Skip to content

Bump the minor-and-patch group across 1 directory with 8 updates - #95

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/minor-and-patch-08ec6bc32f
Closed

Bump the minor-and-patch group across 1 directory with 8 updates#95
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/minor-and-patch-08ec6bc32f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 8 updates in the / directory:

Package From To
solid_queue 1.5.0 1.6.0
bootsnap 1.24.6 1.25.0
image_processing 2.0.2 2.0.3
devise_token_auth 1.2.6 1.3.0
madmin 2.3.3 2.4.0
resend 1.6.0 1.7.0
overcommit 0.71.0 0.72.0
selenium-webdriver 4.46.0 4.47.0

Updates solid_queue from 1.5.0 to 1.6.0

Release notes

Sourced from solid_queue's releases.

v1.6.0 - fiber execution mode (with Async)

A long-awaited feature thanks to @​crmne on this release: instead of using a thread pool to run jobs in multiple threads per works, you can now use fibers on a single fiber reactor thread. To use this, you just need to specify the number of fibers instead of the number of threads in your worker configuration, like this:

workers:
  - queues: "api*"
    fibers: 100
    polling_interval: 0.05

It uses Async under the hood, so you need to have that as a dependency for it to work. Also, you need to be using fiber isolation in Rails (config.active_support.isolation_level`` = :fiber).

This can be very useful for I/O-bound workloads, such as those involving LLM calls.

What's Changed

New Contributors

Full Changelog: rails/solid_queue@v1.5.1...v1.6.0

v1.5.1

What's Changed

New Contributors

Full Changelog: rails/solid_queue@v1.5.0...v1.5.1

Commits
  • 86f3d92 Bump solid_queue to 1.6.0
  • 2a479f6 Document how to update dynamic recurring tasks
  • 7f59932 Roll back transactions leaked by killed job threads in tests
  • 9c0d5d3 Reorganize the execution pools under SolidQueue::Pool
  • 30b92ca Move the fiber worker checks to Configuration
  • 6e27144 Extract a base class for the execution pools
  • 08e6098 Rescue only the code that runs with capacity reserved when posting
  • 000e8ba Report errors escaping the execution future
  • 5270cc8 Simplify worker initialization
  • 50468fa Start the fiber pool's reactor lazily on first use
  • Additional commits viewable in compare view

Updates bootsnap from 1.24.6 to 1.25.0

Release notes

Sourced from bootsnap's releases.

v1.25.0

What's Changed

  • Improve YAML parsing cache to more efficiently handle Time, Date and DateTime.

  • Don't invalidate the compile cache when YJIT is toggled. YJIT is a runtime JIT and doesn't change the serialized instruction sequences that are cached, but enabling it (via --yjit, RUBYOPT, or RubyVM::YJIT.enable) adds a +YJIT marker to RUBY_DESCRIPTION ( +YJIT <token> on YJIT_SUPPORT builds), which is part of the cache key. This previously discarded the entire compile cache whenever YJIT was enabled at runtime but not at precompile time (or vice versa). The marker is now stripped before hashing.

  • Fix CompileCache::Native.fetch and .precompile reading a non-String path argument (e.g. a Pathname) with RSTRING_PTR. Regression from 1.24.0.

Full Changelog: rails/bootsnap@v1.24.6...v1.25.0

Changelog

Sourced from bootsnap's changelog.

1.25.0

  • Improve YAML parsing cache to more efficiently handle Time, Date and DateTime.

  • Don't invalidate the compile cache when YJIT is toggled. YJIT is a runtime JIT and doesn't change the serialized instruction sequences that are cached, but enabling it (via --yjit, RUBYOPT, or RubyVM::YJIT.enable) adds a +YJIT marker to RUBY_DESCRIPTION ( +YJIT <token> on YJIT_SUPPORT builds), which is part of the cache key. This previously discarded the entire compile cache whenever YJIT was enabled at runtime but not at precompile time (or vice versa). The marker is now stripped before hashing.

  • Fix CompileCache::Native.fetch and .precompile reading a non-String path argument (e.g. a Pathname) with RSTRING_PTR. Regression from 1.24.0.

Commits
  • e099ec7 Release 1.25.0
  • b694a11 Merge pull request #563 from stanhu/sh-ignore-yjit-in-compile-cache-key
  • 51898f9 Ignore YJIT status in the compile cache key
  • 1ad589b Merge pull request #560 from rails/hm-qnqlnylzkqkltqsz
  • 21fbd65 Merge pull request #561 from jeremy/fix-path-conversion-entry-points
  • 4898853 Convert the path argument in the frame that reads it
  • 8ee47c4 Add MessagePack::Bigint type
  • 49e3eb7 Replace Date Marshalling with recursive msgpack
  • 711fd0b Bump minimum msgpack to 1.5.0
  • 160fc10 Merge pull request #558 from viralpraxis/fix-yaml-cache-kwargs-mutation
  • Additional commits viewable in compare view

Updates image_processing from 2.0.2 to 2.0.3

Changelog

Sourced from image_processing's changelog.

2.0.3 (2026-06-08)

  • Prevent remote code execution when operation names come from user input, closing bypasses through the #operation meta-builder, #method_missing, and nested #send calls (reported by @​szymonsec)

  • [minimagick] Prevent remote code execution through unsafe public methods (e.g. #instance_eval, #send) passed as loader/saver option names

Commits

Updates devise_token_auth from 1.2.6 to 1.3.0

Commits

Updates madmin from 2.3.3 to 2.4.0

Changelog

Sourced from madmin's changelog.

2.4.0

  • Add collection_action for resources
  • Remove unused propshaft dependency. Madmin uses the Rails app's asset pipeline which could be propshaft or sprockets.
Commits
  • b63af81 Version bump
  • aeba4ce Add collection_action DSL — index-page counterpart to member_action (#336)
  • 55e8612 Remove duplicate require
  • e874fa8 Add propshaft to Gemfile for testing like a Rails app does
  • d95cabc Merge branch 'main' of github.com:excid3/madmin
  • 14c2abd Remove unused propshaft dependency
  • 39ea19f Extract Madmin UI strings into locale files for i18n support. (#341)
  • See full diff in compare view

Updates resend from 1.6.0 to 1.7.0

Release notes

Sourced from resend's releases.

v1.7.0

What's Changed

New Contributors

Full Changelog: resend/resend-ruby@v1.6.0...v1.7.0

Changelog

Sourced from resend's changelog.

[1.7.0] - 2026-07-31

Added

  • Suppressions - New Resend::Suppressions module to add (add), list (list), retrieve (get), and remove (remove) suppressed email addresses. get and remove accept either a suppression ID or the suppressed email address. list supports origin filtering (bounce, complaint, manual) plus the standard limit/after/before pagination params. New Resend::Suppressions::Batch module handles up to 100 addresses at a time via add and remove. (#208)

Changed

  • ⚠️ 404 responses now raise Resend::Error::NotFoundError instead of Resend::Error::InvalidRequestError, matching the documented intent of the (previously unreachable) NotFoundError class. Code rescuing Resend::Error or Resend::Error::ServerError is unaffected; code rescuing InvalidRequestError specifically to catch 404s should rescue NotFoundError instead. (#210)
Commits
  • 0bdf01e chore: bump version to 1.7.0 (#213)
  • 2e17892 chore(deps-dev): bump rails-html-sanitizer from 1.7.0 to 1.7.1 (#207)
  • 958635c chore(deps-dev): bump websocket-driver from 0.8.1 to 0.8.2 (#205)
  • f7aca8f chore(deps-dev): bump loofah from 2.25.1 to 2.25.2 (#204)
  • 8c49621 chore(deps): update dependency httparty to "~> 0.24.0" (#153)
  • db60773 chore(deps): update dependency rails to v8.1.3.1 (#211)
  • f7cca37 fix(errors): map 404 to NotFoundError instead of InvalidRequestError (#210)
  • aff0165 feat: add suppressions endpoints (#208)
  • 3368cf5 chore(deps-dev): bump websocket-driver from 0.8.0 to 0.8.1 (#202)
  • 1bc2a0d chore: update sync_prs_to_linear action hash to a54e4298f0 (#201)
  • Additional commits viewable in compare view

Updates overcommit from 0.71.0 to 0.72.0

Release notes

Sourced from overcommit's releases.

0.72.0

What's Changed

New Contributors

Full Changelog: sds/overcommit@v0.71.0...v0.72.0

Changelog

Sourced from overcommit's changelog.

0.72.0

  • Fix Solargraph regexp capture warning
  • Fix Flay hook when flay crashes instead of silently passing
  • Fix operation state restoration in linked worktrees
  • Update rexml constraint to patch CVE-2025-58767
Commits

Updates selenium-webdriver from 4.46.0 to 4.47.0

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.47.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

... (truncated)

Changelog

Sourced from selenium-webdriver's changelog.

4.47.0 (2026-08-10)

  • Support CDP versions: v149, v150, v151
  • support WebDriver BiDi on Safari Preview and move #bidi onto Driver (#17729)
  • link generated BiDi elements to their spec definitions (#17781)
  • add objectOnly/preserveExtras/scalar-primitive BiDi schema signals (#17784)
  • construct the BiDi transport inside the domain from a connection (#17796)
  • route BiDiBridge navigation through the generated Protocol::BrowsingContext (#17785)
  • resolve spec runfiles via Bazel::Runfiles (#17810)
  • [build] standardize generated-file license and not to edit markers across generators (#17816)
  • validate nullable-constant BiDi params outbound (#17818)
  • [build] upgrade rules_ruby to 0.28.0 and drop vendored Bazel::Runfiles workaround (#17824)
  • [build] Merge vendor cddl files into shared BiDi schema and implement custom Firefox webExtension options (#17840)
  • [grid] honor client-advertised se:remoteUrl for reachable BiDi/CDP/VNC URLs (#17790)
  • tolerate and warn on missing required inbound BiDi fields, with SE_BIDI_STRICT to escalate (#17844)
  • remove deprecated FTP proxy support (#17846)
  • prevent CDP access with Firefox (#17849)
  • test matchers assert log entries by id and optional messages and match severity (#17848)
  • [bidi] Correct float/enum type fidelity in the shared schema and validate primitives outbound in Ruby (#17852)
  • [bidi] mark BiDi types extensible per spec and update Ruby handling (#17853)
  • raise typed WebDriver errors for BiDi from a generated error-code map (#17855)
  • allow pending test guards to require matching provided exception (#17859)
  • pass --enable-chrome-logs unless CHROME_LOG_FILE is set (#17858)
  • support custom vendor specific capabilities in options classes (#17862)
  • validate BiDi outbound ref fields against their declared type (#17861)
  • generate BiDi domain type accessors and union variant factories (#17865)
  • deprecate invalid Firefox profile code (#17871)
  • [build] Automated Browser Version Update with CDP (#17873)
Commits
  • 9175ed9 [build] Prepare for release of selenium-4.47.0 (#17896)
  • a25afbb [build] Automated Browser Version Update with CDP (#17873)
  • 960abd2 [dotnet][java][js][rb] deprecate invalid Firefox profile code (#17871)
  • 5b1cde1 [rb] generate BiDi domain type accessors and union variant factories (#17865)
  • 014d72b [rb] fix tests and custom matchers to work with SE_DEBUG (#17863)
  • e0658c9 [rb] validate BiDi outbound ref fields against their declared type (#17861)
  • 0ad0c51 [rb] support custom vendor specific capabilities in options classes (#17862)
  • 10eeb94 [dotnet][java][py][rb] pass --enable-chrome-logs unless CHROME_LOG_FILE is se...
  • 4c6f3a5 [rb] allow pending test guards to require matching provided exception (#17859)
  • 89ad5bb [rb] raise typed WebDriver errors for BiDi from a generated error-code map (#...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the minor-and-patch group across 1 directory with 8 updates
957b5d1 
Bumps the minor-and-patch group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [solid_queue](https://github.com/rails/solid_queue) | `1.5.0` | `1.6.0` |
| [bootsnap](https://github.com/rails/bootsnap) | `1.24.6` | `1.25.0` |
| [image_processing](https://github.com/janko/image_processing) | `2.0.2` | `2.0.3` |
| [devise_token_auth](https://github.com/lynndylanhurley/devise_token_auth) | `1.2.6` | `1.3.0` |
| [madmin](https://github.com/excid3/madmin) | `2.3.3` | `2.4.0` |
| [resend](https://github.com/resend/resend-ruby) | `1.6.0` | `1.7.0` |
| [overcommit](https://github.com/sds/overcommit) | `0.71.0` | `0.72.0` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.46.0` | `4.47.0` |



Updates `solid_queue` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/rails/solid_queue/releases)
- [Commits](rails/solid_queue@v1.5.0...v1.6.0)

Updates `bootsnap` from 1.24.6 to 1.25.0
- [Release notes](https://github.com/rails/bootsnap/releases)
- [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md)
- [Commits](rails/bootsnap@v1.24.6...v1.25.0)

Updates `image_processing` from 2.0.2 to 2.0.3
- [Changelog](https://github.com/janko/image_processing/blob/master/CHANGELOG.md)
- [Commits](janko/image_processing@v2.0.2...v2.0.3)

Updates `devise_token_auth` from 1.2.6 to 1.3.0
- [Changelog](https://github.com/lynndylanhurley/devise_token_auth/blob/master/CHANGELOG.md)
- [Commits](lynndylanhurley/devise_token_auth@v1.2.6...v1.3.0)

Updates `madmin` from 2.3.3 to 2.4.0
- [Release notes](https://github.com/excid3/madmin/releases)
- [Changelog](https://github.com/excid3/madmin/blob/main/CHANGELOG.md)
- [Commits](excid3/madmin@v2.3.3...v2.4.0)

Updates `resend` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/resend/resend-ruby/releases)
- [Changelog](https://github.com/resend/resend-ruby/blob/main/CHANGELOG.md)
- [Commits](resend/resend-ruby@v1.6.0...v1.7.0)

Updates `overcommit` from 0.71.0 to 0.72.0
- [Release notes](https://github.com/sds/overcommit/releases)
- [Changelog](https://github.com/sds/overcommit/blob/main/CHANGELOG.md)
- [Commits](sds/overcommit@v0.71.0...v0.72.0)

Updates `selenium-webdriver` from 4.46.0 to 4.47.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](SeleniumHQ/selenium@selenium-4.46.0...selenium-4.47.0)

---
updated-dependencies:
- dependency-name: solid_queue
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: bootsnap
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: image_processing
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: devise_token_auth
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: madmin
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: resend
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: overcommit
  dependency-version: 0.72.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: selenium-webdriver
  dependency-version: 4.47.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Aug 14, 2026
@dadachi dadachi mentioned this pull request Aug 19, 2026
Merged
@dadachi dadachi closed this in #96 Aug 19, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 19, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/bundler/minor-and-patch-08ec6bc32f branch August 19, 2026 05:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants