Skip to content

Bump the ruby-dependencies group across 1 directory with 32 updates - #334

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/ruby-dependencies-3216db7c8f
Open

Bump the ruby-dependencies group across 1 directory with 32 updates#334
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/ruby-dependencies-3216db7c8f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the ruby-dependencies group with 30 updates in the / directory:

Package From To
sqlite3 1.6.1 2.9.6
puma 6.6.1 8.0.2
turbo-rails 1.4.0 2.0.23
jbuilder 2.11.5 2.15.1
config 4.1.0 5.6.1
google-apis-analyticsdata_v1beta 0.32.0 0.41.0
googleauth 1.3.0 1.17.3
aws-sdk-core 3.243.0 3.254.1
devise 5.0.3 5.0.4
jquery-rails 4.5.1 4.6.1
aws-sdk-rails 3.7.1 5.2.0
aws-sdk-s3 1.216.0 1.229.0
rails-html-sanitizer 1.7.0 1.7.1
sprockets 3.7.2 4.3.0
rubyzip 2.3.2 3.5.0
ffi 1.15.5 1.17.4
nokogiri 1.18.10 1.19.4
rack 2.2.23 3.2.7
globalid 1.3.0 1.4.0
net-imap 0.5.15 0.6.6
json 2.19.3 2.21.2
sentry-ruby 5.28.1 6.7.0
sentry-rails 5.28.1 6.7.0
pg 1.4.6 1.6.3
byebug 11.1.3 13.0.0
capybara 3.38.0 3.40.0
rspec-rails 6.0.4 8.0.4
web-console 4.2.0 4.2.1
listen 3.8.0 3.10.0
spring 4.1.1 4.7.0

Updates sqlite3 from 1.6.1 to 2.9.6

Release notes

Sourced from sqlite3's releases.

2.9.6 / 2026-08-11

Security / Stability

  • Fix a garbage collection bug where the argument array passed to a custom aggregate function's step was not visible to the GC, so arguments could be collected mid-conversion when the aggregate takes two or more arguments, corrupting the values passed to step or crashing the process. See GHSA-mwm8-39rw-8826 for more information. #733 @​jeremy

Fixed

  • Fix a leak where custom aggregate handler instances were never released, so a connection accumulated one instance per GROUP BY group per query for its lifetime. #722 @​djmb
  • Fix GC compaction issues with custom functions, aggregates, collations, #trace and #authorizer=. These callbacks were registered with sqlite by passing a raw Ruby object pointer as user data; keeping the object reachable prevented collection but not relocation, after which sqlite held a stale address and the next call could raise NoMethodError, return a wrong result, or segfault. Affects applications that call GC.compact or run with GC.auto_compact = true. The equivalent issue in #busy_handler was fixed in #466. #723 @​djmb
  • Fix the private methods Database#open_v2 and #open16 silently replacing a live connection and leaking the previous connection handle when invoked via send on an open database. They now raise SQLite3::Exception. #729 @​flavorjones
  • Fix TEXT values containing an embedded NUL byte being truncated at the first NUL when passed as arguments to functions created with Database#define_function. #730 @​flavorjones
  • Fix an exception raised inside a Database#define_function block leaving the connection's sqlite mutex held, which deadlocked any other thread that later used the connection. The exception now propagates to the caller and the connection remains usable. #731 @​flavorjones
  • Database.new now raises ArgumentError when the filename or VFS name contains an embedded NUL byte (or an embedded 0x0000 code unit in a UTF-16 filename), instead of silently opening a path truncated at the NUL. #732 @​flavorjones

Improved

  • When Database.new fails to open the database file, the underlying sqlite3 connection handle is now closed immediately instead of waiting for the garbage collector to clean it up. #719 @​katafrakt
d8b1f7d23efd7abac285775a9566562fc7debfef79d594e3a20354406fb7907c  gems/sqlite3-2.9.6-aarch64-linux-gnu.gem
3579e1c98cdc7ff5c3722847bb63ed4e1efb7ff675cb5e1e48ef2d4da5fb3bc9  gems/sqlite3-2.9.6-aarch64-linux-musl.gem
33541500e3615da02afe54a9cc38b17a6985d3cf9d8b76d6d0a83002f114e7ec  gems/sqlite3-2.9.6-arm-linux-gnu.gem
c5490af48bb228fefa54314e9541375c3907e70f8109f3881b5ff97e1c93ae33  gems/sqlite3-2.9.6-arm-linux-musl.gem
849b5d7f795e60fe25076d62c72dd722beb45b3850b516ad978d60ee848ec15b  gems/sqlite3-2.9.6-arm64-darwin.gem
1f2b88f417fd0a8c1d5ef19c7e817d8b9c61bee6e33b6b36255fb6e40148e6f8  gems/sqlite3-2.9.6-x64-mingw-ucrt.gem
fbaa9f46f9708f57dd8a459b37fc269f9613e0cacf1547df01aa439cc45c20c0  gems/sqlite3-2.9.6-x86-linux-gnu.gem
6715026fbb5530e810b28ef43b9c4f84cd3c991f67b9d808a31fcc32b847abbd  gems/sqlite3-2.9.6-x86-linux-musl.gem
b5842fea77781c14da03fa7bc0feb82db03a69e135affcb6f5399cbd2797a5f3  gems/sqlite3-2.9.6-x86_64-darwin.gem
613188ce02f614126ddbc38c5e217ccffd6306d0dcd9adca9764547aa890a634  gems/sqlite3-2.9.6-x86_64-linux-gnu.gem
d493b11818a3573387a1d56e1ee8fa00da23a683a7a1cc063e7a0feeed843abf  gems/sqlite3-2.9.6-x86_64-linux-musl.gem
956fe606956420d04ac7157d3ace620c8caba2135b2e05c76e483493da24d08e  gems/sqlite3-2.9.6.gem

2.9.5 / 2026-06-07

Dependencies

Security / Stability

... (truncated)

Changelog

Sourced from sqlite3's changelog.

2.9.6 / 2026-08-11

Security / Stability

  • Fix a garbage collection bug where the argument array passed to a custom aggregate function's step was not visible to the GC, so arguments could be collected mid-conversion when the aggregate takes two or more arguments, corrupting the values passed to step or crashing the process. See GHSA-mwm8-39rw-8826 for more information. #733 @​jeremy

Fixed

  • Fix a leak where custom aggregate handler instances were never released, so a connection accumulated one instance per GROUP BY group per query for its lifetime. #722 @​djmb
  • Fix GC compaction issues with custom functions, aggregates, collations, #trace and #authorizer=. These callbacks were registered with sqlite by passing a raw Ruby object pointer as user data; keeping the object reachable prevented collection but not relocation, after which sqlite held a stale address and the next call could raise NoMethodError, return a wrong result, or segfault. Affects applications that call GC.compact or run with GC.auto_compact = true. The equivalent issue in #busy_handler was fixed in #466. #723 @​djmb
  • Fix the private methods Database#open_v2 and #open16 silently replacing a live connection and leaking the previous connection handle when invoked via send on an open database. They now raise SQLite3::Exception. #729 @​flavorjones
  • Fix TEXT values containing an embedded NUL byte being truncated at the first NUL when passed as arguments to functions created with Database#define_function. #730 @​flavorjones
  • Fix an exception raised inside a Database#define_function block leaving the connection's sqlite mutex held, which deadlocked any other thread that later used the connection. The exception now propagates to the caller and the connection remains usable. #731 @​flavorjones
  • Database.new now raises ArgumentError when the filename or VFS name contains an embedded NUL byte (or an embedded 0x0000 code unit in a UTF-16 filename), instead of silently opening a path truncated at the NUL. #732 @​flavorjones

Improved

  • When Database.new fails to open the database file, the underlying sqlite3 connection handle is now closed immediately instead of waiting for the garbage collector to clean it up. #719 @​katafrakt

2.9.5 / 2026-06-07

Dependencies

Security / Stability

2.9.4 / 2026-05-05

2.9.3 / 2026-04-15

2.9.2 / 2026-03-15

2.9.1 / 2026-02-28

... (truncated)

Commits
  • a52dc0d version bump to v2.9.6
  • cc5ac0c Root the aggregate argument array so GC cannot free live values (GHSA-mwm8-39...
  • abcb0f6 Reject database filenames and VFS names containing NUL (#732)
  • 1d86b7a Raise when open_v2 or open16 is called on an open database (#729)
  • 7230171 Stop a raise inside a UDF block from deadlocking other threads (#731)
  • 2677f9a Pass TEXT values containing embedded NULs to UDFs intact (#730)
  • 3de8f6e doc: update CHANGELOG.md
  • ac6bd2f Release aggregate instances when sqlite finishes with them (#722)
  • 32460e9 Stop sqlite calling into moved Ruby objects (#723)
  • f600993 build(deps-dev): update rubocop-minitest requirement (#727)
  • Additional commits viewable in compare view

Updates puma from 6.6.1 to 8.0.2

Release notes

Sourced from puma's releases.

v8.0.2

  • Bugfixes
    • Anchor PROXY protocol v1 regex to string start and enforce max line length to prevent injection via crafted request bodies (#3944)
    • Parse PROXY protocol header only on the first request per connection to prevent spoofing on keep-alive connections (#3944)

Security advisories

v8.0.1

  • Bugfixes

    • Fix prune_bundler stripping user-configured BUNDLE_* env vars (e.g. BUNDLE_WITHOUT) on re-exec, which caused workers to crash on boot (#3929)

  • Performance

    • Use blocks for debug logging to avoid creating log messages when debug is disabled (#3920)

  • Docs

    • Fix incorrect hook names in gRPC docs (#3923)
    • Reword v8 upgrade guide IPv6 bullet for clarity (#3928)

v8.0.0 - Into the Arena

Read our Version 8 Upgrade Guide.

  • Features

    • Add env["puma.mark_as_io_bound"] API and max_io_threads config to allow IO-bound requests to exceed the thread pool max, enabling better handling of mixed workloads (#3816, #3894)
    • Add single and cluster DSL hooks for mode-specific configuration (#3621)
    • Add on_force option to shutdown_debug to only dump thread backtraces on forced (non-graceful) shutdown (#3671)
    • Add API to dynamically update min and max thread counts at runtime via update_thread_pool_min_max and ServerPluginControl (#3658)
    • Use SIGPWR for thread backtrace dumps on Linux/JRuby where SIGINFO is unavailable (#3829)

  • Bugfixes

    • Fix phased restart for fork_worker to avoid forking from stale worker 0 when it has been replaced (#3853)

  • Performance

    • JRuby HTTP parser improvements: pre-allocated header keys, perfect hash lookup, reduced memory copies (#3838)
    • Cache downcased header key in str_headers to avoid redundant String#downcase calls, reducing allocations by ~50% per response (#3874)

  • Refactor

    • Collect env processing into dedicated client_env.rb module (#3582)
    • Move event to default configuration (#3872)

  • Docs

    • Add gRPC guide for configuring gRPC lifecycle hooks in clustered mode (#3885)
    • Add 7.0 upgrade guide, move 5.0/6.0 upgrade guides to docs directory (#3900)
    • Correct default values for persistent_timeout and worker_boot_timeout in DSL docs (#3912)
    • Add file descriptor limit warning in test helper for contributors (#3893)

... (truncated)

Changelog

Sourced from puma's changelog.

8.0.2 / 2026-05-27

  • Bugfixes
    • Anchor PROXY protocol v1 regex to string start and enforce max line length to prevent injection via crafted request bodies (#3944)
    • Parse PROXY protocol header only on the first request per connection to prevent spoofing on keep-alive connections (#3944)

8.0.1 / 2026-04-27

  • Bugfixes

    • Fix prune_bundler stripping user-configured BUNDLE_* env vars (e.g. BUNDLE_WITHOUT) on re-exec, which caused workers to crash on boot (#3929)

  • Performance

    • Use blocks for debug logging to avoid creating log messages when debug is disabled (#3920)

  • Docs

    • Fix incorrect hook names in gRPC docs (#3923)
    • Reword v8 upgrade guide IPv6 bullet for clarity (#3928)

8.0.0 / 2026-03-27

  • Features

    • Add env["puma.mark_as_io_bound"] API and max_io_threads config to allow IO-bound requests to exceed the thread pool max, enabling better handling of mixed workloads (#3816, #3894)
    • Add single and cluster DSL hooks for mode-specific configuration (#3621)
    • Add on_force option to shutdown_debug to only dump thread backtraces on forced (non-graceful) shutdown (#3671)
    • Add API to dynamically update min and max thread counts at runtime via update_thread_pool_min_max and ServerPluginControl (#3658)
    • Use SIGPWR for thread backtrace dumps on Linux/JRuby where SIGINFO is unavailable (#3829)

  • Bugfixes

    • Fix phased restart for fork_worker to avoid forking from stale worker 0 when it has been replaced (#3853)

  • Performance

    • JRuby HTTP parser improvements: pre-allocated header keys, perfect hash lookup, reduced memory copies (#3838)
    • Cache downcased header key in str_headers to avoid redundant String#downcase calls, reducing allocations by ~50% per response (#3874)

  • Refactor

    • Collect env processing into dedicated client_env.rb module (#3582)
    • Move event to default configuration (#3872)

  • Docs

    • Add gRPC guide for configuring gRPC lifecycle hooks in clustered mode (#3885)
    • Add 7.0 upgrade guide, move 5.0/6.0 upgrade guides to docs directory (#3900)
    • Correct default values for persistent_timeout and worker_boot_timeout in DSL docs (#3912)
    • Add file descriptor limit warning in test helper for contributors (#3893)

  • Breaking changes

    • Default production bind address changed from 0.0.0.0 to :: (IPv6) when a non-loopback IPv6 interface is available; falls back to 0.0.0.0 if IPv6 is unavailable (#3847)

7.2.1 / 2026-05-27

  • Bugfixes

... (truncated)

Commits

Updates turbo-rails from 1.4.0 to 2.0.23

Release notes

Sourced from turbo-rails's releases.

v2.0.23

Updates the bundled JS to freshen stale dependencies from the previous release.

Full Changelog: hotwired/turbo-rails@v2.0.22...v2.0.23

v2.0.22

What's Changed

Full Changelog: hotwired/turbo-rails@v2.0.21...v2.0.22

v2.0.21

What's Changed

New Contributors

Full Changelog: hotwired/turbo-rails@v2.0.20...v2.0.21

v2.0.20

Full Changelog: hotwired/turbo-rails@v2.0.19...v2.0.20

v2.0.19

Full Changelog: hotwired/turbo-rails@v2.0.17...v2.0.19

v2.0.17

What's Changed

... (truncated)

Commits
  • 435135b Bump version
  • 22701f1 @​hotwired/turbo-rails v8.0.23
  • 27030b9 Bump version
  • 52cde05 @​hotwired/turbo-rails v8.0.22
  • e511fb2 Bump version
  • 99dc9c5 @​hotwired/turbo-rails v8.0.20
  • c2cd99f v8.0.21
  • 31c78af Respect broadcast suppressions on before/after actions (#770)
  • 16f7613 Only return messages produced by block in capture_turbo_stream_broadcasts
  • dda27a8 Restrict tests to minitest<6
  • Additional commits viewable in compare view

Updates jbuilder from 2.11.5 to 2.15.1

Release notes

Sourced from jbuilder's releases.

v2.15.1

What's Changed

New Contributors

Full Changelog: rails/jbuilder@v2.15.0...v2.15.1

v2.15.0

What's Changed

New Contributors

Full Changelog: rails/jbuilder@v2.14.1...v2.15.0

v2.14.1

What's Changed

New Contributors

Full Changelog: rails/jbuilder@v2.14.0...v2.14.1

v2.14.0

What's Changed

... (truncated)

Commits
  • 31eb6e9 Prepare for 2.15.1
  • 154b0fe Merge pull request #617 from rails/rm-fix-616
  • d3e763b Fix partial for Active Model when extra locals are passed in
  • 018083d Prepare for 2.15.0
  • 72cf067 Update devcontainer image to Ruby 4.0.4 and add devcontainer-lock.json
  • d35a962 Merge pull request #615 from taketo1113/ci-rails8.1-ruby4.0
  • cc42e7e CI: Add Rails 8.1 & Ruby 4.0 to CI Matrix
  • cd7482e Merge pull request #613 from affinity/moberegger/fix-inline-partial-locals-be
  • 58283a0 Merge pull request #612 from affinity/moberegger/optimize-_map_collection
  • 09ca3e1 Merge pull request #603 from taketo1113/update-rack-unprocessable_content
  • Additional commits viewable in compare view

Updates config from 4.1.0 to 5.6.1

Release notes

Sourced from config's releases.

5.6.1

What's Changed

Full Changelog: rubyconfig/config@5.6.0...5.6.1

5.6.0

What's Changed

Full Changelog: rubyconfig/config@5.5.2...5.6.0

5.5.2

What's Changed

New Contributors

Full Changelog: rubyconfig/config@5.5.0...5.5.2

5.5.0

What's Changed

New Contributors

Full Changelog: rubyconfig/config@5.4.0...5.5.0

5.4.0

New features

  • Add configuration option environment to override the use of Rails.env (#356)

5.3.0

  • Remove dry-validation from dependencies (#333)

5.2.0

New features

  • Allow to use custom filename && directory name to store configs (#341)

Bug fixes

... (truncated)

Changelog

Sourced from config's changelog.

5.6.1

  • fix(security): replace IO.read with File.read #378

5.6.0

  • Added extra_sources in initializer (#366)

5.5.2

  • Fix warning: ostruct was loaded from the standard library with Ruby 3.3.5 and 3.4+ (#363)

5.5.1

Documentation

  • Fix funding_url to funding_uri in gemspec (#361)

5.5.0

New features

  • Allow arrays to be passed through env variables (#354)

Documentation

  • Use funding_url rather than post_install_message (#360)
  • Fix typos in the tests and documentation (#359)

5.4.0

New features

  • Add configuration option environment to override the use of Rails.env (#356)

5.3.0

  • Remove dry-validation from dependencies (#333)

5.2.0

New features

  • Allow to use custom filename && directory name to store configs (#341)

Bug fixes

  • Prevent name collision with private methods from ancestors (#351)

5.1.0

... (truncated)

Commits
  • 8b6ffe6 release: 5.6.1
  • d639f9d ci: limit workflow permissions (#379)
  • e0bf18f fix(security): replace IO.read with File.read (#378)
  • 263e66a test: bump puma in rails 5.2 test app to fix security warning (#377)
  • c833d19 release: 5.6.0
  • 4dc0f3e ci: fix jruby rails >= 7.2 (#376)
  • 1f17cd8 feat: added extra sources in initializer (#366)
  • 97b3e8c ci: add rails 7.2 and 8.0 to the test matrix and bump some older dependencies...
  • 1b5581d ci: add Ruby 3.4 to the test matrix (#369)
  • a4c978f ci: remove unnecessary ubuntu packages installation (#374)
  • Additional commits viewable in compare view

Updates google-apis-analyticsdata_v1beta from 0.32.0 to 0.41.0

Changelog

Sourced from google-apis-analyticsdata_v1beta's changelog.

v0.41.0 (2026-06-14)

  • Regenerated using generator version 0.19.0

v0.40.0 (2025-05-04)

  • Regenerated using generator version 0.17.0

v0.39.0 (2024-11-24)

  • Regenerated from discovery document revision 20241117

v0.38.0 (2024-09-01)

  • Regenerated from discovery document revision 20240825

v0.37.0 (2024-08-04)

  • Regenerated from discovery document revision 20240731
  • Regenerated using generator version 0.15.1

v0.36.0 (2024-05-19)

  • Regenerated from discovery document revision 20240512
  • Regenerated using generator version 0.15.0

v0.35.0 (2024-02-24)

  • Regenerated using generator version 0.14.0

v0.34.0 (2024-02-04)

  • Regenerated from discovery document revision 20240128
  • Regenerated using generator version 0.13.1

v0.33.0 (2024-01-22)

  • Regenerated using generator version 0.13.0
Commits

Updates googleauth from 1.3.0 to 1.17.3

Release notes

Sourced from googleauth's releases.

googleauth: v1.17.3

1.17.3 (2026-07-27)

Bug Fixes

  • Add option validation and error handling to ServiceAccountCredentials.make_creds (#588) (3da9927), refs #482 #544

googleauth: v1.17.2

1.17.2 (2026-07-23)

Bug Fixes

  • return auth header from source_credentials in ImpersonatedServiceAccountCredentials (#586)

googleauth: v1.17.1

1.17.1 (2026-06-08)

Bug Fixes

googleauth: v1.17.0

1.17.0 (2026-06-04)

Features

  • port googleauth from multi_json to standard lib json (#575) (5fe4ed9), closes #572

googleauth: v1.16.2

1.16.2 (2026-02-26)

Bug Fixes

  • initialize the JWT credentials without JSON roundtrip (#564)
  • return response body from revoke! for logging pipeline (#562)

googleauth: v1.16.1

1.16.1 (2026-01-15)

Bug Fixes

  • restore support for JSON keys missing 'type' field (#558)

googleauth: v1.16.0

1.16.0 (2025-11-21)

Features

  • Add ADC support for impersonated credentials (#547)

Bug Fixes

... (truncated)

Changelog

Sourced from googleauth's changelog.

1.17.3 (2026-07-27)

Bug Fixes

  • Add option validation and error handling to ServiceAccountCredentials.make_creds (#588) (3da9927), refs #482 #544

1.17.2 (2026-07-23)

Bug Fixes

  • return auth header from source_credentials in ImpersonatedServiceAccountCredentials (#586)

1.17.1 (2026-06-08)

Bug Fixes

1.17.0 (2026-06-04)

Features

  • port googleauth from multi_json to standard lib json (#575) (5fe4ed9), closes #572

1.16.2 (2026-02-26)

Bug Fixes

  • initialize the JWT credentials without JSON roundtrip (#564)
  • return response body from revoke! for logging pipeline (#562)

1.16.1 (2026-01-15)

Bug Fixes

  • restore support for JSON keys missing 'type' field (#558)

1.16.0 (2025-11-21)

Features

  • Add ADC support for impersonated credentials (#547)

Bug Fixes

  • Include security warning in ExternalAccount and ImpersonatedServiceAccount credentials (#551)

1.15.1 (2025-10-14)

Bug Fixes

... (truncated)

Commits
  • 93c9892 chore(main): release googleauth 1.17.3 (#590)
  • 3da9927 fix(credentials): Add option validation and error handling to ServiceAccountC...

@dependabot @github

dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: ruby. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/bundler/ruby-dependencies-3216db7c8f branch from d0e5f6d to 1422df9 Compare August 7, 2026 12:00
@dependabot
Bump the ruby-dependencies group across 1 directory with 32 updates
e4bc61b 
Bumps the ruby-dependencies group with 30 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [sqlite3](https://github.com/sparklemotion/sqlite3-ruby) | `1.6.1` | `2.9.6` |
| [puma](https://github.com/puma/puma) | `6.6.1` | `8.0.2` |
| [turbo-rails](https://github.com/hotwired/turbo-rails) | `1.4.0` | `2.0.23` |
| [jbuilder](https://github.com/rails/jbuilder) | `2.11.5` | `2.15.1` |
| [config](https://github.com/rubyconfig/config) | `4.1.0` | `5.6.1` |
| [google-apis-analyticsdata_v1beta](https://github.com/googleapis/google-api-ruby-client) | `0.32.0` | `0.41.0` |
| [googleauth](https://github.com/googleapis/google-auth-library-ruby) | `1.3.0` | `1.17.3` |
| [aws-sdk-core](https://github.com/aws/aws-sdk-ruby) | `3.243.0` | `3.254.1` |
| [devise](https://github.com/heartcombo/devise) | `5.0.3` | `5.0.4` |
| [jquery-rails](https://github.com/rails/jquery-rails) | `4.5.1` | `4.6.1` |
| [aws-sdk-rails](https://github.com/aws/aws-sdk-rails) | `3.7.1` | `5.2.0` |
| [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) | `1.216.0` | `1.229.0` |
| [rails-html-sanitizer](https://github.com/rails/rails-html-sanitizer) | `1.7.0` | `1.7.1` |
| [sprockets](https://github.com/rails/sprockets) | `3.7.2` | `4.3.0` |
| [rubyzip](https://github.com/rubyzip/rubyzip) | `2.3.2` | `3.5.0` |
| [ffi](https://github.com/ffi/ffi) | `1.15.5` | `1.17.4` |
| [nokogiri](https://github.com/sparklemotion/nokogiri) | `1.18.10` | `1.19.4` |
| [rack](https://github.com/rack/rack) | `2.2.23` | `3.2.7` |
| [globalid](https://github.com/rails/globalid) | `1.3.0` | `1.4.0` |
| [net-imap](https://github.com/ruby/net-imap) | `0.5.15` | `0.6.6` |
| [json](https://github.com/ruby/json) | `2.19.3` | `2.21.2` |
| [sentry-ruby](https://github.com/getsentry/sentry-ruby) | `5.28.1` | `6.7.0` |
| [sentry-rails](https://github.com/getsentry/sentry-ruby) | `5.28.1` | `6.7.0` |
| [pg](https://github.com/ged/ruby-pg) | `1.4.6` | `1.6.3` |
| [byebug](https://github.com/deivid-rodriguez/byebug) | `11.1.3` | `13.0.0` |
| [capybara](https://github.com/teamcapybara/capybara) | `3.38.0` | `3.40.0` |
| [rspec-rails](https://github.com/rspec/rspec-rails) | `6.0.4` | `8.0.4` |
| [web-console](https://github.com/rails/web-console) | `4.2.0` | `4.2.1` |
| [listen](https://github.com/guard/listen) | `3.8.0` | `3.10.0` |
| [spring](https://github.com/rails/spring) | `4.1.1` | `4.7.0` |



Updates `sqlite3` from 1.6.1 to 2.9.6
- [Release notes](https://github.com/sparklemotion/sqlite3-ruby/releases)
- [Changelog](https://github.com/sparklemotion/sqlite3-ruby/blob/main/CHANGELOG.md)
- [Commits](sparklemotion/sqlite3-ruby@v1.6.1...v2.9.6)

Updates `puma` from 6.6.1 to 8.0.2
- [Release notes](https://github.com/puma/puma/releases)
- [Changelog](https://github.com/puma/puma/blob/main/History.md)
- [Commits](puma/puma@v6.6.1...v8.0.2)

Updates `turbo-rails` from 1.4.0 to 2.0.23
- [Release notes](https://github.com/hotwired/turbo-rails/releases)
- [Commits](hotwired/turbo-rails@v1.4.0...v2.0.23)

Updates `jbuilder` from 2.11.5 to 2.15.1
- [Release notes](https://github.com/rails/jbuilder/releases)
- [Commits](rails/jbuilder@v2.11.5...v2.15.1)

Updates `config` from 4.1.0 to 5.6.1
- [Release notes](https://github.com/rubyconfig/config/releases)
- [Changelog](https://github.com/rubyconfig/config/blob/master/CHANGELOG.md)
- [Commits](rubyconfig/config@4.1.0...5.6.1)

Updates `google-apis-analyticsdata_v1beta` from 0.32.0 to 0.41.0
- [Release notes](https://github.com/googleapis/google-api-ruby-client/releases)
- [Changelog](https://github.com/googleapis/google-api-ruby-client/blob/main/generated/google-apis-analyticsdata_v1beta/CHANGELOG.md)
- [Commits](googleapis/google-api-ruby-client@0.32.0...0.41.0)

Updates `googleauth` from 1.3.0 to 1.17.3
- [Release notes](https://github.com/googleapis/google-auth-library-ruby/releases)
- [Changelog](https://github.com/googleapis/google-auth-library-ruby/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-auth-library-ruby@googleauth/v1.3.0...googleauth/v1.17.3)

Updates `aws-sdk-core` from 3.243.0 to 3.254.1
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-core/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `googleauth` from 1.3.0 to 1.17.3
- [Release notes](https://github.com/googleapis/google-auth-library-ruby/releases)
- [Changelog](https://github.com/googleapis/google-auth-library-ruby/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-auth-library-ruby@googleauth/v1.3.0...googleauth/v1.17.3)

Updates `devise` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/heartcombo/devise/releases)
- [Changelog](https://github.com/heartcombo/devise/blob/main/CHANGELOG.md)
- [Commits](heartcombo/devise@v5.0.3...v5.0.4)

Updates `jquery-rails` from 4.5.1 to 4.6.1
- [Changelog](https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md)
- [Commits](rails/jquery-rails@v4.5.1...v4.6.1)

Updates `aws-sdk-rails` from 3.7.1 to 5.2.0
- [Release notes](https://github.com/aws/aws-sdk-rails/releases)
- [Changelog](https://github.com/aws/aws-sdk-rails/blob/main/CHANGELOG.md)
- [Commits](aws/aws-sdk-rails@v3.7.1...v5.2.0)

Updates `aws-sdk-core` from 3.243.0 to 3.254.1
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-core/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `aws-sdk-s3` from 1.216.0 to 1.229.0
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `rails-html-sanitizer` from 1.7.0 to 1.7.1
- [Release notes](https://github.com/rails/rails-html-sanitizer/releases)
- [Changelog](https://github.com/rails/rails-html-sanitizer/blob/main/CHANGELOG.md)
- [Commits](rails/rails-html-sanitizer@v1.7.0...v1.7.1)

Updates `sprockets` from 3.7.2 to 4.3.0
- [Release notes](https://github.com/rails/sprockets/releases)
- [Changelog](https://github.com/rails/sprockets/blob/main/CHANGELOG.md)
- [Commits](rails/sprockets@v3.7.2...v4.3.0)

Updates `rubyzip` from 2.3.2 to 3.5.0
- [Release notes](https://github.com/rubyzip/rubyzip/releases)
- [Changelog](https://github.com/rubyzip/rubyzip/blob/main/Changelog.md)
- [Commits](rubyzip/rubyzip@v2.3.2...v3.5.0)

Updates `ffi` from 1.15.5 to 1.17.4
- [Changelog](https://github.com/ffi/ffi/blob/master/CHANGELOG.md)
- [Commits](ffi/ffi@v1.15.5...v1.17.4)

Updates `nokogiri` from 1.18.10 to 1.19.4
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](sparklemotion/nokogiri@v1.18.10...v1.19.4)

Updates `loofah` from 2.25.1 to 2.25.2
- [Release notes](https://github.com/flavorjones/loofah/releases)
- [Changelog](https://github.com/flavorjones/loofah/blob/main/CHANGELOG.md)
- [Commits](flavorjones/loofah@v2.25.1...v2.25.2)

Updates `rack` from 2.2.23 to 3.2.7
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@v2.2.23...v3.2.7)

Updates `globalid` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/rails/globalid/releases)
- [Commits](rails/globalid@v1.3.0...v1.4.0)

Updates `net-imap` from 0.5.15 to 0.6.6
- [Release notes](https://github.com/ruby/net-imap/releases)
- [Commits](ruby/net-imap@v0.5.15...v0.6.6)

Updates `json` from 2.19.3 to 2.21.2
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](ruby/json@v2.19.3...v2.21.2)

Updates `sentry-ruby` from 5.28.1 to 6.7.0
- [Release notes](https://github.com/getsentry/sentry-ruby/releases)
- [Changelog](https://github.com/getsentry/sentry-ruby/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-ruby@5.28.1...6.7.0)

Updates `sentry-rails` from 5.28.1 to 6.7.0
- [Release notes](https://github.com/getsentry/sentry-ruby/releases)
- [Changelog](https://github.com/getsentry/sentry-ruby/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-ruby@5.28.1...6.7.0)

Updates `sentry-rails` from 5.28.1 to 6.7.0
- [Release notes](https://github.com/getsentry/sentry-ruby/releases)
- [Changelog](https://github.com/getsentry/sentry-ruby/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-ruby@5.28.1...6.7.0)

Updates `pg` from 1.4.6 to 1.6.3
- [Changelog](https://github.com/ged/ruby-pg/blob/master/CHANGELOG.md)
- [Commits](ged/ruby-pg@v1.4.6...v1.6.3)

Updates `byebug` from 11.1.3 to 13.0.0
- [Release notes](https://github.com/deivid-rodriguez/byebug/releases)
- [Changelog](https://github.com/deivid-rodriguez/byebug/blob/main/CHANGELOG.md)
- [Commits](deivid-rodriguez/byebug@v11.1.3...v13.0.0)

Updates `capybara` from 3.38.0 to 3.40.0
- [Changelog](https://github.com/teamcapybara/capybara/blob/master/History.md)
- [Commits](teamcapybara/capybara@3.38.0...3.40.0)

Updates `selenium-webdriver` from 4.8.1 to 4.47.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](SeleniumHQ/selenium@selenium-4.8.1...selenium-4.47.0)

Updates `rspec-rails` from 6.0.4 to 8.0.4
- [Changelog](https://github.com/rspec/rspec-rails/blob/main/Changelog.md)
- [Commits](rspec/rspec-rails@v6.0.4...v8.0.4)

Updates `web-console` from 4.2.0 to 4.2.1
- [Release notes](https://github.com/rails/web-console/releases)
- [Changelog](https://github.com/rails/web-console/blob/main/CHANGELOG.markdown)
- [Commits](rails/web-console@v4.2.0...v4.2.1)

Updates `listen` from 3.8.0 to 3.10.0
- [Release notes](https://github.com/guard/listen/releases)
- [Commits](guard/listen@v3.8.0...v3.10.0)

Updates `spring` from 4.1.1 to 4.7.0
- [Release notes](https://github.com/rails/spring/releases)
- [Changelog](https://github.com/rails/spring/blob/main/CHANGELOG.md)
- [Commits](rails/spring@v4.1.1...v4.7.0)

---
updated-dependencies:
- dependency-name: aws-sdk-core
  dependency-version: 3.254.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-dependencies
- dependency-name: aws-sdk-core
  dependency-version: 3.254.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-dependencies
- dependency-name: aws-sdk-rails
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-dependencies
- dependency-name: aws-sdk-s3
  dependency-version: 1.228.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-dependencies
- dependency-name: byebug
  dependency-version: 13.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: ruby-dependencies
- dependency-name: capybara
  dependency-version: 3.40.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-dependencies
- dependency-name: config
  dependency-version: 5.6.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-dependencies
- dependency-name: devise
  dependency-version: 5.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-dependencies
- dependency-name: ffi
  dependency-version: 1.17.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-dependencies
- dependency-name: globalid
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-dependencies
- dependency-name: google-apis-analyticsdata_v1beta
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-dependencies
- dependency-name: googleauth
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-dependencies
- dependency-name: googleauth
  dependency-version: 1.17.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-dependencies
- dependency-name: jbuilder
  dependency-version: 2.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-dependencies
- dependency-name: jquery-rails
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-dependencies
- dependency-name: json
  dependency-version: 2.21.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-dependencies
- dependency-name: listen
  dependency-version: 3.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-dependencies
- dependency-name: loofah
  dependency-version: 2.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-dependencies
- dependency-name: net-imap
  dependency-version: 0.6.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-dependencies
- dependency-name: nokogiri
  dependency-version: 1.19.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-dependencies
- dependency-name: pg
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-dependencies
- dependency-name: puma
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-dependencies
- dependency-name: rack
  dependency-version: 3.2.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-dependencies
- dependency-name: rails-html-sanitizer
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-dependencies
- dependency-name: rspec-rails
  dependency-version: 8.0.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: ruby-dependencies
- dependency-name: rubyzip
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-dependencies
- dependency-name: selenium-webdriver
  dependency-version: 4.46.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-dependencies
- dependency-name: sentry-rails
  dependency-version: 6.6.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-dependencies
- dependency-name: sentry-rails
  dependency-version: 6.6.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-dependencies
- dependency-name: sentry-ruby
  dependency-version: 6.6.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-dependencies
- dependency-name: spring
  dependency-version: 4.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-dependencies
- dependency-name: sprockets
  dependency-version: 4.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-dependencies
- dependency-name: sqlite3
  dependency-version: 2.9.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-dependencies
- dependency-name: turbo-rails
  dependency-version: 2.0.23
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-dependencies
- dependency-name: web-console
  dependency-version: 4.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bundler/ruby-dependencies-3216db7c8f branch from 1422df9 to e4bc61b Compare August 21, 2026 12:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants