Skip to content

Bump the production-dependencies-minor group across 1 directory with 29 updates #1308

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: supporter_level_goal
Choose a base branch
from
Open

Bump the production-dependencies-minor group across 1 directory with 29 updates #1308

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Dec 8, 2025

Bumps the production-dependencies-minor group with 27 updates in the / directory:

Package From To
rake 13.2.1 13.3.1
rails 7.1.5.2 7.1.6
jbuilder 2.13.0 2.14.1
bootsnap 1.18.4 1.19.0
test-unit 3.2.7 3.7.3
aws-sdk-s3 1.113.0 1.206.0
json 2.12.2 2.17.1
rack-attack 6.5.0 6.8.0
pg 1.5.9 1.6.2
dalli 3.2.3 3.2.8
carrierwave 3.1.1 3.1.2
mini_magick 5.2.0 5.3.1
httparty 0.21.0 0.23.2
devise-two-factor 6.1.0 6.2.0
geocoder 1.6.1 1.8.6
table_print 1.5.4 1.5.7
rexml 3.4.2 3.4.4
csv 3.3.4 3.3.5
maintenance_tasks 2.12.0 2.13.0
terser 1.2.5 1.2.6
rails-autoscale-web 1.11.1 1.12.1
lograge 0.3.6 0.14.0
recaptcha 5.19.0 5.21.1
barnes 0.0.8 0.0.9
has_scope 0.8.2 0.9.0
globalid 1.2.1 1.3.0
js-routes 2.2.7 2.3.5

Updates rake from 13.2.1 to 13.3.1

Commits
  • f0001c3 v13.3.1
  • a644c80 Merge pull request #483 from luke-gru/fix_test_warnings
  • 2465ea5 silence warnings during execution of rake tasks in Rakefile (ex: rake test)
  • df25fb1 Merge pull request #610 from pvdb/fix_testhelper_require
  • ec12ac9 Merge pull request #635 from nevans/deconstruct_keys-for-nil-keys
  • 4664a69 Merge pull request #666 from ruby/dependabot/github_actions/ruby/setup-ruby-1...
  • 7a0bf15 Bump ruby/setup-ruby from 1.265.0 to 1.266.0
  • b3ed789 Merge pull request #665 from ruby/dependabot/github_actions/ruby/setup-ruby-1...
  • 1e7ef52 Bump ruby/setup-ruby from 1.263.0 to 1.265.0
  • 77225e1 Merge pull request #664 from ruby/dependabot/github_actions/ruby/setup-ruby-1...
  • Additional commits viewable in compare view

Updates rails from 7.1.5.2 to 7.1.6

Release notes

Sourced from rails's releases.

7.1.6

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • Gracefully handle Timeout.timeout firing during connection configuration.

    Use of Timeout.timeout could result in improperly initialized database connection.

    This could lead to a partially configured connection being used, resulting in various exceptions, the most common being with the PostgreSQLAdapter raising undefined method key?' for nilorTypeError: wrong argument type nil (expected PG::TypeMap)`.

    Jean Boussier

  • Fix error handling during connection configuration.

    Active Record wasn't properly handling errors during the connection configuration phase. This could lead to a partially configured connection being used, resulting in various exceptions, the most common being with the PostgreSQLAdapter raising undefined method key?' for nilorTypeError: wrong argument type nil (expected PG::TypeMap)`.

    Jean Boussier

  • Fix prepared statements on mysql2 adapter.

    Jean Boussier

  • Fix a race condition in ActiveRecord::Base#method_missing when lazily defining attributes.

    If multiple thread were concurrently triggering attribute definition on the same model, it could result in a NoMethodError being raised.

    Jean Boussier

Action View

  • No changes.

Action Pack

... (truncated)

Commits
  • ffcbf6f Preparing for 7.1.6 release
  • 10a0f90 Upgrade sigstore gem to 0.2.2
  • 4df996b Sync changelog
  • 310c904 Merge pull request #55570 from zzak/8-0-sidekiq-issues
  • c274de0 Merge pull request #55747 from skipkayhil/hm-kwzpqqkssmwtsunu
  • 1d82970 Add the Action Cable configuration
  • 8323dd6 Merge pull request #54164 from zzak/asto-test-mini_magick-deprecation-warning
  • 4eb8085 Merge pull request #55812 from yahonda/bump-microsoftedge-version-to-latest
  • d100e46 Don't load action cable in the activestorage dummy app
  • 91fc9b2 Don't load sprockets-rails and propshaft in the same application
  • Additional commits viewable in compare view

Updates jbuilder from 2.13.0 to 2.14.1

Release notes

Sourced from jbuilder's releases.

v2.14.1

What's Changed

New Contributors

Full Changelog: rails/jbuilder@v2.14.0...v2.14.1

v2.14.0

What's Changed

New Contributors

Full Changelog: rails/jbuilder@v2.13.0...v2.14.0

Commits
  • 38339ad Prepare for 2.14.1
  • 2400fd9 Merge pull request #601 from flavorjones/flavorjones/fix-encode-arguments
  • a6863b5 Ensure that Jbuilder.encode properly forwards arguments to .new
  • 30ba7df Prepare for 2.14.0
  • 5f4af71 Merge pull request #591 from moberegger/moberegger/optimize_options_merges
  • 6fd6c06 Small _set_inline_partial optimization
  • b7b5abb Stop mutating options in partial! method
  • 7e16adf Stop mutating options in set! method
  • 8474b41 Remove _partial micro-optimization
  • 9ffacf7 Merge pull request #574 from pixeltrix/fix-warnings-and-version-constant
  • Additional commits viewable in compare view

Updates bootsnap from 1.18.4 to 1.19.0

Changelog

Sourced from bootsnap's changelog.

1.19.0

  • Remove JSON parsing cache. Recent versions of the json gem are as fast as msgpack if not faster.

1.18.6

  • Fix cgroup CPU limits detection in CLI.

1.18.5

  • Attempt to detect a QEMU bug that can cause bootsnap precompile to hang forever when building ARM64 docker images from x86_64 machines. See #495.
  • Improve CLI to detect cgroup CPU limits and avoid spawning too many worker processes.
Commits
  • d4ad167 Release 1.19.0
  • 4a0f8e6 Merge pull request #508 from byroot/remove-json-caching
  • 5df6e04 Remove Bootsnap::CompileCache::JSON
  • e6272f8 Merge pull request #506 from rails/dependabot/github_actions/actions/checkout-5
  • 89879b4 Bump actions/checkout from 4 to 5
  • 55d663f Move bootsnap to the Rails org
  • 03629f6 Add devcontainer config
  • 037ad17 Merge pull request #505 from beauraF/add-know-issues-note-to-readme
  • 3019588 Add a knows issues note into README.md related to QEMU
  • b3333f6 Add Ruby 3.4 to CI
  • Additional commits viewable in compare view

Updates test-unit from 3.2.7 to 3.7.3

Release notes

Sourced from test-unit's releases.

test-unit 3.7.3 - 2025-11-26

Improvements

  • Removed duplicated power_assert require code.
    • GH-337
    • Patch by Nobuyoshi Nakada

Thanks

  • Nobuyoshi Nakada

test-unit 3.7.2 - 2025-11-25

Improvements

  • Suppressed warnings from power_assert.
    • GH-335
    • Patch by Nobuyoshi Nakada

Thanks

  • Nobuyoshi Nakada

test-unit 3.7.1 - 2025-11-03

Improvements

  • Used absolute path instead of relative path for autoload.

  • Improved compatibility with power_assert 3.0 on older rubies.

Thanks

  • nicholas a. evans
  • Jean Boussier

test-unit 3.7.0 - 2025-07-06

Fixes

  • Fixed a bug that Test::Unit::TestCase and Test::Unit::AutoRunner aren't loaded when they are redefined by open class before referring to these constants.

... (truncated)

Commits

Updates aws-sdk-s3 from 1.113.0 to 1.206.0

Changelog

Sourced from aws-sdk-s3's changelog.

1.206.0 (2025-12-02)

  • Feature - New S3 Storage Class FSX_ONTAP

1.205.0 (2025-11-20)

  • Feature - Enable / Disable ABAC on a general purpose bucket.

1.204.0 (2025-11-19)

  • Feature - Adds support for blocking SSE-C writes to general purpose buckets.

1.203.1 (2025-11-10)

  • Issue - Deprecated :checksum_mode parameter in FileDownloader#download. When set to "DISABLED", a deprecation warning is issued and the parameter is ignored. Use :response_checksum_validation on the S3 client instead to control checksum validation behavior.

1.203.0 (2025-11-05)

  • Feature - Launch IPv6 dual-stack support for S3 Express

1.202.0 (2025-10-28)

  • Feature - Amazon Simple Storage Service / Features: Add conditional writes in CopyObject on destination key to prevent unintended object modifications.

1.201.0 (2025-10-21)

  • Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

  • Issue - Fix multipart upload to respect request_checksum_calculation when_required mode.

1.200.0 (2025-10-15)

  • Feature - Add lightweight thread pool executor for multipart download_file, upload_file and upload_stream.

  • Feature - Add custom executor support for Aws::S3::TransferManager.

1.199.1 (2025-09-25)

  • Issue - Update TransferManager#download_file and Object#download_file documentation regarding temporary file usage and failure handling for different destination types.

1.199.0 (2025-09-08)

... (truncated)

Commits

Updates json from 2.12.2 to 2.17.1

Release notes

Sourced from json's releases.

v2.17.0

What's Changed

  • Improve JSON.load and JSON.unsafe_load to allow passing options as second argument.
  • Fix the parser to no longer ignore invalid escapes in strings. Only \", \\, \b, \f, \n, \r, \t and \u are valid JSON escapes.
  • Fixed JSON::Coder to use the depth it was initialized with.
  • On TruffleRuby, fix the generator to not call to_json on the return value of as_json for Float::NAN.
  • Fixed handling of state.depth: when to_json changes state.depth but does not restore it, it is reset automatically to its initial value. In particular, when a NestingError is raised, depth is no longer equal to max_nesting after the call to generate, and is reset to its initial value. Similarly when to_json raises an exception.

Full Changelog: ruby/json@v2.16.0...v2.17.0

v2.16.0

What's Changed

  • Deprecate JSON::State#[] and JSON::State#[]=. Consider using JSON::Coder instead.
  • JSON::Coder now also yields to the block when encountering strings with invalid encoding.
  • Fix GeneratorError messages to be UTF-8 encoded.
  • Fix memory leak when Exception is raised, or throw is used during JSON generation.
  • Optimized floating point number parsing by integrating the ryu algorithm (thanks to Josef Šimánek).
  • Optimized numbers parsing using SWAR (thanks to Scott Myron).
  • Optimized parsing of pretty printed documents using SWAR (thanks to Scott Myron).

Full Changelog: ruby/json@v2.15.2...v2.16.0

v2.15.2

What's Changed

  • Fix JSON::Coder to have one dedicated depth counter per invocation. After encountering a circular reference in JSON::Coder#dump, any further #dump call would raise JSON::NestingError.

Full Changelog: ruby/json@v2.15.1...v2.15.2

v2.15.1

What's Changed

  • Fix incorrect escaping in the JRuby extension when encoding shared strings.

Full Changelog: ruby/json@v2.15.0...v2.15.1

v2.15.0

What's Changed

  • JSON::Coder callback now receive a second argument to convey whether the object is a hash key.
  • Tuned the floating point number generator to not use scientific notation as aggressively.

... (truncated)

Changelog

Sourced from json's changelog.

2025-12-04 (2.17.1)

  • Fix a regression in parsing of unicode surogate pairs (\uXX\uXX) that could cause an invalid string to be returned.

2025-12-03 (2.17.0)

  • Improve JSON.load and JSON.unsafe_load to allow passing options as second argument.
  • Fix the parser to no longer ignore invalid escapes in strings. Only \", \\, \b, \f, \n, \r, \t and \u are valid JSON escapes.
  • Fixed JSON::Coder to use the depth it was initialized with.
  • On TruffleRuby, fix the generator to not call to_json on the return value of as_json for Float::NAN.
  • Fixed handling of state.depth: when to_json changes state.depth but does not restore it, it is reset automatically to its initial value. In particular, when a NestingError is raised, depth is no longer equal to max_nesting after the call to generate, and is reset to its initial value. Similarly when to_json raises an exception.

2025-11-07 (2.16.0)

  • Deprecate JSON::State#[] and JSON::State#[]=. Consider using JSON::Coder instead.
  • JSON::Coder now also yields to the block when encountering strings with invalid encoding.
  • Fix GeneratorError messages to be UTF-8 encoded.
  • Fix memory leak when Exception is raised, or throw is used during JSON generation.
  • Optimized floating point number parsing by integrating the ryu algorithm (thanks to Josef Šimánek).
  • Optimized numbers parsing using SWAR (thanks to Scott Myron).
  • Optimized parsing of pretty printed documents using SWAR (thanks to Scott Myron).

2025-10-25 (2.15.2)

  • Fix JSON::Coder to have one dedicated depth counter per invocation. After encountering a circular reference in JSON::Coder#dump, any further #dump call would raise JSON::NestingError.

2025-10-07 (2.15.1)

  • Fix incorrect escaping in the JRuby extension when encoding shared strings.

2025-09-22 (2.15.0)

  • JSON::Coder callback now receive a second argument to convey whether the object is a hash key.
  • Tuned the floating point number generator to not use scientific notation as aggressively.

2025-09-18 (2.14.1)

  • Fix IndexOutOfBoundsException in the JRuby extension when encoding shared strings.

2025-09-18 (2.14.0)

  • Add new allow_duplicate_key generator options. By default a warning is now emitted when a duplicated key is encountered. In json 3.0 an error will be raised. 
    >> Warning[:deprecated] = true

... (truncated)

Commits
  • e5e4fd5 Release 2.17.1
  • 0fce370 Fix a regression in parsing of unicode surogate pairs
  • 4bdb2d1 Release 2.17.0
  • ccca602 Fix handling of depth
  • 7b62fac Fix duplicated test_unsafe_load_with_options test case
  • e0257b9 Reproduce C ext behavior of ignoring mutated depth in arrays
  • 386b36f Test and restore behavior around to_json changing depth
  • c54de70 Improve JSON.load and JSON.unsafe_load to allow passing options as second...
  • 65d62dc Merge pull request #909 from nobu/macro_args
  • 8fb7279 Fix macro arguments
  • Additional commits viewable in compare view

Updates rack-attack from 6.5.0 to 6.8.0

Release notes

Sourced from rack-attack's releases.

v6.8.0

What's Changed

Changed

  • Avoid RedisCacheStore#increment on Rails 6+ (which might improve performance) by @​jdelStrother (#597)

Fixed

Deprecated

  • Soft deprecate integration with rack 1.x, may or may not work with it.
  • Soft deprecate integration with rails 5.2 or less, may or may not work with it.

Removed

New Contributors

Full Changelog: rack/rack-attack@v6.7.0...v6.8.0

v6.7.0

What's Changed

New Contributors

Full Changelog: rack/rack-attack@v6.6.1...v6.7.0

... (truncated)

Changelog

Sourced from rack-attack's changelog.

[6.8.0] - 2025-10-14

Changed

  • Avoid RedisCacheStore#increment on Rails 6+ (which might improve performance) by @​jdelStrother (#597)

Fixed

Deprecated

  • Soft deprecate integration with rack 1.x, may or may not work with it.
  • Soft deprecate integration with rails 5.2 or less, may or may not work with it.

Removed

[6.7.0] - 2023-07-26

[6.6.1] - 2022-04-14

Fixed

  • Fixes deprecation warning in redis 4.6+ ([@​ixti])

[6.6.0] - 2022-01-29

Added

  • Ability to have access to the request object instead of only env (still can access env with request.env) when customizing throttle and blocklist responses with new methods Rack::Attack.blocklisted_responder= and Rack::Attack.throttled_responder= which yield the request to your lambda. ([@​NikolayRys])

Deprecated

  • Rack::Attack.blocklisted_response=
  • Rack::Attack.throttled_response=
Commits

Updates pg from 1.5.9 to 1.6.2

Changelog

Sourced from pg's changelog.

v1.6.2 [2025-09-02] Lars Kanis lars@greiz-reinsdorf.de

  • Remove several absolute paths from native binaries which pointed to build directories. #668
  • Fix bad fallback path to pg_service.conf. #666
  • Use rbpg_ prefix for base64_* functions to avoid name clashes with functions provided by other libraries like Heimdal on Macos. #667
  • Raise a more descriptive error message in case of pg_ext LoadError. #664
  • Freeze some constants to make them available in a Ractor context. #660
  • Several documentation improvements.
  • Update native binary gems to OpenSSL-3.5.2, krb5-1.22.1 and PostgreSQL-17.6.

v1.6.1 [2025-08-03] Lars Kanis lars@greiz-reinsdorf.de

  • Add binary gems for platforms aarch64-linux-musl and x86_64-linux-musl without the need to install package gcompat. #657.
  • Serialize CompositeCoder#dimensions only when set. #652 This fixes the compatibility to pg-1.5.9, when deserializing Marshal data from pg-1.6, as long as the new attribute isn't used.
  • Remove dependency to MSYS2 package "postgresql" from binary Windows gem #654

v1.6.0 [2025-07-27] Lars Kanis lars@greiz-reinsdorf.de

Added:

  • Add binary gems for Ruby 3.4.
  • Add fat binary gem for platform aarch64-mingw-ucrt aka Windows on ARM #626, for platform Macos on Intel and ARM #643, for platform aarch64-linux #646 and for platform x86_64-linux #551.
  • Update fat binary gem to OpenSSL-3.5.1 and PostgreSQL-17.5.
  • Add a patch to libpq to avoid starvation on bigger SSL records, which some database engines other than vanilla PostgreSQL use. This patch applies to platform specific binary gems only. #616
  • Add support for new query cancel functions of PostgreSQL-17. This adds the new class PG::CancelConnection which provides the ability to cancel a query per blocking or per non-blocking functions. If the new functions are available they are used and the older are no longer compiled in. This way we can get rid of reading out the internal PGcancel struct by Connection#backend_key. #614
  • Add PG::BinaryDecoder::Array and PG::BinaryEncoder::Array to parse and encode PostgreSQL arrays in binary format. #603
  • Add possibility to define the number of array dimensions to be encoded. Setting dimensions is especially useful, when a Record shall be encoded into an Array, since the Array encoder can not distinguish if the array shall be encoded as a higher dimension or as a record otherwise. #622
  • Add Connection#set_chunked_rows_mode #610
  • Add PG::Connection#close_prepared, PG::Connection#close_portal, PG::Connection#send_close_prepared and PG::Connection#send_close_portal which are new in PostgreSQL-17. #611
  • Add Connection#send_pipeline_sync, async_pipeline_sync and release GVL at PQ(sendP|P)ipelineSync. #612
  • Add MINGW package dependency which is resolved by RubyInstaller. #617
  • Change conn.server_version and conn.protocol_version to raise instead of return 0 on error. #632
  • Fix connecting to multiple hosts after connnect_timeout. #637

... (truncated)

Commits
  • c75ed8d Bump VERSION to 1.6.2
  • 90a00e5 Update CHANGELOG for pg-1.6.2
  • c584348 Merge pull request #670 from larskanis/update-deps
  • 227653d Update dependencies
  • 428415d Prepare CHANGELOG for 1.6.2 [skip ci]
  • 4282e5c Merge pull request #669 from larskanis/test-rpath
  • 19a3547 Strip darwin C-ext to remove paths to C files
  • 5e2ac6e Temporary enable head version of rake-compiler-dock
  • 70551b9 Add spec/pg_spec.rb to tests
  • 35b2704 Add tests for rpath or other build related paths
  • Additional commits viewable in compare view

Updates dalli from 3.2.3 to 3.2.8

Changelog

Sourced from dalli's changelog.

3.2.8

  • Handle IO::TimeoutError when establishing connection (eugeneius)
  • Drop dependency on base64 gem (Earlopain)
  • Address incompatibility with resolv-replace (y9v)
  • Add rubygems.org metadata (m-nakamura145)

3.2.7

  • Fix cascading error when there's an underlying network error in a pipelined get (eugeneius)
  • Ruby 3.4/head compatibility by adding base64 to gemspec (tagliala)
  • Add Ruby 3.3 to CI (m-nakamura145)
  • Use Socket's connect_timeout when available, and pass timeout to the socket's send and receive timeouts (mlarraz)

3.2.6

  • Rescue IO::TimeoutError raised by Ruby since 3.2.0 on blocking reads/writes (skaes)
  • Fix rubydoc link (JuanitoFatas)

3.2.5

  • Better handle memcached requests being interrupted by Thread#raise or Thread#kill (byroot)
  • Unexpected errors are no longer treated as Dalli::NetworkError, including errors raised by Timeout.timeout (byroot)

3.2.4

  • Cache PID calls for performance since glibc no longer caches in recent versions (byroot)
  • Preallocate the read buffer in Socket#readfull (byroot)
Commits

Updates carrierwave from 3.1.1 to 3.1.2

Release notes

Sourced from carrierwave's releases.

3.1.2

Fixed

  • Fix failing to remove existing files on updating by #remove_#{column}=, ##{column}_cache=, and #remote_#{column}_url= (@​mshibuya 7b2ce50, #2778, #2779)
Changelog

Sourced from carrierwave's changelog.

3.1.2 - 2025-04-13

Fixed

  • Fix failing to remove existing files on updating by #remove_#{column}=, ##{column}_cache=, and #remote_#{column}_url= (@​mshibuya 7b2ce50, #2778, #2779)
Commits
  • 8e5db8c Version 3.1.2
  • 7b2ce50 Fix failing to remove existing files on updating by #remove_#{column}=, `##...
  • 9001ab7 Fix specs breaking with MiniMagick 5.x
  • See full diff in compare view

Updates mini_magick from 5.2.0 to 5.3.1

Release notes

Sourced from mini_magick's releases.

v5.3.1

  • Fixed MiniMagick.cli_prefix being mutated when set to an array.

v5.3.0

  • Actually require Ruby 2.5+ in the gemspec.
  • Fix Ruby 2.5 compatibility when using MiniMagick.restricted_env configuration.
  • Drop benchmark dependency.
  • Fix keyword argument forwarding when trying to call MiniMagick.compare(errors: false)
Commits

Updates httparty from 0.21.0 to 0.23.2

Release notes

Sourced from httparty's releases.

0.23.2

What's Changed

New Contributors

Full Changelog: jnunemaker/httparty@v0.23.1...v0.23.2

v0.23.1

Full Changelog: jnunemaker/httparty@v0.23.0...v0.23.1

v0.23.0

What's Changed

New Contributors

Full Changelog: jnunemaker/httparty@v0.22.0...v0.23.0

v0.22.0

What's Changed

@dependabot
Bump the production-dependencies-minor group across 1 directory with …
cdbaa44 
…29 updates

Bumps the production-dependencies-minor group with 27 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [rake](https://github.com/ruby/rake) | `13.2.1` | `13.3.1` |
| [rails](https://github.com/rails/rails) | `7.1.5.2` | `7.1.6` |
| [jbuilder](https://github.com/rails/jbuilder) | `2.13.0` | `2.14.1` |
| [bootsnap](https://github.com/rails/bootsnap) | `1.18.4` | `1.19.0` |
| [test-unit](https://github.com/test-unit/test-unit) | `3.2.7` | `3.7.3` |
| [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) | `1.113.0` | `1.206.0` |
| [json](https://github.com/ruby/json) | `2.12.2` | `2.17.1` |
| [rack-attack](https://github.com/rack/rack-attack) | `6.5.0` | `6.8.0` |
| [pg](https://github.com/ged/ruby-pg) | `1.5.9` | `1.6.2` |
| [dalli](https://github.com/petergoldstein/dalli) | `3.2.3` | `3.2.8` |
| [carrierwave](https://github.com/carrierwaveuploader/carrierwave) | `3.1.1` | `3.1.2` |
| [mini_magick](https://github.com/minimagick/minimagick) | `5.2.0` | `5.3.1` |
| [httparty](https://github.com/jnunemaker/httparty) | `0.21.0` | `0.23.2` |
| [devise-two-factor](https://github.com/tinfoil/devise-two-factor) | `6.1.0` | `6.2.0` |
| [geocoder](https://github.com/alexreisner/geocoder) | `1.6.1` | `1.8.6` |
| [table_print](https://github.com/arches/table_print) | `1.5.4` | `1.5.7` |
| [rexml](https://github.com/ruby/rexml) | `3.4.2` | `3.4.4` |
| [csv](https://github.com/ruby/csv) | `3.3.4` | `3.3.5` |
| [maintenance_tasks](https://github.com/Shopify/maintenance_tasks) | `2.12.0` | `2.13.0` |
| [terser](https://github.com/ahorek/terser-ruby) | `1.2.5` | `1.2.6` |
| [rails-autoscale-web](https://github.com/judoscale/judoscale-ruby) | `1.11.1` | `1.12.1` |
| [lograge](https://github.com/roidrage/lograge) | `0.3.6` | `0.14.0` |
| [recaptcha](https://github.com/ambethia/recaptcha) | `5.19.0` | `5.21.1` |
| [barnes](https://github.com/heroku/barnes) | `0.0.8` | `0.0.9` |
| [has_scope](https://github.com/heartcombo/has_scope) | `0.8.2` | `0.9.0` |
| [globalid](https://github.com/rails/globalid) | `1.2.1` | `1.3.0` |
| [js-routes](https://github.com/railsware/js-routes) | `2.2.7` | `2.3.5` |



Updates `rake` from 13.2.1 to 13.3.1
- [Release notes](https://github.com/ruby/rake/releases)
- [Changelog](https://github.com/ruby/rake/blob/master/History.rdoc)
- [Commits](ruby/rake@v13.2.1...v13.3.1)

Updates `rails` from 7.1.5.2 to 7.1.6
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](rails/rails@v7.1.5.2...v7.1.6)

Updates `jbuilder` from 2.13.0 to 2.14.1
- [Release notes](https://github.com/rails/jbuilder/releases)
- [Commits](rails/jbuilder@v2.13.0...v2.14.1)

Updates `bootsnap` from 1.18.4 to 1.19.0
- [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md)
- [Commits](rails/bootsnap@v1.18.4...v1.19.0)

Updates `test-unit` from 3.2.7 to 3.7.3
- [Release notes](https://github.com/test-unit/test-unit/releases)
- [Commits](test-unit/test-unit@3.2.7...3.7.3)

Updates `aws-sdk-s3` from 1.113.0 to 1.206.0
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `json` from 2.12.2 to 2.17.1
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](ruby/json@v2.12.2...v2.17.1)

Updates `rack-attack` from 6.5.0 to 6.8.0
- [Release notes](https://github.com/rack/rack-attack/releases)
- [Changelog](https://github.com/rack/rack-attack/blob/main/CHANGELOG.md)
- [Commits](rack/rack-attack@v6.5.0...v6.8.0)

Updates `pg` from 1.5.9 to 1.6.2
- [Changelog](https://github.com/ged/ruby-pg/blob/master/CHANGELOG.md)
- [Commits](ged/ruby-pg@v1.5.9...v1.6.2)

Updates `dalli` from 3.2.3 to 3.2.8
- [Changelog](https://github.com/petergoldstein/dalli/blob/main/CHANGELOG.md)
- [Commits](petergoldstein/dalli@v3.2.3...v3.2.8)

Updates `carrierwave` from 3.1.1 to 3.1.2
- [Release notes](https://github.com/carrierwaveuploader/carrierwave/releases)
- [Changelog](https://github.com/carrierwaveuploader/carrierwave/blob/master/CHANGELOG.md)
- [Commits](carrierwaveuploader/carrierwave@v3.1.1...v3.1.2)

Updates `mini_magick` from 5.2.0 to 5.3.1
- [Release notes](https://github.com/minimagick/minimagick/releases)
- [Commits](minimagick/minimagick@v5.2.0...v5.3.1)

Updates `httparty` from 0.21.0 to 0.23.2
- [Release notes](https://github.com/jnunemaker/httparty/releases)
- [Changelog](https://github.com/jnunemaker/httparty/blob/main/Changelog.md)
- [Commits](jnunemaker/httparty@v0.21.0...v0.23.2)

Updates `devise-two-factor` from 6.1.0 to 6.2.0
- [Changelog](https://github.com/devise-two-factor/devise-two-factor/blob/main/CHANGELOG.md)
- [Commits](devise-two-factor/devise-two-factor@v6.1.0...v6.2.0)

Updates `geocoder` from 1.6.1 to 1.8.6
- [Changelog](https://github.com/alexreisner/geocoder/blob/master/CHANGELOG.md)
- [Commits](alexreisner/geocoder@v1.6.1...v1.8.6)

Updates `table_print` from 1.5.4 to 1.5.7
- [Commits](https://github.com/arches/table_print/commits)

Updates `rexml` from 3.4.2 to 3.4.4
- [Release notes](https://github.com/ruby/rexml/releases)
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md)
- [Commits](ruby/rexml@v3.4.2...v3.4.4)

Updates `csv` from 3.3.4 to 3.3.5
- [Release notes](https://github.com/ruby/csv/releases)
- [Changelog](https://github.com/ruby/csv/blob/main/NEWS.md)
- [Commits](ruby/csv@v3.3.4...v3.3.5)

Updates `maintenance_tasks` from 2.12.0 to 2.13.0
- [Release notes](https://github.com/Shopify/maintenance_tasks/releases)
- [Commits](Shopify/maintenance_tasks@v2.12.0...v2.13.0)

Updates `terser` from 1.2.5 to 1.2.6
- [Release notes](https://github.com/ahorek/terser-ruby/releases)
- [Changelog](https://github.com/ahorek/terser-ruby/blob/master/CHANGELOG.md)
- [Commits](ahorek/terser-ruby@1.2.5...1.2.6)

Updates `rails-autoscale-web` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/judoscale/judoscale-ruby/releases)
- [Changelog](https://github.com/judoscale/judoscale-ruby/blob/main/CHANGELOG.md)
- [Commits](judoscale/judoscale-ruby@v1.11.1...v1.12.1)

Updates `lograge` from 0.3.6 to 0.14.0
- [Release notes](https://github.com/roidrage/lograge/releases)
- [Changelog](https://github.com/roidrage/lograge/blob/master/CHANGELOG.md)
- [Commits](roidrage/lograge@v0.3.6...v0.14.0)

Updates `recaptcha` from 5.19.0 to 5.21.1
- [Changelog](https://github.com/ambethia/recaptcha/blob/master/CHANGELOG.md)
- [Commits](ambethia/recaptcha@v5.19.0...v5.21.1)

Updates `barnes` from 0.0.8 to 0.0.9
- [Release notes](https://github.com/heroku/barnes/releases)
- [Changelog](https://github.com/heroku/barnes/blob/main/CHANGELOG.md)
- [Commits](heroku/barnes@v0.0.8...v0.0.9)

Updates `has_scope` from 0.8.2 to 0.9.0
- [Release notes](https://github.com/heartcombo/has_scope/releases)
- [Changelog](https://github.com/heartcombo/has_scope/blob/main/CHANGELOG.md)
- [Commits](heartcombo/has_scope@v0.8.2...v0.9.0)

Updates `globalid` from 1.2.1 to 1.3.0
- [Release notes](https://github.com/rails/globalid/releases)
- [Commits](rails/globalid@v1.2.1...v1.3.0)

Updates `js-routes` from 2.2.7 to 2.3.5
- [Release notes](https://github.com/railsware/js-routes/releases)
- [Changelog](https://github.com/railsware/js-routes/blob/main/CHANGELOG.md)
- [Commits](railsware/js-routes@v2.2.7...v2.3.5)

Updates `actionpack` from 7.1.5.2 to 7.1.6
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.1/actionpack/CHANGELOG.md)
- [Commits](rails/rails@v7.1.5.2...v7.1.6)

Updates `activerecord` from 7.1.5.2 to 7.1.6
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.1/activerecord/CHANGELOG.md)
- [Commits](rails/rails@v7.1.5.2...v7.1.6)

---
updated-dependencies:
- dependency-name: rake
  dependency-version: 13.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: rails
  dependency-version: 7.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: jbuilder
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: bootsnap
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: test-unit
  dependency-version: 3.7.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: aws-sdk-s3
  dependency-version: 1.206.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: json
  dependency-version: 2.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: rack-attack
  dependency-version: 6.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: pg
  dependency-version: 1.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: dalli
  dependency-version: 3.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: carrierwave
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: mini_magick
  dependency-version: 5.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: httparty
  dependency-version: 0.23.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: devise-two-factor
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: geocoder
  dependency-version: 1.8.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: table_print
  dependency-version: 1.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: rexml
  dependency-version: 3.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: csv
  dependency-version: 3.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: maintenance_tasks
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: terser
  dependency-version: 1.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: rails-autoscale-web
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: lograge
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: recaptcha
  dependency-version: 5.21.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: barnes
  dependency-version: 0.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: has_scope
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: globalid
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: js-routes
  dependency-version: 2.3.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: actionpack
  dependency-version: 7.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: activerecord
  dependency-version: 7.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Dec 8, 2025
@dependabot dependabot bot requested a review from wwahammy as a code owner December 8, 2025 02:10
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Dec 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@wwahammy wwahammy Awaiting requested review from wwahammy wwahammy is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants