Skip to content

chore(deps): bump the ruby group across 1 directory with 6 updates - #214

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/ruby-10e7e672fc
Open

chore(deps): bump the ruby group across 1 directory with 6 updates#214
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/ruby-10e7e672fc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the ruby group with 6 updates in the / directory:

Package From To
rails 8.1.3 8.1.3.1
solid_queue 1.4.0 1.6.0
solid_cable 4.0.0 4.0.2
thruster 0.1.22 0.1.23
selenium-webdriver 4.45.0 4.46.0
shakapacker 10.2.0 10.3.1

Updates rails from 8.1.3 to 8.1.3.1

Release notes

Sourced from rails's releases.

8.1.3.1

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • No changes.

Action Pack

  • No changes.

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

  • No changes.

Active Storage

  • Disable libvips's unfuzzed image loaders and savers.

    libvips flags some of its loaders and savers as "unfuzzed" or "untrusted", meaning they are only safe for trusted content. Active Storage will call Vips.block_untrusted(true) to disable them while booting. An application that needs a specific loader or saver may re-enable it in an initializer.

... (truncated)

Commits

Updates solid_queue from 1.4.0 to 1.6.0

Release notes

Sourced from solid_queue's releases.

v1.6.0 - fiber execution mode (with Async)

A long-awaited feature thanks to @​crmne on this release: instead of using a thread pool to run jobs in multiple threads per works, you can now use fibers on a single fiber reactor thread. To use this, you just need to specify the number of fibers instead of the number of threads in your worker configuration, like this:

workers:
  - queues: "api*"
    fibers: 100
    polling_interval: 0.05

It uses Async under the hood, so you need to have that as a dependency for it to work. Also, you need to be using fiber isolation in Rails (config.active_support.isolation_level`` = :fiber).

This can be very useful for I/O-bound workloads, such as those involving LLM calls.

What's Changed

New Contributors

Full Changelog: rails/solid_queue@v1.5.1...v1.6.0

v1.5.1

What's Changed

New Contributors

Full Changelog: rails/solid_queue@v1.5.0...v1.5.1

v1.5.0

Lots of bugfixes in this one, thanks to a bunch of new contributors!

Notable changes in this release:

  • Drop support for Ruby 3.1, which has been EOL for a while
  • Improve DISTINCT queries used for polling with not specific queue names in PostgreSQL
  • Change polling interval default to 1 second
  • New bin/job check to validate configuration
  • Support setting a default time zone for recurring tasks

What's Changed

... (truncated)

Commits
  • 86f3d92 Bump solid_queue to 1.6.0
  • 2a479f6 Document how to update dynamic recurring tasks
  • 7f59932 Roll back transactions leaked by killed job threads in tests
  • 9c0d5d3 Reorganize the execution pools under SolidQueue::Pool
  • 30b92ca Move the fiber worker checks to Configuration
  • 6e27144 Extract a base class for the execution pools
  • 08e6098 Rescue only the code that runs with capacity reserved when posting
  • 000e8ba Report errors escaping the execution future
  • 5270cc8 Simplify worker initialization
  • 50468fa Start the fiber pool's reactor lazily on first use
  • Additional commits viewable in compare view

Updates solid_cable from 4.0.0 to 4.0.2

Release notes

Sourced from solid_cable's releases.

v4.0.2

What's Changed

Full Changelog: rails/solid_cable@v4.0.1...v4.0.2

v4.0.1

What's Changed

New Contributors

Full Changelog: rails/solid_cable@v4.0.0...v4.0.1

Commits
  • 4a41ec8 Version bump
  • f781e4d Reset retry counter on each successful poll (#84)
  • cf0695c Version bump
  • c968ba7 Reset reconnect_attempt after successfuly accessing the DB. (#82)
  • 5ea0f55 Update adapter to handle ActionCable adapterization in 8.2 (#80)
  • 89d34d7 Run ci against different rails versions (#79)
  • See full diff in compare view

Updates thruster from 0.1.22 to 0.1.23

Commits

Updates selenium-webdriver from 4.45.0 to 4.46.0

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.46.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

... (truncated)

Changelog

Sourced from selenium-webdriver's changelog.

4.46.0 (2026-07-10)

  • Support CDP versions: v148, v149, v150
  • trim whitespace around NO_PROXY entries (#17565)
  • add ClientConfig for HTTP client customization (#17699)
  • generate the BiDi protocol layer from the shared binding-neutral schema (#17731)
Commits
  • df5a634 [build] Prepare for release of selenium-4.46.0 (#17763)
  • ee4057c Add guidance for testing conventions in each language (#16734)
  • 6283602 [rb] generate the BiDi protocol layer from the shared binding-neutral schema ...
  • 39394dd [rb] guard flaky safari test
  • 6f7ddb3 [rb] Add copyright header for client_config.rbs (#17722)
  • cab142e [rb] add ClientConfig for HTTP client customization (#17699)
  • ea8ad9b [build] add copyright headers to rbs, pyi, ts, mjs, and erb files (#17720)
  • c0b8ff6 [rb] trim whitespace around NO_PROXY entries (#17565)
  • 54ad310 [build] Automated Browser Version Update (#17687)
  • 945692a [build] Reset versions to nightly after 4.45.0 release
  • See full diff in compare view

Updates shakapacker from 10.2.0 to 10.3.1

Release notes

Sourced from shakapacker's releases.

v10.3.0

Added

Fixed

  • Fixed implicit SWC defaults for existing webpack/Babel apps without swc-loader. [PR #1206](shakacode/shakapacker#1206) by justin808. Webpack apps that omit both javascript_transpiler and the deprecated webpack_loader now fall back to Babel with a warning when Shakapacker's bundled SWC default is active, swc-loader is missing, and Babel is present. Explicit transpiler settings, webpack apps with swc-loader, and Rspack's built-in SWC path keep their existing behavior. Closes #1203.
  • Fixed JavaScript config loading for missing Rails environments to use the production fallback. [PR #1206](shakacode/shakapacker#1206) by justin808. When RAILS_ENV has no matching section in config/shakapacker.yml, the Node package config now merges the production section instead of only bundled defaults, matching Ruby configuration loading and honoring explicit production javascript_transpiler, source_path, dev_server, and related settings for custom environments such as staging.
  • Fixed helper binstubs delegating Node resolution to Ruby exec in unset and empty PATH environments. [PR #1200](shakacode/shakapacker#1200) and [PR #1201](shakacode/shakapacker#1201) by justin808. Restores shell-compatible Node lookup for bin/shakapacker-config and bin/diff-bundler-config after the v10.2.0 Ruby-binstub regression, while keeping friendly missing-Node errors for ENOENT and EACCES.
Changelog

Sourced from shakapacker's changelog.

[v10.3.1] - August 3, 2026

Fixed

  • Fixed 502 responses for proxied dev server assets under rack-proxy v1. [PR #1222](shakacode/shakapacker#1222) by jcbpl. Fixes #1220.
  • Fixed dev-server liveness checks treating refused macOS 27 connections as running. The Ruby probe now verifies the connected socket's SO_ERROR result before proxying asset requests, avoiding false-positive dev-server detection and resulting 502 responses. [PR #1225](shakacode/shakapacker#1225) by justin808. Fixes #1224.
  • Fixed webpack Babel, SWC, and esbuild rules skipping explicitly included .cjs files. [PR #1219](shakacode/shakapacker#1219) by oiahoon. Fixes #1218.
  • Added a shakapacker:doctor warning for Rspack React Refresh v2 configs that still use the v1 default-export constructor pattern. [PR #1207](shakacode/shakapacker#1207) by justin808. Existing configs with const ReactRefreshPlugin = require("@rspack/plugin-react-refresh") followed by new ReactRefreshPlugin() can fail after upgrading to @rspack/plugin-react-refresh v2 with ReactRefreshPlugin is not a constructor; Doctor now points to the affected JS/TS config file and suggests the named-export/default/module compatibility form. Fixes #1204.
  • Fixed the missing-@babel/core failure to report an actionable install message. [PR #1212](shakacode/shakapacker#1212) by justin808. Babel-transpiled builds whose app lacks @babel/core previously surfaced a raw module-resolution error from the Babel 8 compatibility check; the rule now explains which package to install and how to switch javascript_transpiler instead. Refs #1163.

Documentation

  • Documented the required css-loader@^7.1.4 in the v10 Rspack upgrade instructions. [PR #1211](shakacode/shakapacker#1211) by justin808. The v10 upgrade guide's copy-paste Rspack v2 commands omitted css-loader, so apps following them could upgrade into an unsatisfied peer dependency.

[v10.3.0] - July 5, 2026

Added

Fixed

  • Fixed implicit SWC defaults for existing webpack/Babel apps without swc-loader. [PR #1206](shakacode/shakapacker#1206) by justin808. Webpack apps that omit both javascript_transpiler and the deprecated webpack_loader now fall back to Babel with a warning when Shakapacker's bundled SWC default is active, swc-loader is missing, and Babel is present. Explicit transpiler settings, webpack apps with swc-loader, and Rspack's built-in SWC path keep their existing behavior. Closes #1203.
  • Fixed JavaScript config loading for missing Rails environments to use the production fallback. [PR #1206](shakacode/shakapacker#1206) by justin808. When RAILS_ENV has no matching section in config/shakapacker.yml, the Node package config now merges the production section instead of only bundled defaults, matching Ruby configuration loading and honoring explicit production javascript_transpiler, source_path, dev_server, and related settings for custom environments such as staging.
  • Fixed helper binstubs delegating Node resolution to Ruby exec in unset and empty PATH environments. [PR #1200](shakacode/shakapacker#1200) and [PR #1201](shakacode/shakapacker#1201) by justin808. Restores shell-compatible Node lookup for bin/shakapacker-config and bin/diff-bundler-config after the v10.2.0 Ruby-binstub regression, while keeping friendly missing-Node errors for ENOENT and EACCES.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the ruby group across 1 directory with 6 updates
d880200 
Bumps the ruby group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [rails](https://github.com/rails/rails) | `8.1.3` | `8.1.3.1` |
| [solid_queue](https://github.com/rails/solid_queue) | `1.4.0` | `1.6.0` |
| [solid_cable](https://github.com/rails/solid_cable) | `4.0.0` | `4.0.2` |
| [thruster](https://github.com/basecamp/thruster) | `0.1.22` | `0.1.23` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.45.0` | `4.46.0` |
| [shakapacker](https://github.com/shakacode/shakapacker) | `10.2.0` | `10.3.1` |



Updates `rails` from 8.1.3 to 8.1.3.1
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](rails/rails@v8.1.3...v8.1.3.1)

Updates `solid_queue` from 1.4.0 to 1.6.0
- [Release notes](https://github.com/rails/solid_queue/releases)
- [Commits](rails/solid_queue@v1.4.0...v1.6.0)

Updates `solid_cable` from 4.0.0 to 4.0.2
- [Release notes](https://github.com/rails/solid_cable/releases)
- [Commits](rails/solid_cable@v4.0.0...v4.0.2)

Updates `thruster` from 0.1.22 to 0.1.23
- [Changelog](https://github.com/basecamp/thruster/blob/main/CHANGELOG.md)
- [Commits](basecamp/thruster@v0.1.22...v0.1.23)

Updates `selenium-webdriver` from 4.45.0 to 4.46.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](SeleniumHQ/selenium@selenium-4.45.0...selenium-4.46.0)

Updates `shakapacker` from 10.2.0 to 10.3.1
- [Release notes](https://github.com/shakacode/shakapacker/releases)
- [Changelog](https://github.com/shakacode/shakapacker/blob/main/CHANGELOG.md)
- [Commits](shakacode/shakapacker@v10.2.0...v10.3.1)

---
updated-dependencies:
- dependency-name: rails
  dependency-version: 8.1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby
- dependency-name: solid_queue
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby
- dependency-name: solid_cable
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby
- dependency-name: thruster
  dependency-version: 0.1.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby
- dependency-name: selenium-webdriver
  dependency-version: 4.46.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby
- dependency-name: shakapacker
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Aug 8, 2026
@github-actions

github-actions Bot commented Aug 8, 2026

Copy link
Copy Markdown

🚀 Quick Review App Commands

Welcome! Here are the commands you can use in this PR:
They require the repository to have cpflow review apps configured, including the CPLN_TOKEN_STAGING secret.

+review-app-deploy

Deploy your PR branch for testing.

+review-app-delete

Remove the review app when done.

+review-app-help

Show detailed instructions, environment setup, and configuration options.

Comment +review-app-help for full setup details.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants