Bump the bundler-dependencies group across 1 directory with 6 updates by dependabot[bot] · Pull Request #79 · tma/balance

dependabot · 2026-07-30T07:34:40Z

Bumps the bundler-dependencies group with 6 updates in the / directory:

Package	From	To
rails	`8.1.3`	`8.1.3.1`
solid_queue	`1.4.0`	`1.5.1`
solid_cable	`4.0.0`	`4.0.2`
thruster	`0.1.22`	`0.1.23`
ruby-lsp	`0.26.9`	`0.26.10`
selenium-webdriver	`4.45.0`	`4.46.0`

Updates rails from 8.1.3 to 8.1.3.1

Release notes

Sourced from rails's releases.

8.1.3.1

Active Support

No changes.

Active Model

No changes.

Active Record

No changes.

Action View

No changes.

Action Pack

No changes.

Active Job

No changes.

Action Mailer

No changes.

Action Cable

No changes.

Active Storage

Disable libvips's unfuzzed image loaders and savers.

libvips flags some of its loaders and savers as "unfuzzed" or "untrusted", meaning they are only safe for trusted content. Active Storage will call Vips.block_untrusted(true) to disable them while booting. An application that needs a specific loader or saver may re-enable it in an initializer.

... (truncated)

Commits

3989ebf Preparing for 8.1.3.1 release
349e7a5 Disable libvips's unfuzzed image loaders and savers
See full diff in compare view

Updates solid_queue from 1.4.0 to 1.5.1

Release notes

Sourced from solid_queue's releases.

v1.5.1

What's Changed

Fix flaky tests caused by leaked job threads and signal timing by @rosa in rails/solid_queue#766

Add an update generator to copy new migrations by @rosa in rails/solid_queue#765

Wait for the continuable job to start before interrupting it by @rosa in rails/solid_queue#767

Add --only-recurring to run just the recurring scheduler by @rafael-pissardo in rails/solid_queue#757

Use with_connection in DistinctValues by @trevorturk in rails/solid_queue#769

Replace forked processes that fail to boot by @sapandiwakar in rails/solid_queue#760

New Contributors

@trevorturk made their first contribution in rails/solid_queue#769

@sapandiwakar made their first contribution in rails/solid_queue#760

Full Changelog: rails/solid_queue@v1.5.0...v1.5.1

v1.5.0

Lots of bugfixes in this one, thanks to a bunch of new contributors!

Notable changes in this release:

Drop support for Ruby 3.1, which has been EOL for a while

Improve DISTINCT queries used for polling with not specific queue names in PostgreSQL

Change polling interval default to 1 second

New bin/job check to validate configuration

Support setting a default time zone for recurring tasks

What's Changed

Accept optional job argument in stopping? by @thoughtless in rails/solid_queue#747

docs: use single splat in key argument for limits_concurrency by @G-Rath in rails/solid_queue#749

Warn instead of raising when the connection pool is smaller than the thread pool by @ajaynomics in rails/solid_queue#753

add bin/jobs check to validate config before starting by @alexanderadam in rails/solid_queue#745

Refactor errors and warnings when parsing configuration by @rosa in rails/solid_queue#759

Remove trapping QUIT on Windows by @andyundso in rails/solid_queue#727

Change default polling_interval to 1 sec by @hachi8833 in rails/solid_queue#721

Memoize Runnable#mode to stop allocating a String + StringInquirer pe… by @s01ipsist in rails/solid_queue#744

Avoid reloading job rows after dispatch and schedule by @ImDineshSaini in rails/solid_queue#742

Fix recurring task logging as if it enqueued the same job twice by @ghiculescu in rails/solid_queue#731

Improve DISTINCT queries on PostgreSQL via recursive CTE by @bubiche in rails/solid_queue#730

Automatically use Rails or a default timezone for the schedule by @andyjeffries in rails/solid_queue#750

Fix flaky concurrency controls test by @diogovernier in rails/solid_queue#734

Reduce flaky integration test failures from timing and PK reuse by @rafael-pissardo in rails/solid_queue#758

Add compatibility with strict_loading_by_default by @JoeDupuis in rails/solid_queue#375

Report rescued recurring enqueue errors to Rails.error by @rafael-pissardo in rails/solid_queue#756

Drop support for Ruby 3.1 by @rosa in rails/solid_queue#762

Prevent concurrency lock leaks that cause duplicate job execution by @rosa in rails/solid_queue#761

New Contributors

@thoughtless made their first contribution in rails/solid_queue#747

@ajaynomics made their first contribution in rails/solid_queue#753

@hachi8833 made their first contribution in rails/solid_queue#721

@s01ipsist made their first contribution in rails/solid_queue#744

... (truncated)

Commits

e5d8c17 Bump solid_queue to 1.5.1
f8899df Track process startups with boot guards the processes themselves manage
7e62a62 Terminate the stalled supervisor gracefully in tests
6a2a201 supervisor: replace forks that fail to boot
40d6bd5 Lease connections in DistinctValues instead of calling deprecated connection
517a974 Add --only-recurring to run just the recurring scheduler
74b6b07 Wait for the continuable job to start before interrupting it
29e818d Add an update generator to copy new migrations
f731502 Kill job threads leaked by workers stopped in-process in tests
0a7c1cf Wait deterministically before signaling QUIT and KILL in lifecycle tests
Additional commits viewable in compare view

Updates solid_cable from 4.0.0 to 4.0.2

Release notes

Sourced from solid_cable's releases.

v4.0.2

What's Changed

Reset retry counter on each successful poll by @npezza93 in rails/solid_cable#84

Full Changelog: rails/solid_cable@v4.0.1...v4.0.2

v4.0.1

What's Changed

Run ci against different rails versions by @npezza93 in rails/solid_cable#79

Update adapter to handle ActionCable adapterization in 8.2 by @npezza93 in rails/solid_cable#80

Reset reconnect_attempt after successfuly accessing the DB. by @pascalbetz in rails/solid_cable#82

New Contributors

@pascalbetz made their first contribution in rails/solid_cable#82

Full Changelog: rails/solid_cable@v4.0.0...v4.0.1

Commits

4a41ec8 Version bump
f781e4d Reset retry counter on each successful poll (#84)
cf0695c Version bump
c968ba7 Reset reconnect_attempt after successfuly accessing the DB. (#82)
5ea0f55 Update adapter to handle ActionCable adapterization in 8.2 (#80)
89d34d7 Run ci against different rails versions (#79)
See full diff in compare view

Updates thruster from 0.1.22 to 0.1.23

Commits

168dc1f Update version & changelog
900411c Merge pull request #140 from rafafloresta/bump-go-1.26.5-security
2eb7870 Bump Go to 1.26.5 to fix crypto/tls ECH de-anonymization (CVE-2026-42505)
See full diff in compare view

Updates ruby-lsp from 0.26.9 to 0.26.10

Release notes

Sourced from ruby-lsp's releases.

v0.26.10

🐛 Bug Fixes

Prevent adding end token on endless methods (Shopify/ruby-lsp#4042) by @vinistock

Return MethodNotFound (-32601) for unrecognized LSP requests (Shopify/ruby-lsp#4040) by @IgorFroehner

Prevent loading old gem installations as project add-ons (Shopify/ruby-lsp#4052) by @vinistock

Fix document link gem paths when to_spec returns nil (Shopify/ruby-lsp#4060) by @vinistock

Use env shebangs for RubyGems installs (Shopify/ruby-lsp#4126) by @joshheinrichs-shopify

Don't crash on document URIs with an invalid scheme (Shopify/ruby-lsp#4127) by @eyupcanakman

Commits

584117f Add back the x64-mingw-ucrt platform to the Gemfile.lock to fix the build on ...
f2db81c Prepare for 0.26.10
1786573 Merge pull request #4156 from Shopify/dependabot/npm_and_yarn/vscode/minor-an...
bc80b24 Merge pull request #4154 from Shopify/dependabot/submodules/test/fixtures/pri...
9004a25 Merge pull request #4155 from Shopify/dependabot/github_actions/ruby/setup-ru...
f501249 Bump the minor-and-patch group in /vscode with 6 updates
f96cdc6 Bump ruby/setup-ruby from 1.314.0 to 1.316.0
5ba6d69 Bump test/fixtures/prism from 26cfb91 to d07335c
01e0d0e Merge pull request #4151 from Shopify/dependabot/npm_and_yarn/vscode/types/no...
0678348 Merge pull request #4147 from Shopify/dependabot/npm_and_yarn/vscode/vscode/t...
Additional commits viewable in compare view

Updates selenium-webdriver from 4.45.0 to 4.46.0

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.46.0

Detailed Changelogs by Component

Java | Python | DotNet | Ruby | JavaScript

What's Changed

[build] Upgrade rules_rs to 0.0.90 and build Rust against @llvm on macOS by @AutomatedTester in SeleniumHQ/selenium#17683

[dotnet] Thread safe product info determination by @nvborisenko in SeleniumHQ/selenium#17684

[release] Skip release if package is already published by @diemol in SeleniumHQ/selenium#17686

[docs] add design decision record process and template by @titusfortner in SeleniumHQ/selenium#17665

[rust] Support pbzx-compressed macOS .pkg payloads by @AutomatedTester in SeleniumHQ/selenium#17691

[java] Mark all current BiDi related classes beta by @pujagani in SeleniumHQ/selenium#17690

[build] Upgrade rules_rs to 0.0.92 by @AutomatedTester in SeleniumHQ/selenium#17688

[ci] Ignore changes in docs/decisions directory for pull requests by @diemol in SeleniumHQ/selenium#17693

[build] Upgrade @llvm to 0.8.9 by @AutomatedTester in SeleniumHQ/selenium#17703

[rust] Use PKG again for Firefox macOS downloads by @AutomatedTester in SeleniumHQ/selenium#17702

[rb] trim whitespace around NO_PROXY entries by @aguspe in SeleniumHQ/selenium#17565

Treat prefix literally in UrlTemplate.match(url, prefix) by @vasiliy-mikhailov in SeleniumHQ/selenium#17713

[java] show browser version and available CDP versions by @asolntsev in SeleniumHQ/selenium#17708

Make Either.stream() and iterator() empty for a left value by @vasiliy-mikhailov in SeleniumHQ/selenium#17714

[java] Handle system proxy setting for arguments passed to selenium manager by @bhecquet in SeleniumHQ/selenium#17402

[js] Add binding-neutral BiDi schema with cddl2ts-gated fidelity by @titusfortner in SeleniumHQ/selenium#17700

[build] add copyright headers to rbs, pyi, ts, mjs, and erb files by @titusfortner in SeleniumHQ/selenium#17720

[rb] add ClientConfig for HTTP client customization by @titusfortner in SeleniumHQ/selenium#17699

[rb] Add copyright header for client_config.rbs by @nvborisenko in SeleniumHQ/selenium#17722

[dotnet] [bidi] Split event stream backed subscription and enumeration by @nvborisenko in SeleniumHQ/selenium#17705

[dotnet] [test] Moves Urls knowledge to testing web server by @nvborisenko in SeleniumHQ/selenium#17724

[java] fix comparator of Docker versions by @asolntsev in SeleniumHQ/selenium#17723

[dotnet] [test] Driver is protected through fixtures by @nvborisenko in SeleniumHQ/selenium#17726

[dotnet] [test] Clean driver fixture from expected page titles by @nvborisenko in SeleniumHQ/selenium#17727

[py] Route Safari, STP and WebView2 to their handlers by @v-dermichev in SeleniumHQ/selenium#17728

[grid] Fix classpath packaging Redis-backed for SessionQueue by @VietND96 in SeleniumHQ/selenium#17706

[rust][selenium-manager]: do not ignore browser path when version is specified by @Delta456 in SeleniumHQ/selenium#17659

[json] Allow constructor args to be used when coercing from json by @shs96c in SeleniumHQ/selenium#17733

[py] Fix example WebDriverWait import in docstring by @cgoldberg in SeleniumHQ/selenium#17735

[dotnet] [test] Eliminate stub driver for testing events in Support package by @nvborisenko in SeleniumHQ/selenium#17736

[java] Fix JSON parser EOF sentinel collision with U+FFFF by @shs96c in SeleniumHQ/selenium#17737

[java] Reject unescaped control characters in JSON strings by @shs96c in SeleniumHQ/selenium#17740

[rust] Support multiple names for Firefox binary in Linux (#17695) by @bonigarcia in SeleniumHQ/selenium#17732

build: update Node.js toolchain version to 24.18.0 by @diemol in SeleniumHQ/selenium#17742

[java] Tighten JSON number lexer to match RFC 8259 by @shs96c in SeleniumHQ/selenium#17739

[java] Enforce commas between JSON elements; accept trailing commas by @shs96c in SeleniumHQ/selenium#17738

[java] Deprecate methods to avoid internal BiDi connection surfacing on driver by @pujagani in SeleniumHQ/selenium#17751

[js] Update cddl to 0.21.0 to fix quoted reserved-word parsing in BiDi codegen by @titusfortner in SeleniumHQ/selenium#17752

[rb] generate the BiDi protocol layer from the shared binding-neutral schema by @titusfortner in SeleniumHQ/selenium#17731

[docs] ADR implementation updates - track by PR number, clarify PR body vs ADR, tracking status by issue by @titusfortner in SeleniumHQ/selenium#17697

... (truncated)

Changelog

Sourced from selenium-webdriver's changelog.

4.46.0 (2026-07-10)

Support CDP versions: v148, v149, v150

trim whitespace around NO_PROXY entries (#17565)

add ClientConfig for HTTP client customization (#17699)

generate the BiDi protocol layer from the shared binding-neutral schema (#17731)

Commits

df5a634 [build] Prepare for release of selenium-4.46.0 (#17763)
ee4057c Add guidance for testing conventions in each language (#16734)
6283602 [rb] generate the BiDi protocol layer from the shared binding-neutral schema ...
39394dd [rb] guard flaky safari test
6f7ddb3 [rb] Add copyright header for client_config.rbs (#17722)
cab142e [rb] add ClientConfig for HTTP client customization (#17699)
ea8ad9b [build] add copyright headers to rbs, pyi, ts, mjs, and erb files (#17720)
c0b8ff6 [rb] trim whitespace around NO_PROXY entries (#17565)
54ad310 [build] Automated Browser Version Update (#17687)
945692a [build] Reset versions to nightly after 4.45.0 release
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the bundler-dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [rails](https://github.com/rails/rails) | `8.1.3` | `8.1.3.1` | | [solid_queue](https://github.com/rails/solid_queue) | `1.4.0` | `1.5.1` | | [solid_cable](https://github.com/rails/solid_cable) | `4.0.0` | `4.0.2` | | [thruster](https://github.com/basecamp/thruster) | `0.1.22` | `0.1.23` | | [ruby-lsp](https://github.com/Shopify/ruby-lsp) | `0.26.9` | `0.26.10` | | [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.45.0` | `4.46.0` | Updates `rails` from 8.1.3 to 8.1.3.1 - [Release notes](https://github.com/rails/rails/releases) - [Commits](rails/rails@v8.1.3...v8.1.3.1) Updates `solid_queue` from 1.4.0 to 1.5.1 - [Release notes](https://github.com/rails/solid_queue/releases) - [Commits](rails/solid_queue@v1.4.0...v1.5.1) Updates `solid_cable` from 4.0.0 to 4.0.2 - [Release notes](https://github.com/rails/solid_cable/releases) - [Commits](rails/solid_cable@v4.0.0...v4.0.2) Updates `thruster` from 0.1.22 to 0.1.23 - [Changelog](https://github.com/basecamp/thruster/blob/main/CHANGELOG.md) - [Commits](basecamp/thruster@v0.1.22...v0.1.23) Updates `ruby-lsp` from 0.26.9 to 0.26.10 - [Release notes](https://github.com/Shopify/ruby-lsp/releases) - [Commits](Shopify/ruby-lsp@v0.26.9...v0.26.10) Updates `selenium-webdriver` from 4.45.0 to 4.46.0 - [Release notes](https://github.com/SeleniumHQ/selenium/releases) - [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES) - [Commits](SeleniumHQ/selenium@selenium-4.45.0...selenium-4.46.0) --- updated-dependencies: - dependency-name: rails dependency-version: 8.1.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: solid_queue dependency-version: 1.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bundler-dependencies - dependency-name: solid_cable dependency-version: 4.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: thruster dependency-version: 0.1.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: ruby-lsp dependency-version: 0.26.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: selenium-webdriver dependency-version: 4.46.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-13T07:34:47Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Jul 30, 2026

dependabot Bot closed this Aug 13, 2026

dependabot Bot deleted the dependabot/bundler/bundler-dependencies-f9619badb4 branch August 13, 2026 07:34

Navigation Menu

Bump the bundler-dependencies group across 1 directory with 6 updates - #79

Bump the bundler-dependencies group across 1 directory with 6 updates#79
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/bundler-dependencies-f9619badb4

dependabot Bot commented on behalf of github Jul 30, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

8.1.3.1

Active Support

Active Model

Active Record

Action View

Action Pack

Active Job

Action Mailer

Action Cable

Active Storage

v1.5.1

What's Changed

New Contributors

v1.5.0

What's Changed

New Contributors

v4.0.2

What's Changed

v4.0.1

What's Changed

New Contributors

v0.26.10

🐛 Bug Fixes

Selenium 4.46.0

Detailed Changelogs by Component

What's Changed

4.46.0 (2026-07-10)

Uh oh!

dependabot Bot commented on behalf of github Aug 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 30, 2026 •

edited

Loading