Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps the ruby-dependencies group with 2 updates: pg and bootsnap.

Updates pg from 1.6.2 to 1.6.3

Changelog

Sourced from pg's changelog.

v1.6.3 [2025-12-29] Lars Kanis lars@greiz-reinsdorf.de

Added:

  • Add binary gems for ruby-4.0, now providing ruby-3.0 to 4.0. #682
  • Update fat binary gem to OpenSSL-3.6.0 and PostgreSQL-18.1.
  • Improve documentation of PG::Result and README. #676
  • Update errorcodes to PostgreSQL-18.
  • Use rb_hash_new_capa on Ruby-3.2+ . #674
  • Deny any server communication on a frozen PG::Connection . #677
  • Fix possible race condition in PG::Result in Ractor context. #674

Removed:

  • Drop binary gem support for platform x86-mingw32. #682
  • Drop binary gems for ruby-2.7.
Commits
  • d4539c2 Bump VERSION to pg-1.6.3 and add release notes
  • 720900d Merge pull request #682 from larskanis/ruby-4.0
  • f605b59 Remove x86-mingw32 from binary builds
  • 5c69000 Update to ruby-4.0
  • 2acaf3d CI: workaround missing ruby-4.0 on Window
  • b500ded fix comment
  • bc3f2f8 CI: Macos-13 on Intel is deprecated
  • 77667eb Merge pull request #678 from larskanis/ci-update
  • 6e52ce5 CI: Update PostgreSQL on Macos
  • 6d40f50 CI: Print mkmf.log on failure on Macos
  • Additional commits viewable in compare view

Updates bootsnap from 1.19.0 to 1.20.1

Release notes

Sourced from bootsnap's releases.

v1.20.1

What's Changed

  • Handle broken symlinks in load path scanning code. Should fix Errno::ENOENT fstatat issues some users have encountered after upgrading to 1.20.0.

Full Changelog: rails/bootsnap@v1.20.0...v1.20.1

v1.20.0

What's Changed

  • Optimized load path scanning with a C extension. Should be about 2x faster on supported platforms.

Full Changelog: rails/bootsnap@v1.19.0...v1.20.0

Changelog

Sourced from bootsnap's changelog.

1.20.1

  • Handle broken symlinks in load path scanning code. Should fix Errno::ENOENT fstatat issues some users have encountered after upgrading to 1.20.0.

1.20.0

  • Optimized load path scanning with a C extension. Should be about 2x faster on supported platforms.
Commits
  • ba59bb8 Release 1.20.1
  • 302b7db Merge pull request #514 from byroot/handle-broken-symlink
  • fd1ddc3 Handle broken symlinks in load path
  • fac34b8 Release 1.20.0
  • 71311d4 Include Bootsnap::VERSION in LoadPathCache version
  • f5c43ac Merge pull request #512 from byroot/prune-load-dir
  • f94f668 Stop caching directories in LoadPathCache
  • e3b5292 Merge pull request #511 from byroot/c-ext-load-path-scan
  • e91dd21 Implement PathScanner in C to avoid N+1 stat(2) calls
  • c77d5cc Cleanup the c extension
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ruby-dependencies group with 2 updates: [pg](https://github.com/ged/ruby-pg) and [bootsnap](https://github.com/rails/bootsnap).


Updates `pg` from 1.6.2 to 1.6.3
- [Changelog](https://github.com/ged/ruby-pg/blob/master/CHANGELOG.md)
- [Commits](ged/ruby-pg@v1.6.2...v1.6.3)

Updates `bootsnap` from 1.19.0 to 1.20.1
- [Release notes](https://github.com/rails/bootsnap/releases)
- [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md)
- [Commits](rails/bootsnap@v1.19.0...v1.20.1)

---
updated-dependencies:
- dependency-name: pg
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-dependencies
- dependency-name: bootsnap
  dependency-version: 1.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Jan 1, 2026
@dependabot dependabot bot requested a review from schneems as a code owner January 1, 2026 03:01
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Jan 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants