Bump the ruby group with 6 updates #99

dependabot · 2025-10-01T20:05:56Z

Bumps the ruby group with 6 updates:

Package	From	To
propshaft	`1.2.1`	`1.3.1`
puma	`7.0.3`	`7.0.4`
rails	`8.0.2.1`	`8.0.3`
sentry-rails	`5.27.0`	`5.28.0`
turbo-rails	`2.0.16`	`2.0.17`
activerecord	`8.0.2.1`	`8.0.3`

Updates propshaft from 1.2.1 to 1.3.1

Release notes

Sourced from propshaft's releases.

v1.3.0

What's Changed

Turn Propshaft::Server into a proper middleware by @byroot in rails/propshaft#249

New Contributors

@byroot made their first contribution in rails/propshaft#249

Full Changelog: rails/propshaft@v1.2.1...v1.3.0

Commits

68bb8c5 Prepare for 1.3.1
4024092 Merge pull request #253 from rails/rm-fix-middleware
fad626f Move Propshaft::Server middleware before ActionDispatch::Executor
8ebcd45 Prepare for 1.3.0
84d9a55 Merge pull request #249 from byroot/rack-server
b389640 Turn Propshaft::Server into a proper middleware
See full diff in compare view

Updates puma from 7.0.3 to 7.0.4

Changelog

Sourced from puma's changelog.

7.0.4 / 2025-09-23

Bugfixes

Fix SSL_shutdown error handling (#3703)

Strip whitespace from the beginnings of request header values. (#3742)

Performance

puma_http11.c: Use interned UTF-8 strings for hash keys (#3754)

Move sleep cluster logic to its own class (#3746, #3740)

Commits

a4c451c v7.0.4 (#3769)
474f4ac Remove global side effect from test (#3765)
30e0d22 Add test/rackup/sleep_fibonacci.ru, update benchmark hey files (#3758)
4cd1199 ci: test_puma_server_ssl.rb - catch error in thread (#3760)
684b715 Fix SSL_shutdown error handling (#3703)
7e0d127 Strip whitespace from the beginnings of request header values. (#3742)
b817da4 puma_http11.c: Use interned UTF-8 strings for hash keys (#3754)
943d9c7 Move sleep cluster logic to its own class (#3746)
7aadde5 ci: helper.rb - catch error writing to ENV['GITHUB_STEP_SUMMARY'] file (#3752)
48ffd34 Fixup benchmark scripts (#3753)
See full diff in compare view

Updates rails from 8.0.2.1 to 8.0.3

Release notes

Sourced from rails's releases.

8.0.3

Active Support
ActiveSupport::FileUpdateChecker does not depend on Time.now to prevent unnecessary reloads with time travel test helpers

Jan Grodowski

Fix ActiveSupport::BroadcastLogger from executing a block argument for each logger (tagged, info, etc.).

Jared Armstrong

Make ActiveSupport::Logger #freeze-friendly.

Joshua Young

Fix ActiveSupport::HashWithIndifferentAccess#transform_keys! removing defaults.

Hartley McGuire
Fix ActiveSupport::HashWithIndifferentAccess#tranform_keys! to handle collisions.

If the transformation would result in a key equal to another not yet transformed one, it would result in keys being lost.

Before:
>> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1}
After:
>> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1, "d" => 2}
Jason T Johnson, Jean Boussier
Fix ActiveSupport::Cache::MemCacheStore#read_multi to handle network errors.

This method specifically wasn't handling network errors like other codepaths.

Alessandro Dal Grande

Fix configuring RedisCacheStore with raw: true.

fatkodima

... (truncated)

Commits

529f933 Preparing for 8.0.3 release
6409b24 Merge pull request #55719 from skipkayhil/hm-fix-label-for-namespace
030f68c Remove lock for rdoc gem in Gemfile
0160f42 Sync CHANGELOGs
6394bfb Merge pull request #55725 from byroot/js-include-type-module-sym
0ff0d09 Merge pull request #55724 from fatkodima/preserve-locale-eml-preview
74038d7 Merge pull request #55722 from kozy4324/fix-lease-sticky-flag-timing
78fe965 Merge pull request #55710 from Shopify/grodowski/file-update-checker-time-tra...
4fc9618 Merge pull request #55703 from byroot/hly-fix-query-cache-system-tests-2
847072c Fix TransitionTable#as_json compatibility with json 2.14.0
Additional commits viewable in compare view

Updates sentry-rails from 5.27.0 to 5.28.0

Changelog

Sourced from sentry-rails's changelog.

5.28.0

Features

Auto-enable Rails structured logging when enable_logs is true (#2721)

Miscellaneous
Deprecate all Metrics related APIs #2726

Sentry no longer has the Metrics Beta offering so all the following APIs linked to Metrics have been deprecated and will be removed in the next major.
Sentry.init do |config|
  # ...
  config.metrics.enabled = true
  config.metrics.enable_code_locations = true
  config.metrics.before_emit = lambda {}
end
Sentry::Metrics.increment('button_click')
Sentry::Metrics.distribution('page_load', 15.0, unit: 'millisecond')
Sentry::Metrics.gauge('page_load', 15.0, unit: 'millisecond')
Sentry::Metrics.set('user_view', 'jane')
Sentry::Metrics.timing('how_long') { sleep(1) }
Internal

Fix leftover config.logger call in graphql patch (#2722

Add Configuration.before and Configuration.after to run hooks before and after given event (#2724)

5.27.1

Features

Support for :origin attribute in log events (#2712)

Bug Fixes

Skip including sentry.message.template in the log event attributes if there are no interpolation parameters provided (#2700)

Respect log_level when logging via :std_lib_logger patch (#2709)

Add sentry.origin attribute to log events (#2712)

Commits

44d588e release: 5.28.0
2c8c2c1 feat(logging): auto-enable structured_logging in Rails (#2721)
7d99a86 release: 5.27.1
239a161 Add sentry.origin to log events (#2712)
21d4d57 2696 Respect log_level (#2709)
See full diff in compare view

Updates turbo-rails from 2.0.16 to 2.0.17

Release notes

Sourced from turbo-rails's releases.

v2.0.17

What's Changed

Fix typo in README.md by @brunocalmels in hotwired/turbo-rails#746

Remove compact call on locals in broadcast_rendering_with_defaults by @mathias234 in hotwired/turbo-rails#720

See https://github.com/hotwired/turbo/releases/tag/v8.0.18

New Contributors

@brunocalmels made their first contribution in hotwired/turbo-rails#746

@mathias234 made their first contribution in hotwired/turbo-rails#720

Commits

aeea473 @hotwired/turbo-rails v8.0.18
00e6cba Bump version
30cd8fc Merge pull request #720 from mathias234/remove-compact
4bf3c0b Merge pull request #746 from brunocalmels/patch-1
fe2b862 Fix typo in README.md
65afc97 Remove compact on locals
See full diff in compare view

Updates activerecord from 8.0.2.1 to 8.0.3

Release notes

Sourced from activerecord's releases.

8.0.3

Active Support
ActiveSupport::FileUpdateChecker does not depend on Time.now to prevent unnecessary reloads with time travel test helpers

Jan Grodowski

Fix ActiveSupport::BroadcastLogger from executing a block argument for each logger (tagged, info, etc.).

Jared Armstrong

Make ActiveSupport::Logger #freeze-friendly.

Joshua Young

Fix ActiveSupport::HashWithIndifferentAccess#transform_keys! removing defaults.

Hartley McGuire
Fix ActiveSupport::HashWithIndifferentAccess#tranform_keys! to handle collisions.

If the transformation would result in a key equal to another not yet transformed one, it would result in keys being lost.

Before:
>> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1}
After:
>> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1, "d" => 2}
Jason T Johnson, Jean Boussier
Fix ActiveSupport::Cache::MemCacheStore#read_multi to handle network errors.

This method specifically wasn't handling network errors like other codepaths.

Alessandro Dal Grande

Fix configuring RedisCacheStore with raw: true.

fatkodima

... (truncated)

Changelog

Sourced from activerecord's changelog.

Rails 8.0.3 (September 22, 2025)
Fix query cache for pinned connections in multi threaded transactional tests

When a pinned connection is used across separate threads, they now use a separate cache store for each thread.

This improve accuracy of system tests, and any test using multiple threads.

Heinrich Lee Yu, Jean Boussier

Don't add id_value attribute alias when attribute/column with that name already exists.

Rob Lewis

Fix false positive change detection involving STI and polymorphic has one relationships.

Polymorphic has_one relationships would always be considered changed when defined in a STI child class, causing nedless extra autosaves.

David Fritsch

Skip calling PG::Connection#cancel in cancel_any_running_query when using libpq >= 18 with pg < 1.6.0, due to incompatibility. Rollback still runs, but may take longer.

Yasuo Honda, Lars Kanis

Fix stale association detection for polymorphic belongs_to.

Florent Beaurain, Thomas Crambert

Fix removal of PostgreSQL version comments in structure.sql for latest PostgreSQL versions which include \restrict

Brendan Weibrecht
Allow setting schema_format in database configuration.
primary:
  schema_format: ruby
Useful in multi-database setups to have different formats per-database.

T S Vallender
Use ntuples to populate row_count instead of count for Postgres

Jonathan Calvert

... (truncated)

Commits

529f933 Preparing for 8.0.3 release
0160f42 Sync CHANGELOGs
74038d7 Merge pull request #55722 from kozy4324/fix-lease-sticky-flag-timing
4fc9618 Merge pull request #55703 from byroot/hly-fix-query-cache-system-tests-2
20c7cff Merge pull request #55699 from skipkayhil/hm-zlxzqwylrmlruzuq
8408ba6 Merge pull request #55698 from salzig/fix/respect_schema_format_in_db_schema_...
e7f65a9 Merge pull request #55691 from kohder/rl-id-value-alias-fix
228fcf5 Merge pull request #51359 from dfritsch/dfritsch/51280-polymorphic-name
5456941 Return early when column are empty in WhereClause#except_predicates
87e495d Merge pull request #55675 from skipkayhil/hm-ouuplulxpznztlyp
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ruby group with 6 updates: | Package | From | To | | --- | --- | --- | | [propshaft](https://github.com/rails/propshaft) | `1.2.1` | `1.3.1` | | [puma](https://github.com/puma/puma) | `7.0.3` | `7.0.4` | | [rails](https://github.com/rails/rails) | `8.0.2.1` | `8.0.3` | | [sentry-rails](https://github.com/getsentry/sentry-ruby) | `5.27.0` | `5.28.0` | | [turbo-rails](https://github.com/hotwired/turbo-rails) | `2.0.16` | `2.0.17` | | [activerecord](https://github.com/rails/rails) | `8.0.2.1` | `8.0.3` | Updates `propshaft` from 1.2.1 to 1.3.1 - [Release notes](https://github.com/rails/propshaft/releases) - [Commits](rails/propshaft@v1.2.1...v1.3.1) Updates `puma` from 7.0.3 to 7.0.4 - [Release notes](https://github.com/puma/puma/releases) - [Changelog](https://github.com/puma/puma/blob/master/History.md) - [Commits](puma/puma@v7.0.3...v7.0.4) Updates `rails` from 8.0.2.1 to 8.0.3 - [Release notes](https://github.com/rails/rails/releases) - [Commits](rails/rails@v8.0.2.1...v8.0.3) Updates `sentry-rails` from 5.27.0 to 5.28.0 - [Release notes](https://github.com/getsentry/sentry-ruby/releases) - [Changelog](https://github.com/getsentry/sentry-ruby/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-ruby@5.27.0...5.28.0) Updates `turbo-rails` from 2.0.16 to 2.0.17 - [Release notes](https://github.com/hotwired/turbo-rails/releases) - [Commits](hotwired/turbo-rails@v2.0.16...v2.0.17) Updates `activerecord` from 8.0.2.1 to 8.0.3 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v8.0.3/activerecord/CHANGELOG.md) - [Commits](rails/rails@v8.0.2.1...v8.0.3) --- updated-dependencies: - dependency-name: propshaft dependency-version: 1.3.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ruby - dependency-name: puma dependency-version: 7.0.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: ruby - dependency-name: rails dependency-version: 8.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: ruby - dependency-name: sentry-rails dependency-version: 5.28.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ruby - dependency-name: turbo-rails dependency-version: 2.0.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: ruby - dependency-name: activerecord dependency-version: 8.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ruby ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Oct 1, 2025

sfnelson merged commit 8fa31bb into main Oct 2, 2025
1 check passed

sfnelson deleted the dependabot/bundler/ruby-61559a82ec branch October 2, 2025 00:01

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the ruby group with 6 updates #99

Bump the ruby group with 6 updates #99

Uh oh!

dependabot bot commented on behalf of github Oct 1, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the ruby group with 6 updates #99

Bump the ruby group with 6 updates #99

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 1, 2025

v1.3.0

What's Changed

New Contributors

7.0.4 / 2025-09-23

8.0.3

Active Support

5.28.0

Features

Miscellaneous

Internal

5.27.1

Features

Bug Fixes

v2.0.17

What's Changed

New Contributors

8.0.3

Active Support

Rails 8.0.3 (September 22, 2025)

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant