Bump the gems group across 1 directory with 15 updates by dependabot[bot] · Pull Request #26 · hackclub/fallen

dependabot · 2026-11-07T08:36:48Z

Bumps the gems group with 15 updates in the /platform directory:

Package	From	To
tzinfo-data	`1.2026.5`	`1.2026.6`
solid_queue	`1.7.0`	`1.7.2`
bootsnap	`1.26.0`	`1.26.1`
inertia_rails	`3.22.0`	`3.23.0`
alba	`4.0.0`	`4.0.2`
faraday	`2.14.4`	`2.15.1`
pagy	`43.7.0`	`43.8.1`
aws-sdk-s3	`1.233.2`	`1.237.0`
sentry-ruby	`7.1.0`	`7.2.0`
sentry-rails	`7.1.0`	`7.2.0`
vernier	`1.11.0`	`1.12.0`
mcp	`1.8.1`	`1.9.0`
bullet	`8.3.0`	`8.3.1`
annotaterb	`4.25.0`	`4.26.0`
selenium-webdriver	`4.51.0`	`4.52.0`

Updates tzinfo-data from 1.2026.5 to 1.2026.6

Release notes

Sourced from tzinfo-data's releases.

v1.2026.6

Based on version 2026f of the IANA Time Zone Database.

Commits

2726762 Update to tzdata version 2026f.
496785a Update actions/cache to v6 and actions/checkout to v7.
See full diff in compare view

Updates solid_queue from 1.7.0 to 1.7.2

Release notes

Sourced from solid_queue's releases.

v1.7.2

Summary

Concurrency-limited jobs now give their slot back only to the semaphore they got it from. That fixes a job that ran past its duration letting an extra job run alongside the next holder (#827). It also fixes jobs whose class goes missing during a deploy giving back a slot they never took, or keeping one they did take. Nothing needs migrating; see "Upgrading to version 1.7.2" for what to do before 2.0.

What's Changed

Give concurrency slots back only to the semaphore they came from by @rosa in rails/solid_queue#831

Full Changelog: rails/solid_queue@v1.7.1...v1.7.2

v1.7.1

Summary of changes

Process resilience

Processes stop and get replaced when their heartbeats keep failing past the alive threshold (#778).

The async supervisor replaces dead threads even if releasing their jobs fails during a database outage (#791, fixes #823).

Workers stop when finishing a job fails (#768).

Forked processes exit immediately, which avoids the exit hang on SQLite (#801).

The Puma plugin keeps shutting down when its output pipe is gone (#800, #737).

In async mode, in-flight jobs go back to the queue when shutdown times out (#815).

Jobs and concurrency

Jobs whose class no longer loads are failed with ClassMissingError instead of being dropped (#783).

Discarding ready jobs in bulk unblocks the jobs waiting behind them (#818).

Retrying failed jobs in bulk resets their retry counters (#817).

Concurrency locks are taken in key order when dispatching several jobs, which avoids deadlocks (#812).

One less query per enqueue (#819).

On MySQL, failed jobs with very large error messages no longer crash workers (#822).

Bulk-discarding claimed executions raises UndiscardableError instead of NameError (#828).

Batch completion errors no longer block the next job (#816).

Queues and recurring tasks

Queue prefixes escape _ and %, and each queue is selected only once (#811).

Dynamic tasks recreated with the same key are rescheduled (#793).

Other

The CLI is no longer eager loaded (#826).

CI pins json below 3 for Rails 7.1 and 8.0 (#813). That's test-only, but it explains the Gemfile change.

README additions: READ COMMITTED for MySQL, sql_notifications, the Puma plugin's behavior, retry_on and process death, async mode with TERM and QUIT, and removing leftover recurring tasks.

What's Changed

Replace terminated threads even if releasing their claimed jobs fails by @rosa in rails/solid_queue#791

Stop processes whose heartbeats keep failing past the alive threshold by @wintan1418 in rails/solid_queue#778

Stop workers when job finalization fails by @rafael-pissardo in rails/solid_queue#768

Add README notes on READ COMMITTED, sql_notifications, and the Puma plugin's failure behaviour by @rosa in rails/solid_queue#795

Assert the successful job's output regardless of execution order by @rosa in rails/solid_queue#796

Document that retry_on can't intercept process-death errors by @wintan1418 in rails/solid_queue#789

Harden the lifecycle and pool-size worker tests against slow databases by @rosa in rails/solid_queue#798

Exit forked processes immediately to avoid a SQLite mutex deadlock at exit by @rosa in rails/solid_queue#801

... (truncated)

Commits

b9c646a Bump solid_queue to 1.7.2
8b2a87b Let the job answer for the concurrency slot it holds
310496a Test that a job records the semaphore it created on MySQL, and correct the up...
6af5101 Place the semaphore note under 1.7.2 in UPGRADING
50ca656 Read the acquired semaphore with a lock, and record the limit used
62c2927 Give concurrency slots back only to the semaphore they came from
24d936a Bump solid_queue to 1.7.1
3d7c5d0 Keep batch completion errors from blocking subsequent jobs
7323f03 Move the concurrent dispatching test next to the other semaphore lock tests
a034856 Acquire concurrency locks by key when dispatching several jobs
Additional commits viewable in compare view

Updates bootsnap from 1.26.0 to 1.26.1

Changelog

Sourced from bootsnap's changelog.

1.26.1

Fix Bootsnap.enable_frozen_string_literal(app_only: true) raising NameError when the compile cache is disabled. App files are now compiled with frozen string literals on every load, without caching.

Avoid transcoding Ruby source when the Prism workaround runs with a default internal encoding.

Better detect support for fast path scanning. Fix compilation on Illumos.

Commits

681429d Release 1.26.1
9298a58 Merge pull request #582 from byroot/compiler-no-cache
e340dd0 Support custom compilers even whith caching disabled
82b9598 Merge pull request #578 from byroot/windows-binmode
8ad8d73 Read and write loadpath cache in binmode
dd767a4 Merge pull request #581 from czj/ci-old-rubies-on-ubuntu-24.04
a53f3de CI: run Ruby < 3.2 on ubuntu-24.04 now that ubuntu-latest is 26.04
db216d1 Merge pull request #576 from pauljccode/fix/source-internal-encoding
d53eb60 Declare the UTF-8 regression fixture encoding
d5cdf8a Preserve source encoding in the Prism workaround
Additional commits viewable in compare view

Updates inertia_rails from 3.22.0 to 3.23.0

Release notes

Sourced from inertia_rails's releases.

v3.23.0

What's Changed

Ignore stray X-Inertia header on non-Inertia controllers by @SAY-5 in inertiajs/inertia-rails#397

docs: correct lazy data evaluation claims for AR relations by @skryukov in inertiajs/inertia-rails#401

Fix stale flash notice and use idiomatic class in Vue scaffolds by @skryukov in inertiajs/inertia-rails#392

Restart SSR promptly when the process dies during boot by @skryukov in inertiajs/inertia-rails#396

Adopt Inertia.js v3.5 serverHead for server driven meta tags by @skryukov in inertiajs/inertia-rails#384

Rewrite Inertia Modal cookbook for Inertia Modal 3.x by @skryukov in inertiajs/inertia-rails#399

Add meta_title_template for server driven meta tags by @skryukov in inertiajs/inertia-rails#400

Add ActiveSupport::Notifications instrumentation by @skryukov in inertiajs/inertia-rails#398

Fix external redirect handling for Inertia requests by @skryukov in inertiajs/inertia-rails#379

add katara to awesome.md by @mwala-zm in inertiajs/inertia-rails#406

Use rubocop:disable-next instead of disable/enable pair by @onk in inertiajs/inertia-rails#409

Pin json to fix e2e tests by @skryukov in inertiajs/inertia-rails#410

Add scroll_props and once_props testing helpers by @onk in inertiajs/inertia-rails#408

Skip the XSRF-TOKEN cookie under Rails 8.2's header-only forgery protection by @mattwigham in inertiajs/inertia-rails#403

SSR Error Report Improvements by @bknoles in inertiajs/inertia-rails#407

Small docs stuff by @bknoles in inertiajs/inertia-rails#412

Add lefthook by @bknoles in inertiajs/inertia-rails#414

Clean up spec warnings by @onk in inertiajs/inertia-rails#416

Expose @_inertia_page to views on SSR responses by @onk in inertiajs/inertia-rails#415

Start the SSR process even when ssr_enabled is not globally configured by @bknoles in inertiajs/inertia-rails#411

Add Inertia DevTools support by @mattwigham in inertiajs/inertia-rails#405

Proof for cloudflare by @bknoles in inertiajs/inertia-rails#418

Expand dot-notated prop keys passed to render and inertia_share by @skryukov in inertiajs/inertia-rails#426

Keep flash and send X-Inertia-Version on stale-version refresh by @skryukov in inertiajs/inertia-rails#425

Use PATCH for scaffold edit forms with file uploads by @skryukov in inertiajs/inertia-rails#417

Fix SSR with a trailing slash in ssr_url, add ssr_timeout by @skryukov in inertiajs/inertia-rails#424

Always escape initial page JSON in the script element by @skryukov in inertiajs/inertia-rails#419

Omit encryptHistory and clearHistory when false by @skryukov in inertiajs/inertia-rails#420

Preserve big integers as BigInt values by @skryukov in inertiajs/inertia-rails#423

Keep URL fragments across Inertia redirects by @skryukov in inertiajs/inertia-rails#421

Ensure installer fully sets up server managed meta tags by @bknoles in inertiajs/inertia-rails#413

Accept a fallback block in inertia_ssr_head by @skryukov in inertiajs/inertia-rails#432

Fix docs mistakes and dead anchors by @skryukov in inertiajs/inertia-rails#431

Skip to_inertia for props a partial reload excludes by @skryukov in inertiajs/inertia-rails#430

Resolve once props on every partial reload by @skryukov in inertiajs/inertia-rails#429

Fix the infinite scroll merge intent for scroll props by @skryukov in inertiajs/inertia-rails#428

Fix Precognition under rescue_from, add Vary header by @skryukov in inertiajs/inertia-rails#427

Port missing v3 docs to the Rails guide by @skryukov in inertiajs/inertia-rails#433

New Contributors

@SAY-5 made their first contribution in inertiajs/inertia-rails#397

@mwala-zm made their first contribution in inertiajs/inertia-rails#406

@mattwigham made their first contribution in inertiajs/inertia-rails#403

Full Changelog: inertiajs/inertia-rails@v3.22.0...v3.23.0

Changelog

Sourced from inertia_rails's changelog.

[3.23.0] - 2026-10-16

Accept a block in inertia_ssr_head for fallback head elements, rendered when the response isn't server-side rendered, like inertia-laravel's <x-inertia::head> (@skryukov)

Add config.convert_fragment_redirects (off by default and enabled by the installer, requires Inertia.js v3) to keep URL fragments on Inertia redirects: a same-origin redirect to a URL with a fragment becomes a 409 response with the X-Inertia-Redirect header, which the client follows with a regular Inertia visit (@skryukov)

Add the preserve_big_integers option (config, inertia_config and render option), which sends integers outside JavaScript's safe range as {"$bigint": "..."} markers that Inertia.js v3.8+ turns into BigInt values. The testing helpers turn them back into integers (@skryukov)

Leave encryptHistory and clearHistory out of the page object when they are false, like inertia-laravel 3.x. Clients treat a missing key as false; specs that compare the full page JSON need updating (@skryukov)

Always escape the initial page JSON in the <script> element instead of relying on ActiveSupport.escape_html_entities_in_json being on. With that setting off, a prop containing </script> could break out of the element (@skryukov)

Add config.ssr_timeout (default 10 seconds) for SSR requests, instead of Net::HTTP's 60 seconds, so a stuck SSR server can't hold a request for a minute (@skryukov)

Fix SSR failing with a 500 when ssr_url ends with a slash (@skryukov)

Send X-Inertia-Version with the stale-version 409 response, so Inertia.js v3.6+ can skip the reload on background requests such as polling (@skryukov)

Keep flash messages when a stale asset version forces a page refresh, instead of losing them (@skryukov)

Fix dot-notated prop keys ('auth.user' => ...) passed to render or inertia_share reaching the client as a literal key instead of nested props (@skryukov)

Fix an app's rescue_from StandardError turning Precognition validation responses into error pages. InertiaRails::PrecognitionResponse now inherits from Exception, so bare rescue clauses and Rails.error.handle no longer swallow it either; code that caught it as a StandardError must rescue it by name (@skryukov)

Add Precognition to the Vary header of responses from actions that call precognition! or precognition, like Laravel, so HTTP caches keep validation responses apart from regular ones (@skryukov)

Fix InertiaRails.scroll merge metadata ignoring the infinite scroll merge intent since 3.19.0: loading the previous page appended its items instead of prepending them, and a wrapper: prop replaced the loaded items instead of merging into the wrapped key. A scroll prop shared via inertia_share no longer collects duplicate merge paths on every request (@skryukov)

Fix once props missing from partial reloads that only list except: the client's already-loaded once props are skipped on full visits only, as in inertia-laravel (@skryukov)

Skip to_inertia for objects a partial reload doesn't include, instead of serializing them and dropping the result (@skryukov)

Expose @_inertia_page to views on SSR responses (@onk)

Add Inertia DevTools support: record requests in development (or those config.devtools.authorize approves elsewhere), expose the read API the browser extension reads, and configure it under config.devtools (@mattwigham and @skryukov)

Accept an object that responds to to_inertia as props:, as prop values already were. With inertia_prop_sources, it can also tell DevTools where it declared each prop (@skryukov)

Fix to_inertia objects returned from a closure or a prop type's block, placed in an array, or returned from an InertiaRails.cache block being serialized with as_json, which sent the object's instance variables, such as the record it wraps, to the client. Cached prop keys move to inertia_rails/@2/, so entries written before this fix are never read again: every cached prop fills once after upgrading, and code that deletes cached props by their full key needs the new prefix. ActiveSupport::OrderedOptions is no longer mistaken for a serializer, which turned it into null (@skryukov)

Add testing helpers for scroll props and once props (@onk)

Skip the XSRF-TOKEN cookie entirely (and expire a stale one) on controllers using Rails 8.2's :header_only forgery protection strategy, which verifies requests via Sec-Fetch-Site and never reads authenticity tokens (@mattwigham)

Skip setting XSRF-TOKEN cookie when Rails 8.2's :header_only CSRF strategy is on (@mattwigham)

Add config.server_head to serialize meta tags as HTML strings into the head prop for the serverHead option of createInertiaApp (Inertia.js v3.5+), replacing the client-side cookbook component (@skryukov)

Add meta_title_template configuration option — a callable applied to the <title> tag of server driven meta tags; it receives the current title (or nil) and can provide a default for pages without one (@skryukov)

Add ActiveSupport::Notifications instrumentation: render.inertia_rails, resolve_props.inertia_rails, and ssr.inertia_rails events (@skryukov)

Report SSR failures to the Rails error reporter (source: "inertia_rails", handled: true) with the component, error type, hint, JS stack, and source location as context; skipped when on_ssr_error is configured or ssr_raise_on_error is enabled (@bknoles)

Preserve the original exception as cause on InertiaRails::SSRError, so connection failures report the underlying error instead of only the wrapper (@bknoles)

Convert external (cross-origin) redirects to Inertia location responses automatically (disable with config.convert_external_redirects = false), and add redirect_to url, inertia: { full_page: true } for same-origin redirects to non-Inertia endpoints (@skryukov)

Fix inertia_location to redirect plain (non-Inertia) requests instead of responding 409 Conflict, and stop stale asset versions from replacing location responses with a forced refresh (@skryukov)

Fix partial reloads addressing array elements by index (only: ['rows.0.name']) dropping the elements they did not name, which shifted every later element onto the wrong path. Unrequested elements now keep their slot as a placeholder ({} for an element written as a Hash, null otherwise) and are never evaluated, and an indexed only/except path is now applied to arrays of plain hashes too (@skryukov)

Fix meta tags ignoring per-controller use_data_inertia_head_attribute set via inertia_config (@skryukov)

Use SHA256 instead of MD5 for generated meta tag head keys (@skryukov)

Restart the SSR server promptly in the Puma plugin when the process dies during boot, instead of polling a dead port for the full boot timeout (@skryukov)

Fix NoMethodError raised when a request carrying the X-Inertia header reaches a non-Inertia controller such as an ActionController::API endpoint (@SAY-5)

Fix stale flash notice and use idiomatic class in Vue scaffolds (@skryukov)

Start the SSR server in the Puma plugin regardless of the global ssr_enabled, so SSR enabled per controller with inertia_config works (@bknoles)

Add lefthook with pre-commit and pre-push hooks that mirror CI/CD checks (@bknoles)

Add default_title: option to inertia_meta_tags, and render meta tags in the installer's layout instead of a plain <title> (@bknoles)

Use PATCH instead of a method override header in scaffold edit forms with file uploads (@skryukov)

Commits

3ffd1f4 Bump to 3.23.0
99f50de Port missing v3 docs to the Rails guide (#433)
e396d90 Fix Precognition under rescue_from, add Vary header (#427)
cff99f5 Fix the infinite scroll merge intent for scroll props (#428)
55887cf Resolve once props on every partial reload (#429)
bc74bfc Skip to_inertia for props a partial reload excludes (#430)
39fac8d Fix docs mistakes and dead anchors (#431)
f27a1b1 Accept a fallback block in inertia_ssr_head (#432)
5b60883 Ensure installer fully sets up server managed meta tags (#413)
ec870ca Keep URL fragments across Inertia redirects (#421)
Additional commits viewable in compare view

Updates alba from 4.0.0 to 4.0.2

Release notes

Sourced from alba's releases.

v4.0.2

What's Changed

Update rubocop requirement from ~> 1.91.0 to ~> 1.92.0 by @dependabot[bot] in okuramasafumi/alba#581

Bump github/codeql-action from 4.38.2 to 4.39.0 by @dependabot[bot] in okuramasafumi/alba#582

Bump step-security/harden-runner from 2.22.1 to 2.22.2 by @dependabot[bot] in okuramasafumi/alba#583

Bump github/codeql-action from 4.39.0 to 4.39.1 by @dependabot[bot] in okuramasafumi/alba#584

Remove rbs from the dependencies in sig/manifest.yaml by @unasuke in okuramasafumi/alba#587

Bump ruby/setup-ruby to v1.336.0 to fix the gem publish workflow by @okuramasafumi with @Copilot in okuramasafumi/alba#588

New Contributors

@unasuke made their first contribution in okuramasafumi/alba#587

Full Changelog: okuramasafumi/alba@v4.0.1...v4.0.2

Kaigi on Rails 2026 Thank You Edition

Today was the second day of Kaigi on Rails 2026. I'd like to say thank you to all with this release. The change is all about types. Actually sig directory was not included in the release. Now that I work on improving types, we should add sig directory so that users can utilize them.

Anyway, happy conferencing!

Changelog

Sourced from alba's changelog.

4.0.2 2026-11-02

Fixed

Remove rbs from the dependencies in sig/manifest.yaml #587

4.0.1 2026-10-17

Added

Ship the RBS signatures in the gem so applications can load them #575

Changed

Improve RBS signatures for resource classes, serialization results, callbacks, inflectors, and custom types #576

Correct RBS signatures to allow anonymous resource classes to have no name #579

Rename the Alba::Association.new keyword argument condition: to modifier: to clarify its purpose

Fixed

Raise TypeError instead of NoMethodError when automatic type conversion is enabled without a converter

Raise Alba::Error instead of NoMethodError when root_key! is used on an anonymous resource class #580

Commits

f35e722 Merge pull request #588 from okuramasafumi/copilot/fix-failing-github-actions...
89326c5 Apply remaining changes
8c99b15 Initial plan
65c4dda [Release] Bump a version to 4.0.2
b50b9e7 [Release] Keep a changelog for version 4.0.2
bf07146 Merge pull request #587 from unasuke/remove-rbs-from-manifest
8a44697 Remove rbs from the dependencies in sig/manifest.yaml
08d2264 Merge pull request #584 from okuramasafumi/dependabot/github_actions/github/c...
d266a73 Bump github/codeql-action from 4.39.0 to 4.39.1
b270143 [CI] Run typecheck on Ruby 4.0
Additional commits viewable in compare view

Updates faraday from 2.14.4 to 2.15.1

Release notes

Sourced from faraday's releases.

v2.15.1

What's Changed

Decode indexed nested arrays in numeric order by @afurm in lostisland/faraday#1723

Make Connection#dup public and rebuild its middleware stack by @JelF in lostisland/faraday#1718

Fix FrozenError when a frozen URI is passed as the base URL by @hikmetba-bit in lostisland/faraday#1717

[LOW] Bound memory retained by remote header names by @OskarEichler in lostisland/faraday#1698

Apply logging filters to exception messages by @OskarEichler in lostisland/faraday#1702

Preserve response state while releasing callbacks by @OskarEichler in lostisland/faraday#1703

Memoize false option values without recomputing by @OskarEichler in lostisland/faraday#1706

Freeze the default allowed status list by @OskarEichler in lostisland/faraday#1707

Default Connection#support_parallel? to the connection's adapter by @ybai08 in lostisland/faraday#1725

Add integration tests for the Options classes by @iMacTia in lostisland/faraday#1724

Ship only the specs external adapters need by @sampokuokkanen in lostisland/faraday#1726

Preserve false request bodies for JSON encoding by @OskarEichler in lostisland/faraday#1691

Add integration tests for JSON literal request bodies by @iMacTia in lostisland/faraday#1728

Keep header index synchronized across Hash mutations by @OskarEichler in lostisland/faraday#1700

fix: honor include_request: false in all errors by @yykamei in lostisland/faraday#1729

Escape params 2x faster with half the allocations, using CGI.escape by @czj in lostisland/faraday#1727

[MEDIUM] Pin actions used for RubyGems publication by @OskarEichler in lostisland/faraday#1710

[MEDIUM] Lock the RubyGems release dependency graph by @OskarEichler in lostisland/faraday#1712

New Contributors

@afurm made their first contribution in lostisland/faraday#1723

@JelF made their first contribution in lostisland/faraday#1718

@hikmetba-bit made their first contribution in lostisland/faraday#1717

@ybai08 made their first contribution in lostisland/faraday#1725

@sampokuokkanen made their first contribution in lostisland/faraday#1726

@czj made their first contribution in lostisland/faraday#1727

Full Changelog: lostisland/faraday@v2.15.0...v2.15.1

v2.15.0

What's Changed

[LOW] Keep Coveralls token out of pull-request code by @OskarEichler in lostisland/faraday#1711

[LOW] Remove vulnerable docs preview dependencies by @OskarEichler in lostisland/faraday#1714

chore: Use Docsify 5, to avoid the dropped 4.x version series by @olleolleolle in lostisland/faraday#1670

Fix typo in Faraday::Connection#options doc by @Bo98 in lostisland/faraday#1674

Preserve request ports for no_proxy matching by @OskarEichler in lostisland/faraday#1705

Preserve parallel manager across nested batches by @OskarEichler in lostisland/faraday#1704

Reject adapter changes after locking the stack by @OskarEichler in lostisland/faraday#1701

Preserve literal plus signs when decoding URI userinfo by @OskarEichler in lostisland/faraday#1694

Preserve explicit proxy settings when duplicating connections by @OskarEichler in lostisland/faraday#1693

Add GitHub Agentic Workflow for new-issue triage by @iMacTia with @Copilot in lostisland/faraday#1720

Remove unused RackBuilder#adapter_set? by @dpep in lostisland/faraday#1719

Fetch current option values after mutation by @OskarEichler in lostisland/faraday#1690

gemspec: Relax faraday-net_http to < 3.6 by @olleolleolle in lostisland/faraday#1722

New Contributors

@Bo98 made their first contribution in lostisland/faraday#1674

... (truncated)

Commits

0cfec3e Version bump to 2.15.1
2dce78b [MEDIUM] Lock the RubyGems release dependency graph (#1712)
340d3a9 Pin GitHub Actions used by CI and releases (#1710)
41666c6 Escape params 2x faster with half the allocations, using CGI.escape (#1727)
573827e fix: honor include_request: false in all errors
670f3a6 Keep header index synchronized across Hash mutations (#1700)
d494fce Add integration tests for JSON literal request bodies (#1728)
2d923f3 Preserve false request bodies for JSON encoding (#1691)
745b0f3 Ship only the specs external adapters need (#1726)
161010c Rely on derived metadata for integration specs
Additional commits viewable in compare view

Updates pagy from 43.7.0 to 43.8.1

Release notes

Sourced from pagy's releases.

Version 43.8.1

Changes in 43.8.1

Fix Active Record connection checkout in keyset pagination (#931)

CHANGELOG

Version 43

We needed a leap version to unequivocally signal that it's not just a major version: it's a complete redesign of the legacy code at all levels, usage and API included.

Why 43? Because it's exactly one step beyond "The answer to the ultimate question of life, the Universe, and everything." 😉

Improvements

This version introduces several enhancements, such as new :countish and :keynav_js paginators and improved automation and configuration processes, reducing setup requirements by 99%. The update also includes a simpler API and new interactive development tools, making it a comprehensive upgrade from previous versions.

New :countish Paginator

Faster than OFFSET and supporting the full UI

New Keynav Pagination

The pagy-exclusive technique using the fastest keyset pagination alongside all frontend helpers.

New interactive dev-tools

New PagyWand to integrate the pagy CSS with your app themes.

New Pagy AI available right inside your own app.

Intelligent automation

Configuration requirements reduced by 99%.

Simplified JavaScript setup.

Automatic I18n loading.

Simpler API

You solely need the pagy method and the @pagy instance to paginate any collection and use any navigation tag and helper.

Methods are autoloaded only if used, and consume no memory otherwise.

Methods have narrower scopes and can be overridden without deep knowledge.

New documentation

Very concise, straightforward, and easy to navigate and understand.

Upgrade to 43

See the Upgrade Guide

Version 43.8.0

Changes in 43.8.0

Add Romanian localization (#930)

... (truncated)

Changelog

Sourced from pagy's changelog.

Version 43.8.1

Fix Active Record connection checkout in keyset pagination (#931)

Version 43.8.0

Add Romanian localization (#930)

Version 43.7.1

Fix the database error on an out-of-range page with a huge page number (#929)

Commits

0b1b56c Merge branch 'dev'
88afb38 Version 43.8.1
04a8bb8 💎 Fix Active Record connection checkout in keyset pagination (#931)
3c1a9ea Fix retype.yml
6a74ffb Update gems and packages and refactor dockshots
5a2de59 Add release RM run config
bbc95ca Refactor top 100 contributors ordering by changes and commits.
07e1903 Merge branch 'dev'
d8734bc Version 43.8.0
eb6c50d 💎 Add Romanian localization (#930)
Additional commits viewable in compare view

Updates aws-sdk-s3 from 1.233.2 to 1.237.0

Changelog

Sourced from aws-sdk-s3's changelog.

1.237.0 (2026-10-29)

Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

Feature - Add tagging to Aws::S3::PresignedPost, accepting the same tagging structure as put_object_tagging and serializing it to XML in the signed POST form.

Feature - Reduce object allocation overhead when generating S3 presigned URLs.

1.236.0 (2026-10-28)

Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

Issue - Create and cache S3 Express sessions using the credentials of the requesting client.

1.235.0 (2026-10-20)

Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

Feature - Add RBS signatures for TransferManager, MultipartUploadError, Errors::NotFound and Errors::SlowDown.

Issue - Improve object key validation in TransferManager#download_directory on Windows.

1.234.0 (2026-10-19)

Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

Commits

See full diff in compare view

Updates sentry-ruby from 7.1.0 to 7.2.0

Changelog

Sourced from sentry-ruby's changelog.

7.2.0

New Features ✨

Crons

Add Solid Queue recurring task monitoring by @wedamija, @claude and @sl0thentr0py in #3140

Add rufus-scheduler cron monitoring by @wedamija in #3110

Bug Fixes 🐛

Rails

Don't load ActionController::Live before initialization by @ajaynomics in #3109

Ignore error-less ActiveJob retry enqueues by @solnic...
Description has been truncated

Bumps the gems group with 15 updates in the /platform directory: | Package | From | To | | --- | --- | --- | | [tzinfo-data](https://github.com/tzinfo/tzinfo-data) | `1.2026.5` | `1.2026.6` | | [solid_queue](https://github.com/rails/solid_queue) | `1.7.0` | `1.7.2` | | [bootsnap](https://github.com/rails/bootsnap) | `1.26.0` | `1.26.1` | | [inertia_rails](https://github.com/inertiajs/inertia-rails) | `3.22.0` | `3.23.0` | | [alba](https://github.com/okuramasafumi/alba) | `4.0.0` | `4.0.2` | | [faraday](https://github.com/lostisland/faraday) | `2.14.4` | `2.15.1` | | [pagy](https://github.com/ddnexus/pagy) | `43.7.0` | `43.8.1` | | [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) | `1.233.2` | `1.237.0` | | [sentry-ruby](https://github.com/getsentry/sentry-ruby) | `7.1.0` | `7.2.0` | | [sentry-rails](https://github.com/getsentry/sentry-ruby) | `7.1.0` | `7.2.0` | | [vernier](https://github.com/jhawthorn/vernier) | `1.11.0` | `1.12.0` | | [mcp](https://github.com/modelcontextprotocol/ruby-sdk) | `1.8.1` | `1.9.0` | | [bullet](https://github.com/flyerhzm/bullet) | `8.3.0` | `8.3.1` | | [annotaterb](https://github.com/drwl/annotaterb) | `4.25.0` | `4.26.0` | | [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.51.0` | `4.52.0` | Updates `tzinfo-data` from 1.2026.5 to 1.2026.6 - [Release notes](https://github.com/tzinfo/tzinfo-data/releases) - [Commits](tzinfo/tzinfo-data@v1.2026.5...v1.2026.6) Updates `solid_queue` from 1.7.0 to 1.7.2 - [Release notes](https://github.com/rails/solid_queue/releases) - [Commits](rails/solid_queue@v1.7.0...v1.7.2) Updates `bootsnap` from 1.26.0 to 1.26.1 - [Release notes](https://github.com/rails/bootsnap/releases) - [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md) - [Commits](rails/bootsnap@v1.26.0...v1.26.1) Updates `inertia_rails` from 3.22.0 to 3.23.0 - [Release notes](https://github.com/inertiajs/inertia-rails/releases) - [Changelog](https://github.com/inertiajs/inertia-rails/blob/master/CHANGELOG.md) - [Commits](inertiajs/inertia-rails@v3.22.0...v3.23.0) Updates `alba` from 4.0.0 to 4.0.2 - [Release notes](https://github.com/okuramasafumi/alba/releases) - [Changelog](https://github.com/okuramasafumi/alba/blob/main/CHANGELOG.md) - [Commits](okuramasafumi/alba@v4.0.0...v4.0.2) Updates `faraday` from 2.14.4 to 2.15.1 - [Release notes](https://github.com/lostisland/faraday/releases) - [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md) - [Commits](lostisland/faraday@v2.14.4...v2.15.1) Updates `pagy` from 43.7.0 to 43.8.1 - [Release notes](https://github.com/ddnexus/pagy/releases) - [Changelog](https://github.com/ddnexus/pagy/blob/master/docs/CHANGELOG.md) - [Commits](ddnexus/pagy@43.7.0...43.8.1) Updates `aws-sdk-s3` from 1.233.2 to 1.237.0 - [Release notes](https://github.com/aws/aws-sdk-ruby/releases) - [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-ruby/commits) Updates `sentry-ruby` from 7.1.0 to 7.2.0 - [Release notes](https://github.com/getsentry/sentry-ruby/releases) - [Changelog](https://github.com/getsentry/sentry-ruby/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-ruby@7.1.0...7.2.0) Updates `sentry-rails` from 7.1.0 to 7.2.0 - [Release notes](https://github.com/getsentry/sentry-ruby/releases) - [Changelog](https://github.com/getsentry/sentry-ruby/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-ruby@7.1.0...7.2.0) Updates `vernier` from 1.11.0 to 1.12.0 - [Release notes](https://github.com/jhawthorn/vernier/releases) - [Commits](jhawthorn/vernier@v1.11.0...v1.12.0) Updates `mcp` from 1.8.1 to 1.9.0 - [Release notes](https://github.com/modelcontextprotocol/ruby-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/ruby-sdk/blob/main/CHANGELOG.md) - [Commits](modelcontextprotocol/ruby-sdk@v1.8.1...v1.9.0) Updates `bullet` from 8.3.0 to 8.3.1 - [Changelog](https://github.com/flyerhzm/bullet/blob/main/CHANGELOG.md) - [Commits](flyerhzm/bullet@8.3.0...8.3.1) Updates `annotaterb` from 4.25.0 to 4.26.0 - [Changelog](https://github.com/drwl/annotaterb/blob/main/CHANGELOG.md) - [Commits](drwl/annotaterb@v4.25.0...v4.26.0) Updates `selenium-webdriver` from 4.51.0 to 4.52.0 - [Release notes](https://github.com/SeleniumHQ/selenium/releases) - [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES) - [Commits](SeleniumHQ/selenium@selenium-4.51.0...selenium-4.52.0) --- updated-dependencies: - dependency-name: tzinfo-data dependency-version: 1.2026.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gems - dependency-name: solid_queue dependency-version: 1.7.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gems - dependency-name: bootsnap dependency-version: 1.26.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gems - dependency-name: inertia_rails dependency-version: 3.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gems - dependency-name: alba dependency-version: 4.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gems - dependency-name: faraday dependency-version: 2.15.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gems - dependency-name: pagy dependency-version: 43.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gems - dependency-name: aws-sdk-s3 dependency-version: 1.237.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gems - dependency-name: sentry-ruby dependency-version: 7.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gems - dependency-name: sentry-rails dependency-version: 7.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gems - dependency-name: vernier dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gems - dependency-name: mcp dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gems - dependency-name: bullet dependency-version: 8.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: gems - dependency-name: annotaterb dependency-version: 4.26.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: gems - dependency-name: selenium-webdriver dependency-version: 4.52.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: gems ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-11-07T08:37:14Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	License
gem/selenium-webdriver@4.51.0 ⏵ 4.52.0			^-30
gem/annotaterb@4.25.0 ⏵ 4.26.0
gem/bootsnap@1.26.0 ⏵ 1.26.1	⁺¹
gem/inertia_rails@3.22.0 ⏵ 3.23.0	^-2
gem/aws-sdk-s3@1.233.2 ⏵ 1.237.0	⁺¹
gem/sentry-ruby@7.1.0 ⏵ 7.2.0	⁺¹
gem/sentry-rails@7.1.0 ⏵ 7.2.0	⁺¹
gem/vernier@1.11.0 ⏵ 1.12.0	⁺¹
gem/bullet@8.3.0 ⏵ 8.3.1	⁺¹
gem/faraday@2.14.4 ⏵ 2.15.1
gem/mcp@1.8.1 ⏵ 1.9.0	^-1	⁺¹
gem/pagy@43.7.0 ⏵ 43.8.1	⁺¹
gem/tzinfo-data@1.2026.5 ⏵ 1.2026.6
gem/solid_queue@1.7.0 ⏵ 1.7.2	⁺¹
gem/alba@4.0.0 ⏵ 4.0.2

View full report

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Nov 7, 2026

Navigation Menu

Repository navigation

Bump the gems group across 1 directory with 15 updates - #26

Bump the gems group across 1 directory with 15 updates#26
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/platform/gems-3a929dbc9e

dependabot Bot commented on behalf of github Nov 7, 2026

Uh oh!

socket-security Bot commented Nov 7, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 7, 2026

v1.2026.6

v1.7.2

Summary

What's Changed

v1.7.1

Summary of changes

What's Changed

1.26.1

v3.23.0

What's Changed

New Contributors

[3.23.0] - 2026-10-16

v4.0.2

What's Changed

New Contributors

Kaigi on Rails 2026 Thank You Edition

4.0.2 2026-11-02

Fixed

4.0.1 2026-10-17

Added

Changed

Fixed

v2.15.1

What's Changed

New Contributors

v2.15.0

What's Changed

New Contributors

Version 43.8.1

Changes in 43.8.1

Version 43

Improvements

Upgrade to 43

Version 43.8.0

Changes in 43.8.0

Version 43.8.1

Version 43.8.0

Version 43.7.1

1.237.0 (2026-10-29)

1.236.0 (2026-10-28)

1.235.0 (2026-10-20)

1.234.0 (2026-10-19)

7.2.0

New Features ✨

Crons

Bug Fixes 🐛

Rails

Uh oh!

socket-security Bot commented Nov 7, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants