Bump the bundler group across 1 directory with 10 updates #1

dependabot · 2025-03-10T23:48:16Z

Updates the requirements on rails, actionmailer, actionpack, activerecord, activesupport, i18n, mail, rack, rake and tzinfo to permit the latest version.
Updates rails from 4.0.0 to 8.0.1

Release notes

Sourced from rails's releases.

8.0.1

Active Support

Fix a bug in ERB::Util.tokenize that causes incorrect tokenization when ERB tags are preceeded by multibyte characters.

Martin Emde

Restore the ability to decorate methods generated by class_attribute.

It always has been complicated to use Module#prepend or an alias method chain to decorate methods defined by class_attribute, but became even harder in 8.0.

This capability is now supported for both reader and writer methods.

Jean Boussier

Active Model

No changes.

Active Record

Fix removing foreign keys with :restrict action for MySQ

fatkodima

Fix a race condition in ActiveRecord::Base#method_missing when lazily defining attributes.

If multiple thread were concurrently triggering attribute definition on the same model, it could result in a NoMethodError being raised.

Jean Boussier

Fix MySQL default functions getting dropped when changing a column's nullability.

Bastian Bartmann

Fix add_unique_constraint/add_check_constraint/add_foreign_key to be revertible when given invalid options.

fatkodima

Fix asynchronous destroying of polymorphic belongs_to associations.

fatkodima

Fix insert_all to not update existing records.

fatkodima

... (truncated)

Commits

cf6ff17 Preparing for 8.0.1 release
0bba3c2 Merge pull request #53936 from jsharpify/jsharpify/prism-parsing
8521b99 [RF-DOCS] Update Rails Testing Guide [ci skip] (#53872)
dbe61a7 Merge pull request #53907 from p8/guides/fix-canonical
f8d559d [RF-DOCS] Asset Pipeline Documentation (Propshaft) [ci-skip] (#53875)
2ae1d69 [RF-DOCS] Solid Cache updates in Caching with Rails: An Overview [ci-skip] (...
85bde83 Merge pull request #53926 from Ridhwana/Ridhwana/solid-queue
c167cbe Merge pull request #53941 from byroot/rack-server-protocol
656e209 Merge pull request #53940 from mjankowski/rdoc-link-to-add-check-constraint
b9608a6 Merge pull request #53937 from fatkodima/mysql-fix-remove-foreign-key-restrict
Additional commits viewable in compare view

Updates actionmailer from 4.0.0 to 8.0.1

Release notes

Sourced from actionmailer's releases.

8.0.1

Active Support

Fix a bug in ERB::Util.tokenize that causes incorrect tokenization when ERB tags are preceeded by multibyte characters.

Martin Emde

Restore the ability to decorate methods generated by class_attribute.

It always has been complicated to use Module#prepend or an alias method chain to decorate methods defined by class_attribute, but became even harder in 8.0.

This capability is now supported for both reader and writer methods.

Jean Boussier

Active Model

No changes.

Active Record

Fix removing foreign keys with :restrict action for MySQ

fatkodima

Fix a race condition in ActiveRecord::Base#method_missing when lazily defining attributes.

If multiple thread were concurrently triggering attribute definition on the same model, it could result in a NoMethodError being raised.

Jean Boussier

Fix MySQL default functions getting dropped when changing a column's nullability.

Bastian Bartmann

Fix add_unique_constraint/add_check_constraint/add_foreign_key to be revertible when given invalid options.

fatkodima

Fix asynchronous destroying of polymorphic belongs_to associations.

fatkodima

Fix insert_all to not update existing records.

fatkodima

... (truncated)

Changelog

Sourced from actionmailer's changelog.

Rails 8.0.1 (December 13, 2024)

No changes.

Rails 8.0.0.1 (December 10, 2024)

No changes.

Rails 8.0.0 (November 07, 2024)

No changes.

Rails 8.0.0.rc2 (October 30, 2024)

No changes.

Rails 8.0.0.rc1 (October 19, 2024)

No changes.

Rails 8.0.0.beta1 (September 26, 2024)

Please check 7-2-stable for previous changes.

Commits

cf6ff17 Preparing for 8.0.1 release
a993c27 Preparing for 8.0.0.1 release
dd8f718 Preparing for 8.0.0 release
6283314 Preparing for 8.0.0.rc2 release
97c97e3 Merge pull request #53426 from jhawthorn/security_forward_ports
35b3c7f Preparing for 8.0.0.rc1 release
29c7580 Let RuboCop set TargetRubyVersion value from rails.gemspec
72bc36f Preparing for 8.0.0.beta1 release
c7b9bb1 Drop support to Ruby 3.1
52b458d Remove unneeded :package tasks
Additional commits viewable in compare view

Updates actionpack from 4.0.0 to 8.0.1

Release notes

Sourced from actionpack's releases.

8.0.1

Active Support

Fix a bug in ERB::Util.tokenize that causes incorrect tokenization when ERB tags are preceeded by multibyte characters.

Martin Emde

Restore the ability to decorate methods generated by class_attribute.

It always has been complicated to use Module#prepend or an alias method chain to decorate methods defined by class_attribute, but became even harder in 8.0.

This capability is now supported for both reader and writer methods.

Jean Boussier

Active Model

No changes.

Active Record

Fix removing foreign keys with :restrict action for MySQ

fatkodima

Fix a race condition in ActiveRecord::Base#method_missing when lazily defining attributes.

If multiple thread were concurrently triggering attribute definition on the same model, it could result in a NoMethodError being raised.

Jean Boussier

Fix MySQL default functions getting dropped when changing a column's nullability.

Bastian Bartmann

Fix add_unique_constraint/add_check_constraint/add_foreign_key to be revertible when given invalid options.

fatkodima

Fix asynchronous destroying of polymorphic belongs_to associations.

fatkodima

Fix insert_all to not update existing records.

fatkodima

... (truncated)

Changelog

Sourced from actionpack's changelog.

Rails 8.0.1 (December 13, 2024)

Add ActionDispatch::Request::Session#store method to conform Rack spec.

Yaroslav

Rails 8.0.0.1 (December 10, 2024)

Add validation to content security policies to disallow spaces and semicolons. Developers should use multiple arguments, and different directive methods instead.

[CVE-2024-54133]

Gannon McGibbon

Rails 8.0.0 (November 07, 2024)

No changes.

Rails 8.0.0.rc2 (October 30, 2024)

Fix routes with :: in the path.

Rafael Mendonça França

Maintain Rack 2 parameter parsing behaviour.

Matthew Draper

Rails 8.0.0.rc1 (October 19, 2024)

Remove Rails.application.config.action_controller.allow_deprecated_parameters_hash_equality.

Rafael Mendonça França

Improve ActionController::TestCase to expose a binary encoded request.body.

The rack spec clearly states:

The input stream is an IO-like object which contains the raw HTTP POST data. When applicable, its external encoding must be “ASCII-8BIT” and it must be opened in binary mode.

Until now its encoding was generally UTF-8, which doesn't accurately reflect production behavior.

Jean Boussier

... (truncated)

Commits

cf6ff17 Preparing for 8.0.1 release
c167cbe Merge pull request #53941 from byroot/rack-server-protocol
3d17d95 Merge tag 'v8.0.0.1' into 8-0-stable
a993c27 Preparing for 8.0.0.1 release
2e3f41e Add CSP directive validation
0c1bb3a Sync CHANGELOG
6a44f10 Merge pull request #53837 from Uaitt/fix-wrongly-formatted-markdown
9cea447 Merge pull request #53791 from fatkodima/fix-rubocop-offences
637956b Merge pull request #53778 from hachi8833/fix_apidoc_strong_parameters
e93dcfe Merge pull request #53765 from p8/actionpack/fix-options-formatting (#53768)
Additional commits viewable in compare view

Updates activerecord from 4.0.0 to 8.0.1

Release notes

Sourced from activerecord's releases.

8.0.1

Active Support

Fix a bug in ERB::Util.tokenize that causes incorrect tokenization when ERB tags are preceeded by multibyte characters.

Martin Emde

Restore the ability to decorate methods generated by class_attribute.

It always has been complicated to use Module#prepend or an alias method chain to decorate methods defined by class_attribute, but became even harder in 8.0.

This capability is now supported for both reader and writer methods.

Jean Boussier

Active Model

No changes.

Active Record

Fix removing foreign keys with :restrict action for MySQ

fatkodima

Fix a race condition in ActiveRecord::Base#method_missing when lazily defining attributes.

If multiple thread were concurrently triggering attribute definition on the same model, it could result in a NoMethodError being raised.

Jean Boussier

Fix MySQL default functions getting dropped when changing a column's nullability.

Bastian Bartmann

Fix add_unique_constraint/add_check_constraint/add_foreign_key to be revertible when given invalid options.

fatkodima

Fix asynchronous destroying of polymorphic belongs_to associations.

fatkodima

Fix insert_all to not update existing records.

fatkodima

... (truncated)

Changelog

Sourced from activerecord's changelog.

Rails 8.0.1 (December 13, 2024)

Fix removing foreign keys with :restrict action for MySQ

fatkodima

Fix a race condition in ActiveRecord::Base#method_missing when lazily defining attributes.

If multiple thread were concurrently triggering attribute definition on the same model, it could result in a NoMethodError being raised.

Jean Boussier

Fix MySQL default functions getting dropped when changing a column's nullability.

Bastian Bartmann

Fix add_unique_constraint/add_check_constraint/add_foreign_key to be revertible when given invalid options.

fatkodima

Fix asynchronous destroying of polymorphic belongs_to associations.

fatkodima

Fix insert_all to not update existing records.

fatkodima

NOT VALID constraints should not dump in create_table.

Ryuta Kamizono

Fix finding by nil composite primary key association.

fatkodima

Properly reset composite primary key configuration when setting a primary key.

fatkodima

Fix Mysql2Adapter support for prepared statements

Using prepared statements with MySQL could result in a NoMethodError exception.

Jean Boussier, Leo Arnold, zzak

Fix parsing of SQLite foreign key names when they contain non-ASCII characters

Zacharias Knudsen

... (truncated)

Commits

cf6ff17 Preparing for 8.0.1 release
656e209 Merge pull request #53940 from mjankowski/rdoc-link-to-add-check-constraint
b9608a6 Merge pull request #53937 from fatkodima/mysql-fix-remove-foreign-key-restrict
3d17d95 Merge tag 'v8.0.0.1' into 8-0-stable
a993c27 Preparing for 8.0.0.1 release
55c22c3 Merge pull request #53891 from byroot/ac-avoid-pinned-connection
61b8507 Merge pull request #53890 from byroot/fix-lazy-attr-method-definition-thread-...
f9500a2 Merge pull request #53838 from Shopify/bb/default-function-bug
bd51796 Merge pull request #53882 from Shopify/sqlite-use-default-function
0c1bb3a Sync CHANGELOG
Additional commits viewable in compare view

Updates activesupport from 4.0.0 to 8.0.1

Release notes

Sourced from activesupport's releases.

8.0.1

Active Support

Fix a bug in ERB::Util.tokenize that causes incorrect tokenization when ERB tags are preceeded by multibyte characters.

Martin Emde

Restore the ability to decorate methods generated by class_attribute.

It always has been complicated to use Module#prepend or an alias method chain to decorate methods defined by class_attribute, but became even harder in 8.0.

This capability is now supported for both reader and writer methods.

Jean Boussier

Active Model

No changes.

Active Record

Fix removing foreign keys with :restrict action for MySQ

fatkodima

Fix a race condition in ActiveRecord::Base#method_missing when lazily defining attributes.

If multiple thread were concurrently triggering attribute definition on the same model, it could result in a NoMethodError being raised.

Jean Boussier

Fix MySQL default functions getting dropped when changing a column's nullability.

Bastian Bartmann

Fix add_unique_constraint/add_check_constraint/add_foreign_key to be revertible when given invalid options.

fatkodima

Fix asynchronous destroying of polymorphic belongs_to associations.

fatkodima

Fix insert_all to not update existing records.

fatkodima

... (truncated)

Changelog

Sourced from activesupport's changelog.

Rails 8.0.1 (December 13, 2024)

Fix a bug in ERB::Util.tokenize that causes incorrect tokenization when ERB tags are preceeded by multibyte characters.

Martin Emde

Restore the ability to decorate methods generated by class_attribute.

It always has been complicated to use Module#prepend or an alias method chain to decorate methods defined by class_attribute, but became even harder in 8.0.

This capability is now supported for both reader and writer methods.

Jean Boussier

Rails 8.0.0.1 (December 10, 2024)

No changes.

Rails 8.0.0 (November 07, 2024)

No changes.

Rails 8.0.0.rc2 (October 30, 2024)

No changes.

Rails 8.0.0.rc1 (October 19, 2024)

Remove deprecated support to passing an array of strings to ActiveSupport::Deprecation#warn.

Rafael Mendonça França

Remove deprecated support to setting attr_internal_naming_format with a @ prefix.

Rafael Mendonça França

Remove deprecated ActiveSupport::ProxyObject.

Rafael Mendonça França

Don't execute i18n watcher on boot. It shouldn't catch any file changes initially, and unnecessarily slows down boot of applications with lots of translations.

Gannon McGibbon, David Stosik

... (truncated)

Commits

cf6ff17 Preparing for 8.0.1 release
3d17d95 Merge tag 'v8.0.0.1' into 8-0-stable
a993c27 Preparing for 8.0.0.1 release
0c1bb3a Sync CHANGELOG
e1d9222 Conditionally check alphanumeric method parameters
ab14413 Merge pull request #53804 from claudiob/to_sentence
9cea447 Merge pull request #53791 from fatkodima/fix-rubocop-offences
015b37e Address changelogs linter offenses at 8-0-stable
1f85ee0 Merge pull request #53655 from martinemde/martinemde/byteslice-erb-tokenize
5c31aba Merge pull request #53640 from byroot/class-attr-namespaced
Additional commits viewable in compare view

Updates i18n from 0.6.4 to 1.14.7

Release notes

Sourced from i18n's releases.

v1.14.7

What's Changed

Ruby 3.4 Hash#inspect compatibility. by @voxik in ruby-i18n/i18n#709

Removed (annoying) post-install message that was triggering on all Rubies, rather than the specified versions.

Full Changelog: ruby-i18n/i18n@v1.14.6...v1.14.7

v1.14.6

What's Changed

Ruby < 3.2 support will be dropped April 2025. Upgrade now to continue using i18n after that date.

fix issues with RDoc generation by @davetron5000 in ruby-i18n/i18n#698

Fix loading of .rb locale files when load_path is not a string by @stevegeek in ruby-i18n/i18n#701

Fixes strings being interpolated multiple times by @alexpls in ruby-i18n/i18n#699

Optimize pluralization logic in test data by @zachmargolis in ruby-i18n/i18n#697

[FIX] Raise ArgumentError on nil key in exists? by @KinWang-2013 in ruby-i18n/i18n#696

New Contributors

@davetron5000 made their first contribution in ruby-i18n/i18n#698

@stevegeek made their first contribution in ruby-i18n/i18n#701

@alexpls made their first contribution in ruby-i18n/i18n#699

@zachmargolis made their first contribution in ruby-i18n/i18n#697

@KinWang-2013 made their first contribution in ruby-i18n/i18n#696

Full Changelog: ruby-i18n/i18n@v1.14.5...v1.14.6

v1.14.5

What's Changed

Explicitly bundle racc gem for Ruby 3.3+ by @amatsuda in ruby-i18n/i18n#690

Optimize I18n::Locale::Fallbacks#[] for recursive locale mappings by @uiur in ruby-i18n/i18n#692

Add I18n.interpolation_keys by @tom-lord in ruby-i18n/i18n#682

Fix syntax in documentation for I18n::Backend::Base.interpolate by @tom-lord in ruby-i18n/i18n#691

Fix that escaped interpolations with reserved keywords raised ReservedInterpolationKey by @Bilka2 in ruby-i18n/i18n#688

New Contributors

@uiur made their first contribution in ruby-i18n/i18n#692

@tom-lord made their first contribution in ruby-i18n/i18n#682

@Bilka2 made their first contribution in ruby-i18n/i18n#688

Full Changelog: ruby-i18n/i18n@v1.14.4...v1.14.5

v1.14.4

What's Changed

Note: the racc dependency will be coming back in Version 2.

... (truncated)

Commits

4dddd85 Bump to 1.14.7
61678f5 remove post-install message
09e26d0 Merge pull request #709 from voxik/ruby-3.4
2af0b5b Add Rails 7.2 and 8.0 into test matrix.
bd5bd23 Adjust the test matrix for Rails 8.1
cb35bee Add base64 / mutex_m dependencies for Rails 6.1
a6b16dc Ruby 3.4 Hash#inspect compatibility.
ce4b850 Add 'ruby-head' to test matrix
3b65f65 Bump to 1.14.6
6d0c2ce Add post install message for Ruby < 3.2 users
Additional commits viewable in compare view

Updates mail from 2.5.4 to 2.8.1

Changelog

Sourced from mail's changelog.

== Version 2.8.1 (unreleased)

Bug Fixes:

Regression: sendmail accepts string :arguments (@sebbASF)

Regression: accept enable_starttls_auto: false @ahorek

== Version 2.8.0.1 (12-Jan-2023)

Bug fixes:

Regression: incorrect permissions for some files (mikel)

== Version 2.8.0 (3-Dec-2022)

Breaking changes:

Add Ruby 3.1 support (deivid-rodriguez, voxik, eregon)

Drop support for Ruby < 2.5 (deivid-rodriguez, voxik)

Message#without_attachments! now deletes nested attachments. (TylerRick)

Sendmail and exim delivery now raise DeliveryError when the command exits with a nonzero exitstatus. (benmmurphy, CoolElvis)

Sendmail and exim delivery :arguments option must be an array of string args. (benmmurphy)

Passing unparsed headers to Mail::Field.new is no longer supported. Use Mail::Field.parse. (jeremy)

Removed long-deprecated features: Message#register_for_delivery_notification, #has_transfer_encoding?, #add_transfer_encoding, #transfer_encoding, #message_content_type, #mime_parameters, #encode!, and Part#inline_content_id. (jeremy)

Deprecations:

Deprecates Mail::CheckDeliveryParams in favour of Mail::SmtpEnvelope

Compatibility:

Handle a wide variety of non-RFC Message-ID formats. (peterkovacs)

Normalize Quoted-Printable line endings for text content. (jeremy)

Gracefully parse invalid dates in Date and Received headers. (okkez)

Converting to multipart moves Content-* headers to the new part. (kirikak2)

Multipart Content-Type no longer includes a needless charset param. (kirikak2)

Replies prefix subject with "Re: " instead of "RE: " per 5322 3.6.5. (mashedcode)

Gracefully handle multiple, possibly-invalid headers for what should be singular fields. (rosa)

SMTP delivery with enable_tls/starttls/starttls_auto: false now disables these options, since starttls is now :auto by default in upstream net-smtp. (jeremy)

Features:

Message#inspect_structure and PartsList#inspect_structure pretty-print the hierarchy of message parts. (TylerRick)

an_attachment_with_mime_type matcher added to match attachments by mime type

Bug Fixes:

Regression: Preserve message-level charset when adding parts (related to Rails ActionMailer) @shields

Regression: Adding a part should not reset the mail's charset to nil @railsbob

Please check 2-7-stable for previous changes.

Commits

b6b6cb7 Release v2.8.1
bbf7f91 Release 2.8.1.rc2
82c02d9 Add 2.8.0.1 details
0a65ff0 Fix section header
9c63d11 Fix GH-actions syntax
cfd7833 Run tests on stable-branches
6cd7b84 Release 2.8.1.rc1
07a1cde Fix sendmail accepting string :arguments again
c7c190f Fix sendmail accepting string :arguments again
ea3a55f Adds Ruby 3.2 to the CI matrix
Additional commits viewable in compare view

Updates rack from 1.5.2 to 3.1.12

Release notes

Sourced from rack's releases.

v3.0.9.1

What's Changed

Fixed ReDoS in Accept header parsing [CVE-2024-26146]

Fixed ReDoS in Content Type header parsing [CVE-2024-25126]

Reject Range headers which are too large [CVE-2024-26141]

Full Changelog: rack/rack@v3.0.9...v3.0.9.1

v3.0.9

What's Changed

Fix content-length calcuation in Rack:Response#write #2150

Full Changelog: rack/rack@v3.0.8...v3.0.9

v3.0.8

What's Changed

Backport "Fix some unused variable verbose warnings" by @skipkayhil in rack/rack#2084

New Contributors

@skipkayhil made their first contribution in rack/rack#2084

Full Changelog: rack/rack@v3.0.7...v3.0.8

v3.0.7

What's Changed

Backport "Make query parameters without = have nil values". by @jeremyevans in rack/rack#2060

Full Changelog: rack/rack@v3.0.6.1...v3.0.7

v3.0.6.1

No release notes provided.

v3.0.4.1

Full Changelog: rack/rack@v3.0.4...v3.0.4.1

v3.0.4

Full Changelog: rack/rack@v3.0.3...v3.0.4

v3.0.3

What's Changed

Release v3.0.3 by @ioquatix in rack/rack#2000

Full Changelog: rack/rack@v3.0.2...v3.0.3

v3.0.2

Full Changelog: rack/rack@v3.0.1...v3.0.2

... (truncated)

Changelog

Sourced from rack's changelog.

[3.1.12] - 2025-03-11

Security

CVE-2025-27610 Local file inclusion in Rack::Static.

[3.1.11] - 2025-03-04

Security

CVE-2025-27111 Possible Log Injection in Rack::Sendfile.

[3.1.10] - 2025-02-12

Security

CVE-2025-25184 Possible Log Injection in Rack::CommonLogger.

[3.1.9] - 2025-01-31

Fixed

Rack::MediaType#params now handles parameters without values. (#2263, @AllyMarthaJ)

[3.1.8] - 2024-10-14

Fixed

Resolve deprecation warnings about uri DEFAULT_PARSER. (#2249, [@earlopain])

[3.1.7] - 2024-07-11

Fixed

Do not remove escaped opening/closing quotes for content-disposition filenames. (#2229, [@jeremyevans])

Fix encoding setting for non-binary IO-like objects in MockRequest#env_for. (#2227, [@jeremyevans])

Rack::Response should not generate invalid content-length header. (#2219, [@ioquatix])

Allow empty PATH_INFO. (#2214, [@ioquatix])

[3.1.6] - 2024-07-03

Fixed

Fix several edge cases in Rack::Request#parse_http_accept_header's implementation. (#2226, [@ioquatix])

[3.1.5] - 2024-07-02

Security

Fix potential ReDoS attack in Rack::Request#parse_http_accept_header. (GHSA-cj83-2ww7-mvq7, @dwisiswant0)

... (truncated)

Commits

e8f4760 Bump patch version.
413b834 Update changelog.
70cb322 Use a fully resolved file path when confirming if a file can be served by `Ra...
c827c33 Bump patch version.
aeac570 Use #inspect to prevent log injection.
0349488 Bump patch version.
4aa1978 Escape non-printable characters when logging.
e217a39 Bump patch version.
3383cf2 Update changelog.
edb0869 fix: malformed charset param (#2263) (#2277)
Additional commits viewable in compare view

Updates rake from 10.1.0 to 13.2.1

Release notes

Sourced from rake's releases.

rake-10.1.1

Full Changelog: ruby/rake@rake-10.1.0.beta.3...rake-10.1.1

Changelog

Sourced from rake's changelog.

=== 13.2.1

Suppressed "internal:array:52:in 'Array#each'" from backtrace by @hsbt in #554

Bump actions/configure-pages from 4 to 5 by @dependabot in #553

=== 13.2.0

Fix rule example to be correct by @zenspider in #525

Switch to use test-unit by @hsbt in #536

Removed redundant block by @hsbt in #537

Use Struct instead of OpenStruct. by @hsbt in #545

Accept FileList object as directory task's target by @gemmaro in #530

Fix exception when exception has nil backtrace by @janbiedermann in #451

Add TruffleRuby on CI by @andrykonchin in #551

=== 13.1.0

Added dependabot.yml for actions by @hsbt in #416

Add Ruby 3.1 to the CI matrix by @petergoldstein in #415

(Performance) Remove unnecessary I/O syscalls for FileTasks by @da2x in #393

Skip test failure with JRuby by @hsbt in #418

Remove bin/rdoc by @tnir in #421

Remove bin/rake by @tnir in #422

Remove bin/bundle by @tnir in #425

Apply RuboCop linting for Ruby 2.3 by @tnir in #423

Update rubocop to work with Ruby 2.4 compatible by @tnir in #424

chore: fix typo in comments by @tnir in #429

Use 'test' as workflow name on Actions by @tnir in #427

docs: update CONTRIBUTING.rdoc by @tnir in #428

Add RuboCop job to Actions by @tnir in #426

Lock minitest-5.15.0 for Ruby 2.2 by @hsbt in #442

Eagerly require set in thread_pool.rb by @jeremyevans in #440

Avoid creating an unnecessary thread pool by @jeremyevans in #441

Add credit for maintenance in Rake 12/13 by @tnir in #443

Sh fully echoes commands which error exit by @MarkDBlackwell in #147

Correct RuboCop offenses by @deivid-rodriguez in #444

[StepSecurity] ci: Harden GitHub Actions by @step-security-bot in #450

Add ruby 3.2 to test matrix by @hanneskaeufler in #458

Missing 'do' on example by @zzak in #467

Try to use dependabot automerge by @hsbt in #470

Rewrite auto-merge feature for dependabot by @hsbt in #471

Update bundler in Dependabot by @ono-max in #472

Fix grammar in help text by @mebezac in #381

Try to use ruby/ruby/.github/workflows/ruby_versions.yml@master by @hsbt in #475

Use GitHub Pages Action for generating rdoc page by @hsbt in #477

Support #detailed_message when task failed by @ksss in #486

Debug at stop when task fail by @ksss in #489

Drop to support Ruby 2.2 by @hsbt in #492

Bump up setup-ruby by @hsbt in #497

Update development dependencies by @hsbt in #505

... (truncated)

Commits

d84f6ef Bump up 13.2.1
8b33b36 Merge pull request #553 from ruby/dependabot/github_actions/actions/configure...
99f6823 Merge pull request #554 from ruby/suppress-array-internal
54950e0 Suppressed "<internal:array>:52:in 'Array#each'" from backtrace
675498c Bump up 13.2.0
3dc4277 Bump actions/configure-pages from 4 to 5
c68e010 Merge pull request #549 from ruby/dependabot/github_actions/dependabot/fetch-...
2cb46b6 Merge pull request #551 from andrykonchin/ak/restore-truffleruby-on-ci
c342e96 Add TruffleRuby on CI
d569f0f Merge pull request #550 from ruby/dependabot/github_actions/ruby/setup-ruby-1...
Additional commits viewable in compare view

Updates tzinfo from 0.3.37 to 2.0.6

Release notes

Sourced from tzinfo's releases.

v2.0.6

Eliminate Object#untaint deprecation warnings on JRuby 9.4.0.0. #145.

TZInfo v2.0.6 on RubyGems.org

v2.0.5

Changed DateTime results to always use the proleptic Gregorian calendar. This affects DateTime results prior to 1582-10-15 and any arithmetic performed on the results that would produce a secondary result prior to 1582-10-15.

Added support for eager loading all the time zone and country data by calling either TZInfo::DataSource#eager_load! or TZInfo.eager_load!. Compatible with Ruby On Rails' eager_load_namespaces. #129.

Ignore the SECURITY file from Arch Linux's tzdata package. #134.

TZInfo v2.0.5 on RubyGems.org

v2.0.4

Fixed an incorrect InvalidTimezoneIdentifier exception raised when loading a zoneinfo file that includes rules specifying an additional transition to the final defined offset (for example, Africa/Casablanca in version 2018e of the Time Zone Database). #123.

TZInfo v2.0.4 on RubyGems.org

v2.0.3

Added support for handling "slim" format zoneinfo files that are produced by default by zic version 2020b and later. The POSIX-style TZ string is now used calculate DST transition times after the final defined transition in the file. #120.

Fixed TimeWithOffset#getlocal returning a TimeWithOffset with the timezone_offset still assigned when called with an offset argument on JRuby 9.3.

Rubinius is no longer supported.

TZInfo v2.0.3 on RubyGems.org

v2.0.2

Fixed 'wrong number of arguments' errors when running on JRuby 9.0. #114.

Fixed warnings when running on Ruby 2.8. #113.

TZInfo v2.0.2 on RubyGems.org

v2.0.1

Fixed "SecurityError: Insecure operation - require" exceptions when loading data with recent Ruby releases in safe mode. #100.

Fixed warnings when running on Ruby 2.7. #109.

Added a TZInfo::Timezone#=~ method that performs a regex match on the time zone identifier. #99.

Added a TZInfo::Country#=~ method that performs a regex match on the country code.

TZInfo v2.0.1 on RubyGems.org

v2.0.0

Added

to_local and period_for instance methods have been added to TZInfo::Timezone. These are similar to utc_to_local and period_for_utc, but take the UTC offset of the given time into account.

abbreviation, dst?, base_utc_offset and observed_utc_offset instance methods have been added to TZInfo::Timezone, returning the abbreviation, whether daylight savings time is in effect and the UTC offset of the time zone at a specified time.

A TZInfo::Timestamp class has been added. It can be used with TZInfo::Timezone in place of a Time or DateTime.

local_time, local_datetime and local_timestamp instance methods have been added to TZInfo::Timezone. These methods construct local Time, DateTime and TZInfo::Timestamp instances with the correct UTC offset and abbreviation for the time zone.

Support for a (yet to be released) version 2 of tzinfo-data has been added, in addition to support for version 1. The new version will remove the (no longer needed) DateTime parameters from transition times, reduce memory consumption and improve the efficiency of loading timezone and country indexes.

A TZInfo::VERSION constant has been added, indicating the TZInfo version number.

Changed

... (truncated)

Changelog

Sourced from tzinfo's changelog.

Version 2.0.6 - 28-Jan-2023

Eliminate Object#untaint deprecation warnings on JRuby 9.4.0.0. #145.

Version 2.0.5 - 19-Jul-2022

Changed DateTime results to always use the proleptic Gregorian calendar. This affects DateTime results prior to 1582-10-15 and any arithmetic performed on the results that would produce a secondary result prior to 1582-10-15.

Added support for eager loading all the time zone and country data by calling either TZInfo::DataSource#eager_load! or TZInfo.eager_load!. Compatible with Ruby On Rails' eager_load_namespaces. #129.

Ignore the SECURITY file from Arch Linux's tzdata package. #134.

Version 2.0.4 - 16-Dec-2020

Fixed an incorrect InvalidTimezoneIdentifier exception raised when loading a zoneinfo file that includes rules specifying an additional transition to the final defined offset (for example, Africa/Casablanca in version 2018e of the Time Zone Database). #123.

Version 2.0.3 - 8-Nov-2020

Added support for handling...
Description has been truncated

Updates the requirements on [rails](https://github.com/rails/rails), [actionmailer](https://github.com/rails/rails), [actionpack](https://github.com/rails/rails), [activerecord](https://github.com/rails/rails), [activesupport](https://github.com/rails/rails), [i18n](https://github.com/ruby-i18n/i18n), [mail](https://github.com/mikel/mail), [rack](https://github.com/rack/rack), [rake](https://github.com/ruby/rake) and [tzinfo](https://github.com/tzinfo/tzinfo) to permit the latest version. Updates `rails` from 4.0.0 to 8.0.1 - [Release notes](https://github.com/rails/rails/releases) - [Commits](rails/rails@v4.0.0...v8.0.1) Updates `actionmailer` from 4.0.0 to 8.0.1 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v8.0.1/actionmailer/CHANGELOG.md) - [Commits](rails/rails@v4.0.0...v8.0.1) Updates `actionpack` from 4.0.0 to 8.0.1 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v8.0.1/actionpack/CHANGELOG.md) - [Commits](rails/rails@v4.0.0...v8.0.1) Updates `activerecord` from 4.0.0 to 8.0.1 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v8.0.1/activerecord/CHANGELOG.md) - [Commits](rails/rails@v4.0.0...v8.0.1) Updates `activesupport` from 4.0.0 to 8.0.1 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v8.0.1/activesupport/CHANGELOG.md) - [Commits](rails/rails@v4.0.0...v8.0.1) Updates `i18n` from 0.6.4 to 1.14.7 - [Release notes](https://github.com/ruby-i18n/i18n/releases) - [Changelog](https://github.com/ruby-i18n/i18n/blob/master/CHANGELOG.md) - [Commits](ruby-i18n/i18n@v0.6.4...v1.14.7) Updates `mail` from 2.5.4 to 2.8.1 - [Changelog](https://github.com/mikel/mail/blob/2.8.1/CHANGELOG.rdoc) - [Commits](mikel/mail@2.5.4...2.8.1) Updates `rack` from 1.5.2 to 3.1.12 - [Release notes](https://github.com/rack/rack/releases) - [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md) - [Commits](rack/rack@1.5.2...v3.1.12) Updates `rake` from 10.1.0 to 13.2.1 - [Release notes](https://github.com/ruby/rake/releases) - [Changelog](https://github.com/ruby/rake/blob/master/History.rdoc) - [Commits](ruby/rake@rake-10.1.0...v13.2.1) Updates `tzinfo` from 0.3.37 to 2.0.6 - [Release notes](https://github.com/tzinfo/tzinfo/releases) - [Changelog](https://github.com/tzinfo/tzinfo/blob/master/CHANGES.md) - [Commits](tzinfo/tzinfo@v0.3.37...v2.0.6) --- updated-dependencies: - dependency-name: rails dependency-type: direct:development dependency-group: bundler - dependency-name: actionmailer dependency-type: indirect dependency-group: bundler - dependency-name: actionpack dependency-type: indirect dependency-group: bundler - dependency-name: activerecord dependency-type: indirect dependency-group: bundler - dependency-name: activesupport dependency-type: indirect dependency-group: bundler - dependency-name: i18n dependency-type: indirect dependency-group: bundler - dependency-name: mail dependency-type: indirect dependency-group: bundler - dependency-name: rack dependency-type: indirect dependency-group: bundler - dependency-name: rake dependency-type: indirect dependency-group: bundler - dependency-name: tzinfo dependency-type: indirect dependency-group: bundler ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Mar 10, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the bundler group across 1 directory with 10 updates #1

Bump the bundler group across 1 directory with 10 updates #1

Uh oh!

dependabot bot commented on behalf of github Mar 10, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the bundler group across 1 directory with 10 updates #1

Are you sure you want to change the base?

Bump the bundler group across 1 directory with 10 updates #1

Uh oh!

Conversation

dependabot bot commented on behalf of github Mar 10, 2025

8.0.1

Active Support

Active Model

Active Record

8.0.1

Active Support

Active Model

Active Record

Rails 8.0.1 (December 13, 2024)

Rails 8.0.0.1 (December 10, 2024)

Rails 8.0.0 (November 07, 2024)

Rails 8.0.0.rc2 (October 30, 2024)

Rails 8.0.0.rc1 (October 19, 2024)

Rails 8.0.0.beta1 (September 26, 2024)

8.0.1

Active Support

Active Model

Active Record

Rails 8.0.1 (December 13, 2024)

Rails 8.0.0.1 (December 10, 2024)

Rails 8.0.0 (November 07, 2024)

Rails 8.0.0.rc2 (October 30, 2024)

Rails 8.0.0.rc1 (October 19, 2024)

8.0.1

Active Support

Active Model

Active Record

Rails 8.0.1 (December 13, 2024)

8.0.1

Active Support

Active Model

Active Record

Rails 8.0.1 (December 13, 2024)

Rails 8.0.0.1 (December 10, 2024)

Rails 8.0.0 (November 07, 2024)

Rails 8.0.0.rc2 (October 30, 2024)

Rails 8.0.0.rc1 (October 19, 2024)

v1.14.7

What's Changed

v1.14.6

What's Changed

New Contributors

v1.14.5

What's Changed

New Contributors

v1.14.4

What's Changed

v3.0.9.1

What's Changed

v3.0.9

What's Changed

v3.0.8

What's Changed

New Contributors

v3.0.7

What's Changed

v3.0.6.1

v3.0.4.1

v3.0.4

v3.0.3

What's Changed

v3.0.2

[3.1.12] - 2025-03-11

Security

[3.1.11] - 2025-03-04

Security

[3.1.10] - 2025-02-12

Security

[3.1.9] - 2025-01-31

Fixed

[3.1.8] - 2024-10-14

Fixed

[3.1.7] - 2024-07-11

Fixed