Repository navigation
Update bundler non-major dependencies to v4.26.0 - #1535
Open
renovate[bot] wants to merge 1 commit into
Open
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
August 17, 2026 19:29
c3d6409 to
1ab5319
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
August 18, 2026 17:04
1ab5319 to
a26213f
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
August 21, 2026 19:46
a26213f to
fc62b51
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
August 25, 2026 17:49
fc62b51 to
29b8b31
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
August 26, 2026 00:03
29b8b31 to
f6f82e1
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
August 27, 2026 21:39
f6f82e1 to
45ac622
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
August 29, 2026 10:28
45ac622 to
1813805
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
September 1, 2026 22:58
1813805 to
d6beb75
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
September 3, 2026 16:04
d6beb75 to
312f81f
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
September 4, 2026 10:22
312f81f to
1f90377
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
September 4, 2026 21:37
1f90377 to
624e75c
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
September 8, 2026 20:23
624e75c to
0f8c2e1
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
September 15, 2026 05:42
8bf9b68 to
a861d67
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
September 16, 2026 21:58
a861d67 to
bd887b8
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
September 17, 2026 05:47
bd887b8 to
4223c6f
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
September 18, 2026 20:14
4223c6f to
94b4345
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
September 20, 2026 18:20
94b4345 to
62a55fa
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
September 24, 2026 22:53
62a55fa to
3d9a233
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
September 25, 2026 20:45
3d9a233 to
f59b36f
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
September 29, 2026 01:27
f59b36f to
5c2238a
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
September 29, 2026 18:08
5c2238a to
5a661f0
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
September 30, 2026 06:40
5a661f0 to
07e4017
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
October 1, 2026 13:11
07e4017 to
0c39ba0
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
October 1, 2026 20:53
0c39ba0 to
bf7fea4
Compare
renovate
Bot
force-pushed
the
renovate/bundler-minor-patch
branch
from
October 1, 2026 21:34
bf7fea4 to
fb660f3
Compare
This branch was previously deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
4.24.0→4.26.01.229.0→1.237.01.117.0→1.124.01.25.0→1.26.18.1.3→8.3.13.6.1→3.7.03.3.6→3.3.71.2.2→1.3.23.10.0→3.10.10.6.6→0.6.80.5.1→0.5.21.6.3→1.7.00.8.0→0.8.21.89.0→1.92.22.36.0→2.38.03.4.1→3.7.06.2.1→6.3.24.47.0→4.52.01.1.1→1.3.22.9.6→2.10.23.26.2→3.34.0Release Notes
drwl/annotaterb (annotaterb)
v4.26.0Compare Source
Full Changelog
Implemented enhancements:
activerecord-tenanted#276Fixed bugs:
v4.25.0: Incorrectdefault(NULL)annotation forenumerize-backed columns when DB default is not in enum values #402Closed issues:
v4.25.0: enum columns declared with a Rails-sidedefault:still annotate the raw value instead of the label #408Merged pull requests:
codeql-actionupdates in the Dependabot config. #400 (OdenTakashi)v4.25.0Compare Source
Full Changelog
Implemented enhancements:
activerecord-tenanted#276Fixed bugs:
v4.25.0: Incorrectdefault(NULL)annotation forenumerize-backed columns when DB default is not in enum values #402Closed issues:
v4.25.0: enum columns declared with a Rails-sidedefault:still annotate the raw value instead of the label #408Merged pull requests:
codeql-actionupdates in the Dependabot config. #400 (OdenTakashi)aws/aws-sdk-ruby (aws-sdk-s3)
v1.237.0Feature - Code Generated Changes, see
./build_toolsoraws-sdk-core's CHANGELOG.md for details.Feature - Add
taggingtoAws::S3::PresignedPost, accepting the same tagging structure asput_object_taggingand serializing it to XML in the signed POST form.Feature - Reduce object allocation overhead when generating S3 presigned URLs.
v1.236.0Feature - Code Generated Changes, see
./build_toolsoraws-sdk-core's CHANGELOG.md for details.Issue - Create and cache S3 Express sessions using the credentials of the requesting client.
v1.235.0Feature - Code Generated Changes, see
./build_toolsoraws-sdk-core's CHANGELOG.md for details.Feature - Add RBS signatures for
TransferManager,MultipartUploadError,Errors::NotFoundandErrors::SlowDown.Issue - Improve object key validation in
TransferManager#download_directoryon Windows.v1.234.0./build_toolsoraws-sdk-core's CHANGELOG.md for details.v1.233.2Issue - Fix
download_fileonTransferManagerandAws::S3::Objectleaving a corrupt file at the destination when a part raises a non-StandardError, and leaving a temp file behind when a caller-provided executor rejects a part.Issue - Prevent
upload_directoryanddownload_directoryonTransferManagerfrom hanging when listing files or objects raises a non-StandardError, such as from a:filter_callback.v1.233.1Issue - Fix unbounded memory growth in
upload_streamonTransferManagerandAws::S3::Objectwhen the data source outpaces the upload (#3407).Issue - Prevent
upload_file,upload_streamanddownload_fileonTransferManagerandAws::S3::Objectfrom hanging when a worker thread is terminated by a non-StandardError.v1.233.0v1.232.3Issue - Remove
:thread_countfrom transfer options even when a custom:executoris configured onTransferManager, fixing anArgumentErrorraised on single-partupload_filecalls.Issue - Fix
:thread_countbeing ignored by the deprecatedObject#download_file, which always used the default thread count.v1.232.2TransferManagerandAws::S3::Objectresource methods, preventing leaked worker threads on multipart transfer failures (#3419).v1.232.1copy_to/copy_frominstead ofnilon success.v1.232.0v1.231.0./build_toolsoraws-sdk-core's CHANGELOG.md for details.v1.230.0aws/aws-sdk-ruby (aws-sdk-sqs)
v1.124.0./build_toolsoraws-sdk-core's CHANGELOG.md for details.v1.123.0./build_toolsoraws-sdk-core's CHANGELOG.md for details.v1.122.0./build_toolsoraws-sdk-core's CHANGELOG.md for details.v1.121.0./build_toolsoraws-sdk-core's CHANGELOG.md for details.v1.120.0./build_toolsoraws-sdk-core's CHANGELOG.md for details.v1.119.0./build_toolsoraws-sdk-core's CHANGELOG.md for details.v1.118.0./build_toolsoraws-sdk-core's CHANGELOG.md for details.rails/bootsnap (bootsnap)
v1.26.1Compare Source
Fix
Bootsnap.enable_frozen_string_literal(app_only: true)raisingNameErrorwhen the compile cache is disabled.App files are now compiled with frozen string literals on every load, without caching.
Avoid transcoding Ruby source when the Prism workaround runs with a default internal encoding.
Better detect support for fast path scanning. Fix compilation on Illumos.
v1.26.0Compare Source
Coverageconstant being defined, but without it being the true stdlibcoveragemodule.bootsnap precompilethat could generate a corrupted cache entry if an already cached YAML file was modifiedwithout changing its size.
Bootsnap.instrumentationraised an error.flyerhzm/bullet (bullet)
v8.3.1Compare Source
footer_positiongetterv8.3.0Compare Source
v8.2.0Compare Source
Bullet.pause,Bullet.resume,Bullet.paused?, andBullet.skipAPIshas_many :throughassociationsCanCanCommunity/cancancan (cancancan)
v3.7.0Compare Source
ControllerResourceLoader,ControllerResourceBuilder,ControllerResourceFinder,ControllerResourceNameFinderandControllerResourceSanitizermodules intoCanCan::ControllerResource, and call the params method of the controller only once per request: it was called once more for every attribute set by the conditions of the ability. WARNING: the five modules no longer exist; override their methods in a subclass ofCanCan::ControllerResourceinstead. ([@coorasse][])alias_action,clear_aliased_actionsandmerge:can?kept using the aliases expanded by a previous check, soclear_aliased_actionsdid not removecan :readfromcan?(:index, Model). ([@coorasse][]):manage, which granted every action, or to itself, which looped forever. ([@coorasse][])permitted_attributesfor a rule without attributes, remove every attribute with acannotrule without attributes, including those that are not columns, and accept a hash subject instead of raising aTypeError. WARNING:permitted_attributesno longer returns:id, and with a composite primary key none of its columns are returned. ([@coorasse][])load_and_authorize_resourceand theskip_*methods:load_and_authorize_resource 'article'treated the resource as a parent and authorized:showon the class instead of the action on the record. ([@coorasse][])authorize!('index', post)did not use the message defined forread. ([@coorasse][])can?, asaccessible_byalready did:cannot :read, Post, state: :drafton a string column no longer allowscan?(:read, draft). WARNING: acanrule with a symbol now also allows records whose string attribute has the same name. ([@bruno-costanzo][])can?('destroy', user)ignoredcannot :destroy, Userwhencan :managewas defined, andskip_authorize_resource except: 'destroy'also skipped the authorization ofdestroy. WARNING: a String action now goes through the aliases like a Symbol action, socan?('show', order)andauthorize!(action_name, order)are allowed bycan :read, Orderand may grant access that 3.6 denied. A rule defined with a String action now matches the same Symbol action,permissionsreturns symbols, and a block rule without a subject receives the action as a symbol. ([@bruno-costanzo][])can?(:index, parent => Model)because of acannotrule with conditions on the model, ascan?(:index, Model)already did:load_and_authorize_resourcefailed on theindexof a nested resource. ([@coorasse][])accessible_bythe table aliases that Active Record gives to the joined associations, and build them with the model of each table. A rule with ahas_many :throughassociation, or with an association without conditions, used the alias of another table: the query failed or returned the wrong records. On an aliased table, a model was not converted to its foreign key and the values were not cast with the attribute types of the model. ([@coorasse][])/books/%20ran the action with anilresource, authorized only against the class, instead of raisingActiveRecord::RecordNotFound. ([@bruno-costanzo][])nilin an array of enum values incan?, asaccessible_byalready did:can :read, Post, status: [nil, :published]now allows a post without a status. ([@jtagle2][], [@coorasse][])CanCan::ModelAdapters::Strategies::Baseasaccessible_by_strategy, so the SQL generated byaccessible_bycan be customized with your own strategy. ([@cb341][], [@coorasse][])can?andaccessible_byconsistent forcannotrules and single table inheritance: acannotrule on a subclass keeps its precedence inaccessible_by, records with NULL in a column of acannotcondition are no longer excluded, rules on subclasses of subclasses reach the base class, and a class check passes when the class or any of its subclasses is allowed. WARNING:accessible_byreturns more records when acannotrule has conditions on a nullable column, andcan?on an STI base class no longer fails because a subclass is forbidden. ([@coorasse][], [@0llirocks][], [@kevinluo201][])accessible_bywith rules on STI subclasses: a rule on a subclass without conditions no longer discards the rules defined before it, and rules with the same conditions on different subjects are no longer compressed into one. ([@takayamaki][], [@sjoulbak][])can?: the selected column, or the primary key, is checked with a query, asaccessible_byalready did. ([@olistik][])canrules in a flat chain of ORs in the SQL conditions, so that many rules on the same model no longer overflow the parser of SQLite. ([@coorasse][])with_accessible_by_strategythread safe: the strategy chosen in the block no longer leaks into concurrent requests. ([@NikosVlagoidis][], [@coorasse][])group.posts.accessible_by(ability)returned the posts of every group matched by the scope. WARNING:accessible_bycalled on an association now returns fewer records when the scope of a rule constrains the same column as the association. Only the conditions dropped bymergeare applied again, so a condition on a subquery likewhere(category: Category.where(...))is not turned intoIS NULL, and the conditions of a default scope removed byunscopein the rule stay removed. ([@coorasse][])cannotsupports the:allsubject. ([@jaredbeck][])changelog_urito the gemspec, so rubygems.org links to the changelog. ([@mark-young-atg][])disallowed_attributesto retrieve the attributes forbidden bycannotrules. ([@mswiszcz][])throughoption. ([@coorasse][])through_associationtogether withsingletonwhen loading a resource. ([@cgunther][])accessible_bywhen the same association is joined more than twice: the WHERE clause referenced an alias that was never joined. ([@daveallie][])accessible_by: a rule shared by several models kept the conditions normalized for the first queried model. ([@bruno-costanzo][])has_many :throughassociation inaccessible_by: the association was rewritten into its through and source associations and its scope was dropped, soaccessible_byreturned records thatcan?denies. WARNING:accessible_byreturns fewer records for a rule on ahas_many :throughassociation with a scope. ([@bruno-costanzo][])docsfolder as plain Markdown. ([@coorasse][])v3.6.2Compare Source
cancan_skipperbetween controller subclasses:skip_authorize_resourceandskip_load_resourcein a subclass no longer apply to the superclass or sibling controllers. ([@bruno-costanzo][])lease_connectioninstead of the deprecatedconnectionon Rails 7.2+. ([@benaitcheson][])ruby/csv (csv)
v3.3.7: csv 3.3.7 - 2026-10-28Compare Source
Improvements
Improved documents.
Improved error handling.
Thanks
Oskar Eichler
sswander
kaminari/kaminari (kaminari)
v1.3.2Compare Source
Bug Fixes:
paginateraising NoMethodError on Rails 8.2, which removedLookupContext#find_template#1161 [@thibaudgg]v1.3.1Compare Source
Bug Fixes:
total_countkeepseager_loadin the count query again, which the conditions may need when they refer to the eager loaded tables withoutreferences(a regression in 1.3.0) #1160 [@r-uehara0219]total_countkeepsincludesin the count query when they are joined along witheager_loadorjoins, which the conditions may need: 1462042v1.3.0Compare Source
Security Fixes:
pageignores a Hash or an Array page number (e.g.?page[]=1) instead of raising #1087 [@xiaohui-zhangxh]page_entries_infoescapes theentry_name, which could contain user input, while keeping anhtml_safeentry_nameas is: d599c37Incompatible Changes:
page_entries_infomessage now separates the range with an en dash (e.g. "1–25") instead of - #1105 [@jdufresne]page_entries_infodisplays "No entries found" on out of range pages, instead of an inverted range like "Displaying users 81–80 of 50 in total": b712562Enhancements:
paginated?to models, relations, and paginatable arrays #1118 [@jarenas9539]data:option topaginatefor the links' data attributes #1095 [@theforestvn88]Rails.application.deprecators#1103 [@etiennebarrie]require 'kaminari'also loadsKaminari::VERSION#1079 [@d-otis]total_countfor grouped relations by counting the groups in the database with a subquery #1157 (based on #1022 and #1023 [@bendilley])total_countby removing irrelevanteager_loadandpreloadthat ran unwanted joins in the count query #1043 [@Viktor-Ivliev]paginateby callingurl_foronly a few times per paginator: 7b5f079paginateby looking up each partial template only once per paginator: c5cc1a1paginateby reducing object allocations: 1cc6f98, ff07a28, b951069, 2e80453, 794724e, and 7f08863pageandperon Active Record by copying the Relation only once: 0cb494d, c35e5a1, and ae23bc6page_entries_info#1109 [@jdufresne]Bug Fixes:
ActionController::UrlGenerationErroron Rails 8+ when the request params include route options such assubdomainorhost#1147 [@hpanwar09]param_nameother than:page#1121 [@magnum]NameErrorwhen includingKaminari::Helpers::UrlHelperoutside of the views #1100 [@hikonori07]page_entries_infofor a paginated empty array withtotal_count#1088 [@monfresh]total_counton the last page of a loaded Relation withpadding: c7a46f1ZeroDivisionErrorfromperafterper(0)#1138 [@dpep]perandmax_paginates_perdropping thepadding: c149803per,max_paginates_per, andpaddingchanging the receiver's values instead of the returned scope's: a9cbb2cmax_paginates_perreturning no records after an ignoredpervalue such asper('abc'): 0f2816apertreating a value like"abc\n10"asper(0)instead of ignoring it: 8298351Kaminari::ZeroPerPageOperationfromtotal_counton a loadedper(0)Relation #1155 [@andreyruby]total_countreturning 0 withmax_pagesafterper(0): 06e90d9TypeErrorfromtotal_countafterunscope(:limit): 4fd263bconfig.generators.template_engine#1108 [@Xavier-IV]SocketError: 6d91911guard/listen (listen)
v3.10.1Compare Source
What's Changed
New Contributors
Full Changelog: guard/listen@v3.10.0...v3.10.1
ruby/net-imap (net-imap)
v0.6.8Compare Source
What's Changed
Added
IO::TimeoutErrortoNet::OpenTimeoutby @jbourassa in #770Fixed
ResponseParseruse of global config by @nevans in #769SequenceSet#slicewhen starting at "*" by @nevans in #772SequenceSet#slicewith valid positiverange.beginbut invalid negativerange.endby @nevans in #776SequenceSet#slice-> nil for invalid start by @nevans in #777SequenceSet#slice(cardinality..any)-> empty by @nevans in #778SequenceSet#slicelength to be zero by @nevans in #781SequenceSet#slicelength to be negative by @nevans in #782Documentation
SequenceSet#[]subset slicing by @nevans in #771Other Changes
Utilsmodule by @nevans in #779SequenceSet#[]and#ordered_atinternals by @nevans in #774Miscellaneous
SequenceSet#slicetest coverage by @nevans in #773New Contributors
Full Changelog: ruby/net-imap@v0.6.7...v0.6.8
v0.6.7Compare Source
What's Changed
Added
#tls_socket?and#tls_connected?debug methods by @nevans in #767Fixed
ConfigandSequenceSetby @OskarEichler in #739Configuration
📅 Schedule: (UTC)
* 0-4,22-23 * * 1-5)* * * * 0,6)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.