Skip to content

Bump the ruby-minor-and-patch group across 1 directory with 9 updates - #127

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/ruby-minor-and-patch-51ac16a556
Open

Bump the ruby-minor-and-patch group across 1 directory with 9 updates#127
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/ruby-minor-and-patch-51ac16a556

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the ruby-minor-and-patch group with 8 updates in the / directory:

Package From To
solid_queue 1.4.0 1.6.0
solid_cable 4.0.0 4.0.2
bootsnap 1.24.6 1.25.0
thruster 0.1.21 0.1.25
slack-ruby-client 3.1.0 3.2.0
brakeman 8.0.5 8.0.6
selenium-webdriver 4.45.0 4.47.0
sentry-ruby 6.6.2 6.7.0

Updates solid_queue from 1.4.0 to 1.6.0

Release notes

Sourced from solid_queue's releases.

v1.6.0 - fiber execution mode (with Async)

A long-awaited feature thanks to @​crmne on this release: instead of using a thread pool to run jobs in multiple threads per works, you can now use fibers on a single fiber reactor thread. To use this, you just need to specify the number of fibers instead of the number of threads in your worker configuration, like this:

workers:
  - queues: "api*"
    fibers: 100
    polling_interval: 0.05

It uses Async under the hood, so you need to have that as a dependency for it to work. Also, you need to be using fiber isolation in Rails (config.active_support.isolation_level`` = :fiber).

This can be very useful for I/O-bound workloads, such as those involving LLM calls.

What's Changed

New Contributors

Full Changelog: rails/solid_queue@v1.5.1...v1.6.0

v1.5.1

What's Changed

New Contributors

Full Changelog: rails/solid_queue@v1.5.0...v1.5.1

v1.5.0

Lots of bugfixes in this one, thanks to a bunch of new contributors!

Notable changes in this release:

  • Drop support for Ruby 3.1, which has been EOL for a while
  • Improve DISTINCT queries used for polling with not specific queue names in PostgreSQL
  • Change polling interval default to 1 second
  • New bin/job check to validate configuration
  • Support setting a default time zone for recurring tasks

What's Changed

... (truncated)

Commits
  • 86f3d92 Bump solid_queue to 1.6.0
  • 2a479f6 Document how to update dynamic recurring tasks
  • 7f59932 Roll back transactions leaked by killed job threads in tests
  • 9c0d5d3 Reorganize the execution pools under SolidQueue::Pool
  • 30b92ca Move the fiber worker checks to Configuration
  • 6e27144 Extract a base class for the execution pools
  • 08e6098 Rescue only the code that runs with capacity reserved when posting
  • 000e8ba Report errors escaping the execution future
  • 5270cc8 Simplify worker initialization
  • 50468fa Start the fiber pool's reactor lazily on first use
  • Additional commits viewable in compare view

Updates solid_cable from 4.0.0 to 4.0.2

Release notes

Sourced from solid_cable's releases.

v4.0.2

What's Changed

Full Changelog: rails/solid_cable@v4.0.1...v4.0.2

v4.0.1

What's Changed

New Contributors

Full Changelog: rails/solid_cable@v4.0.0...v4.0.1

Commits
  • 4a41ec8 Version bump
  • f781e4d Reset retry counter on each successful poll (#84)
  • cf0695c Version bump
  • c968ba7 Reset reconnect_attempt after successfuly accessing the DB. (#82)
  • 5ea0f55 Update adapter to handle ActionCable adapterization in 8.2 (#80)
  • 89d34d7 Run ci against different rails versions (#79)
  • See full diff in compare view

Updates bootsnap from 1.24.6 to 1.25.0

Release notes

Sourced from bootsnap's releases.

v1.25.0

What's Changed

  • Improve YAML parsing cache to more efficiently handle Time, Date and DateTime.

  • Don't invalidate the compile cache when YJIT is toggled. YJIT is a runtime JIT and doesn't change the serialized instruction sequences that are cached, but enabling it (via --yjit, RUBYOPT, or RubyVM::YJIT.enable) adds a +YJIT marker to RUBY_DESCRIPTION ( +YJIT <token> on YJIT_SUPPORT builds), which is part of the cache key. This previously discarded the entire compile cache whenever YJIT was enabled at runtime but not at precompile time (or vice versa). The marker is now stripped before hashing.

  • Fix CompileCache::Native.fetch and .precompile reading a non-String path argument (e.g. a Pathname) with RSTRING_PTR. Regression from 1.24.0.

Full Changelog: rails/bootsnap@v1.24.6...v1.25.0

Changelog

Sourced from bootsnap's changelog.

1.25.0

  • Improve YAML parsing cache to more efficiently handle Time, Date and DateTime.

  • Don't invalidate the compile cache when YJIT is toggled. YJIT is a runtime JIT and doesn't change the serialized instruction sequences that are cached, but enabling it (via --yjit, RUBYOPT, or RubyVM::YJIT.enable) adds a +YJIT marker to RUBY_DESCRIPTION ( +YJIT <token> on YJIT_SUPPORT builds), which is part of the cache key. This previously discarded the entire compile cache whenever YJIT was enabled at runtime but not at precompile time (or vice versa). The marker is now stripped before hashing.

  • Fix CompileCache::Native.fetch and .precompile reading a non-String path argument (e.g. a Pathname) with RSTRING_PTR. Regression from 1.24.0.

Commits
  • e099ec7 Release 1.25.0
  • b694a11 Merge pull request #563 from stanhu/sh-ignore-yjit-in-compile-cache-key
  • 51898f9 Ignore YJIT status in the compile cache key
  • 1ad589b Merge pull request #560 from rails/hm-qnqlnylzkqkltqsz
  • 21fbd65 Merge pull request #561 from jeremy/fix-path-conversion-entry-points
  • 4898853 Convert the path argument in the frame that reads it
  • 8ee47c4 Add MessagePack::Bigint type
  • 49e3eb7 Replace Date Marshalling with recursive msgpack
  • 711fd0b Bump minimum msgpack to 1.5.0
  • 160fc10 Merge pull request #558 from viralpraxis/fix-yaml-cache-kwargs-mutation
  • Additional commits viewable in compare view

Updates thruster from 0.1.21 to 0.1.25

Changelog

Sourced from thruster's changelog.

v0.1.25 / 2026-08-11

  • Bypass all uncacheable requests (#142)

v0.1.24 / 2026-08-11

  • Use struct types as cache keys

v0.1.23 / 2026-07-16

  • Build with Go 1.26.5 (#140)

v0.1.22 / 2026-06-29

  • Build with Go 1.26.4
  • Exclude image types from compression (#137)
Commits
  • 343c415 Bump version
  • 0b8f646 Merge pull request #142 from basecamp/avoid-hits-from-uncacheable-requests
  • 9b084d4 Bypass all uncacheable requests
  • e38276c Bump version
  • 5a6ae0f Merge commit from fork
  • 71e703d Bump the github-actions group across 1 directory with 5 updates (#133)
  • 900411c Merge pull request #140 from rafafloresta/bump-go-1.26.5-security
  • 2eb7870 Bump Go to 1.26.5 to fix crypto/tls ECH de-anonymization (CVE-2026-42505)
  • 3acd601 Merge pull request #138 from basecamp/version-0.1.22
  • 43dfae9 Version 0.1.22
  • Additional commits viewable in compare view

Updates slack-ruby-client from 3.1.0 to 3.2.0

Changelog

Sourced from slack-ruby-client's changelog.

3.2.0 (2026/07/05)

Commits
  • 6595302 Preparing for release, 3.2.0.
  • 0acffec Merge pull request #578 from slack-ruby/automated-api-update
  • c7bbc73 Update API from slack-api-ref@38cb2f4 (2026-07-05)
  • 7552a74 Merge pull request #589 from dblock/fix-hash-inspect-format-drift
  • 253307e Render hash/array literals deterministically in generated specs
  • 1ff45ee Merge pull request #588 from dblock/fix-markdown-text-mutual-exclusion
  • 4e0cff4 Update CHANGELOG for #588
  • f8b12a5 Regenerate Web API from slack-api-ref@38cb2f40
  • 1d7b02c Fix text/markdown_text mutual exclusion in chat methods
  • 03ff0e6 Merge pull request #587 from slack-ruby/dependabot/github_actions/actions/che...
  • Additional commits viewable in compare view

Updates brakeman from 8.0.5 to 8.0.6

Release notes

Sourced from brakeman's releases.

8.0.6 - EOL Dates

Changelog

Sourced from brakeman's changelog.

8.0.6 - 2026-08-13

  • Fix EOL date for Rails 8.0 (yeaseul-kim)
  • Add EOL dates for Rails 8.1 and Ruby 4.0
  • Fix command injection false positives (Jacob Evelyn)
  • Fix unused variable warning (viralpraxis)
Commits
  • fffc483 Bump to 8.0.6
  • b7218fe Update CHANGES
  • c6be6cc Merge pull request #2034 from yeaseul-kim/fix-rails-8-0-eol-date
  • 4c191dd Fix EOL date for Rails 8.0
  • e7bda16 Merge pull request #2033 from presidentbeef/add-ruby-rails-eol-dates
  • dd4f0b9 Add EOL date for Ruby 4.0
  • 7ca100a Add EOL date for Rails 8.1
  • a53a456 Merge pull request #2022 from JacobEvelyn/main
  • bf3fdc9 Merge pull request #2030 from viralpraxis/fix-unusued-gem-release-date
  • 20f74ac Brakeman.ensure_latest: fix unsued release_date variable
  • Additional commits viewable in compare view

Updates selenium-webdriver from 4.45.0 to 4.47.0

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.47.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

... (truncated)

Changelog

Sourced from selenium-webdriver's changelog.

4.47.0 (2026-08-10)

  • Support CDP versions: v149, v150, v151
  • support WebDriver BiDi on Safari Preview and move #bidi onto Driver (#17729)
  • link generated BiDi elements to their spec definitions (#17781)
  • add objectOnly/preserveExtras/scalar-primitive BiDi schema signals (#17784)
  • construct the BiDi transport inside the domain from a connection (#17796)
  • route BiDiBridge navigation through the generated Protocol::BrowsingContext (#17785)
  • resolve spec runfiles via Bazel::Runfiles (#17810)
  • [build] standardize generated-file license and not to edit markers across generators (#17816)
  • validate nullable-constant BiDi params outbound (#17818)
  • [build] upgrade rules_ruby to 0.28.0 and drop vendored Bazel::Runfiles workaround (#17824)
  • [build] Merge vendor cddl files into shared BiDi schema and implement custom Firefox webExtension options (#17840)
  • [grid] honor client-advertised se:remoteUrl for reachable BiDi/CDP/VNC URLs (#17790)
  • tolerate and warn on missing required inbound BiDi fields, with SE_BIDI_STRICT to escalate (#17844)
  • remove deprecated FTP proxy support (#17846)
  • prevent CDP access with Firefox (#17849)
  • test matchers assert log entries by id and optional messages and match severity (#17848)
  • [bidi] Correct float/enum type fidelity in the shared schema and validate primitives outbound in Ruby (#17852)
  • [bidi] mark BiDi types extensible per spec and update Ruby handling (#17853)
  • raise typed WebDriver errors for BiDi from a generated error-code map (#17855)
  • allow pending test guards to require matching provided exception (#17859)
  • pass --enable-chrome-logs unless CHROME_LOG_FILE is set (#17858)
  • support custom vendor specific capabilities in options classes (#17862)
  • validate BiDi outbound ref fields against their declared type (#17861)
  • generate BiDi domain type accessors and union variant factories (#17865)
  • deprecate invalid Firefox profile code (#17871)
  • [build] Automated Browser Version Update with CDP (#17873)

4.46.0 (2026-07-10)

  • Support CDP versions: v148, v149, v150
  • trim whitespace around NO_PROXY entries (#17565)
  • add ClientConfig for HTTP client customization (#17699)
  • generate the BiDi protocol layer from the shared binding-neutral schema (#17731)
Commits
  • 9175ed9 [build] Prepare for release of selenium-4.47.0 (#17896)
  • a25afbb [build] Automated Browser Version Update with CDP (#17873)
  • 960abd2 [dotnet][java][js][rb] deprecate invalid Firefox profile code (#17871)
  • 5b1cde1 [rb] generate BiDi domain type accessors and union variant factories (#17865)
  • 014d72b [rb] fix tests and custom matchers to work with SE_DEBUG (#17863)
  • e0658c9 [rb] validate BiDi outbound ref fields against their declared type (#17861)
  • 0ad0c51 [rb] support custom vendor specific capabilities in options classes (#17862)
  • 10eeb94 [dotnet][java][py][rb] pass --enable-chrome-logs unless CHROME_LOG_FILE is se...
  • 4c6f3a5 [rb] allow pending test guards to require matching provided exception (#17859)
  • 89ad5bb [rb] raise typed WebDriver errors for BiDi from a generated error-code map (#...
  • Additional commits viewable in compare view

Updates sentry-ruby from 6.6.2 to 6.7.0

Changelog

Sourced from sentry-ruby's changelog.

6.7.0

New Features ✨

Bug Fixes 🐛

Rails

Other

  • (test) Kill threaded global workers before clearing Sentry globals by @​solnic in #2990
  • Isolate inherited hubs under hub_isolation_level = :fiber by @​SeanLF in #3036

Internal Changes 🔧

Commits
  • c39c42d release: 6.7.0
  • 0121462 ci: 🤖 Update pinned CI lockfiles (#3045)
  • 5abda56 ci: 🤖 Update pinned CI lockfiles (#3040)
  • e89d3bc fix: isolate inherited hubs under hub_isolation_level = :fiber (#3036)
  • 395aca9 chore(rails): AJ tracing convention compliance (#3031)
  • b02a915 ci: 🤖 Update pinned CI lockfiles (#3027)
  • d405668 fix: correct Scope extra parameter typo (#3023)
  • 3ddf4a9 feat(rails): support for solid queue (#2942)
  • 7ab412f feat: add config.hub_isolation_level for fiber-safe hub storage (Falcon/async...
  • b625f46 ci: 🤖 Update pinned CI lockfiles (#3019)
  • Additional commits viewable in compare view

Updates sentry-rails from 6.6.2 to 6.7.0

Changelog

Sourced from sentry-rails's changelog.

6.7.0

New Features ✨

Bug Fixes 🐛

Rails

Other

  • (test) Kill threaded global workers before clearing Sentry globals by @​solnic in #2990
  • Isolate inherited hubs under hub_isolation_level = :fiber by @​SeanLF in #3036

Internal Changes 🔧

Commits
  • c39c42d release: 6.7.0
  • 0121462 ci: 🤖 Update pinned CI lockfiles (#3045)
  • 9278dd4 fix(rails): guard execution context with send_default_pii (#3043)
  • 5abda56 ci: 🤖 Update pinned CI lockfiles (#3040)
  • d739a8d fix(rails): ensure Rails.error.set_context is not lost (#3024)
  • 395aca9 chore(rails): AJ tracing convention compliance (#3031)
  • b02a915 ci: 🤖 Update pinned CI lockfiles (#3027)
  • 9f70c7a fix(active_job): Consumer span op should be queue.process (#3021)
  • 3ddf4a9 feat(rails): support for solid queue (#2942)
  • 7ab412f feat: add config.hub_isolation_level for fiber-safe hub storage (Falcon/async...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the ruby-minor-and-patch group across 1 directory with 9 updates
b1e4bd4 
Bumps the ruby-minor-and-patch group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [solid_queue](https://github.com/rails/solid_queue) | `1.4.0` | `1.6.0` |
| [solid_cable](https://github.com/rails/solid_cable) | `4.0.0` | `4.0.2` |
| [bootsnap](https://github.com/rails/bootsnap) | `1.24.6` | `1.25.0` |
| [thruster](https://github.com/basecamp/thruster) | `0.1.21` | `0.1.25` |
| [slack-ruby-client](https://github.com/slack-ruby/slack-ruby-client) | `3.1.0` | `3.2.0` |
| [brakeman](https://github.com/presidentbeef/brakeman) | `8.0.5` | `8.0.6` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.45.0` | `4.47.0` |
| [sentry-ruby](https://github.com/getsentry/sentry-ruby) | `6.6.2` | `6.7.0` |



Updates `solid_queue` from 1.4.0 to 1.6.0
- [Release notes](https://github.com/rails/solid_queue/releases)
- [Commits](rails/solid_queue@v1.4.0...v1.6.0)

Updates `solid_cable` from 4.0.0 to 4.0.2
- [Release notes](https://github.com/rails/solid_cable/releases)
- [Commits](rails/solid_cable@v4.0.0...v4.0.2)

Updates `bootsnap` from 1.24.6 to 1.25.0
- [Release notes](https://github.com/rails/bootsnap/releases)
- [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md)
- [Commits](rails/bootsnap@v1.24.6...v1.25.0)

Updates `thruster` from 0.1.21 to 0.1.25
- [Changelog](https://github.com/basecamp/thruster/blob/main/CHANGELOG.md)
- [Commits](basecamp/thruster@v0.1.21...v0.1.25)

Updates `slack-ruby-client` from 3.1.0 to 3.2.0
- [Changelog](https://github.com/slack-ruby/slack-ruby-client/blob/master/CHANGELOG.md)
- [Commits](slack-ruby/slack-ruby-client@v3.1.0...v3.2.0)

Updates `brakeman` from 8.0.5 to 8.0.6
- [Release notes](https://github.com/presidentbeef/brakeman/releases)
- [Changelog](https://github.com/presidentbeef/brakeman/blob/main/CHANGES.md)
- [Commits](presidentbeef/brakeman@v8.0.5...v8.0.6)

Updates `selenium-webdriver` from 4.45.0 to 4.47.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](SeleniumHQ/selenium@selenium-4.45.0...selenium-4.47.0)

Updates `sentry-ruby` from 6.6.2 to 6.7.0
- [Release notes](https://github.com/getsentry/sentry-ruby/releases)
- [Changelog](https://github.com/getsentry/sentry-ruby/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-ruby@6.6.2...6.7.0)

Updates `sentry-rails` from 6.6.2 to 6.7.0
- [Release notes](https://github.com/getsentry/sentry-ruby/releases)
- [Changelog](https://github.com/getsentry/sentry-ruby/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-ruby@6.6.2...6.7.0)

---
updated-dependencies:
- dependency-name: solid_queue
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-and-patch
- dependency-name: solid_cable
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-minor-and-patch
- dependency-name: bootsnap
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-and-patch
- dependency-name: thruster
  dependency-version: 0.1.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-minor-and-patch
- dependency-name: slack-ruby-client
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-and-patch
- dependency-name: brakeman
  dependency-version: 8.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-minor-and-patch
- dependency-name: selenium-webdriver
  dependency-version: 4.47.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-and-patch
- dependency-name: sentry-ruby
  dependency-version: 6.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-and-patch
- dependency-name: sentry-rails
  dependency-version: 6.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Aug 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants