Bump the minor-and-patch group with 4 updates

[dependabot]

Bumps the minor-and-patch group with 4 updates: solid_queue, devise_token_auth, resend and overcommit.

Updates solid_queue from 1.5.0 to 1.6.0

Release notes

Sourced from solid_queue's releases.

v1.6.0 - fiber execution mode (with Async)

A long-awaited feature thanks to @​crmne on this release: instead of using a thread pool to run jobs in multiple threads per works, you can now use fibers on a single fiber reactor thread. To use this, you just need to specify the number of fibers instead of the number of threads in your worker configuration, like this:

workers:
  - queues: "api*"
    fibers: 100
    polling_interval: 0.05

It uses Async under the hood, so you need to have that as a dependency for it to work. Also, you need to be using fiber isolation in Rails (config.active_support.isolation_level`` = :fiber).

This can be very useful for I/O-bound workloads, such as those involving LLM calls.

What's Changed

• Add fiber worker execution mode by @​crmne in rails/solid_queue#728
• Roll back transactions leaked by killed job threads in tests by @​rosa in rails/solid_queue#773
• Document how to update dynamic recurring tasks by @​wintan1418 in rails/solid_queue#777

New Contributors

• @​crmne made their first contribution in rails/solid_queue#728
• @​wintan1418 made their first contribution in rails/solid_queue#777

Full Changelog: rails/solid_queue@v1.5.1...v1.6.0

v1.5.1

What's Changed

• Fix flaky tests caused by leaked job threads and signal timing by @​rosa in rails/solid_queue#766
• Add an update generator to copy new migrations by @​rosa in rails/solid_queue#765
• Wait for the continuable job to start before interrupting it by @​rosa in rails/solid_queue#767
• Add --only-recurring to run just the recurring scheduler by @​rafael-pissardo in rails/solid_queue#757
• Use with_connection in DistinctValues by @​trevorturk in rails/solid_queue#769
• Replace forked processes that fail to boot by @​sapandiwakar in rails/solid_queue#760

New Contributors

• @​trevorturk made their first contribution in rails/solid_queue#769
• @​sapandiwakar made their first contribution in rails/solid_queue#760

Full Changelog: rails/solid_queue@v1.5.0...v1.5.1

Commits

• 86f3d92 Bump solid_queue to 1.6.0
• 2a479f6 Document how to update dynamic recurring tasks
• 7f59932 Roll back transactions leaked by killed job threads in tests
• 9c0d5d3 Reorganize the execution pools under SolidQueue::Pool
• 30b92ca Move the fiber worker checks to Configuration
• 6e27144 Extract a base class for the execution pools
• 08e6098 Rescue only the code that runs with capacity reserved when posting
• 000e8ba Report errors escaping the execution future
• 5270cc8 Simplify worker initialization
• 50468fa Start the fiber pool's reactor lazily on first use
• Additional commits viewable in compare view

Updates devise_token_auth from 1.2.6 to 1.3.0

Commits

• b02076a Support Rails 8.0 and 8.1 (#1686)
• ec19d94 Fix clean_old_tokens purging freshly-created token at device cap (#1685)
• bcdc3a5 Update devise to 5 (#1675)
• See full diff in compare view

Updates resend from 1.6.0 to 1.7.0

Release notes

Sourced from resend's releases.

v1.7.0

What's Changed

• chore: sync prs to linear with latest workflow by @​gabrielmfern in resend/resend-ruby#199
• chore: update sync_prs_to_linear action hash to a54e4298f0 by @​dielduarte in resend/resend-ruby#201
• chore(deps-dev): bump websocket-driver from 0.8.0 to 0.8.1 by @​dependabot[bot] in resend/resend-ruby#202
• feat: add suppressions endpoints by @​felipefreitag in resend/resend-ruby#208
• fix(errors): map 404 to NotFoundError instead of InvalidRequestError by @​Mohith26 in resend/resend-ruby#210
• chore(deps): update dependency rails to v8.1.3.1 by @​renovate[bot] in resend/resend-ruby#211
• chore(deps): update dependency httparty to "~> 0.24.0" by @​renovate[bot] in resend/resend-ruby#153
• chore(deps-dev): bump loofah from 2.25.1 to 2.25.2 by @​dependabot[bot] in resend/resend-ruby#204
• chore(deps-dev): bump websocket-driver from 0.8.1 to 0.8.2 by @​dependabot[bot] in resend/resend-ruby#205
• chore(deps-dev): bump rails-html-sanitizer from 1.7.0 to 1.7.1 by @​dependabot[bot] in resend/resend-ruby#207
• chore: bump version to 1.7.0 by @​felipefreitag in resend/resend-ruby#213

New Contributors

• @​gabrielmfern made their first contribution in resend/resend-ruby#199
• @​Mohith26 made their first contribution in resend/resend-ruby#210

Full Changelog: resend/resend-ruby@v1.6.0...v1.7.0

Changelog

Sourced from resend's changelog.

[1.7.0] - 2026-07-31

Added

• Suppressions - New Resend::Suppressions module to add (add), list (list), retrieve (get), and remove (remove) suppressed email addresses. get and remove accept either a suppression ID or the suppressed email address. list supports origin filtering (bounce, complaint, manual) plus the standard limit/after/before pagination params. New Resend::Suppressions::Batch module handles up to 100 addresses at a time via add and remove. (#208)

Changed

• ⚠️ 404 responses now raise Resend::Error::NotFoundError instead of Resend::Error::InvalidRequestError, matching the documented intent of the (previously unreachable) NotFoundError class. Code rescuing Resend::Error or Resend::Error::ServerError is unaffected; code rescuing InvalidRequestError specifically to catch 404s should rescue NotFoundError instead. (#210)

Commits

• 0bdf01e chore: bump version to 1.7.0 (#213)
• 2e17892 chore(deps-dev): bump rails-html-sanitizer from 1.7.0 to 1.7.1 (#207)
• 958635c chore(deps-dev): bump websocket-driver from 0.8.1 to 0.8.2 (#205)
• f7aca8f chore(deps-dev): bump loofah from 2.25.1 to 2.25.2 (#204)
• 8c49621 chore(deps): update dependency httparty to "~> 0.24.0" (#153)
• db60773 chore(deps): update dependency rails to v8.1.3.1 (#211)
• f7cca37 fix(errors): map 404 to NotFoundError instead of InvalidRequestError (#210)
• aff0165 feat: add suppressions endpoints (#208)
• 3368cf5 chore(deps-dev): bump websocket-driver from 0.8.0 to 0.8.1 (#202)
• 1bc2a0d chore: update sync_prs_to_linear action hash to a54e4298f0 (#201)
• Additional commits viewable in compare view

Updates overcommit from 0.71.0 to 0.72.0

Release notes

Sourced from overcommit's releases.

0.72.0

What's Changed

• Fix Solargraph regexp capture warning by @​sds in sds/overcommit#886
• Fail Flay hook when flay crashes instead of silently passing by @​SAY-5 in sds/overcommit#885
• Fix operation state restoration in linked worktrees by @​xenyal in sds/overcommit#887
• Require patched REXML version by @​sds in sds/overcommit#889

New Contributors

• @​SAY-5 made their first contribution in sds/overcommit#885
• @​xenyal made their first contribution in sds/overcommit#887

Full Changelog: sds/overcommit@v0.71.0...v0.72.0

Changelog

Sourced from overcommit's changelog.

0.72.0

• Fix Solargraph regexp capture warning
• Fix Flay hook when flay crashes instead of silently passing
• Fix operation state restoration in linked worktrees
• Update rexml constraint to patch CVE-2025-58767

Commits

• 4eda754 Cut version 0.72.0 (#891)
• 1235937 Remove maintainability badge (#890)
• 9338179 Require patched REXML version (#889)
• a3f4e29 Fix operation state restoration in linked worktrees (#887)
• ac17d93 Fail Flay hook when flay crashes instead of silently passing (#885)
• bc038b9 Fix Solargraph regexp capture warning (#886)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.