Bump the production-dependencies-minor group across 1 directory with 32 updates #1321

dependabot · 2026-02-09T03:03:13Z

Bumps the production-dependencies-minor group with 30 updates in the / directory:

Package	From	To
rake	`13.2.1`	`13.3.1`
rails	`7.1.5.2`	`7.1.6`
jbuilder	`2.13.0`	`2.14.1`
bootsnap	`1.18.4`	`1.22.0`
test-unit	`3.2.7`	`3.7.7`
aws-sdk-s3	`1.113.0`	`1.213.0`
json	`2.12.2`	`2.18.1`
yaaf	`3.0.2`	`3.1.0`
rack-attack	`6.5.0`	`6.8.0`
pg	`1.5.9`	`1.6.3`
carrierwave	`3.1.1`	`3.1.2`
carrierwave-aws	`1.6.0`	`1.6.1`
mini_magick	`5.2.0`	`5.3.1`
httparty	`0.21.0`	`0.24.2`
devise-two-factor	`6.1.0`	`6.3.1`
geocoder	`1.6.1`	`1.8.6`
table_print	`1.5.4`	`1.5.7`
rexml	`3.4.2`	`3.4.4`
csv	`3.3.4`	`3.3.5`
maintenance_tasks	`2.12.0`	`2.13.0`
terser	`1.2.5`	`1.2.6`
rails-autoscale-web	`1.11.1`	`1.12.2`
lograge	`0.3.6`	`0.14.0`
recaptcha	`5.19.0`	`5.21.1`
barnes	`0.0.8`	`0.0.9`
fx	`0.9.0`	`0.10.0`
rails	`7.1.6`	`8.1.2`
rails-i18n	`7.0.10`	`8.1.0`
has_scope	`0.8.2`	`0.9.0`
globalid	`1.2.1`	`1.3.0`
js-routes	`2.2.7`	`2.3.6`

Updates rake from 13.2.1 to 13.3.1

Commits

f0001c3 v13.3.1
a644c80 Merge pull request #483 from luke-gru/fix_test_warnings
2465ea5 silence warnings during execution of rake tasks in Rakefile (ex: rake test)
df25fb1 Merge pull request #610 from pvdb/fix_testhelper_require
ec12ac9 Merge pull request #635 from nevans/deconstruct_keys-for-nil-keys
4664a69 Merge pull request #666 from ruby/dependabot/github_actions/ruby/setup-ruby-1...
7a0bf15 Bump ruby/setup-ruby from 1.265.0 to 1.266.0
b3ed789 Merge pull request #665 from ruby/dependabot/github_actions/ruby/setup-ruby-1...
1e7ef52 Bump ruby/setup-ruby from 1.263.0 to 1.265.0
77225e1 Merge pull request #664 from ruby/dependabot/github_actions/ruby/setup-ruby-1...
Additional commits viewable in compare view

Updates rails from 7.1.5.2 to 7.1.6

Release notes

Sourced from rails's releases.

7.1.6

Active Support

No changes.

Active Model

No changes.

Active Record

Gracefully handle Timeout.timeout firing during connection configuration.

Use of Timeout.timeout could result in improperly initialized database connection.

This could lead to a partially configured connection being used, resulting in various exceptions, the most common being with the PostgreSQLAdapter raising undefined method key?' for nilorTypeError: wrong argument type nil (expected PG::TypeMap)`.

Jean Boussier

Fix error handling during connection configuration.

Active Record wasn't properly handling errors during the connection configuration phase. This could lead to a partially configured connection being used, resulting in various exceptions, the most common being with the PostgreSQLAdapter raising undefined method key?' for nilorTypeError: wrong argument type nil (expected PG::TypeMap)`.

Jean Boussier

Fix prepared statements on mysql2 adapter.

Jean Boussier

Fix a race condition in ActiveRecord::Base#method_missing when lazily defining attributes.

If multiple thread were concurrently triggering attribute definition on the same model, it could result in a NoMethodError being raised.

Jean Boussier

Action View

No changes.

Action Pack

... (truncated)

Commits

ffcbf6f Preparing for 7.1.6 release
10a0f90 Upgrade sigstore gem to 0.2.2
4df996b Sync changelog
310c904 Merge pull request #55570 from zzak/8-0-sidekiq-issues
c274de0 Merge pull request #55747 from skipkayhil/hm-kwzpqqkssmwtsunu
1d82970 Add the Action Cable configuration
8323dd6 Merge pull request #54164 from zzak/asto-test-mini_magick-deprecation-warning
4eb8085 Merge pull request #55812 from yahonda/bump-microsoftedge-version-to-latest
d100e46 Don't load action cable in the activestorage dummy app
91fc9b2 Don't load sprockets-rails and propshaft in the same application
Additional commits viewable in compare view

Updates jbuilder from 2.13.0 to 2.14.1

Release notes

Sourced from jbuilder's releases.

v2.14.1

What's Changed

Ensure that Jbuilder.encode properly forwards arguments to .new by @flavorjones in rails/jbuilder#601

New Contributors

@flavorjones made their first contribution in rails/jbuilder#601

Full Changelog: rails/jbuilder@v2.14.0...v2.14.1

v2.14.0

What's Changed

Drop support to Ruby < 3.0 and Rails < 7.0

Test against Rails 8 and fix Rails 7 logger dependency by @excid3 in rails/jbuilder#582

Add status: :see_other to update action by @excid3 in rails/jbuilder#583

Force close final statement in templates by @ienders in rails/jbuilder#578

Optimize _is_collection? method by @moberegger in rails/jbuilder#590

Add #frozen_string_literal: true to all files by @moberegger in rails/jbuilder#599

Optimize _key to prevent string allocation when formatting Symbols by @moberegger in rails/jbuilder#593

Optimize key formatter by @moberegger in rails/jbuilder#597

Optimize internal extract! calls to save on memory allocation by @moberegger in rails/jbuilder#598

Fix regression in API controllers with view_cache_dependencies helper by @excid3 in rails/jbuilder#575

Optimize method_missing via alias_method by @moberegger in rails/jbuilder#600

Cleanup project for Rails 7+ support by @moberegger in rails/jbuilder#594

Fix warnings and prevent Jbuilder::VERSION constant from being obliterated by @pixeltrix in rails/jbuilder#574

Optimize memory allocation when rendering partials by @moberegger in rails/jbuilder#591

New Contributors

@richardvenneman made their first contribution in rails/jbuilder#576

@ienders made their first contribution in rails/jbuilder#578

@moberegger made their first contribution in rails/jbuilder#590

Full Changelog: rails/jbuilder@v2.13.0...v2.14.0

Commits

38339ad Prepare for 2.14.1
2400fd9 Merge pull request #601 from flavorjones/flavorjones/fix-encode-arguments
a6863b5 Ensure that Jbuilder.encode properly forwards arguments to .new
30ba7df Prepare for 2.14.0
5f4af71 Merge pull request #591 from moberegger/moberegger/optimize_options_merges
6fd6c06 Small _set_inline_partial optimization
b7b5abb Stop mutating options in partial! method
7e16adf Stop mutating options in set! method
8474b41 Remove _partial micro-optimization
9ffacf7 Merge pull request #574 from pixeltrix/fix-warnings-and-version-constant
Additional commits viewable in compare view

Updates bootsnap from 1.18.4 to 1.22.0

Release notes

Sourced from bootsnap's releases.

v1.22.0

What's Changed

Proper fix for the opendir crash.

Add bootsnap/rake for cleaning the bootsnap cache as part of rake clobber.

Full Changelog: rails/bootsnap@v1.21.1...v1.22.0

v1.21.1

What's Changed

Fallback to pure the pure ruby path scanner on unexpected error.

Full Changelog: rails/bootsnap@v1.21.0...v1.21.1

v1.20.1

What's Changed

Handle broken symlinks in load path scanning code. Should fix Errno::ENOENT fstatat issues some users have encountered after upgrading to 1.20.0.

Full Changelog: rails/bootsnap@v1.20.0...v1.20.1

v1.20.0

What's Changed

Optimized load path scanning with a C extension. Should be about 2x faster on supported platforms.

Full Changelog: rails/bootsnap@v1.19.0...v1.20.0

Changelog

Sourced from bootsnap's changelog.

1.22.0

Better fix for the opendir crash.

Add bootsnap/rake for cleaning the bootsnap cache as part of rake clobber.

1.21.1

Prevent a Ruby crash while scanning load path if opendir fails without setting errno. According to the C spec this should not happen, but according to user reports, it did.

1.21.0

Fix the require decorator to handle Bootsnap.unload_cache! being called.

Minor optimization: Eagerly clear cache buffers to appease the GC.

1.20.1

Handle broken symlinks in load path scanning code. Should fix Errno::ENOENT fstatat issues some users have encountered after upgrading to 1.20.0.

1.20.0

Optimized load path scanning with a C extension. Should be about 2x faster on supported platforms.

1.19.0

Remove JSON parsing cache. Recent versions of the json gem are as fast as msgpack if not faster.

1.18.6

Fix cgroup CPU limits detection in CLI.

1.18.5

Attempt to detect a QEMU bug that can cause bootsnap precompile to hang forever when building ARM64 docker images from x86_64 machines. See #495.

Improve CLI to detect cgroup CPU limits and avoid spawning too many worker processes.

Commits

aabae6d Release 1.22.0
2545ea7 Merge pull request #525 from jasonkarns/cache_dir
1889435 Add missing nil checks
7d375c6 Rake entrypoint registers Bootsnap's cache_dir for cleaning
d091162 Expose cache_dir root for all caches
e977de2 Enforce mocha 3+
6a49c76 Merge pull request #523 from byroot/better-opendir-fix
ccc8e13 Properly fix opendir failing with errno = 0
182a809 Release 1.21.1
1e59365 Merge pull request #522 from byroot/improve-scandir
Additional commits viewable in compare view

Updates test-unit from 3.2.7 to 3.7.7

Release notes

Sourced from test-unit's releases.

test-unit 3.7.7 - 2026-01-01

Fixes

Fixed a bug that NoMemoryError occurred with RBS tests + MSVC Ruby.

GH-358

GH-363

Reported by Nobuyoshi Nakada

Thanks

Nobuyoshi Nakada

test-unit 3.7.6 - 2025-12-25

Fixes

Fixed a bug that sub_test_case may cause a runtime error. This also covers a minor case.

GH-359

test-unit 3.7.5 - 2025-12-24

Fixes

Fixed a bug that sub_test_case may cause a runtime error.

GH-355

test-unit 3.7.4 - 2025-12-23

Improvements

Added support for process based parallel test running. You can use it by the --parallel=process option. You need to specify load path options (e.g. -Ilib). Tests that startup/shutdown (test case level setup/teardown) are defined run in the same process.

GH-235

GH-339

GH-340

GH-341

GH-342

GH-344

GH-346

GH-348

Co authored by Naoto Ono

Added support for worker_id for the parallel runner. You can use it in your test, setup/teardown and startup/shutdown (test case level setup/teardown).

GH-235

... (truncated)

Commits

d2a49b7 Fix 3.7.7 entry (#365)
6aeaf5f Add 3.7.7 entry (#364)
813ea12 Fix NoMemoryError problem with RBS tests + MSVC Ruby (#363)
745d395 Bump version (#362)
af736fc Add 3.7.6 entry (#360)
9c6fce7 Remove "+" from auto generated sub test case name (#359)
b3872dc Bump version
cc8dea4 Add 3.7.5 entry
c7b1175 Remove "/" from auto generated sub test case name (#356)
fefef05 Bump version (#354)
Additional commits viewable in compare view

Updates aws-sdk-s3 from 1.113.0 to 1.213.0

Changelog

Sourced from aws-sdk-s3's changelog.

1.213.0 (2026-01-28)

Feature - Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets.

1.212.0 (2026-01-16)

Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

1.211.0 (2026-01-08)

Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

Issue - Falls back to header request checksums when using custom endpoints or endpoint providers for PutObject and UploadPart operations.

1.210.1 (2026-01-06)

Issue - Normalize response encoding to UTF-8 for proper XML error parsing in HTTP 200 responses.

1.210.0 (2026-01-05)

Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

Feature - Added :http_chunk_size parameter to TransferManager#upload_file to control the buffer size when streaming request bodies over HTTP. Larger chunk sizes may improve network throughput at the cost of higher memory usage (Ruby MRI only).

Feature - Improved memory efficiency when calculating request checksums for large file uploads (Ruby MRI only).

1.209.0 (2025-12-23)

Feature - Add additional validation to Outpost bucket names.

1.208.0 (2025-12-16)

Feature - Updates to the S3 Encryption Client. The V3 S3 Encryption Client now requires key committing algorithm suites by default.

1.207.0 (2025-12-15)

Feature - This release adds support for the new optional field 'LifecycleExpirationDate' in S3 Inventory configurations.

1.206.0 (2025-12-02)

Feature - New S3 Storage Class FSX_ONTAP

... (truncated)

Commits

See full diff in compare view

Updates json from 2.12.2 to 2.18.1

Release notes

Sourced from json's releases.

v2.18.1

What's Changed

Fix a potential crash in very specific circumstance if GC triggers during a call to to_json without first invoking a user defined #to_json method.

Full Changelog: ruby/json@v2.18.0...v2.18.1

v2.18.0

What's Changed

Add :allow_control_characters parser options, to allow JSON strings containing unescaped ASCII control characters (e.g. newlines).

Full Changelog: ruby/json@v2.17.1...v2.18.0

v2.17.1

What's Changed

Fix a regression in parsing of unicode surogate pairs (\uXX\uXX) that could cause an invalid string to be returned.

Full Changelog: ruby/json@v2.17.0...v2.17.1

v2.17.0

What's Changed

Improve JSON.load and JSON.unsafe_load to allow passing options as second argument.

Fix the parser to no longer ignore invalid escapes in strings. Only \", \\, \b, \f, \n, \r, \t and \u are valid JSON escapes.

Fixed JSON::Coder to use the depth it was initialized with.

On TruffleRuby, fix the generator to not call to_json on the return value of as_json for Float::NAN.

Fixed handling of state.depth: when to_json changes state.depth but does not restore it, it is reset automatically to its initial value. In particular, when a NestingError is raised, depth is no longer equal to max_nesting after the call to generate, and is reset to its initial value. Similarly when to_json raises an exception.

Full Changelog: ruby/json@v2.16.0...v2.17.0

v2.16.0

What's Changed

Deprecate JSON::State#[] and JSON::State#[]=. Consider using JSON::Coder instead.

JSON::Coder now also yields to the block when encountering strings with invalid encoding.

Fix GeneratorError messages to be UTF-8 encoded.

Fix memory leak when Exception is raised, or throw is used during JSON generation.

Optimized floating point number parsing by integrating the ryu algorithm (thanks to Josef Šimánek).

Optimized numbers parsing using SWAR (thanks to Scott Myron).

Optimized parsing of pretty printed documents using SWAR (thanks to Scott Myron).

Full Changelog: ruby/json@v2.15.2...v2.16.0

... (truncated)

Changelog

Sourced from json's changelog.

2026-02-03 (2.18.1)

Fix a potential crash in very specific circumstance if GC triggers during a call to to_json without first invoking a user defined #to_json method.

2025-12-11 (2.18.0)

Add :allow_control_characters parser options, to allow JSON strings containing unescaped ASCII control characters (e.g. newlines).

2025-12-04 (2.17.1)

Fix a regression in parsing of unicode surogate pairs (\uXX\uXX) that could cause an invalid string to be returned.

2025-12-03 (2.17.0)

Improve JSON.load and JSON.unsafe_load to allow passing options as second argument.

Fix the parser to no longer ignore invalid escapes in strings. Only \", \\, \b, \f, \n, \r, \t and \u are valid JSON escapes.

Fixed JSON::Coder to use the depth it was initialized with.

On TruffleRuby, fix the generator to not call to_json on the return value of as_json for Float::NAN.

Fixed handling of state.depth: when to_json changes state.depth but does not restore it, it is reset automatically to its initial value. In particular, when a NestingError is raised, depth is no longer equal to max_nesting after the call to generate, and is reset to its initial value. Similarly when to_json raises an exception.

2025-11-07 (2.16.0)

Deprecate JSON::State#[] and JSON::State#[]=. Consider using JSON::Coder instead.

JSON::Coder now also yields to the block when encountering strings with invalid encoding.

Fix GeneratorError messages to be UTF-8 encoded.

Fix memory leak when Exception is raised, or throw is used during JSON generation.

Optimized floating point number parsing by integrating the ryu algorithm (thanks to Josef Šimánek).

Optimized numbers parsing using SWAR (thanks to Scott Myron).

Optimized parsing of pretty printed documents using SWAR (thanks to Scott Myron).

2025-10-25 (2.15.2)

Fix JSON::Coder to have one dedicated depth counter per invocation. After encountering a circular reference in JSON::Coder#dump, any further #dump call would raise JSON::NestingError.

2025-10-07 (2.15.1)

Fix incorrect escaping in the JRuby extension when encoding shared strings.

2025-09-22 (2.15.0)

JSON::Coder callback now receive a second argument to convey whether the object is a hash key.

Tuned the floating point number generator to not use scientific notation as aggressively.

2025-09-18 (2.14.1)

... (truncated)

Commits

6ec6e7b Release 2.18.1
fff25c9 fbuffer_append_str: assume string
79b6e16 Ensure Generator::State is kept on the stack
062fcdd Improve class JSON intro
1b276c8 Extract json_fast_memcpy16 for readability
643ee11 Use __builtin_memcpy, if available, to copy overlapping byte ranges in copy_r...
15eb40d Remove trailing spaces [ci skip]
73818b8 initialize search.chunk_end to silence a warning about it being potentially u...
86a5cce use a conditional to select SIMD implementation rather than pointer
a51317c Directly write to the output buffer when converting UTF32 to UTF8.
Additional commits viewable in compare view

Updates yaaf from 3.0.2 to 3.1.0

Release notes

Sourced from yaaf's releases.

v3.1.0

What's Changed

Update CI by @santib in rootstrap/yaaf#92

Add ActiveRecord Normalize to form objects by @andresg4 in rootstrap/yaaf#93

Bump version to 3.1.0 by @andresg4 in rootstrap/yaaf#94

New Contributors

@andresg4 made their first contribution in rootstrap/yaaf#93

Full Changelog: rootstrap/yaaf@v3.0.2...v3.1.0

Commits

1de276a Bump version to 3.1.0 (#94)
863fab5 Add ActiveRecord Normalize to form objects (#93)
115a119 Update CI (#92)
See full diff in compare view

Updates rack-attack from 6.5.0 to 6.8.0

Release notes

Sourced from rack-attack's releases.

v6.8.0

What's Changed

Changed

Avoid RedisCacheStore#increment on Rails 6+ (which might improve performance) by @jdelStrother (#597)

Fixed

Fix #588 don't fail if request.ip is missing, by @santib (#630)

Fix reset! when using namespaced cache store by @santib (#673)

Deprecated

Soft deprecate integration with rack 1.x, may or may not work with it.

Soft deprecate integration with rails 5.2 or less, may or may not work with it.

Removed

Remove support for unmaintained ActiveSupport::Cache::RedisStore, by @mitchellhenke (#625)

New Contributors

@floehopper made their first contribution in rack/rack-attack#618

@mttkay made their first contribution in rack/rack-attack#622

@mitchellhenke made their first contribution in rack/rack-attack#625

@santib made their first contribution in rack/rack-attack#629

@tisba made their first contribution in rack/rack-attack#654

@fynsta made their first contribution in rack/rack-attack#658

@alexsmartens made their first contribution in rack/rack-attack#664

Full Changelog: rack/rack-attack@v6.7.0...v6.8.0

v6.7.0

What's Changed

Replace git.io URL by @kyoshidajp in rack/rack-attack#579

test: update rack-test to v2 from v1 by @grzuy in rack/rack-attack#587

Update example description to not suggest using a deprecated method by @MaksimAbramchuk in rack/rack-attack#589

Add note about cache stores and in-memory caches. by @nateberkopec in rack/rack-attack#604

ci: tests against redis gem v5 by @grzuy in rack/rack-attack#612

Support rack 3 by @ioquatix in rack/rack-attack#586

Gem release management. by @ioquatix in rack/rack-attack#614

New Contributors

@kyoshidajp made their first contribution in rack/rack-attack#579

@MaksimAbramchuk made their first contribution in rack/rack-attack#589

@nateberkopec made their first contribution in rack/rack-attack#604

Full Changelog: rack/rack-attack@v6.6.1...v6.7.0

... (truncated)

Changelog

Sourced from rack-attack's changelog.

[6.8.0] - 2025-10-14

Changed

Avoid RedisCacheStore#increment on Rails 6+ (which might improve performance) by @jdelStrother (#597)

Fixed

Fix #588 don't fail if request.ip is missing, by @santib (#630)

Fix reset! when using namespaced cache store by @santib (#673)

Deprecated

Soft deprecate integration with rack 1.x, may or may not work with it.

Soft deprecate integration with rails 5.2 or less, may or may not work with it.

Removed

Remove support for unmaintained ActiveSupport::Cache::RedisStore, by @mitchellhenke (#625)

[6.7.0] - 2023-07-26

Replace git.io URL by @kyoshidajp in #579

test: update rack-test to v2 from v1 by @grzuy in #587

Update example description to not suggest using a deprecated method by @MaksimAbramchuk in #589

Add note about cache stores and in-memory caches. by @nateberkopec in #604

ci: tests against redis gem v5 by @grzuy in #612

Support rack 3 by @ioquatix in #586

Gem release management. by @ioquatix in #614

[6.6.1] - 2022-04-14

Fixed

Fixes deprecation warning in redis 4.6+ ([@ixti])

[6.6.0] - 2022-01-29

Added

Ability to have access to the request object instead of only env (still can access env with request.env) when customizing throttle and blocklist responses with new methods Rack::Attack.blocklisted_responder= and Rack::Attack.throttled_responder= which yield the request to your lambda. ([@NikolayRys])

Deprecated

Rack::Attack.blocklisted_response=

Rack::Attack.throttled_response=

Commits

65f1ead Bumps gem version to v6.8.0
e84eaf5 Upgrade GHA Runners (#694)
4606efb build(deps): bump actions/checkout from 4 to 5 (#690)
40d83d1 Fix GHA Runner (#692)
1dba6ec Remove CodeClimate (#693)
4677708 Add Ruby 3.4 to the CI (#681)
8710876 Fix CI (#683)
86650c4 Fix reset! when using namespaced cache store (#673)
8d5b210 Fix wrong merge resolution (#680)
6db4a73 Drop Dalli 2 support (#679)
Additional commits viewable in compare view

Updates pg from 1.5.9 to 1.6.3

Changelog

Sourced from pg's changelog.

v1.6.3 [2025-12-29] Lars Kanis lars@greiz-reinsdorf.de

Added:

Add binary gems for ruby-4.0, now providing ruby-3.0 to 4.0. #682

Update fat binary gem to OpenSSL-3.6.0 and PostgreSQL-18.1.

Improve documentation of PG::Result and README. #676

Update errorcodes to PostgreSQL-18.

Use rb_hash_new_capa on Ruby-3.2+ . #674

Deny any server communication on a frozen PG::Connection . #677

Fix possible race condition in PG::Result in Ractor context. #674

Removed:

Drop binary gem support for platform x86-mingw32. #682

Drop binary gems for ruby-2.7.

v1.6.2 [2025-09-02] Lars Kanis lars@greiz-reinsdorf.de

Remove several absolute paths from native binaries which pointed to build directories. #668

Fix bad fallback path to pg_service.conf. #666

Use rbpg_ prefix for base64_* functions to avoid name clashes with functions provided by other libraries like Heimdal on Macos. #667

Raise a more descriptive error message in case of pg_ext LoadError. #664

Freeze some constants to make them available in a Ractor context. #660

Several documentation improvements.

Update native binary gems to OpenSSL-3.5.2, krb5-1.22.1 and PostgreSQL-17.6.

v1.6.1 [2025-08-03] Lars Kanis lars@greiz-reinsdorf.de

Add binary gems for platforms aarch64-linux-musl and x86_64-linux-musl without the need to install package gcompat. #657.

Serialize CompositeCoder#dimensions only when set. #652 This fixes the compatibility to pg-1.5.9, when deserializing Marshal data from pg-1.6, as long as the new attribute isn't used.

Remove dependency to MSYS2 package "postgresql" from binary Windows gem #654

v1.6.0 [2025-07-27] Lars Kanis lars@greiz-reinsdorf.de

Added:

Add binary gems for Ruby 3.4.

Add fat binary gem for platform aarch64-mingw-ucrt aka Windows on ARM #626, for platform Macos on Intel and ARM #643, for platform aarch64-linux #646 and for platform x86_64-linux #551.

Update fat binary gem to OpenSSL-3.5.1 and PostgreSQL-17.5.

Add a patch to libpq to avoid starvation on bigger SSL records, which some database engines other than vanilla PostgreSQL use. This patch applies to platform specific binary gems only. #616

Add support for new query cancel functions of PostgreSQL-17. This adds the new class PG::CancelConnection which provides the ability to cancel a query per blocking or per non-blocking functions. If the new functions are available they are used and the older are no longer compiled in.

... (truncated)

Commits

d4539c2 Bump VERSION to pg-1.6.3 and add release notes
720900d Merge pull request #682 from larskanis/ruby-4.0
f605b59 Remove x86-mingw32 from binary builds
5c69000 Update to ruby-4.0
2acaf3d CI: workaround missing ruby-4.0 on Window
b500ded fix comment
bc3f2f8 CI: Macos-13 on Intel is deprecated
77667eb Merge pull request #678 from larskanis/ci-update
6e52ce5 CI: Update PostgreSQL on Macos
6d40f50 CI: Print mkmf.log on failure on Macos
Additional commits viewable in compare view

Updates carrierwave from 3.1.1 to 3.1.2

Release notes

Sourced from carrierwave's releases.

3.1.2

Fixed

Fix failing to remove existing files on updating by #remove_#{column}=, ##{column}_cache=, and #remote_#{column}_url= (@mshibuya 7b2ce50, #2778, #2779)

Changelog

Sourced from carrierwave's changelog.

3.1.2 - 2025-04-13

Fixed

Fix failing to remove existing files on updating by #remove_#{column}=, ##{column}_cache=, and #remote_#{column}_url= (@mshibuya 7b2ce50, #2778, #2779)

Commits

8e5db8c Version 3.1.2
7b2ce50 Fix failing to remove existing files on updating by #remove_#{column}=, `##...
9001ab7 Fix specs breaking with MiniMagick 5.x
See full diff in compare view

Updates carrierwave-aws from 1.6.0 to 1.6.1

Changelog

Sourced from carrierwave-aws's changelog.

Version 1.6.1 2026-01-10

Fixed: Replace deprecated Aws::S3::Object#upload_file with TransferManager if available [Jules, Foto]

Fixed: Correct typo MULTIPART_TRESHOLD to MULTIPART_THRESHOLD [Naoki Hayashida]

Commits

0d3cb7c Release v1.6.1
a585cb9 Bump actions/checkout from 4 to 6 (#193)
e35e315 Follow-up for #191
03e8399 Replace deprecated Aws::S3::Object#upload_file with TransferManager (#191)
1117b0e Fix typo MULTIPART_TRESHOLD to MULTIPART_THRESHOLD (#188)
8eb1c77 Add dependabot.yml (#186)
178f675 Merge pull request #182 from w-masahiro-ct/improve-test-ci
606c957 Fix test failure
c113480 Improve test CI
09c5baa Correct PR attribution 🙇
See full diff in compare view

Updates mini_magick from 5.2.0 to 5.3.1

Release notes

Sourced from mini_magick's releases.

v5.3.1

Fixed MiniMagick.cli_prefix being mutated when set to an array.

v5.3.0

Actually require Ruby 2.5+ in the gemspec.

Fix Ruby 2.5 compatibility when using MiniMagick.restricted_env configuration.

Drop benchmark dependency.

Fix keyword argument forwarding when trying to call MiniMagick.compare(errors: false)

Commits

ddcbfe9 Bump to 5.3.1
ed5897b Simplify spec
862ffbb Fix configured cli_prefix being muated (#597)
c53b8bb Bump to 5.3.0
eda3dde Bump ruby 2.5+ requirement in the gemspec
ed928b1 Add spec for the keyword arguments
6de850a Try using ENV.to_h for compatibility with Ruby 2.5 (#593)
c1b2e2c Fix option forwarding in MiniMagick::Tool.new (#596)

…32 updates Bumps the production-dependencies-minor group with 30 updates in the / directory: | Package | From | To | | --- | --- | --- | | [rake](https://github.com/ruby/rake) | `13.2.1` | `13.3.1` | | [rails](https://github.com/rails/rails) | `7.1.5.2` | `7.1.6` | | [jbuilder](https://github.com/rails/jbuilder) | `2.13.0` | `2.14.1` | | [bootsnap](https://github.com/rails/bootsnap) | `1.18.4` | `1.22.0` | | [test-unit](https://github.com/test-unit/test-unit) | `3.2.7` | `3.7.7` | | [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) | `1.113.0` | `1.213.0` | | [json](https://github.com/ruby/json) | `2.12.2` | `2.18.1` | | [yaaf](https://github.com/rootstrap/yaaf) | `3.0.2` | `3.1.0` | | [rack-attack](https://github.com/rack/rack-attack) | `6.5.0` | `6.8.0` | | [pg](https://github.com/ged/ruby-pg) | `1.5.9` | `1.6.3` | | [carrierwave](https://github.com/carrierwaveuploader/carrierwave) | `3.1.1` | `3.1.2` | | [carrierwave-aws](https://github.com/sorentwo/carrierwave-aws) | `1.6.0` | `1.6.1` | | [mini_magick](https://github.com/minimagick/minimagick) | `5.2.0` | `5.3.1` | | [httparty](https://github.com/jnunemaker/httparty) | `0.21.0` | `0.24.2` | | [devise-two-factor](https://github.com/tinfoil/devise-two-factor) | `6.1.0` | `6.3.1` | | [geocoder](https://github.com/alexreisner/geocoder) | `1.6.1` | `1.8.6` | | [table_print](https://github.com/arches/table_print) | `1.5.4` | `1.5.7` | | [rexml](https://github.com/ruby/rexml) | `3.4.2` | `3.4.4` | | [csv](https://github.com/ruby/csv) | `3.3.4` | `3.3.5` | | [maintenance_tasks](https://github.com/Shopify/maintenance_tasks) | `2.12.0` | `2.13.0` | | [terser](https://github.com/ahorek/terser-ruby) | `1.2.5` | `1.2.6` | | [rails-autoscale-web](https://github.com/judoscale/judoscale-ruby) | `1.11.1` | `1.12.2` | | [lograge](https://github.com/roidrage/lograge) | `0.3.6` | `0.14.0` | | [recaptcha](https://github.com/ambethia/recaptcha) | `5.19.0` | `5.21.1` | | [barnes](https://github.com/heroku/barnes) | `0.0.8` | `0.0.9` | | [fx](https://github.com/teoljungberg/fx) | `0.9.0` | `0.10.0` | | [rails](https://github.com/rails/rails) | `7.1.6` | `8.1.2` | | [rails-i18n](https://github.com/svenfuchs/rails-i18n) | `7.0.10` | `8.1.0` | | [has_scope](https://github.com/heartcombo/has_scope) | `0.8.2` | `0.9.0` | | [globalid](https://github.com/rails/globalid) | `1.2.1` | `1.3.0` | | [js-routes](https://github.com/railsware/js-routes) | `2.2.7` | `2.3.6` | Updates `rake` from 13.2.1 to 13.3.1 - [Release notes](https://github.com/ruby/rake/releases) - [Changelog](https://github.com/ruby/rake/blob/master/History.rdoc) - [Commits](ruby/rake@v13.2.1...v13.3.1) Updates `rails` from 7.1.5.2 to 7.1.6 - [Release notes](https://github.com/rails/rails/releases) - [Commits](rails/rails@v7.1.5.2...v7.1.6) Updates `jbuilder` from 2.13.0 to 2.14.1 - [Release notes](https://github.com/rails/jbuilder/releases) - [Commits](rails/jbuilder@v2.13.0...v2.14.1) Updates `bootsnap` from 1.18.4 to 1.22.0 - [Release notes](https://github.com/rails/bootsnap/releases) - [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md) - [Commits](rails/bootsnap@v1.18.4...v1.22.0) Updates `test-unit` from 3.2.7 to 3.7.7 - [Release notes](https://github.com/test-unit/test-unit/releases) - [Commits](test-unit/test-unit@3.2.7...3.7.7) Updates `aws-sdk-s3` from 1.113.0 to 1.213.0 - [Release notes](https://github.com/aws/aws-sdk-ruby/releases) - [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-ruby/commits) Updates `json` from 2.12.2 to 2.18.1 - [Release notes](https://github.com/ruby/json/releases) - [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md) - [Commits](ruby/json@v2.12.2...v2.18.1) Updates `yaaf` from 3.0.2 to 3.1.0 - [Release notes](https://github.com/rootstrap/yaaf/releases) - [Commits](rootstrap/yaaf@v3.0.2...v3.1.0) Updates `rack-attack` from 6.5.0 to 6.8.0 - [Release notes](https://github.com/rack/rack-attack/releases) - [Changelog](https://github.com/rack/rack-attack/blob/main/CHANGELOG.md) - [Commits](rack/rack-attack@v6.5.0...v6.8.0) Updates `pg` from 1.5.9 to 1.6.3 - [Changelog](https://github.com/ged/ruby-pg/blob/master/CHANGELOG.md) - [Commits](ged/ruby-pg@v1.5.9...v1.6.3) Updates `carrierwave` from 3.1.1 to 3.1.2 - [Release notes](https://github.com/carrierwaveuploader/carrierwave/releases) - [Changelog](https://github.com/carrierwaveuploader/carrierwave/blob/master/CHANGELOG.md) - [Commits](carrierwaveuploader/carrierwave@v3.1.1...v3.1.2) Updates `carrierwave-aws` from 1.6.0 to 1.6.1 - [Release notes](https://github.com/sorentwo/carrierwave-aws/releases) - [Changelog](https://github.com/carrierwaveuploader/carrierwave-aws/blob/master/CHANGELOG.md) - [Commits](carrierwaveuploader/carrierwave-aws@v1.6.0...v1.6.1) Updates `mini_magick` from 5.2.0 to 5.3.1 - [Release notes](https://github.com/minimagick/minimagick/releases) - [Commits](minimagick/minimagick@v5.2.0...v5.3.1) Updates `httparty` from 0.21.0 to 0.24.2 - [Release notes](https://github.com/jnunemaker/httparty/releases) - [Changelog](https://github.com/jnunemaker/httparty/blob/main/Changelog.md) - [Commits](jnunemaker/httparty@v0.21.0...v0.24.2) Updates `devise-two-factor` from 6.1.0 to 6.3.1 - [Release notes](https://github.com/tinfoil/devise-two-factor/releases) - [Changelog](https://github.com/devise-two-factor/devise-two-factor/blob/main/CHANGELOG.md) - [Commits](devise-two-factor/devise-two-factor@v6.1.0...v6.3.1) Updates `geocoder` from 1.6.1 to 1.8.6 - [Changelog](https://github.com/alexreisner/geocoder/blob/master/CHANGELOG.md) - [Commits](alexreisner/geocoder@v1.6.1...v1.8.6) Updates `table_print` from 1.5.4 to 1.5.7 - [Commits](https://github.com/arches/table_print/commits) Updates `rexml` from 3.4.2 to 3.4.4 - [Release notes](https://github.com/ruby/rexml/releases) - [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md) - [Commits](ruby/rexml@v3.4.2...v3.4.4) Updates `csv` from 3.3.4 to 3.3.5 - [Release notes](https://github.com/ruby/csv/releases) - [Changelog](https://github.com/ruby/csv/blob/main/NEWS.md) - [Commits](ruby/csv@v3.3.4...v3.3.5) Updates `maintenance_tasks` from 2.12.0 to 2.13.0 - [Release notes](https://github.com/Shopify/maintenance_tasks/releases) - [Commits](Shopify/maintenance_tasks@v2.12.0...v2.13.0) Updates `terser` from 1.2.5 to 1.2.6 - [Release notes](https://github.com/ahorek/terser-ruby/releases) - [Changelog](https://github.com/ahorek/terser-ruby/blob/master/CHANGELOG.md) - [Commits](ahorek/terser-ruby@1.2.5...1.2.6) Updates `rails-autoscale-web` from 1.11.1 to 1.12.2 - [Release notes](https://github.com/judoscale/judoscale-ruby/releases) - [Changelog](https://github.com/judoscale/judoscale-ruby/blob/main/CHANGELOG.md) - [Commits](judoscale/judoscale-ruby@v1.11.1...v1.12.2) Updates `lograge` from 0.3.6 to 0.14.0 - [Release notes](https://github.com/roidrage/lograge/releases) - [Changelog](https://github.com/roidrage/lograge/blob/master/CHANGELOG.md) - [Commits](roidrage/lograge@v0.3.6...v0.14.0) Updates `recaptcha` from 5.19.0 to 5.21.1 - [Changelog](https://github.com/ambethia/recaptcha/blob/master/CHANGELOG.md) - [Commits](ambethia/recaptcha@v5.19.0...v5.21.1) Updates `barnes` from 0.0.8 to 0.0.9 - [Release notes](https://github.com/heroku/barnes/releases) - [Changelog](https://github.com/heroku/barnes/blob/main/CHANGELOG.md) - [Commits](heroku/barnes@v0.0.8...v0.0.9) Updates `fx` from 0.9.0 to 0.10.0 - [Release notes](https://github.com/teoljungberg/fx/releases) - [Changelog](https://github.com/teoljungberg/fx/blob/master/CHANGELOG.md) - [Commits](teoljungberg/fx@v0.9.0...v0.10.0) Updates `rails` from 7.1.6 to 8.1.2 - [Release notes](https://github.com/rails/rails/releases) - [Commits](rails/rails@v7.1.5.2...v7.1.6) Updates `rails-i18n` from 7.0.10 to 8.1.0 - [Changelog](https://github.com/svenfuchs/rails-i18n/blob/master/CHANGELOG.md) - [Commits](svenfuchs/rails-i18n@v7.0.10...v8.1.0) Updates `has_scope` from 0.8.2 to 0.9.0 - [Release notes](https://github.com/heartcombo/has_scope/releases) - [Changelog](https://github.com/heartcombo/has_scope/blob/main/CHANGELOG.md) - [Commits](heartcombo/has_scope@v0.8.2...v0.9.0) Updates `globalid` from 1.2.1 to 1.3.0 - [Release notes](https://github.com/rails/globalid/releases) - [Commits](rails/globalid@v1.2.1...v1.3.0) Updates `js-routes` from 2.2.7 to 2.3.6 - [Release notes](https://github.com/railsware/js-routes/releases) - [Changelog](https://github.com/railsware/js-routes/blob/main/CHANGELOG.md) - [Commits](railsware/js-routes@v2.2.7...v2.3.6) Updates `activerecord` from 7.1.5.2 to 8.1.2 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v8.1.2/activerecord/CHANGELOG.md) - [Commits](rails/rails@v7.1.5.2...v8.1.2) Updates `actionpack` from 7.1.5.2 to 8.1.2 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v8.1.2/actionpack/CHANGELOG.md) - [Commits](rails/rails@v7.1.5.2...v8.1.2) --- updated-dependencies: - dependency-name: rake dependency-version: 13.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: rails dependency-version: 7.1.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies-minor - dependency-name: jbuilder dependency-version: 2.14.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: bootsnap dependency-version: 1.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: test-unit dependency-version: 3.7.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: aws-sdk-s3 dependency-version: 1.213.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: json dependency-version: 2.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: yaaf dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: rack-attack dependency-version: 6.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: pg dependency-version: 1.6.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: carrierwave dependency-version: 3.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies-minor - dependency-name: carrierwave-aws dependency-version: 1.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies-minor - dependency-name: mini_magick dependency-version: 5.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: httparty dependency-version: 0.24.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: devise-two-factor dependency-version: 6.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: geocoder dependency-version: 1.8.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: table_print dependency-version: 1.5.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies-minor - dependency-name: rexml dependency-version: 3.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies-minor - dependency-name: csv dependency-version: 3.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies-minor - dependency-name: maintenance_tasks dependency-version: 2.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: terser dependency-version: 1.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies-minor - dependency-name: rails-autoscale-web dependency-version: 1.12.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: lograge dependency-version: 0.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: recaptcha dependency-version: 5.21.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: barnes dependency-version: 0.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies-minor - dependency-name: fx dependency-version: 0.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: rails dependency-version: 8.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-minor - dependency-name: rails-i18n dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-minor - dependency-name: has_scope dependency-version: 0.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: globalid dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: js-routes dependency-version: 2.3.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-minor - dependency-name: activerecord dependency-version: 8.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-minor - dependency-name: actionpack dependency-version: 8.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Feb 9, 2026

dependabot bot requested a review from wwahammy as a code owner February 9, 2026 03:03

dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Feb 9, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the production-dependencies-minor group across 1 directory with 32 updates #1321

Bump the production-dependencies-minor group across 1 directory with 32 updates #1321

Uh oh!

dependabot bot commented on behalf of github Feb 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the production-dependencies-minor group across 1 directory with 32 updates #1321

Are you sure you want to change the base?

Bump the production-dependencies-minor group across 1 directory with 32 updates #1321

Uh oh!

Conversation

dependabot bot commented on behalf of github Feb 9, 2026

7.1.6

Active Support

Active Model

Active Record

Action View

Action Pack

v2.14.1

What's Changed

New Contributors

v2.14.0

What's Changed

New Contributors

v1.22.0

What's Changed

v1.21.1

What's Changed

v1.20.1

What's Changed

v1.20.0

What's Changed

1.22.0

1.21.1

1.21.0

1.20.1

1.20.0

1.19.0

1.18.6

1.18.5

test-unit 3.7.7 - 2026-01-01

Fixes

Thanks

test-unit 3.7.6 - 2025-12-25

Fixes

test-unit 3.7.5 - 2025-12-24

Fixes

test-unit 3.7.4 - 2025-12-23

Improvements

1.213.0 (2026-01-28)

1.212.0 (2026-01-16)

1.211.0 (2026-01-08)

1.210.1 (2026-01-06)

1.210.0 (2026-01-05)

1.209.0 (2025-12-23)

1.208.0 (2025-12-16)

1.207.0 (2025-12-15)

1.206.0 (2025-12-02)

v2.18.1

What's Changed

v2.18.0

What's Changed

v2.17.1

What's Changed

v2.17.0

What's Changed

v2.16.0

What's Changed

2026-02-03 (2.18.1)

2025-12-11 (2.18.0)

2025-12-04 (2.17.1)

2025-12-03 (2.17.0)

2025-11-07 (2.16.0)

2025-10-25 (2.15.2)

2025-10-07 (2.15.1)

2025-09-22 (2.15.0)

2025-09-18 (2.14.1)

v3.1.0

What's Changed

New Contributors

v6.8.0

What's Changed

Changed

Fixed

Deprecated

Removed