Skip to content

Bump the production-dependencies-minor group across 1 directory with 30 updates - #1381

Open
dependabot[bot] wants to merge 1 commit into
supporter_level_goalfrom
dependabot/bundler/production-dependencies-minor-8f42e8f14c
Open

Bump the production-dependencies-minor group across 1 directory with 30 updates#1381
dependabot[bot] wants to merge 1 commit into
supporter_level_goalfrom
dependabot/bundler/production-dependencies-minor-8f42e8f14c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 19, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the production-dependencies-minor group with 28 updates in the / directory:

Package From To
rake 13.3.1 13.4.2
rails 7.1.5.2 7.1.6
jbuilder 2.13.0 2.15.1
bootsnap 1.18.4 1.24.6
test-unit 3.2.7 3.7.8
aws-sdk-s3 1.208.0 1.228.0
json 2.12.2 2.21.1
yaaf 3.0.2 3.1.0
rack-attack 6.5.0 6.8.0
pg 1.5.9 1.6.3
carrierwave-aws 1.6.0 1.6.1
mini_magick 5.2.0 5.3.2
httparty 0.24.0 0.24.2
devise-two-factor 6.1.0 6.3.1
geocoder 1.6.1 1.8.6
table_print 1.5.4 1.5.7
rexml 3.4.2 3.4.4
csv 3.3.4 3.3.5
maintenance_tasks 2.12.0 2.16.0
minitest 5.25.5 5.27.0
terser 1.2.5 1.2.8
lograge 0.3.6 0.15.0
recaptcha 5.19.0 5.21.2
fx 0.9.0 0.11.0
rails 7.1.6 8.1.3
rails-i18n 7.0.10 8.1.0
has_scope 0.8.2 0.9.0
globalid 1.2.1 1.4.0
js-routes 2.2.7 2.4.1

Updates rake from 13.3.1 to 13.4.2

Commits
  • 503b8ec v13.4.2
  • 46038e7 Merge pull request #723 from ruby/fix/testopts-preserve-existing-value
  • 604a3d9 Isolate TESTOPTS env in TestRakeTestTask setup/teardown
  • 5886caa Preserve ENV["TESTOPTS"] when verbose is enabled
  • 92193ac v13.4.1
  • b74be0b Merge pull request #721 from ruby/fix/add-options-to-gemspec
  • 829f66d Add lib/rake/options.rb to gemspec
  • 2d55bc4 v13.4.0
  • 1415070 Exclude dependabot updates from release note
  • b3dc948 Merge pull request #713 from pvdb/simplify_standard_system_dir
  • Additional commits viewable in compare view

Updates rails from 7.1.5.2 to 7.1.6

Release notes

Sourced from rails's releases.

7.1.6

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • Gracefully handle Timeout.timeout firing during connection configuration.

    Use of Timeout.timeout could result in improperly initialized database connection.

    This could lead to a partially configured connection being used, resulting in various exceptions, the most common being with the PostgreSQLAdapter raising undefined method key?' for nil or TypeError: wrong argument type nil (expected PG::TypeMap)`.

    Jean Boussier

  • Fix error handling during connection configuration.

    Active Record wasn't properly handling errors during the connection configuration phase. This could lead to a partially configured connection being used, resulting in various exceptions, the most common being with the PostgreSQLAdapter raising undefined method key?' for nil or TypeError: wrong argument type nil (expected PG::TypeMap)`.

    Jean Boussier

  • Fix prepared statements on mysql2 adapter.

    Jean Boussier

  • Fix a race condition in ActiveRecord::Base#method_missing when lazily defining attributes.

    If multiple thread were concurrently triggering attribute definition on the same model, it could result in a NoMethodError being raised.

    Jean Boussier

Action View

  • No changes.

Action Pack

... (truncated)

Commits
  • ffcbf6f Preparing for 7.1.6 release
  • 10a0f90 Upgrade sigstore gem to 0.2.2
  • 4df996b Sync changelog
  • 310c904 Merge pull request #55570 from zzak/8-0-sidekiq-issues
  • c274de0 Merge pull request #55747 from skipkayhil/hm-kwzpqqkssmwtsunu
  • 1d82970 Add the Action Cable configuration
  • 8323dd6 Merge pull request #54164 from zzak/asto-test-mini_magick-deprecation-warning
  • 4eb8085 Merge pull request #55812 from yahonda/bump-microsoftedge-version-to-latest
  • d100e46 Don't load action cable in the activestorage dummy app
  • 91fc9b2 Don't load sprockets-rails and propshaft in the same application
  • Additional commits viewable in compare view

Updates jbuilder from 2.13.0 to 2.15.1

Release notes

Sourced from jbuilder's releases.

v2.15.1

What's Changed

New Contributors

Full Changelog: rails/jbuilder@v2.15.0...v2.15.1

v2.15.0

What's Changed

New Contributors

Full Changelog: rails/jbuilder@v2.14.1...v2.15.0

v2.14.1

What's Changed

New Contributors

Full Changelog: rails/jbuilder@v2.14.0...v2.14.1

v2.14.0

What's Changed

... (truncated)

Commits
  • 31eb6e9 Prepare for 2.15.1
  • 154b0fe Merge pull request #617 from rails/rm-fix-616
  • d3e763b Fix partial for Active Model when extra locals are passed in
  • 018083d Prepare for 2.15.0
  • 72cf067 Update devcontainer image to Ruby 4.0.4 and add devcontainer-lock.json
  • d35a962 Merge pull request #615 from taketo1113/ci-rails8.1-ruby4.0
  • cc42e7e CI: Add Rails 8.1 & Ruby 4.0 to CI Matrix
  • cd7482e Merge pull request #613 from affinity/moberegger/fix-inline-partial-locals-be
  • 58283a0 Merge pull request #612 from affinity/moberegger/optimize-_map_collection
  • 09ca3e1 Merge pull request #603 from taketo1113/update-rack-unprocessable_content
  • Additional commits viewable in compare view

Updates bootsnap from 1.18.4 to 1.24.6

Release notes

Sourced from bootsnap's releases.

v1.24.4

What's Changed

  • Fix several compatibility issues with Ruby 4.0.4, particularly the should not compile with coverage error. See #547.
  • Fix Bootsnap.enable_frozen_string_literal to work even when coverage is enabled. Unfortunately only possible on Ruby 4.0.4+. On older rubies if coverage is enabled a warning will be issued and the feature won't work.
  • Reduced cache files header size from 64 to 32 bytes, and got rid of the random padding element.
  • Avoid leaking a private method in Object when testing for Parse.y bugs.

Full Changelog: rails/bootsnap@v1.24.3...v1.24.4

v1.24.3

  • Fix the 1.24.2 workaround to parse Ruby files with UTF-8 even when the LANG environment variable is unset or set to C.

Full Changelog: rails/bootsnap@v1.24.2...v1.24.3

v1.24.2

What's Changed

  • Workaround two Ruby bugs in RubyVM::InstructionSequence.compile_file, that were causing files to be loaded with the old Ruby parser instead of Prism, causing issues with some pattern matching syntax. Ref: https://bugs.ruby-lang.org/issues/22023

Full Changelog: rails/bootsnap@v1.24.1...v1.24.2

v1.24.1

What's Changed

  • Fix encoding of Ruby source files loaded when BOOTSNAP_READONLY is set. Files would incorectly be loaded in ASCII-8BIT causing literal strings outside the pure ASCII range to have ASCII-8BIT encoding instead of UTF-8. This bug was introduced in 1.24.0.

Full Changelog: rails/bootsnap@v1.24.0...v1.24.1

v1.24.0

What's Changed

  • Added a hook API to customize Ruby compilation.

Full Changelog: rails/bootsnap@v1.23.0...v1.24.0

v1.23.0

What's Changed

  • Require Ruby 2.7.
  • Fix support for absolute paths in BOOTSNAP_IGNORE_DIRECTORIES.

... (truncated)

Changelog

Sourced from bootsnap's changelog.

1.24.6

  • Fix detection of Ruby bug #22023 on some patch versions of Ruby 3.4, and properly apply the workaround.

1.24.5

  • No longer load the config file by default when setup is done manually. This is so cli applications like homebrew don't mistakenly load another app's boostnap config.

1.24.4

  • Fix several compatibility issues with Ruby 4.0.4, particularly the should not compile with coverage error. See #547.
  • Fix Bootsnap.enable_frozen_string_literal to work even when coverage is enabled. Unfortunately only possible on Ruby 4.0.4+. On older rubies if coverage is enabled a warning will be issued and the feature won't work.
  • Reduced cache files header size from 64 to 32 bytes, and got rid of the random padding element.
  • Avoid leaking a private method in Object when testing for Parse.y bugs.

1.24.3

  • Fix the 1.24.2 workaround to parse Ruby files with UTF-8 even when the LANG environment variable is unset or set to C.

1.24.2

  • Workaround two Ruby bugs in RubyVM::InstructionSequence.compile_file, that were causing files to be loaded with the old Ruby parser instead of Prism, causing issues with some pattern matching syntax. Ref: https://bugs.ruby-lang.org/issues/22023

1.24.1

  • Fix encoding of Ruby source files loaded when BOOTSNAP_READONLY is set. Files would incorectly be loaded in ASCII-8BIT causing literal strings outside the pure ASCII range to have ASCII-8BIT encoding instead of UTF-8. This bug was introduced in 1.24.0.

1.24.0

  • Added a hook API to customize Ruby compilation.

1.23.0

  • Require Ruby 2.7.
  • Fix support for absolute paths in BOOTSNAP_IGNORE_DIRECTORIES.

1.22.0

  • Better fix for the opendir crash.
  • Add bootsnap/rake for cleaning the bootsnap cache as part of rake clobber.

1.21.1

... (truncated)

Commits
  • 026e183 Release 1.24.6
  • 263e346 Merge pull request #556 from byroot/remove-canary
  • 7c31cd8 Check for [Bug #22023] by checking Ruby version rather than a canary
  • 54eba76 Merge pull request #554 from byroot/namespace-overflow
  • fe963d5 bs_cache_path: account for namespace length
  • 7b42db6 Merge pull request #553 from arpitjain099/chore/declare-workflow-perms
  • 113b184 ci: add permissions: contents: read to ci
  • d6ca050 Release 1.24.5
  • 579aa0e Merge pull request #552 from byroot/fix-bootsnap-config
  • 2884e89 Only load config file is directed to by .setup
  • Additional commits viewable in compare view

Updates test-unit from 3.2.7 to 3.7.8

Release notes

Sourced from test-unit's releases.

test-unit 3.7.8 - 2026-06-05

Improvements

  • parallel: process: Improved performance on Windows.

  • Improved compatibility with Ruby::Box on $!.

    • GH-370
    • Patch by MATSUMOTO Katsuyoshi

  • doc: Added a process option in parallel options.

  • Improved the -I option. You can prepend load paths to prioritize your development library over the system library.

Thanks

  • MATSUMOTO Katsuyoshi

test-unit 3.7.7 - 2026-01-01

Fixes

  • Fixed a bug that NoMemoryError occurred with RBS tests + MSVC Ruby.

Thanks

  • Nobuyoshi Nakada

test-unit 3.7.6 - 2025-12-25

Fixes

  • Fixed a bug that sub_test_case may cause a runtime error. This also covers a minor case.

test-unit 3.7.5 - 2025-12-24

Fixes

  • Fixed a bug that sub_test_case may cause a runtime error.

... (truncated)

Commits

Updates aws-sdk-s3 from 1.208.0 to 1.228.0

Changelog

Sourced from aws-sdk-s3's changelog.

1.228.0 (2026-07-16)

  • Feature - Documentation update for removing the 30 day minimum restriction for transition to Standard-IA or OneZone-IA storage classes

1.227.0 (2026-07-09)

  • Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

1.226.0 (2026-06-16)

  • Feature - Added support for annotations. You can now attach up to 1000 annotations (up to 1 MB each) directly to objects and create, retrieve, list, and delete them using new annotation APIs. Also added support for configuring an annotation table in S3 Metadata.

  • Feature - Multipart copies now support tags_directive, annotations_directive, and metadata_directive options for controlling which source properties are copied to the destination.

  • Issue - Fix error when performing cross-region multipart copies with copy_source_region.

1.225.1 (2026-06-10)

  • Issue - Fix download_file single-request mode not writing to a temporary file when given a String/Pathname destination.

1.225.0 (2026-06-02)

  • Feature - Adding new BDD representation of endpoint ruleset

1.224.0 (2026-05-21)

  • Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

1.223.0 (2026-05-19)

  • Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

1.222.0 (2026-05-13)

  • Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

1.221.0 (2026-05-06)

  • Feature - Validate outpost access point resource name

1.220.0 (2026-04-22)

... (truncated)

Commits

Updates json from 2.12.2 to 2.21.1

Release notes

Sourced from json's releases.

v2.21.0

What's Changed

  • JSON.generate now accept a sort_keys option, which takes either a boolean or a block.
  • Added #empty? and #partial_value? methods on JSON::ResumableParser.
  • Numerous correctness and performance fixes for JSON::ResumableParser.
  • Avoid triggering Ruby's float out of range warning when parsing out of range numbers.
  • Declare C types with Ruby 4.1 RUBY_TYPED_THREAD_SAFE_FREE.

Full Changelog: ruby/json@v2.20.0...v2.21.0

v2.20.0

What's Changed

  • Both C and Java parsers are no longer recursive, so parsing very deep documents with max_nesting: false will no longer result in SystemStackError stack level too deep errors.
    • The :max_nesting option still defaults to 100.
  • Optimized floating point number parsing further by replacing the ryu algorithm by a port of Eisel-Lemire Fast Float.
  • Added JSON::ResumableParser to parse streams of JSON documents. Not yet available on JRuby.
  • Deprecate default support of JavaScript comments in the parser and add allow_comments: true parsing option.
  • Integrate with Ruby 4.1 ruby_sized_xfree.

Full Changelog: ruby/json@v2.19.8...v2.20.0

v2.19.9

  • Fix buffer overflow that could lead to a crash when writing JSON directly into an IO with JSON.generate(object, io). [CVE-2026-54696].

Full Changelog: ruby/json@v2.19.8...v2.19.9

v2.19.8

What's Changed

  • Fix 1-byte buffer overread on EOS errors.
  • Handle invalid types passed as max_nesting option.

Full Changelog: ruby/json@v2.19.7...v2.19.8

v2.19.7

What's Changed

  • Fix some more edge cases with out of range floats.
  • Ensure the string provided to JSON.parse can't be mutated during parsing.
  • Add missing write barriers in State#dup.
  • Further validate generator depth config.

Full Changelog: ruby/json@v2.19.6...v2.19.7

v2.19.6

What's Changed

... (truncated)

Changelog

Sourced from json's changelog.

2026-07-13 (2.21.1)

  • Fix a compilation issue on Window and Microsoft Visual C++.

2026-07-12 (2.21.0)

  • JSON.generate now accept a sort_keys option, which takes either a boolean or a block.
  • Added #empty? and #partial_value? methods on JSON::ResumableParser.
  • Numerous correctness and performance fixes for JSON::ResumableParser.
  • Avoid triggering Ruby's float out of range warning when parsing out of range numbers.
  • Declare C types with Ruby 4.1 RUBY_TYPED_THREAD_SAFE_FREE.

2026-06-23 (2.20.0)

  • Both C and Java parsers are no longer recursive, so parsing very deep documents with max_nesting: false will no longer result in SystemStackError stack level too deep errors.
    • The :max_nesting option still defaults to 100.
  • Optimized floating point number parsing further by replacing the ryu algorithm by a port of Eisel-Lemire Fast Float.
  • Added JSON::ResumableParser to parse streams of JSON documents. Not yet available on JRuby.
  • Deprecate default support of JavaScript comments in the parser and add allow_comments: true parsing option.
  • Integrate with Ruby 4.1 ruby_sized_xfree.

2026-06-11 (2.19.9)

  • Fix buffer overflow that could lead to a crash when writing JSON directly into an IO with JSON.generate(object, io). [CVE-2026-54696].

2026-06-03 (2.19.8)

  • Fix 1-byte buffer overread on EOS errors.
  • Handle invalid types passed as max_nesting option.

2026-05-28 (2.19.7)

  • Fix some more edge cases with out of range floats.
  • Ensure the string provided to JSON.parse can't be mutated during parsing.
  • Add missing write barriers in State#dup.
  • Further validate generator depth config.

2026-05-28 (2.19.6)

  • Cleanly handle overly large depth generator argument.
  • Add missing write barrier in ParserConfig.

2026-05-04 (2.19.5)

  • Cap the parser to emit a maximum of 5 deprecation warnings per document. Emitting more is not helpful.

2026-04-19 (2.19.4)

... (truncated)

Commits
  • fd61def Release 2.21.1
  • db70b14 Rely on Ruby's HAVE_BUILTIN___BUILTIN_CLZLL
  • 9be0e8e Release 2.21.0
  • d1299d4 Avoid re-decoding an incomplete number on every ResumableParser chunk
  • cc010c4 Fix ResumableParser losing tokens before a feed-boundary suspension
  • 0864e83 Add JSON::ResumableParser#partial_value? and #empty?
  • 9dbfeb8 Fix ResumableParser treating unterminated line comments as complete
  • ea008e8 Add a sort_keys option to the generator.
  • 94c1af2 Fix ResumableParser#partial_value SEGV on incomplete nested containers
  • faa5572 Fix a few inconsistencies in readme
  • Additional commits viewable in compare view

Updates yaaf from 3.0.2 to 3.1.0

Release notes

Sourced from yaaf's releases.

v3.1.0

What's Changed

Warning

After these changes, using attributes as an attr_accessor (e.g. attr_accessor :attributes) in form objects is no longer valid and may cause issues.

New Contributors

Full Changelog: rootstrap/yaaf@v3.0.2...v3.1.0

Commits

Updates rack-attack from 6.5.0 to 6.8.0

Release notes

Sourced from rack-attack's releases.

v6.8.0

What's Changed

Changed

  • Avoid RedisCacheStore#increment on Rails 6+ (which might improve performance) by @​jdelStrother (#597)

Fixed

Deprecated

  • Soft deprecate integration with rack 1.x, may or may not work with it.
  • Soft deprecate integration with rails 5.2 or less, may or may not work with it.

Removed

New Contributors

Full Changelog: rack/rack-attack@v6.7.0...v6.8.0

v6.7.0

What's Changed

New Contributors

Full Changelog: rack/rack-attack@v6.6.1...v6.7.0

... (truncated)

Changelog

Sourced from rack-attack's changelog.

[6.8.0] - 2025-10-14

Changed

  • Avoid RedisCacheStore#increment on Rails 6+ (which might improve performance) by @​jdelStrother (#597)

Fixed

Deprecated

  • Soft deprecate integration with rack 1.x, may or may not work with it.
  • Soft deprecate integration with rails 5.2 or less, may or may not work with it.

Removed

[6.7.0] - 2023-07-26

[6.6.1] - 2022-04-14

Fixed

  • Fixes deprecation warning in redis 4.6+ ([@​ixti])

[6.6.0] - 2022-01-29

Added

  • Ability to have access to the request object instead of only env (still can access env with request.env) when customizing throttle and blocklist responses with new methods Rack::Attack.blocklisted_responder= and Rack::Attack.throttled_responder= which yield the request to your lambda. ([@​NikolayRys])

Deprecated

  • Rack::Attack.blocklisted_response=
  • Rack::Attack.throttled_response=
Commits

Updates pg from 1.5.9 to 1.6.3

Changelog

Sourced from pg's changelog.

v1.6.3 [2025-12-29] Lars Kanis lars@greiz-reinsdorf.de

Added:

  • Add binary gems for ruby-4.0, now providing ruby-3.0 to 4.0. #682
  • Update fat binary gem to OpenSSL-3.6.0 and PostgreSQL-18.1.
  • Improve documentation of PG::Result and README. #676
  • Update errorcodes to PostgreSQL-18.
  • Use rb_hash_new_capa on Ruby-3.2+ . #674
  • Deny any server communication on a frozen PG::Connection . #677
  • Fix possible race condition in PG::Result in Ractor context. #674

Removed:

  • Drop binary gem support for platform x86-mingw32. #682
  • Drop binary gems for ruby-2.7.

v1.6.2 [2025-09-02] Lars Kanis lars@greiz-reinsdorf.de

  • Remove several absolute paths from native binaries which pointed to build directories. #668
  • Fix bad fallback path to pg_service.conf. #666
  • Use rbpg_ prefix for base64_* functions to avoid name clashes with functions provided by other libraries like Heimdal on Macos. #667
  • Raise a more descriptive error message in case of pg_ext LoadError. #664
  • Freeze some constants to make them available in a Ractor context. #660
  • Several documentation improvements.
  • Update native binary gems to OpenSSL-3.5.2, krb5-1.22.1 and PostgreSQL-17.6.

v1.6.1 [2025-08-03] Lars Kanis lars@greiz-reinsdorf.de

  • Add binary gems for platforms aarch64-linux-musl and x86_64-linux-musl without the need to install package gcompat. #657.
  • Serialize CompositeCoder#dimensions only when set. #652 This fixes the compatibility to pg-1.5.9, when deserializing Marshal data from pg-1.6, as long as the new attribute isn't used.
  • Remove dependency to MSYS2 package "postgresql" from binary Windows gem #654

v1.6.0 [2025-07-27] Lars Kanis lars@greiz-reinsdorf.de

Added:

  • Add binary gems for Ruby 3.4.
  • Add fat binary gem for platform aarch64-mingw-ucrt aka Windows on ARM #626, for platform Macos on Intel and ARM #643, for platform aarch64-linux #646 and for platform x86_64-linux #551.
  • Update fat binary gem to OpenSSL-3.5.1 and PostgreSQL-17.5.
  • Add a patch to libpq to avoid starvation on bigger SSL records, which some database engines other than vanilla PostgreSQL use. This patch applies to platform specific binary gems only. #616
  • Add support for new query cancel functions of PostgreSQL-17. This adds the new class PG::CancelConnection which provides the ability to cancel a query per blocking or per non-blocking functions. If the new functions are available they are used and the older are no longer compiled in.

... (truncated)

Commits
  • d4539c2 Bump VERSION to pg-1.6.3 and add release notes
  • 720900d Merge pull request #682 from larskanis/ruby-4.0
  • f605b59 Remove x86-mingw32 from binary builds
  • 5c69000 Update to ruby-4.0
  • 2acaf3d CI: workaround missing ruby-4.0 on Window
  • b500ded fix comment
  • bc3f2f8 CI: Macos-13 on Intel is deprecated
  • 77667eb Merge pull request #678 from larskanis/ci-update
  • 6e52ce5 CI: Update PostgreSQL on Macos
  • 6d40f50 CI: Print mkmf.log on failure on Macos
  • Additional commits viewable in compare view

Updates carrierwave-aws from 1.6.0 to 1.6.1

Changelog

Sourced from carrierwave-aws's changelog.

Version 1.6.1 2026-01-10

  • Fixed: Replace deprecated Aws::S3::Object#upload_file with TransferManager if available [Jules, Foto]
  • Fixed: Correct typo MULTIPART_TRESHOLD to MULTIPART_THRESHOLD [Naoki Hayashida]
Commits

Updates mini_magick from 5.2.0 to 5.3.2

Release notes

Sourced from mini_magick's releases.

v5.3.2

  • Restored instantiating legacy MiniMagick::Tool::* classes for backwards compatibility, which got broken in 5.0.
  • Reintroduced manual timeouts instead of relying on $MAGICK_TIME_LIMIT, which wasn't reliably enforcing the timeout (and isn't compatible with GraphicsMagick).

v5.3.1

  • Fixed MiniMagick.cli_prefix being mutated when set to an array.

v5.3.0

  • Actually require Ruby 2.5+ in the gemspec.
  • Fix Ruby 2.5 compatibility when using MiniMagick.restricted_env configuration.
  • Drop benchmark dependency.
  • Fix keyword argument forwarding when trying to call MiniMagick.compare(errors: false)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jul 19, 2026
@dependabot
dependabot Bot requested a review from wwahammy as a code owner July 19, 2026 00:42
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jul 19, 2026
@dependabot dependabot Bot changed the title Bump the production-dependencies-minor group with 30 updates Bump the production-dependencies-minor group across 1 directory with 30 updates Jul 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/bundler/production-dependencies-minor-8f42e8f14c branch from 6cead02 to d3a2c96 Compare July 20, 2026 14:30
@dependabot
Bump the production-dependencies-minor group across 1 directory with …
96d6a1e 
…30 updates

Bumps the production-dependencies-minor group with 28 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [rake](https://github.com/ruby/rake) | `13.3.1` | `13.4.2` |
| [rails](https://github.com/rails/rails) | `7.1.5.2` | `7.1.6` |
| [jbuilder](https://github.com/rails/jbuilder) | `2.13.0` | `2.15.1` |
| [bootsnap](https://github.com/rails/bootsnap) | `1.18.4` | `1.24.6` |
| [test-unit](https://github.com/test-unit/test-unit) | `3.2.7` | `3.7.8` |
| [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) | `1.208.0` | `1.228.0` |
| [json](https://github.com/ruby/json) | `2.12.2` | `2.21.1` |
| [yaaf](https://github.com/rootstrap/yaaf) | `3.0.2` | `3.1.0` |
| [rack-attack](https://github.com/rack/rack-attack) | `6.5.0` | `6.8.0` |
| [pg](https://github.com/ged/ruby-pg) | `1.5.9` | `1.6.3` |
| [carrierwave-aws](https://github.com/sorentwo/carrierwave-aws) | `1.6.0` | `1.6.1` |
| [mini_magick](https://github.com/minimagick/minimagick) | `5.2.0` | `5.3.2` |
| [httparty](https://github.com/jnunemaker/httparty) | `0.24.0` | `0.24.2` |
| [devise-two-factor](https://github.com/tinfoil/devise-two-factor) | `6.1.0` | `6.3.1` |
| [geocoder](https://github.com/alexreisner/geocoder) | `1.6.1` | `1.8.6` |
| [table_print](https://github.com/arches/table_print) | `1.5.4` | `1.5.7` |
| [rexml](https://github.com/ruby/rexml) | `3.4.2` | `3.4.4` |
| [csv](https://github.com/ruby/csv) | `3.3.4` | `3.3.5` |
| [maintenance_tasks](https://github.com/Shopify/maintenance_tasks) | `2.12.0` | `2.16.0` |
| [minitest](https://github.com/minitest/minitest) | `5.25.5` | `5.27.0` |
| [terser](https://github.com/ahorek/terser-ruby) | `1.2.5` | `1.2.8` |
| [lograge](https://github.com/roidrage/lograge) | `0.3.6` | `0.15.0` |
| [recaptcha](https://github.com/ambethia/recaptcha) | `5.19.0` | `5.21.2` |
| [fx](https://github.com/teoljungberg/fx) | `0.9.0` | `0.11.0` |
| [rails](https://github.com/rails/rails) | `7.1.6` | `8.1.3` |
| [rails-i18n](https://github.com/svenfuchs/rails-i18n) | `7.0.10` | `8.1.0` |
| [has_scope](https://github.com/heartcombo/has_scope) | `0.8.2` | `0.9.0` |
| [globalid](https://github.com/rails/globalid) | `1.2.1` | `1.4.0` |
| [js-routes](https://github.com/railsware/js-routes) | `2.2.7` | `2.4.1` |



Updates `rake` from 13.3.1 to 13.4.2
- [Release notes](https://github.com/ruby/rake/releases)
- [Changelog](https://github.com/ruby/rake/blob/master/History.rdoc)
- [Commits](ruby/rake@v13.3.1...v13.4.2)

Updates `rails` from 7.1.5.2 to 7.1.6
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](rails/rails@v7.1.5.2...v7.1.6)

Updates `jbuilder` from 2.13.0 to 2.15.1
- [Release notes](https://github.com/rails/jbuilder/releases)
- [Commits](rails/jbuilder@v2.13.0...v2.15.1)

Updates `bootsnap` from 1.18.4 to 1.24.6
- [Release notes](https://github.com/rails/bootsnap/releases)
- [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md)
- [Commits](rails/bootsnap@v1.18.4...v1.24.6)

Updates `test-unit` from 3.2.7 to 3.7.8
- [Release notes](https://github.com/test-unit/test-unit/releases)
- [Commits](test-unit/test-unit@3.2.7...3.7.8)

Updates `aws-sdk-s3` from 1.208.0 to 1.228.0
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `json` from 2.12.2 to 2.21.1
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](ruby/json@v2.12.2...v2.21.1)

Updates `yaaf` from 3.0.2 to 3.1.0
- [Release notes](https://github.com/rootstrap/yaaf/releases)
- [Commits](rootstrap/yaaf@v3.0.2...v3.1.0)

Updates `rack-attack` from 6.5.0 to 6.8.0
- [Release notes](https://github.com/rack/rack-attack/releases)
- [Changelog](https://github.com/rack/rack-attack/blob/main/CHANGELOG.md)
- [Commits](rack/rack-attack@v6.5.0...v6.8.0)

Updates `pg` from 1.5.9 to 1.6.3
- [Changelog](https://github.com/ged/ruby-pg/blob/master/CHANGELOG.md)
- [Commits](ged/ruby-pg@v1.5.9...v1.6.3)

Updates `carrierwave-aws` from 1.6.0 to 1.6.1
- [Release notes](https://github.com/sorentwo/carrierwave-aws/releases)
- [Changelog](https://github.com/carrierwaveuploader/carrierwave-aws/blob/master/CHANGELOG.md)
- [Commits](carrierwaveuploader/carrierwave-aws@v1.6.0...v1.6.1)

Updates `mini_magick` from 5.2.0 to 5.3.2
- [Release notes](https://github.com/minimagick/minimagick/releases)
- [Commits](minimagick/minimagick@v5.2.0...v5.3.2)

Updates `httparty` from 0.24.0 to 0.24.2
- [Release notes](https://github.com/jnunemaker/httparty/releases)
- [Changelog](https://github.com/jnunemaker/httparty/blob/main/Changelog.md)
- [Commits](jnunemaker/httparty@v0.24.0...v0.24.2)

Updates `devise-two-factor` from 6.1.0 to 6.3.1
- [Release notes](https://github.com/tinfoil/devise-two-factor/releases)
- [Changelog](https://github.com/devise-two-factor/devise-two-factor/blob/main/CHANGELOG.md)
- [Commits](devise-two-factor/devise-two-factor@v6.1.0...v6.3.1)

Updates `geocoder` from 1.6.1 to 1.8.6
- [Changelog](https://github.com/alexreisner/geocoder/blob/master/CHANGELOG.md)
- [Commits](alexreisner/geocoder@v1.6.1...v1.8.6)

Updates `table_print` from 1.5.4 to 1.5.7
- [Commits](https://github.com/arches/table_print/commits)

Updates `rexml` from 3.4.2 to 3.4.4
- [Release notes](https://github.com/ruby/rexml/releases)
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md)
- [Commits](ruby/rexml@v3.4.2...v3.4.4)

Updates `csv` from 3.3.4 to 3.3.5
- [Release notes](https://github.com/ruby/csv/releases)
- [Changelog](https://github.com/ruby/csv/blob/main/NEWS.md)
- [Commits](ruby/csv@v3.3.4...v3.3.5)

Updates `maintenance_tasks` from 2.12.0 to 2.16.0
- [Release notes](https://github.com/Shopify/maintenance_tasks/releases)
- [Commits](Shopify/maintenance_tasks@v2.12.0...v2.16.0)

Updates `minitest` from 5.25.5 to 5.27.0
- [Changelog](https://github.com/minitest/minitest/blob/master/History.rdoc)
- [Commits](minitest/minitest@v5.25.5...v5.27.0)

Updates `terser` from 1.2.5 to 1.2.8
- [Release notes](https://github.com/ahorek/terser-ruby/releases)
- [Changelog](https://github.com/ahorek/terser-ruby/blob/master/CHANGELOG.md)
- [Commits](ahorek/terser-ruby@1.2.5...1.2.8)

Updates `lograge` from 0.3.6 to 0.15.0
- [Changelog](https://github.com/roidrage/lograge/blob/master/CHANGELOG.md)
- [Commits](roidrage/lograge@v0.3.6...v0.15.0)

Updates `recaptcha` from 5.19.0 to 5.21.2
- [Changelog](https://github.com/ambethia/recaptcha/blob/master/CHANGELOG.md)
- [Commits](ambethia/recaptcha@v5.19.0...v5.21.2)

Updates `fx` from 0.9.0 to 0.11.0
- [Release notes](https://github.com/teoljungberg/fx/releases)
- [Changelog](https://github.com/teoljungberg/fx/blob/master/CHANGELOG.md)
- [Commits](teoljungberg/fx@v0.9.0...v0.11.0)

Updates `rails` from 7.1.6 to 8.1.3
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](rails/rails@v7.1.5.2...v7.1.6)

Updates `rails-i18n` from 7.0.10 to 8.1.0
- [Changelog](https://github.com/svenfuchs/rails-i18n/blob/master/CHANGELOG.md)
- [Commits](svenfuchs/rails-i18n@v7.0.10...v8.1.0)

Updates `has_scope` from 0.8.2 to 0.9.0
- [Release notes](https://github.com/heartcombo/has_scope/releases)
- [Changelog](https://github.com/heartcombo/has_scope/blob/main/CHANGELOG.md)
- [Commits](heartcombo/has_scope@v0.8.2...v0.9.0)

Updates `globalid` from 1.2.1 to 1.4.0
- [Release notes](https://github.com/rails/globalid/releases)
- [Commits](rails/globalid@v1.2.1...v1.4.0)

Updates `js-routes` from 2.2.7 to 2.4.1
- [Release notes](https://github.com/railsware/js-routes/releases)
- [Changelog](https://github.com/railsware/js-routes/blob/main/CHANGELOG.md)
- [Commits](railsware/js-routes@v2.2.7...v2.4.1)

Updates `activerecord` from 7.1.5.2 to 8.1.3
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.3/activerecord/CHANGELOG.md)
- [Commits](rails/rails@v7.1.5.2...v8.1.3)

Updates `actionpack` from 7.1.5.2 to 8.1.3
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.3/actionpack/CHANGELOG.md)
- [Commits](rails/rails@v7.1.5.2...v8.1.3)

---
updated-dependencies:
- dependency-name: actionpack
  dependency-version: 8.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies-minor
- dependency-name: activerecord
  dependency-version: 8.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies-minor
- dependency-name: aws-sdk-s3
  dependency-version: 1.228.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: bootsnap
  dependency-version: 1.24.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: carrierwave-aws
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: csv
  dependency-version: 3.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: devise-two-factor
  dependency-version: 6.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: fx
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: geocoder
  dependency-version: 1.8.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: globalid
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: has_scope
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: httparty
  dependency-version: 0.24.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: jbuilder
  dependency-version: 2.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: js-routes
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: json
  dependency-version: 2.21.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: lograge
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: maintenance_tasks
  dependency-version: 2.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: minitest
  dependency-version: 5.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: mini_magick
  dependency-version: 5.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: pg
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: rack-attack
  dependency-version: 6.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: rails
  dependency-version: 7.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: rails
  dependency-version: 8.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies-minor
- dependency-name: rails-i18n
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies-minor
- dependency-name: rake
  dependency-version: 13.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: recaptcha
  dependency-version: 5.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: rexml
  dependency-version: 3.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: table_print
  dependency-version: 1.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: terser
  dependency-version: 1.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies-minor
- dependency-name: test-unit
  dependency-version: 3.7.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
- dependency-name: yaaf
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bundler/production-dependencies-minor-8f42e8f14c branch from d3a2c96 to 96d6a1e Compare July 20, 2026 17:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@wwahammy wwahammy Awaiting requested review from wwahammy wwahammy is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants