Skip to content

Bump the dependencies group with 27 updates - #4779

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bundler/dependencies-207ca6183d
Closed

Bump the dependencies group with 27 updates#4779
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bundler/dependencies-207ca6183d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 27 updates:

Package From To
activerecord-session_store 2.2.0 2.3.0
discard 1.4.0 2.0.0
haml 5.2.2 7.3.0
jquery-rails 4.4.0 4.6.1
loofah 2.25.1 2.25.2
rails-html-sanitizer 1.7.0 1.7.1
rdiscount 2.2.7.4 2.2.7.5
i18n-js 3.9.2 4.2.4
jbuilder 2.14.1 2.15.1
shakapacker 9.5.0 10.3.1
sentry-rails 6.4.1 6.7.0
sentry-ruby 6.4.1 6.7.0
dry-monads 1.9.0 1.10.0
yard-tomdoc 0.4.0 0.7.1
seed_dump 3.4.1 3.4.2
pry-stack_explorer 0.6.2 0.6.3
rspec-rails 6.1.5 8.0.4
rubocop 1.85.0 1.89.0
rubocop-rails 2.34.3 2.36.0
rubocop-rspec 3.9.0 3.10.2
shoulda-matchers 7.0.1 8.0.1
simplecov 0.22.0 1.1.1
webmock 3.26.1 3.26.2
puma 7.2.1 8.0.2
newrelic_rpm 10.2.0 10.7.0
mini_racer 0.20.0 0.22.0
terser 1.2.6 1.2.8

Updates activerecord-session_store from 2.2.0 to 2.3.0

Commits
  • 74011f1 Avoid ruby warning
  • f53dce2 Prepare for 2.3.0
  • 2cfdc4e Merge pull request #166 from chaffeqa/patch-1
  • aab23c9 Add tests to make sure an empty save isn't made
  • d6a5e5e Update active_record_store.rb
  • e548d59 Optimization: prevent empty COMMIT calls
  • 6aa1ffe Merge PR #161
  • 07fd8cb Use model reference from env when it is available
  • d2dcde9 Merge pull request #222
  • 121f9ff Default to request's cookies_same_site_protection option
  • Additional commits viewable in compare view

Updates discard from 1.4.0 to 2.0.0

Changelog

Sourced from discard's changelog.

Version 2.0.0

Release date: 2026-05-27

  • Require ActiveRecord >= 7.0; drop support for Rails 6.x and earlier
  • Wrap #discard / #undiscard in a transaction so callback exceptions roll back the DB write (#84, #77)
Commits
  • cdeb3d4 Version 2.0.0
  • 94effaf Document current interaction with validations
  • 7a0a61c Merge pull request #124 from jarednorman/pr-84
  • 60fb990 Wrap discard methods in a transaction
  • 0e68168 CI: drop Ruby 3.1, add Ruby 3.4
  • c1d5888 Raise ActiveRecord floor to 7.0
  • 7a9417d Merge pull request #116 from okuramasafumi/fix-ci
  • f7dd775 Merge pull request #118 from SuperGoodSoft/fix-tests
  • 26f3113 Update readme to have correct test command
  • 4340d3f Fix tests
  • Additional commits viewable in compare view

Updates haml from 5.2.2 to 7.3.0

Changelog

Sourced from haml's changelog.

7.3.0

  • Replace Ripper with Prism haml/haml#1214
    • Interpolate #@ivar, #$gvar and #@@cvar in string literals instead of dropping them
    • Keep an escaped delimiter of a percent literal, so = %q{a\}b} renders a}b
    • Deprecate Haml::AttributeParser.available?, which is now always true and will be removed in the future

7.2.2

7.2.1

  • Do not rely on Ripper quirk in parsing old-style Haml attributes haml/haml#1212

7.2.0

7.1.0

  • Support xhtml format for boolean nested data attributes haml/haml#1200

7.0.2

7.0.1

7.0.0

6.4.0

6.3.1

... (truncated)

Commits
  • b3dadcb Version 7.3.0
  • d48f109 Add a changelog entry for the Prism migration
  • d897efd Let the plain filter tolerate Ruby that does not parse
  • 4725f2f Parse template Ruby as a partial script
  • 1fa5f59 Replace the remaining Ripper usages with Prism
  • f6e18da Replace Ripper with Prism in syntax and string literal checks
  • 0c549c3 Add info to metadata (#1213)
  • 8f293ac Version 7.2.2
  • a33ec14 Remove obsolete TruffleRuby compatibility skips (#1210)
  • c613224 Version 7.2.1
  • Additional commits viewable in compare view

Updates jquery-rails from 4.4.0 to 4.6.1

Changelog

Sourced from jquery-rails's changelog.

4.6.1

  • update jquery to 3.7.1

4.6.0

  • update jquery to 3.7.0

4.5.1

  • update jquery to 3.6.1
  • update jquery-ujs to 1.2.3

4.5.0

  • update jquery to 3.6.0
Commits
  • 0342960 Release v4.6.1 with jQuery v3.7.1
  • 039b12e Update jquery to v3.7.1 (#305)
  • 12869da Release v4.6.0 with jQuery v3.7.0
  • 65a9c73 Update jquery to 3.7.0
  • fb5a7a8 Merge pull request #293 from MichaelHoste/patch-1
  • d9dfbe1 Merge pull request #296 from okuramasafumi/patch-1
  • f34a439 Update CHANGELOG.md
  • b9e5aa7 Fix typo in CHANGELOG.md (usj => ujs)
  • de8792d Release v4.5.1 with jquery 3.6.1 and jquery-ujs 1.2.3
  • 7e6f508 Update jquery-ujs to latest v1.2.3
  • Additional commits viewable in compare view

Updates loofah from 2.25.1 to 2.25.2
Updates rails-html-sanitizer from 1.7.0 to 1.7.1

Changelog

Sourced from rails-html-sanitizer's changelog.

v1.7.1 / 2026-07-15

  • SVG reference elements now restrict both href and xlink:href to local references.

    Previously PermitScrubber restricted only xlink:href on elements in SVG_ALLOW_LOCAL_HREF, so a plain href attribute on those elements could reference an external document. Applications are only affected if the allowed tags are overridden to include an SVG reference element such as use; the default configuration is not affected.

    This change addresses GHSA-cj75-f6xr-r4g7 (CVE requested). The minimum Loofah dependency is now ~> 2.25, >= 2.25.2.

    Mike Dalessio

Commits
  • 4f37e3d version bump to v1.7.1
  • b4673b9 Merge pull request #223 from rails/svg-href-local-ref
  • 74dcb80 Properly restrict SVG href attributes
  • 11ee440 Adjust data: URI mediatype tests for loofah 2.25.2 (#222)
  • bc9622c Harden GitHub Actions workflows (#220)
  • 3459ffd dep(dev): update nokogiri (#219)
  • 8aa4bb2 build(deps-dev): bump concurrent-ruby from 1.3.6 to 1.3.7 (#218)
  • 4ddc0c7 dep(dev): update development dependencies (#217)
  • f87abb4 Merge pull request #215 from yuri-zubov/reduce-gem-size
  • 527b317 Reduce gem size by excluding test files
  • See full diff in compare view

Updates rdiscount from 2.2.7.4 to 2.2.7.5

Changelog

Sourced from rdiscount's changelog.

Version 2.2.7.5 (April 26, 2026)

  • Fix build failure in newer compilers that use C23 mode by default, such as Clang on macOS.
Commits
  • d6465ee 2.2.7.5 release
  • 4e7318c Patch Discount 2.2.7 to rewrite K&R syntax that is rejected in Clang's C23 mode
  • e6bc99e Continuous Integration: Upgrade actions/checkout to v6
  • 2d73367 Continuous Integration: Add Ruby 3.4 and 4.0
  • See full diff in compare view

Updates i18n-js from 3.9.2 to 4.2.4

Changelog

Sourced from i18n-js's changelog.

Changelog

v5.0.0.rc1 - Jun 02, 2026

  • [Added] embed_fallback_translations plugin now supports I18n.fallbacks, and will switch to it automatically if you're using a backend that includes the I18n::Backend::Fallbacks module and have I18n.fallbacks configured.
  • [Changed] i18n lint:translations and i18n lint:scripts now support globs in their ignore option.
  • [Removed] Previous versions allowed bare keys in lint's :ignore rule. This is no longer supported; instead, use *.key.
  • [Removed] Remove i18n check; use i18n lint:translations instead.
  • [Fixed] Return the number of missing translations as the exit code when running i18n lint:scripts.
  • [Changed] Plugin configuration moved from top-level keys to a pipeline: array in the config file. Each entry requires a plugin: key identifying the plugin and an enabled: key. Plugin-specific options are defined inline in the same stage object.
  • [Changed] I18nJS::Plugin.key is now a class method returning a String. Previously it was an instance method called config_key that returned a Symbol.
  • [Changed] I18nJS::Plugin#initialize now accepts plugin_config: and main_config: instead of a single config: argument.
  • [Changed] I18nJS::Plugin#config now returns only the plugin's own configuration slice instead of the full main config.
  • [Changed] I18nJS.initialize_plugins! now returns the list of active plugin instances. The I18nJS.plugins accessor has been removed.
  • [Changed] I18nJS::Schema.root_keys is now a frozen Array. Plugins no longer need to register a root key in their setup method.
  • [Changed] Schema validation paths in validate_schema are now relative to the plugin's own config root. Remove the leading config_key segment from all paths passed to schema.* helpers.
  • [Removed] The check: root key is no longer recognised by the schema validator. Remove it from your config file.
  • [Added] A single plugin class can now appear multiple times in the pipeline with different configurations, each running as an independent instance.
  • [Changed] Export translations in parallel. To enable parallel mode, your output file definition must include the :locale placeholder.

... (truncated)

Commits

Updates jbuilder from 2.14.1 to 2.15.1

Commits
  • 31eb6e9 Prepare for 2.15.1
  • 154b0fe Merge pull request #617 from rails/rm-fix-616
  • d3e763b Fix partial for Active Model when extra locals are passed in
  • 018083d Prepare for 2.15.0
  • 72cf067 Update devcontainer image to Ruby 4.0.4 and add devcontainer-lock.json
  • d35a962 Merge pull request #615 from taketo1113/ci-rails8.1-ruby4.0
  • cc42e7e CI: Add Rails 8.1 & Ruby 4.0 to CI Matrix
  • cd7482e Merge pull request #613 from affinity/moberegger/fix-inline-partial-locals-be
  • 58283a0 Merge pull request #612 from affinity/moberegger/optimize-_map_collection
  • 09ca3e1 Merge pull request #603 from taketo1113/update-rack-unprocessable_content
  • Additional commits viewable in compare view

Updates shakapacker from 9.5.0 to 10.3.1

Changelog

Sourced from shakapacker's changelog.

[v10.3.1] - August 3, 2026

Fixed

  • Fixed 502 responses for proxied dev server assets under rack-proxy v1. [PR #1222](shakacode/shakapacker#1222) by jcbpl. Fixes #1220.
  • Fixed dev-server liveness checks treating refused macOS 27 connections as running. The Ruby probe now verifies the connected socket's SO_ERROR result before proxying asset requests, avoiding false-positive dev-server detection and resulting 502 responses. [PR #1225](shakacode/shakapacker#1225) by justin808. Fixes #1224.
  • Fixed webpack Babel, SWC, and esbuild rules skipping explicitly included .cjs files. [PR #1219](shakacode/shakapacker#1219) by oiahoon. Fixes #1218.
  • Added a shakapacker:doctor warning for Rspack React Refresh v2 configs that still use the v1 default-export constructor pattern. [PR #1207](shakacode/shakapacker#1207) by justin808. Existing configs with const ReactRefreshPlugin = require("@rspack/plugin-react-refresh") followed by new ReactRefreshPlugin() can fail after upgrading to @rspack/plugin-react-refresh v2 with ReactRefreshPlugin is not a constructor; Doctor now points to the affected JS/TS config file and suggests the named-export/default/module compatibility form. Fixes #1204.
  • Fixed the missing-@babel/core failure to report an actionable install message. [PR #1212](shakacode/shakapacker#1212) by justin808. Babel-transpiled builds whose app lacks @babel/core previously surfaced a raw module-resolution error from the Babel 8 compatibility check; the rule now explains which package to install and how to switch javascript_transpiler instead. Refs #1163.

Documentation

  • Documented the required css-loader@^7.1.4 in the v10 Rspack upgrade instructions. [PR #1211](shakacode/shakapacker#1211) by justin808. The v10 upgrade guide's copy-paste Rspack v2 commands omitted css-loader, so apps following them could upgrade into an unsatisfied peer dependency.

[v10.3.0] - July 5, 2026

Added

Fixed

  • Fixed implicit SWC defaults for existing webpack/Babel apps without swc-loader. [PR #1206](shakacode/shakapacker#1206) by justin808. Webpack apps that omit both javascript_transpiler and the deprecated webpack_loader now fall back to Babel with a warning when Shakapacker's bundled SWC default is active, swc-loader is missing, and Babel is present. Explicit transpiler settings, webpack apps with swc-loader, and Rspack's built-in SWC path keep their existing behavior. Closes #1203.
  • Fixed JavaScript config loading for missing Rails environments to use the production fallback. [PR #1206](shakacode/shakapacker#1206) by justin808. When RAILS_ENV has no matching section in config/shakapacker.yml, the Node package config now merges the production section instead of only bundled defaults, matching Ruby configuration loading and honoring explicit production javascript_transpiler, source_path, dev_server, and related settings for custom environments such as staging.
  • Fixed helper binstubs delegating Node resolution to Ruby exec in unset and empty PATH environments. [PR #1200](shakacode/shakapacker#1200) and [PR #1201](shakacode/shakapacker#1201) by justin808. Restores shell-compatible Node lookup for bin/shakapacker-config and bin/diff-bundler-config after the v10.2.0 Ruby-binstub regression, while keeping friendly missing-Node errors for ENOENT and EACCES.

[v10.2.0] - July 3, 2026

Added

  • Added webpack_compile_flags configuration. [PR #1180](shakacode/shakapacker#1180) by justin808. Allows Rails-driven Shakapacker compiles to pass extra webpack/rspack CLI flags, such as --fail-on-warnings or --progress, through bin/shakapacker. Fixes #1175.
  • Added AI analysis prompt generation to the config exporter. [PR #695](shakacode/shakapacker#695), [PR #1184](shakacode/shakapacker#1184) by justin808. When running doctor mode (bin/shakapacker-config --doctor), the exporter now also writes an AI-ANALYSIS-PROMPT.md: a ready-to-paste prompt that guides an AI assistant (ChatGPT, Claude, Gemini, etc.) to review the configuration for migration issues (webpack ↔ rspack), build errors, client/server and development/production optimizations, and best practices. The React on Rails–specific guidance in the generated prompt is included only when React on Rails is detected in the app (via package.json, Gemfile, or Gemfile.lock). This is purely additive; existing exports are unchanged, and a failure to write the prompt file only warns without affecting the exported configs.
  • Added support for sass-loader v17. [PR #1141](shakacode/shakapacker#1141) by fukayatsu. Widened the optional sass-loader peer range to ^13.0.0 || ^14.0.0 || ^15.0.0 || ^16.0.0 || ^17.0.0 in core shakapacker, shakapacker-webpack, and shakapacker-rspack. The Sass rule already selects loadPaths for v16+ and keeps api: "modern", both of which remain valid in v17. Note that sass-loader v17 requires Node.js 22.11.0+ and drops node-sass and the legacy Sass JS API, so apps that opt into v17 must already be on Node 22.12+ (the upper branch of Shakapacker's engines.node range).
  • Added Babel 8 peer dependency support. [PR #1187](shakacode/shakapacker#1187) by justin808. Widened the Babel peer ranges in core shakapacker and the shakapacker-webpack supplemental package to allow Babel 8, and updated the Shakapacker Babel preset to omit options removed in Babel 8 while preserving existing Babel 7 behavior. Repository development pins stay on Babel 7, with added compatibility tests covering Babel 8. Refs #1163.

Changed

  • New installs now default to Rspack instead of webpack. [PR #1150](shakacode/shakapacker#1150) by justin808. bundle exec rake shakapacker:install now scaffolds an Rspack project (config, dependencies, and config/shakapacker.yml) by default. This is a new-install default only: existing applications are unaffected. The Rspack default applies only to brand-new installs — re-running the installer on an app that already has a config/shakapacker.yml keeps that app's current bundler (and installs that bundler's dependencies), so the installer never silently switches an existing project's bundler. To install with webpack, run bundle exec rake shakapacker:install[webpack] or set SHAKAPACKER_ASSETS_BUNDLER=webpack; to change an existing app's bundler, use bundle exec rake shakapacker:switch_bundler.
  • Changed Rspack support to target Rspack v2 only. [PR #1179](shakacode/shakapacker#1179) by justin808. Core, installer, switch-bundler defaults, supplemental package, dummy app, and docs now use @rspack/core, @rspack/cli, @rspack/dev-server, and @rspack/plugin-react-refresh v2 ranges. Rspack installs now also require rspack-manifest-plugin@^5.2.2, and shakapacker-rspack requires css-loader@^7.1.4 for Rspack v2 peer compatibility. The Rspack React Refresh loader now uses the v2 named ReactRefreshRspackPlugin export instead of retaining legacy v1 export-shape fallbacks.

Fixed

  • Fixed helper binstubs and doctor checks for subdirectory JavaScript layouts. [PR #1192](shakacode/shakapacker#1192) by justin808. bin/shakapacker-config and bin/diff-bundler-config now resolve package scripts from a configured client package root before falling back to the Rails root, and shakapacker:doctor now searches package metadata, lockfiles, and installed packages across client/root layouts while reducing false SWC dependency issues for custom hybrid webpack/Rspack setups. Fixes #1170 and #1090.
  • Fixed dev-server passthrough argument validation messages. [PR #1180](shakacode/shakapacker#1180) by justin808. bin/shakapacker-dev-server -- --host ... or --port ... now fails with a clearer Shakapacker message instead of forwarding the separator to the bundler; set dev_server.host and dev_server.port in config/shakapacker.yml instead.
  • Fixed shakapacker:export_bundler_config regression on apps upgraded from older Shakapacker versions. [PR #1127](shakacode/shakapacker#1127) by justin808. The task previously invoked bin/shakapacker-config unconditionally via RbConfig.ruby, which crashed when the file was still the legacy JavaScript binstub (#!/usr/bin/env node) left over from earlier installs. The task now inspects the shebang and exec's the file directly when it points at Node, while keeping the Ruby+RbConfig.ruby path for the current Ruby binstub. Affected users are also nudged to run bundle exec rake shakapacker:binstubs to refresh their helper binstub. Refs #1123.
  • Fixed shakapacker:doctor Sass implementation detection for sass-embedded apps. [PR #1178](shakacode/shakapacker#1178) by justin808. The doctor now accepts either modern Sass implementation package (sass or sass-embedded) when Sass files are present, matching Shakapacker's default modern Sass API instead of incorrectly requiring Dart Sass. New installs also include sass alongside sass-loader. Fixes #1172.
  • Fixed Psych::DisallowedClass boot crash when pnpm-lock.yaml contains a time: section. [PR #1161](shakacode/shakapacker#1161) by justin808. pnpm >= 10.16 (default in pnpm 11) writes publish timestamps into pnpm-lock.yaml that Psych 4+ refuses to safe-load, so the shakapacker.version_checker boot initializer raised Psych::DisallowedClass: Tried to load unspecified class: Time and crashed every Rails boot — even when version checking was disabled. The lockfile is now parsed with YAML.safe_load(..., permitted_classes: [Time, Date]). Fixes #1160.
  • Fixed Rspack dev-server lazy compilation defaults for Rails split dev-server topology. [PR #1179](shakacode/shakapacker#1179) by justin808. Generated Rspack development configs now set top-level lazyCompilation: false while the dev server is running, preventing Rspack CLI dev-server auto-lazy behavior from routing dynamic imports through lazy trigger URLs Rails does not serve. Apps that intentionally use lazy compilation can still set a safe top-level lazyCompilation value in their Rspack config.
  • Fixed Rspack dev-server config loading during static watch builds. [PR #1142](shakacode/shakapacker#1142) by justin808. The Rspack devServer configuration is now gated behind WEBPACK_SERVE=true, matching the webpack development config, so static watch builds (bin/shakapacker --watch) no longer load the dev-server client. The devMiddleware.writeToDisk filter that skips hot-update files is preserved. Fixes #1137.
  • Fixed compiler strategies ignoring the instance config of custom Shakapacker::Instance objects. [PR #1147](shakacode/shakapacker#1147) by justin808. Ports #976 by brunodccarvalho. Strategies now read the instance-specific config and watch both webpack and rspack config directories.

... (truncated)

Commits

Updates sentry-rails from 6.4.1 to 6.7.0

Changelog

Sourced from sentry-rails's changelog.

6.7.0

New Features ✨

Bug Fixes 🐛

Rails

Other

  • (test) Kill threaded global workers before clearing Sentry globals by @​solnic in #2990
  • Isolate inherited hubs under hub_isolation_level = :fiber by @​SeanLF in #3036

Internal Changes 🔧

6.6.2

Bug Fixes 🐛

6.6.1

Bug Fixes 🐛

6.6.0

New Features ✨

  • (yabeda) Add sentry-yabeda adapter gem by @​dingsdax in #2925

    There's a new sentry-yabeda gem that integrates Sentry Metrics with Yabeda. Add the new gem to your Gemfile:

    gem "sentry-yabeda"

... (truncated)

Commits
  • c39c42d release: 6.7.0
  • 0121462 ci: 🤖 Update pinned CI lockfiles (#3045)
  • 9278dd4 fix(rails): guard execution context with send_default_pii (#3043)
  • 5abda56 ci: 🤖 Update pinned CI lockfiles (#3040)
  • d739a8d fix(rails): ensure Rails.error.set_context is not lost (#3024)
  • 395aca9 chore(rails): AJ tracing convention compliance (#3031)
  • b02a915 ci: 🤖 Update pinned CI lockfiles (#3027)
  • 9f70c7a fix(active_job): Consumer span op should be queue.process (#3021)
  • 3ddf4a9 feat(rails): support for solid queue (#2942)
  • 7ab412f feat: add config.hub_isolation_level for fiber-safe hub storage (Falcon/async...
  • Additional commits viewable in compare view

Updates sentry-ruby from 6.4.1 to 6.7.0

Changelog

Sourced from sentry-ruby's changelog.

6.7.0

New Features ✨

Bug Fixes 🐛

Rails

Other

  • (test) Kill threaded global workers before clearing Sentry globals by @​solnic in #2990
  • Isolate inherited hubs under hub_isolation_level = :fiber by @​SeanLF in #3036

Internal Changes 🔧

6.6.2

Bug Fixes 🐛

6.6.1

Bug Fixes 🐛

6.6.0

New Features ✨

  • (yabeda) Add sentry-yabeda adapter gem by @​dingsdax in #2925

    There's a new sentry-yabeda gem that integrates Sentry Metrics with Yabeda. Add the new gem to your Gemfile:

    gem "sentry-yabeda"

... (truncated)

Commits
  • c39c42d release: 6.7.0
  • 0121462 ci: 🤖 Update pinned CI lockfiles (#3045)
  • 5abda56 ci: 🤖 Update pinned CI lockfiles (#3040)
  • e89d3bc fix: isolate inherited hubs under hub_isolation_level = :fiber (#3036)
  • 395aca9 chore(rails): AJ tracing convention compliance (#3031)
  • b02a915 ci: 🤖 Update pinned CI lockfiles (#3027)
  • d405668 fix: correct Scope extra parameter typo (#3023)
  • 3ddf4a9 feat(rails): support for solid queue (#2942)
  • 7ab412f feat: add config.hub_isolation_level for fiber-safe hub storage (Falcon/async...
  • b625f46 ci: 🤖 Update pinned CI lockfiles (#3019)
  • Additional commits viewable in compare view

Updates dry-monads from 1.9.0 to 1.10.0

Changelog

Sourced from dry-monads's changelog.

1.10.0 - 2026-04-24

Added

Fixed

Commits
  • 21153f4 Prepare for v1.10.0
  • 158b132 Use project-standard CHANGELOG formatting
  • 5fe4dbe Fix typos
  • 100690b File sync from hanakai-rb/repo-sync
  • a94fde4 Test on JRuby (#203)
  • 3de533a Create temp spec files with realistic filename
  • 7e2394d Fix be_* matchers in RSpec extensions on JRuby
  • 5d34eff Merge pull request #200 from dry-rb/jruby-rspec-extension
  • bca51ea Fix detection of RSpec context when debug_inspector is not available
  • aa4b21c File sync from hanakai-rb/repo-sync
  • Additional commits viewable in compare view

Updates yard-tomdoc from 0.4.0 to 0.7.1

Changelog

Sourced from

@dependabot
Bump the dependencies group with 27 updates
dded2db 
Bumps the dependencies group with 27 updates:

| Package | From | To |
| --- | --- | --- |
| [activerecord-session_store](https://github.com/rails/activerecord-session_store) | `2.2.0` | `2.3.0` |
| [discard](https://github.com/jhawthorn/discard) | `1.4.0` | `2.0.0` |
| [haml](https://github.com/haml/haml) | `5.2.2` | `7.3.0` |
| [jquery-rails](https://github.com/rails/jquery-rails) | `4.4.0` | `4.6.1` |
| [loofah](https://github.com/flavorjones/loofah) | `2.25.1` | `2.25.2` |
| [rails-html-sanitizer](https://github.com/rails/rails-html-sanitizer) | `1.7.0` | `1.7.1` |
| [rdiscount](https://github.com/davidfstr/rdiscount) | `2.2.7.4` | `2.2.7.5` |
| [i18n-js](https://github.com/fnando/i18n-js) | `3.9.2` | `4.2.4` |
| [jbuilder](https://github.com/rails/jbuilder) | `2.14.1` | `2.15.1` |
| [shakapacker](https://github.com/shakacode/shakapacker) | `9.5.0` | `10.3.1` |
| [sentry-rails](https://github.com/getsentry/sentry-ruby) | `6.4.1` | `6.7.0` |
| [sentry-ruby](https://github.com/getsentry/sentry-ruby) | `6.4.1` | `6.7.0` |
| [dry-monads](https://github.com/dry-rb/dry-monads) | `1.9.0` | `1.10.0` |
| [yard-tomdoc](https://github.com/rubyworks/yard-tomdoc) | `0.4.0` | `0.7.1` |
| [seed_dump](https://github.com/rroblak/seed_dump) | `3.4.1` | `3.4.2` |
| [pry-stack_explorer](https://github.com/pry/pry-stack_explorer) | `0.6.2` | `0.6.3` |
| [rspec-rails](https://github.com/rspec/rspec-rails) | `6.1.5` | `8.0.4` |
| [rubocop](https://github.com/rubocop/rubocop) | `1.85.0` | `1.89.0` |
| [rubocop-rails](https://github.com/rubocop/rubocop-rails) | `2.34.3` | `2.36.0` |
| [rubocop-rspec](https://github.com/rubocop/rubocop-rspec) | `3.9.0` | `3.10.2` |
| [shoulda-matchers](https://github.com/thoughtbot/shoulda-matchers) | `7.0.1` | `8.0.1` |
| [simplecov](https://github.com/simplecov-ruby/simplecov) | `0.22.0` | `1.1.1` |
| [webmock](https://github.com/bblimke/webmock) | `3.26.1` | `3.26.2` |
| [puma](https://github.com/puma/puma) | `7.2.1` | `8.0.2` |
| [newrelic_rpm](https://github.com/newrelic/newrelic-ruby-agent) | `10.2.0` | `10.7.0` |
| [mini_racer](https://github.com/discourse/mini_racer) | `0.20.0` | `0.22.0` |
| [terser](https://github.com/ahorek/terser-ruby) | `1.2.6` | `1.2.8` |


Updates `activerecord-session_store` from 2.2.0 to 2.3.0
- [Changelog](https://github.com/rails/activerecord-session_store/blob/main/CHANGELOG.md)
- [Commits](rails/activerecord-session_store@v2.2.0...v2.3.0)

Updates `discard` from 1.4.0 to 2.0.0
- [Changelog](https://github.com/jhawthorn/discard/blob/master/CHANGELOG.md)
- [Commits](jhawthorn/discard@v1.4.0...v2.0.0)

Updates `haml` from 5.2.2 to 7.3.0
- [Changelog](https://github.com/haml/haml/blob/main/CHANGELOG.md)
- [Commits](haml/haml@v5.2.2...v7.3.0)

Updates `jquery-rails` from 4.4.0 to 4.6.1
- [Changelog](https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md)
- [Commits](rails/jquery-rails@v4.4.0...v4.6.1)

Updates `loofah` from 2.25.1 to 2.25.2
- [Changelog](https://github.com/flavorjones/loofah/blob/main/CHANGELOG.md)
- [Commits](flavorjones/loofah@v2.25.1...v2.25.2)

Updates `rails-html-sanitizer` from 1.7.0 to 1.7.1
- [Changelog](https://github.com/rails/rails-html-sanitizer/blob/main/CHANGELOG.md)
- [Commits](rails/rails-html-sanitizer@v1.7.0...v1.7.1)

Updates `rdiscount` from 2.2.7.4 to 2.2.7.5
- [Changelog](https://github.com/davidfstr/rdiscount/blob/master/CHANGELOG.md)
- [Commits](davidfstr/rdiscount@2.2.7.4...2.2.7.5)

Updates `i18n-js` from 3.9.2 to 4.2.4
- [Changelog](https://github.com/fnando/i18n-js/blob/main/CHANGELOG.md)
- [Commits](fnando/i18n-js@v3.9.2...v4.2.4)

Updates `jbuilder` from 2.14.1 to 2.15.1
- [Commits](rails/jbuilder@v2.14.1...v2.15.1)

Updates `shakapacker` from 9.5.0 to 10.3.1
- [Changelog](https://github.com/shakacode/shakapacker/blob/main/CHANGELOG.md)
- [Commits](shakacode/shakapacker@v9.5.0...v10.3.1)

Updates `sentry-rails` from 6.4.1 to 6.7.0
- [Changelog](https://github.com/getsentry/sentry-ruby/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-ruby@6.4.1...6.7.0)

Updates `sentry-ruby` from 6.4.1 to 6.7.0
- [Changelog](https://github.com/getsentry/sentry-ruby/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-ruby@6.4.1...6.7.0)

Updates `dry-monads` from 1.9.0 to 1.10.0
- [Changelog](https://github.com/dry-rb/dry-monads/blob/main/CHANGELOG.md)
- [Commits](dry-rb/dry-monads@v1.9.0...v1.10.0)

Updates `yard-tomdoc` from 0.4.0 to 0.7.1
- [Changelog](https://github.com/rubyworks/yard-tomdoc/blob/master/HISTORY.md)
- [Commits](rubyworks/yard-tomdoc@0.4.0...0.7.1)

Updates `seed_dump` from 3.4.1 to 3.4.2
- [Commits](rroblak/seed_dump@v3.4.1...v3.4.2)

Updates `pry-stack_explorer` from 0.6.2 to 0.6.3
- [Release notes](https://github.com/pry/pry-stack_explorer/releases)
- [Changelog](https://github.com/pry/pry-stack_explorer/blob/master/CHANGELOG)
- [Commits](pry/pry-stack_explorer@v0.6.2...v0.6.3)

Updates `rspec-rails` from 6.1.5 to 8.0.4
- [Changelog](https://github.com/rspec/rspec-rails/blob/main/Changelog.md)
- [Commits](rspec/rspec-rails@v6.1.5...v8.0.4)

Updates `rubocop` from 1.85.0 to 1.89.0
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.85.0...v1.89.0)

Updates `rubocop-rails` from 2.34.3 to 2.36.0
- [Changelog](https://github.com/rubocop/rubocop-rails/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop-rails@v2.34.3...v2.36.0)

Updates `rubocop-rspec` from 3.9.0 to 3.10.2
- [Changelog](https://github.com/rubocop/rubocop-rspec/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop-rspec@v3.9.0...v3.10.2)

Updates `shoulda-matchers` from 7.0.1 to 8.0.1
- [Changelog](https://github.com/thoughtbot/shoulda-matchers/blob/main/CHANGELOG.md)
- [Commits](thoughtbot/shoulda-matchers@v7.0.1...v8.0.1)

Updates `simplecov` from 0.22.0 to 1.1.1
- [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md)
- [Commits](simplecov-ruby/simplecov@v0.22.0...v1.1.1)

Updates `webmock` from 3.26.1 to 3.26.2
- [Changelog](https://github.com/bblimke/webmock/blob/master/CHANGELOG.md)
- [Commits](bblimke/webmock@v3.26.1...v3.26.2)

Updates `puma` from 7.2.1 to 8.0.2
- [Changelog](https://github.com/puma/puma/blob/main/History.md)
- [Commits](puma/puma@v7.2.1...v8.0.2)

Updates `newrelic_rpm` from 10.2.0 to 10.7.0
- [Changelog](https://github.com/newrelic/newrelic-ruby-agent/blob/dev/CHANGELOG.md)
- [Commits](newrelic/newrelic-ruby-agent@10.2.0...10.7.0)

Updates `mini_racer` from 0.20.0 to 0.22.0
- [Changelog](https://github.com/rubyjs/mini_racer/blob/main/CHANGELOG)
- [Commits](rubyjs/mini_racer@v0.20.0...v0.22.0)

Updates `terser` from 1.2.6 to 1.2.8
- [Changelog](https://github.com/ahorek/terser-ruby/blob/master/CHANGELOG.md)
- [Commits](ahorek/terser-ruby@1.2.6...1.2.8)

---
updated-dependencies:
- dependency-name: activerecord-session_store
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: discard
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: haml
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: jquery-rails
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: loofah
  dependency-version: 2.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: rails-html-sanitizer
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: rdiscount
  dependency-version: 2.2.7.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: i18n-js
  dependency-version: 4.2.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: jbuilder
  dependency-version: 2.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: shakapacker
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: sentry-rails
  dependency-version: 6.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: sentry-ruby
  dependency-version: 6.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: dry-monads
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: yard-tomdoc
  dependency-version: 0.7.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: seed_dump
  dependency-version: 3.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: pry-stack_explorer
  dependency-version: 0.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: rspec-rails
  dependency-version: 8.0.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: rubocop
  dependency-version: 1.89.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: rubocop-rails
  dependency-version: 2.36.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: rubocop-rspec
  dependency-version: 3.10.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: shoulda-matchers
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: simplecov
  dependency-version: 1.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: webmock
  dependency-version: 3.26.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: puma
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: newrelic_rpm
  dependency-version: 10.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: mini_racer
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: terser
  dependency-version: 1.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Aug 17, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 17, 2026 15:19
@aaccensi aaccensi closed this Aug 18, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 18, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/bundler/dependencies-207ca6183d branch August 18, 2026 09:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@aaccensi