Skip to content

Bump the bundler-dependencies group across 1 directory with 8 updates - #82

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/bundler-dependencies-d55ee4debf
Open

Bump the bundler-dependencies group across 1 directory with 8 updates#82
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/bundler-dependencies-d55ee4debf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the bundler-dependencies group with 8 updates in the / directory:

Package From To
rails 8.1.3 8.1.3.1
solid_queue 1.4.0 1.6.0
solid_cable 4.0.0 4.0.2
bootsnap 1.24.6 1.25.0
thruster 0.1.22 0.1.23
image_processing 2.0.2 2.0.3
ruby-lsp 0.26.9 0.26.10
selenium-webdriver 4.45.0 4.46.0

Updates rails from 8.1.3 to 8.1.3.1

Release notes

Sourced from rails's releases.

8.1.3.1

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • No changes.

Action Pack

  • No changes.

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

  • No changes.

Active Storage

  • Disable libvips's unfuzzed image loaders and savers.

    libvips flags some of its loaders and savers as "unfuzzed" or "untrusted", meaning they are only safe for trusted content. Active Storage will call Vips.block_untrusted(true) to disable them while booting. An application that needs a specific loader or saver may re-enable it in an initializer.

... (truncated)

Commits

Updates solid_queue from 1.4.0 to 1.6.0

Release notes

Sourced from solid_queue's releases.

v1.6.0 - fiber execution mode (with Async)

A long-awaited feature thanks to @​crmne on this release: instead of using a thread pool to run jobs in multiple threads per works, you can now use fibers on a single fiber reactor thread. To use this, you just need to specify the number of fibers instead of the number of threads in your worker configuration, like this:

workers:
  - queues: "api*"
    fibers: 100
    polling_interval: 0.05

It uses Async under the hood, so you need to have that as a dependency for it to work. Also, you need to be using fiber isolation in Rails (config.active_support.isolation_level`` = :fiber).

This can be very useful for I/O-bound workloads, such as those involving LLM calls.

What's Changed

New Contributors

Full Changelog: rails/solid_queue@v1.5.1...v1.6.0

v1.5.1

What's Changed

New Contributors

Full Changelog: rails/solid_queue@v1.5.0...v1.5.1

v1.5.0

Lots of bugfixes in this one, thanks to a bunch of new contributors!

Notable changes in this release:

  • Drop support for Ruby 3.1, which has been EOL for a while
  • Improve DISTINCT queries used for polling with not specific queue names in PostgreSQL
  • Change polling interval default to 1 second
  • New bin/job check to validate configuration
  • Support setting a default time zone for recurring tasks

What's Changed

... (truncated)

Commits
  • 86f3d92 Bump solid_queue to 1.6.0
  • 2a479f6 Document how to update dynamic recurring tasks
  • 7f59932 Roll back transactions leaked by killed job threads in tests
  • 9c0d5d3 Reorganize the execution pools under SolidQueue::Pool
  • 30b92ca Move the fiber worker checks to Configuration
  • 6e27144 Extract a base class for the execution pools
  • 08e6098 Rescue only the code that runs with capacity reserved when posting
  • 000e8ba Report errors escaping the execution future
  • 5270cc8 Simplify worker initialization
  • 50468fa Start the fiber pool's reactor lazily on first use
  • Additional commits viewable in compare view

Updates solid_cable from 4.0.0 to 4.0.2

Release notes

Sourced from solid_cable's releases.

v4.0.2

What's Changed

Full Changelog: rails/solid_cable@v4.0.1...v4.0.2

v4.0.1

What's Changed

New Contributors

Full Changelog: rails/solid_cable@v4.0.0...v4.0.1

Commits
  • 4a41ec8 Version bump
  • f781e4d Reset retry counter on each successful poll (#84)
  • cf0695c Version bump
  • c968ba7 Reset reconnect_attempt after successfuly accessing the DB. (#82)
  • 5ea0f55 Update adapter to handle ActionCable adapterization in 8.2 (#80)
  • 89d34d7 Run ci against different rails versions (#79)
  • See full diff in compare view

Updates bootsnap from 1.24.6 to 1.25.0

Release notes

Sourced from bootsnap's releases.

v1.25.0

What's Changed

  • Improve YAML parsing cache to more efficiently handle Time, Date and DateTime.

  • Don't invalidate the compile cache when YJIT is toggled. YJIT is a runtime JIT and doesn't change the serialized instruction sequences that are cached, but enabling it (via --yjit, RUBYOPT, or RubyVM::YJIT.enable) adds a +YJIT marker to RUBY_DESCRIPTION ( +YJIT <token> on YJIT_SUPPORT builds), which is part of the cache key. This previously discarded the entire compile cache whenever YJIT was enabled at runtime but not at precompile time (or vice versa). The marker is now stripped before hashing.

  • Fix CompileCache::Native.fetch and .precompile reading a non-String path argument (e.g. a Pathname) with RSTRING_PTR. Regression from 1.24.0.

Full Changelog: rails/bootsnap@v1.24.6...v1.25.0

Changelog

Sourced from bootsnap's changelog.

1.25.0

  • Improve YAML parsing cache to more efficiently handle Time, Date and DateTime.

  • Don't invalidate the compile cache when YJIT is toggled. YJIT is a runtime JIT and doesn't change the serialized instruction sequences that are cached, but enabling it (via --yjit, RUBYOPT, or RubyVM::YJIT.enable) adds a +YJIT marker to RUBY_DESCRIPTION ( +YJIT <token> on YJIT_SUPPORT builds), which is part of the cache key. This previously discarded the entire compile cache whenever YJIT was enabled at runtime but not at precompile time (or vice versa). The marker is now stripped before hashing.

  • Fix CompileCache::Native.fetch and .precompile reading a non-String path argument (e.g. a Pathname) with RSTRING_PTR. Regression from 1.24.0.

Commits
  • e099ec7 Release 1.25.0
  • b694a11 Merge pull request #563 from stanhu/sh-ignore-yjit-in-compile-cache-key
  • 51898f9 Ignore YJIT status in the compile cache key
  • 1ad589b Merge pull request #560 from rails/hm-qnqlnylzkqkltqsz
  • 21fbd65 Merge pull request #561 from jeremy/fix-path-conversion-entry-points
  • 4898853 Convert the path argument in the frame that reads it
  • 8ee47c4 Add MessagePack::Bigint type
  • 49e3eb7 Replace Date Marshalling with recursive msgpack
  • 711fd0b Bump minimum msgpack to 1.5.0
  • 160fc10 Merge pull request #558 from viralpraxis/fix-yaml-cache-kwargs-mutation
  • Additional commits viewable in compare view

Updates thruster from 0.1.22 to 0.1.23

Changelog

Sourced from thruster's changelog.

v0.1.23 / 2026-07-16

  • Build with Go 1.26.5 (#140)
Commits

Updates image_processing from 2.0.2 to 2.0.3

Changelog

Sourced from image_processing's changelog.

2.0.3 (2026-06-08)

  • Prevent remote code execution when operation names come from user input, closing bypasses through the #operation meta-builder, #method_missing, and nested #send calls (reported by @​szymonsec)

  • [minimagick] Prevent remote code execution through unsafe public methods (e.g. #instance_eval, #send) passed as loader/saver option names

Commits

Updates ruby-lsp from 0.26.9 to 0.26.10

Release notes

Sourced from ruby-lsp's releases.

v0.26.10

🐛 Bug Fixes

Commits
  • 584117f Add back the x64-mingw-ucrt platform to the Gemfile.lock to fix the build on ...
  • f2db81c Prepare for 0.26.10
  • 1786573 Merge pull request #4156 from Shopify/dependabot/npm_and_yarn/vscode/minor-an...
  • bc80b24 Merge pull request #4154 from Shopify/dependabot/submodules/test/fixtures/pri...
  • 9004a25 Merge pull request #4155 from Shopify/dependabot/github_actions/ruby/setup-ru...
  • f501249 Bump the minor-and-patch group in /vscode with 6 updates
  • f96cdc6 Bump ruby/setup-ruby from 1.314.0 to 1.316.0
  • 5ba6d69 Bump test/fixtures/prism from 26cfb91 to d07335c
  • 01e0d0e Merge pull request #4151 from Shopify/dependabot/npm_and_yarn/vscode/types/no...
  • 0678348 Merge pull request #4147 from Shopify/dependabot/npm_and_yarn/vscode/vscode/t...
  • Additional commits viewable in compare view

Updates selenium-webdriver from 4.45.0 to 4.46.0

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.46.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

... (truncated)

Changelog

Sourced from selenium-webdriver's changelog.

4.46.0 (2026-07-10)

  • Support CDP versions: v148, v149, v150
  • trim whitespace around NO_PROXY entries (#17565)
  • add ClientConfig for HTTP client customization (#17699)
  • generate the BiDi protocol layer from the shared binding-neutral schema (#17731)
Commits
  • df5a634 [build] Prepare for release of selenium-4.46.0 (#17763)
  • ee4057c Add guidance for testing conventions in each language (#16734)
  • 6283602 [rb] generate the BiDi protocol layer from the shared binding-neutral schema ...
  • 39394dd [rb] guard flaky safari test
  • 6f7ddb3 [rb] Add copyright header for client_config.rbs (#17722)
  • cab142e [rb] add ClientConfig for HTTP client customization (#17699)
  • ea8ad9b [build] add copyright headers to rbs, pyi, ts, mjs, and erb files (#17720)
  • c0b8ff6 [rb] trim whitespace around NO_PROXY entries (#17565)
  • 54ad310 [build] Automated Browser Version Update (#17687)
  • 945692a [build] Reset versions to nightly after 4.45.0 release
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the bundler-dependencies group across 1 directory with 8 updates
f358d9c 
Bumps the bundler-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [rails](https://github.com/rails/rails) | `8.1.3` | `8.1.3.1` |
| [solid_queue](https://github.com/rails/solid_queue) | `1.4.0` | `1.6.0` |
| [solid_cable](https://github.com/rails/solid_cable) | `4.0.0` | `4.0.2` |
| [bootsnap](https://github.com/rails/bootsnap) | `1.24.6` | `1.25.0` |
| [thruster](https://github.com/basecamp/thruster) | `0.1.22` | `0.1.23` |
| [image_processing](https://github.com/janko/image_processing) | `2.0.2` | `2.0.3` |
| [ruby-lsp](https://github.com/Shopify/ruby-lsp) | `0.26.9` | `0.26.10` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.45.0` | `4.46.0` |



Updates `rails` from 8.1.3 to 8.1.3.1
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](rails/rails@v8.1.3...v8.1.3.1)

Updates `solid_queue` from 1.4.0 to 1.6.0
- [Release notes](https://github.com/rails/solid_queue/releases)
- [Commits](rails/solid_queue@v1.4.0...v1.6.0)

Updates `solid_cable` from 4.0.0 to 4.0.2
- [Release notes](https://github.com/rails/solid_cable/releases)
- [Commits](rails/solid_cable@v4.0.0...v4.0.2)

Updates `bootsnap` from 1.24.6 to 1.25.0
- [Release notes](https://github.com/rails/bootsnap/releases)
- [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md)
- [Commits](rails/bootsnap@v1.24.6...v1.25.0)

Updates `thruster` from 0.1.22 to 0.1.23
- [Changelog](https://github.com/basecamp/thruster/blob/main/CHANGELOG.md)
- [Commits](basecamp/thruster@v0.1.22...v0.1.23)

Updates `image_processing` from 2.0.2 to 2.0.3
- [Changelog](https://github.com/janko/image_processing/blob/master/CHANGELOG.md)
- [Commits](janko/image_processing@v2.0.2...v2.0.3)

Updates `ruby-lsp` from 0.26.9 to 0.26.10
- [Release notes](https://github.com/Shopify/ruby-lsp/releases)
- [Commits](Shopify/ruby-lsp@v0.26.9...v0.26.10)

Updates `selenium-webdriver` from 4.45.0 to 4.46.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](SeleniumHQ/selenium@selenium-4.45.0...selenium-4.46.0)

---
updated-dependencies:
- dependency-name: rails
  dependency-version: 8.1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: solid_queue
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: solid_cable
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: bootsnap
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: thruster
  dependency-version: 0.1.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: image_processing
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: ruby-lsp
  dependency-version: 0.26.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: selenium-webdriver
  dependency-version: 4.46.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Aug 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants