Skip to content

Bump the "app-dependencies" group with 3 updates across multiple ecosystems #139

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Oct 8, 2025
Merged

Bump the "app-dependencies" group with 3 updates across multiple ecosystems #139

merged 1 commit into from
Oct 8, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 6, 2025 •
edited
Loading

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the app-dependencies group with 12 updates:

Package From To
mysql2 0.5.6 0.5.7
rake 13.2.1 13.3.0
puma 6.6.0 7.0.4
faraday 2.13.1 2.14.0
nokogiri 1.18.9 1.18.10
activesupport 6.1.7.10 8.0.3
multi_json 1.15.0 1.17.0
standard 1.47.0 1.51.1
rspec 3.13.0 3.13.1
ostruct 0.6.1 0.6.3
bigdecimal 3.1.9 3.2.3
fiddle 1.1.6 1.1.8

Updates mysql2 from 0.5.6 to 0.5.7

Release notes

Sourced from mysql2's releases.

0.5.7

What's Changed

New Contributors

Full Changelog: brianmario/mysql2@0.5.6...0.5.7

Commits
  • c79b3c1 bump version
  • 0f38974 Expose db attribute of MYSQL client struct (#1245)
  • b63d2e8 Correct MariaDB runtime library verison check (#1406)
  • 441b104 CI: select better MariaDB mirrors because some block GitHub Actions (#1401)
  • 99a6cc3 CI: Add an option to use SSL certifications generated from specific host. (#1...
  • 3adb531 rb_mysql_result_free_result is now executed if the result is 0 rows. (#1399)
  • 794ca50 Merge pull request #1400 from sodabrew/update-rake-compiler
  • cd6fc60 CI: fixes for centos 7 dockerfile
  • f10e767 CI: Allow newer rake, rake-compiler dependencies
  • 57b8df1 README: Remove link to Travis CI
  • Additional commits viewable in compare view

Updates rake from 13.2.1 to 13.3.0

Commits
  • 0fdacef Bump rake to 13.3.0
  • fcc1f86 Merge pull request #515 from rgarner/task-arguments-deconstruct-keys
  • 8e917d9 Merge pull request #609 from pvdb/fix_rubyrunner_require
  • 0378c45 Merge pull request #627 from komagata/fix-rdoc-links
  • cff7664 Pattern matching support for arguments
  • a4454e6 Merge pull request #608 from pvdb/use_dir_home
  • 0b727e9 Remove superfluous dependency requires (in tests)
  • 5367e5c Move dependency requires to RubyRunner file
  • 6ba4601 Merge pull request #634 from ruby/trusted-publisher
  • 6b3daf8 Enabled trusted publisher for rubygems.org
  • Additional commits viewable in compare view

Updates puma from 6.6.0 to 7.0.4

Release notes

Sourced from puma's releases.

v7.0.4

What's Changed

New Contributors

Full Changelog: puma/puma@v7.0.3...v7.0.4

v7.0.3

7.0.3 / 2025-09-13

  • Performance

    • server.rb - process_client - add ka to todo if readable & complete (#3748)

  • Bugfixes

    • Convert PUMA_PERSISTENT_TIMEOUT to an Integer (#3749)

v7.0.2

What's Changed

New Contributors

Full Changelog: puma/puma@v7.0.1...v7.0.2

v7.0.1

What's Changed

Full Changelog: puma/puma@v7.0.0...v7.0.1

v7.0.0 - Romantic Warrior

7.0.0

  • Breaking changes
    • Set default max_keep_alive to 999 (#3719)

... (truncated)

Changelog

Sourced from puma's changelog.

7.0.4 / 2025-09-23

  • Bugfixes

    • Fix SSL_shutdown error handling (#3703)
    • Strip whitespace from the beginnings of request header values. (#3742)

  • Performance

    • puma_http11.c: Use interned UTF-8 strings for hash keys (#3754)
    • Move sleep cluster logic to its own class (#3746, #3740)

7.0.3 / 2025-09-13

  • Performance

    • server.rb - process_client - add ka to todo if readable & complete (#3748)

  • Bugfixes

    • Convert PUMA_PERSISTENT_TIMEOUT to an Integer (#3749)

7.0.2 / 2025-09-08

  • Bugfixes
    • bug: control_cli.rb - Fixup pumactl code to load puma.rb for deprecate_method_change (#3736, #3734)
    • Replace sleep spin lock with condition variable (#3729)
    • Fix Puma not booting if queue_requests disabled (#3731)

7.0.1 / 2025-09-06

  • Bugfixes
    • Add backward compatibility aliases for Events class methods (#3725)

7.0.0 / 2025-09-03

  • Breaking changes
    • Set default max_keep_alive to 999 (#3719)
    • Increase persistent_timeout default to 65 seconds (#3378)
    • Raise an ArgumentError if no block given to hooks (#3377)
    • Don't set env['HTTP_VERSION'] for Rack > 3.1 (#3711, #3576)
    • Runner.rb - remove ruby_engine method, deprecated Nov-2024 (#3701)
    • Config preload_app! is now the default for clustered mode (#3297)
    • Config instance must be clamp-d before reading any values (#3297)
    • Response headers set to lowercase (#3704)
    • Update minimum Ruby version to 3.0 (#3698)
    • Rename callback hooks (#3438)
Old hook name New hook name
on_worker_boot before_worker_boot
on_worker_shutdown before_worker_shutdown
on_restart before_restart
on_booted after_booted

... (truncated)

Commits

Updates faraday from 2.13.1 to 2.14.0

Release notes

Sourced from faraday's releases.

v2.14.0

What's Changed

New features ✨

Fixes 🐞

Misc/Docs 📄

New Contributors

Full Changelog: lostisland/faraday@v2.13.4...v2.14.0

v2.13.4

What's Changed

Full Changelog: lostisland/faraday@v2.13.3...v2.13.4

v2.13.3

What's Changed

Full Changelog: lostisland/faraday@v2.13.2...v2.13.3

v2.13.2

What's Changed

New Contributors

Full Changelog: lostisland/faraday@v2.13.1...v2.13.2

Commits

Updates nokogiri from 1.18.9 to 1.18.10

Release notes

Sourced from nokogiri's releases.

v1.18.10 / 2025-09-15

Dependencies

  • [CRuby] Vendored libxml2 is updated to v2.13.9. Note that the security fixes published in v2.13.9 were already present in Nokogiri v1.18.9.
  • [CRuby] [Windows and MacOS] Vendored libiconv is updated to v1.18
7fb87235d729c74a2be635376d82b1d459230cc17c50300f8e4fcaabc6195344  nokogiri-1.18.10-aarch64-linux-gnu.gem
7e74e58314297cc8a8f1b533f7212d1999dbe2639a9ee6d97b483ea2acc18944  nokogiri-1.18.10-aarch64-linux-musl.gem
51f4f25ab5d5ba1012d6b16aad96b840a10b067b93f35af6a55a2c104a7ee322  nokogiri-1.18.10-arm-linux-gnu.gem
1c6ea754e51cecc85c30ee8ab1e6aa4ce6b6e134d01717e9290e79374a9e00aa  nokogiri-1.18.10-arm-linux-musl.gem
c2b0de30770f50b92c9323fa34a4e1cf5a0af322afcacd239cd66ee1c1b22c85  nokogiri-1.18.10-arm64-darwin.gem
cd431a09c45d84a2f870ba0b7e8f571199b3727d530f2b4888a73639f76510b5  nokogiri-1.18.10-java.gem
64f40d4a41af9f7f83a4e236ad0cf8cca621b97e31f727b1bebdae565a653104  nokogiri-1.18.10-x64-mingw-ucrt.gem
536e74bed6db2b5076769cab5e5f5af0cd1dccbbd75f1b3e1fa69d1f5c2d79e2  nokogiri-1.18.10-x86_64-darwin.gem
ff5ba26ba2dbce5c04b9ea200777fd225061d7a3930548806f31db907e500f72  nokogiri-1.18.10-x86_64-linux-gnu.gem
0651fccf8c2ebbc2475c8b1dfd7ccac3a0a6d09f8a41b72db8c21808cb483385  nokogiri-1.18.10-x86_64-linux-musl.gem
d5cc0731008aa3b3a87b361203ea3d19b2069628cb55e46ac7d84a0445e69cc1  nokogiri-1.18.10.gem
Changelog

Sourced from nokogiri's changelog.

v1.18.10 / 2025-09-15

Dependencies

  • [CRuby] Vendored libxml2 is updated to v2.13.9. Note that the security fixes published in v2.13.9 were already present in Nokogiri v1.18.9.
  • [CRuby] [Windows and MacOS] Vendored libiconv is updated to v1.18
Commits
  • 6803740 version bump to v1.18.10
  • 93337de dep: bump vendored libxml2 to v2.13.9 (#3555)
  • 15dde17 ci: work around repeated bundler deadlocks
  • 9906071 dep: bump vendored libxml2 to v2.13.9
  • adf72e3 [v1.18.x] backport libiconv upgrade to v1.18 (#3550)
  • 92cab09 dep: update vendored libiconv to 1.18
  • f1c5ea8 Use mirror site to download libiconv
  • dcd2721 ci: stop testing Ruby 3.1 windows source builds
  • cf856e6 ci: fix the aarch64 segfault by using a more modern qemu
  • 6d77443 Fix errors building Ruby 3.1 on windows
  • Additional commits viewable in compare view

Updates activesupport from 6.1.7.10 to 8.0.3

Release notes

Sourced from activesupport's releases.

8.0.3

Active Support

  • ActiveSupport::FileUpdateChecker does not depend on Time.now to prevent unnecessary reloads with time travel test helpers

    Jan Grodowski

  • Fix ActiveSupport::BroadcastLogger from executing a block argument for each logger (tagged, info, etc.).

    Jared Armstrong

  • Make ActiveSupport::Logger #freeze-friendly.

    Joshua Young

  • Fix ActiveSupport::HashWithIndifferentAccess#transform_keys! removing defaults.

    Hartley McGuire

  • Fix ActiveSupport::HashWithIndifferentAccess#tranform_keys! to handle collisions.

    If the transformation would result in a key equal to another not yet transformed one, it would result in keys being lost.

    Before:

    >> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1}

    After:

    >> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1, "d" => 2}

    Jason T Johnson, Jean Boussier

  • Fix ActiveSupport::Cache::MemCacheStore#read_multi to handle network errors.

    This method specifically wasn't handling network errors like other codepaths.

    Alessandro Dal Grande

  • Fix configuring RedisCacheStore with raw: true.

    fatkodima

... (truncated)

Changelog

Sourced from activesupport's changelog.

Rails 8.0.3 (September 22, 2025)

  • ActiveSupport::FileUpdateChecker does not depend on Time.now to prevent unnecessary reloads with time travel test helpers

    Jan Grodowski

  • Fix ActiveSupport::BroadcastLogger from executing a block argument for each logger (tagged, info, etc.).

    Jared Armstrong

  • Make ActiveSupport::Logger #freeze-friendly.

    Joshua Young

  • Fix ActiveSupport::HashWithIndifferentAccess#transform_keys! removing defaults.

    Hartley McGuire

  • Fix ActiveSupport::HashWithIndifferentAccess#tranform_keys! to handle collisions.

    If the transformation would result in a key equal to another not yet transformed one, it would result in keys being lost.

    Before:

    >> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1}

    After:

    >> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1, "d" => 2}

    Jason T Johnson, Jean Boussier

  • Fix ActiveSupport::Cache::MemCacheStore#read_multi to handle network errors.

    This method specifically wasn't handling network errors like other codepaths.

    Alessandro Dal Grande

  • Fix configuring RedisCacheStore with raw: true.

    fatkodima

  • Fix Enumerable#sole for infinite collections.

... (truncated)

Commits
  • 529f933 Preparing for 8.0.3 release
  • 0160f42 Sync CHANGELOGs
  • 78fe965 Merge pull request #55710 from Shopify/grodowski/file-update-checker-time-tra...
  • 830363a Merge pull request #55688 from Shopify/drop-active-support-benchmar-extension
  • 5456941 Return early when column are empty in WhereClause#except_predicates
  • c9a82e2 BigDecimal now works with floats without precision
  • b2ad417 Merge security patches in 8-0-stable
  • ae1aa38 Merge pull request #53093 from armstrjare/broadcast-logger-with-block
  • b0c813b Preparing for 8.0.2.1 release
  • f5a0c11 Use comment for example return values [ci-skip]
  • Additional commits viewable in compare view

Updates multi_json from 1.15.0 to 1.17.0

Changelog

Sourced from multi_json's changelog.

1.17.0

1.16.0

Commits
  • cbfc8c6 Version 1.17.0
  • 198cb84 Update changelog for 1.17.0
  • 92fe27b OjAdapter: don't require set
  • 159364f Adjust target ruby version for code style
  • 0701427 Update supported versions in the README
  • 8233d60 Require the set default gem
  • 1a0eab5 Do not use anonymous block argument forwarding
  • fd68b80 Do not use anonymous positional arguments forwarding
  • de147a2 Test all supported jRuby versions
  • 280e8c3 Revert minimum ruby version requirement
  • Additional commits viewable in compare view

Updates standard from 1.47.0 to 1.51.1

Changelog

Sourced from standard's changelog.

1.51.1

  • Fixes Layout/EmptyLineAfterGuardClause back to false after #750

1.51.0

1.50.0

1.49.0

  • Updates standard performance to 1.8.0

1.48.0

Commits
  • 04fd041 v1.51.1
  • 10a9bba Merge pull request #751 from standardrb/empty-line-guard-clause
  • 2e6ea9b Turns EmptyLineAfterGuardClause
  • 04ec853 Merge pull request #743 from standardrb/gemfile-specs
  • 9561268 Merge branch 'main' into gemfile-specs
  • 4e46a7d 🧸 v1.51.0
  • b7e15cf Merge pull request #748 from standardrb/dependabot/bundler/rubocop-1.80.2
  • 2976e77 Whoops my gemfile
  • 57e6849 Updates configuration for rubocop up to 1.81.0
  • ced68cb Update rubocop requirement from ~> 1.75.5 to >= 1.75.5, < 1.81.0
  • Additional commits viewable in compare view

Updates rspec from 3.13.0 to 3.13.1

Commits

Updates ostruct from 0.6.1 to 0.6.3

Release notes

Sourced from ostruct's releases.

v0.6.3

What's Changed

Full Changelog: ruby/ostruct@v0.6.2...v0.6.3

v0.6.2

What's Changed

New Contributors

Full Changelog: ruby/ostruct@v0.6.1...v0.6.2

Commits
  • d6302c7 v0.6.3
  • 4596063 use Ractor.shareable_proc
  • 380c327 Bump step-security/harden-runner from 2.12.1 to 2.12.2
  • e558399 v0.6.2
  • 436dff3 Bump step-security/harden-runner from 2.12.0 to 2.12.1 (#80)
  • d1908bd Don't need to use admin secret for gh release
  • 50d5124 Use Ractor#value as Ractor#take is removed
  • 7ee2fe7 Bump step-security/harden-runner from 2.11.1 to 2.12.0
  • 469694c Bump step-security/harden-runner from 2.11.0 to 2.11.1
  • b55ecb4 Bump step-security/harden-runner from 2.10.4 to 2.11.0
  • Additional commits viewable in compare view

Updates bigdecimal from 3.1.9 to 3.2.3

Release notes

Sourced from bigdecimal's releases.

v3.2.3

What's Changed

@dependabot
Monthly dependency updates: Bump the app-dependencies group with 12 u…
4b77843 
…pdates

Bumps the app-dependencies group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [mysql2](https://github.com/brianmario/mysql2) | `0.5.6` | `0.5.7` |
| [rake](https://github.com/ruby/rake) | `13.2.1` | `13.3.0` |
| [puma](https://github.com/puma/puma) | `6.6.0` | `7.0.4` |
| [faraday](https://github.com/lostisland/faraday) | `2.13.1` | `2.14.0` |
| [nokogiri](https://github.com/sparklemotion/nokogiri) | `1.18.9` | `1.18.10` |
| [activesupport](https://github.com/rails/rails) | `6.1.7.10` | `8.0.3` |
| [multi_json](https://github.com/sferik/multi_json) | `1.15.0` | `1.17.0` |
| [standard](https://github.com/standardrb/standard) | `1.47.0` | `1.51.1` |
| [rspec](https://github.com/rspec/rspec) | `3.13.0` | `3.13.1` |
| [ostruct](https://github.com/ruby/ostruct) | `0.6.1` | `0.6.3` |
| [bigdecimal](https://github.com/ruby/bigdecimal) | `3.1.9` | `3.2.3` |
| [fiddle](https://github.com/ruby/fiddle) | `1.1.6` | `1.1.8` |


Updates `mysql2` from 0.5.6 to 0.5.7
- [Release notes](https://github.com/brianmario/mysql2/releases)
- [Commits](brianmario/mysql2@0.5.6...0.5.7)

Updates `rake` from 13.2.1 to 13.3.0
- [Release notes](https://github.com/ruby/rake/releases)
- [Changelog](https://github.com/ruby/rake/blob/master/History.rdoc)
- [Commits](ruby/rake@v13.2.1...v13.3.0)

Updates `puma` from 6.6.0 to 7.0.4
- [Release notes](https://github.com/puma/puma/releases)
- [Changelog](https://github.com/puma/puma/blob/master/History.md)
- [Commits](puma/puma@v6.6.0...v7.0.4)

Updates `faraday` from 2.13.1 to 2.14.0
- [Release notes](https://github.com/lostisland/faraday/releases)
- [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md)
- [Commits](lostisland/faraday@v2.13.1...v2.14.0)

Updates `nokogiri` from 1.18.9 to 1.18.10
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](sparklemotion/nokogiri@v1.18.9...v1.18.10)

Updates `activesupport` from 6.1.7.10 to 8.0.3
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.0.3/activesupport/CHANGELOG.md)
- [Commits](rails/rails@v6.1.7.10...v8.0.3)

Updates `multi_json` from 1.15.0 to 1.17.0
- [Changelog](https://github.com/sferik/multi_json/blob/main/CHANGELOG.md)
- [Commits](sferik/multi_json@v1.15.0...v1.17.0)

Updates `standard` from 1.47.0 to 1.51.1
- [Release notes](https://github.com/standardrb/standard/releases)
- [Changelog](https://github.com/standardrb/standard/blob/main/CHANGELOG.md)
- [Commits](standardrb/standard@v1.47.0...v1.51.1)

Updates `rspec` from 3.13.0 to 3.13.1
- [Commits](rspec/rspec@rspec-metagem-v3.13.0...rspec-v3.13.1)

Updates `ostruct` from 0.6.1 to 0.6.3
- [Release notes](https://github.com/ruby/ostruct/releases)
- [Commits](ruby/ostruct@v0.6.1...v0.6.3)

Updates `bigdecimal` from 3.1.9 to 3.2.3
- [Release notes](https://github.com/ruby/bigdecimal/releases)
- [Changelog](https://github.com/ruby/bigdecimal/blob/master/CHANGES.md)
- [Commits](ruby/bigdecimal@v3.1.9...v3.2.3)

Updates `fiddle` from 1.1.6 to 1.1.8
- [Release notes](https://github.com/ruby/fiddle/releases)
- [Changelog](https://github.com/ruby/fiddle/blob/master/NEWS.md)
- [Commits](ruby/fiddle@v1.1.6...v1.1.8)
Monthly dependency updates: Bump ruby in the app-dependencies group

Bumps the app-dependencies group with 1 update: ruby.


Updates `ruby` from 3.3 to 3.4
Monthly dependency updates: Bump mariadb in the app-dependencies group

Bumps the app-dependencies group with 1 update: mariadb.


Updates `mariadb` from 11.5 to 12.0

---
updated-dependencies:
- dependency-name: mysql2
  dependency-version: 0.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: app-dependencies
- dependency-name: rake
  dependency-version: 13.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: app-dependencies
- dependency-name: puma
  dependency-version: 7.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: app-dependencies
- dependency-name: faraday
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: app-dependencies
- dependency-name: nokogiri
  dependency-version: 1.18.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: app-dependencies
- dependency-name: activesupport
  dependency-version: 8.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: app-dependencies
- dependency-name: multi_json
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: app-dependencies
- dependency-name: standard
  dependency-version: 1.51.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-dependencies
- dependency-name: rspec
  dependency-version: 3.13.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: app-dependencies
- dependency-name: ostruct
  dependency-version: 0.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: app-dependencies
- dependency-name: bigdecimal
  dependency-version: 3.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: app-dependencies
- dependency-name: fiddle
  dependency-version: 1.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: app-dependencies
- dependency-name: ruby
  dependency-version: '3.4'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: app-dependencies
- dependency-name: mariadb
  dependency-version: '12.0'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: app-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code docker Pull requests that update docker code docker_compose Pull requests that update docker_compose code labels Oct 6, 2025
@dependabot dependabot bot requested a review from bertrama as a code owner October 6, 2025 17:47
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code docker Pull requests that update docker code docker_compose Pull requests that update docker_compose code labels Oct 6, 2025
@bertrama bertrama merged commit 57f4d66 into main Oct 8, 2025
@bertrama bertrama deleted the dependabot/app_dependencies-f1baa07340 branch October 8, 2025 16:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bertrama bertrama Awaiting requested review from bertrama bertrama is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file docker_compose Pull requests that update docker_compose code docker Pull requests that update docker code ruby Pull requests that update ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bertrama