashboard: properly require action_controller before using it #​5510
• GraphQL::Dashboard: don't use config.asset_host for Dashboard assets since they're handled by the dashboard itself #​5511

v2.5.17

Compare Source

Bug fixes

• GraphQL::Dashboard: fix routes compatibility with Devise #​5505
• GraphQL::Dashboard: fix HTML/erb lint issues #​5497
• Parser: improve check for invalid number followed by name #​5492 #​5492
• GraphQL::Field: optimize boot memory by removing Field.from_options #​5495
• field, argument: improve API documentation for DSL methods #​5491

whitequark/parser (parser)

v3.3.10.1

Compare Source

API modifications:

• Bump maintenance branches to 3.2.10 (#​1085) (Koichi ITO)

rubocop/rubocop (rubocop)

v1.84.0

Compare Source

New features

• #​14516: Add AllowImplicitArrayLiterals to Layout/FirstArrayElementLineBreak. ([@​koic][])
• #​14750: Add new Style/ReverseFind cop. ([@​koic][])
• #​12343: Add new Style/EmptyClassDefinition cop to enforce consistent style for empty class definitions. The cop can enforce either a two-line class definition or Class.new for classes with no body. ([@​ydakuka][])
• #​14769: Add new Style/HashLookupMethod cop to enforce Hash#[] vs Hash#fetch preference. ([@​sferik][])
• #​12051: Add new Style/NegativeArrayIndex cop to enforce using negative array indices instead of calculating array length minus a value. The cop handles both simple index patterns and range patterns, and recognizes preserving methods and their combinations. ([@​ydakuka][])
• #​14633: Make a new system to handle push and pop locally. ([@​Magikdidi24][])
• #​14722: Support TargetRubyVersion 4.1 (experimental). ([@​koic][])

Bug fixes

• #​14697: Allow non-method calls in Categories for Layout/ClassStructure. ([@​fatkodima][])
• #​14784: Fix an error for Style/GuardClause when using heredoc as an argument of raise in else branch and if branch is empty. ([@​koic][])
• #​14790: Fix an error for Style/HashLookupMethod cop when there's no receiver. ([@​viralpraxis][])
• #​14779: Fix autocorrect crash with ruby_extractor when using offset: 0 and different source buffers. ([@​ydakuka][])
• #​14762: Fix false negatives for Style/RedundantCondition when the branches contains constant assignment. ([@​koic][])
• #​14751: Fix --force-default-config not preventing project config loading when used with options that access configuration. ([@​sakuro][])
• #​14783: Fix incorrect autocorrect for Style/HashSyntax when shorthand syntax is used in condition of if/unless/while/until. ([@​ydakuka][])
• #​14747: Fix a regression inLayout/IndentationWidth by adding a new EnforcedStyleAlignWith style parameter. ([@​MikeMcQuaid][])
• #​14716: Fix an infinite loop error for Layout/LineLength when SplitStrings option is enabled and strings span multiple lines. ([@​HariprasanthMSH][])
• #​14763: Fix an infinite loop error for Layout/IndentationWidth and Layout/IndentationConsistency when using EnforcedStyle: indented_internal_methods with method chain blocks. ([@​ydakuka][])
• #​9373: Fix an infinite loop error for Layout/IndentationWidth when autocorrecting mixed tabs and spaces in blocks. Fix an infinite loop error for Layout/DefEndAlignment and Layout/IndentationStyle when autocorrecting mixed tabs and spaces. Autocorrection for tabs is disabled in AlignmentCorrector for indentation offenses, but enabled for align_end. ([@​ydakuka][])
• #​12295: Fix Layout/FirstArgumentIndentation to correct entire method calls and chains for nested calls. ([@​ydakuka][])
• #​12527: Fix Offense#highlighted_area to return a valid Parser::Source::Range. ([@​ydakuka][])
• #​14801: Preserve source tabs in Clang and Tap formatters when displaying offense highlight. ([@​lovro-bikic][])
• #​14761: Improved the remote configuration file name on the cache location. ([@​Jack12816][])
• #​14778: Fix a false positive for Security/JSONLoad when create_additions option is passed with other options in a hash. ([@​wktk][])
• #​14796: Handle logical and operator assignment nodes in variable branch handling. ([@​lovro-bikic][])

Changes

• #​14753: Add support for squish and squish! applied to heredoc to Layout/HeredocIndentation. ([@​lovro-bikic][])
• #​14798: Recognize Forwardable methods in Lint/DuplicateMethods. ([@​lovro-bikic][])
• #​14793: Make Lint/RedundantSplatExpansion aware of constant assignment. ([@​koic][])
• #​14770: Make Style/AccessModifierDeclarations aware of self class. ([@​koic][])
• #​14748: Add support for other Module member existence methods to Style/ModuleMemberExistenceCheck. ([@​lovro-bikic][])
• #​14795: Add AllowedMethods configuration to Style/ModuleMemberExistenceCheck. ([@​lovro-bikic][])

SeleniumHQ/selenium (selenium-webdriver)

v4.40.0

Compare Source

=========================

• add synchronization and error handling for socket interactions (#​16487)
• mark low level bidi implementation as private api (#​16475)
• ensure driver process is always stopped (#​15635)
• create user-friendly method for enabling bidi (#​14284)
• Add force encoding to remove warnings caused by json 3.0 (#​16728)
• use SE_DEBUG to enable debugging (#​16816)
• ensure the grid is properly restarted in tests when there is a problem (#​16842)
• wait for grid to be ready when starting server (#​16896)
• check driver status endpoint rather than socket connection (#​16877)
• [build] update ruby gems with bazel (#​16924)

getsentry/sentry-ruby (sentry-rails)

v6.3.0

Compare Source

Features

• Implement new Sentry.metrics functionality (#​2818)

  The SDK now supports Sentry's new Trace Connected Metrics product.

   Sentry.metrics.count("button.click", 1, attributes: { button_id: "submit" })
   Sentry.metrics.distribution("response.time", 120.5, unit: "millisecond")
   Sentry.metrics.gauge("cpu.usage", 75.2, unit: "percent")

  Metrics is enabled by default and only activates once you use the above APIs. To disable completely:

  Sentry.init do |config|
    # ...
    config.enable_metrics = false
  end

• Support for tracing Sequel queries (#​2814)

  require "sentry"
  require "sentry/sequel"
  
  Sentry.init do |config|
    config.enabled_patches << :sequel
  end
  
  DB = Sequel.sqlite
  DB.extension(:sentry)

• Add support for OpenTelemetry messaging/queue system spans (#​2685)

• Add support for config.std_lib_logger_filter proc (#​2829)

  Sentry.init do |config|
    config.std_lib_logger_filter = proc do |logger, message, severity|
      # Only send ERROR and above messages
      severity == :error || severity == :fatal
    end
  
    config.enabled_patches = [:std_lib_logger]
  end

Bug Fixes

• Handle empty frames case gracefully with local vars (#​2807)
• Handle more extra attribute types when using extra attributes for structured logging (#​2815)

  # This now works too and the nested hash is dumped to JSON string
  Sentry.logger.info("Hello World", extra: { today: Date.today, user_id: user.id })

• Prevent SDK crash when SDK logging fails (#​2817)

Internal

• Unify Logs and Metrics implementations (#​2826)
• Unify LogEventBuffer and MetricEventBuffer logic (#​2830)
• Add maximum limits on LogEventBuffer (1k) and MetricEventBuffer (10k) for protection from memory blowup (#​2831)
• Lazily start LogEventBuffer and MetricEventBuffer threads (#​2832)

hotwired/turbo-rails (turbo-rails)

v2.0.22

Compare Source

What's Changed

• Updated bundled JS to v8.0.22 for renamed session.navigator to avoid clobbering window.navigator. See hotwired/turbo#1489.

Full Changelog: hotwired/turbo-rails@v2.0.21...v2.0.22

v2.0.21

Compare Source

What's Changed

• Add [email protected] to the CI matrix by @​seanpdoyle in #​758
• Use an immediate debouncer for tests by @​djmb in #​761
• Include hidden elements for turbo-cable-stream-source selector by @​excid3 in #​740
• Fix CI for [email protected]-[email protected] by @​seanpdoyle in #​764
• Add turbo frame assertion test helpers by @​excid3 in #​742
• Acccept meta tag string arguments as well by @​frenkel in #​754
• [fix #​762] Forward broadcast_refresh_to options by @​OutlawAndy in #​763
• Add support for Model Class in Action and Frame helpers by @​afrase in #​597
• Remove legacy workaround for Rails < 7 by @​drjayvee in #​766
• Fix debouncer tests to wait on correct debouncer by @​djmb in #​767
• Restrict tests to minitest < 6 by @​seanpdoyle in #​774
• Only return messages produced by block in capture_turbo_stream_broadcasts by @​Vivalldi in #​736
• Respect broadcast suppressions on before/after actions by @​stowersjoshua in #​770

New Contributors

• @​djmb made their first contribution in #​761
• @​frenkel made their first contribution in #​754
• @​OutlawAndy made their first contribution in #​763
• @​afrase made their first contribution in #​597
• @​drjayvee made their first contribution in #​766
• @​Vivalldi made their first contribution in #​736
• @​stowersjoshua made their first contribution in #​770

Full Changelog: hotwired/turbo-rails@v2.0.20...v2.0.21

---

Configuration

📅 Schedule: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.