Bump the dependencies group across 1 directory with 6 updates #80

dependabot · 2025-09-29T04:50:49Z

Bumps the dependencies group with 6 updates in the / directory:

Package	From	To
rails	`8.0.2.1`	`8.0.3`
sqlite3	`2.7.3`	`2.7.4`
puma	`7.0.3`	`7.0.4`
turbo-rails	`2.0.16`	`2.0.17`
faraday	`2.13.4`	`2.14.0`
recaptcha	`5.21.0`	`5.21.1`

Updates rails from 8.0.2.1 to 8.0.3

Release notes

Sourced from rails's releases.

8.0.3

Active Support
ActiveSupport::FileUpdateChecker does not depend on Time.now to prevent unnecessary reloads with time travel test helpers

Jan Grodowski

Fix ActiveSupport::BroadcastLogger from executing a block argument for each logger (tagged, info, etc.).

Jared Armstrong

Make ActiveSupport::Logger #freeze-friendly.

Joshua Young

Fix ActiveSupport::HashWithIndifferentAccess#transform_keys! removing defaults.

Hartley McGuire
Fix ActiveSupport::HashWithIndifferentAccess#tranform_keys! to handle collisions.

If the transformation would result in a key equal to another not yet transformed one, it would result in keys being lost.

Before:
>> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1}
After:
>> {a: 1, b: 2}.with_indifferent_access.transform_keys!(&:succ)
=> {"c" => 1, "d" => 2}
Jason T Johnson, Jean Boussier
Fix ActiveSupport::Cache::MemCacheStore#read_multi to handle network errors.

This method specifically wasn't handling network errors like other codepaths.

Alessandro Dal Grande

Fix configuring RedisCacheStore with raw: true.

fatkodima

... (truncated)

Commits

529f933 Preparing for 8.0.3 release
6409b24 Merge pull request #55719 from skipkayhil/hm-fix-label-for-namespace
030f68c Remove lock for rdoc gem in Gemfile
0160f42 Sync CHANGELOGs
6394bfb Merge pull request #55725 from byroot/js-include-type-module-sym
0ff0d09 Merge pull request #55724 from fatkodima/preserve-locale-eml-preview
74038d7 Merge pull request #55722 from kozy4324/fix-lease-sticky-flag-timing
78fe965 Merge pull request #55710 from Shopify/grodowski/file-update-checker-time-tra...
4fc9618 Merge pull request #55703 from byroot/hly-fix-query-cache-system-tests-2
847072c Fix TransitionTable#as_json compatibility with json 2.14.0
Additional commits viewable in compare view

Updates sqlite3 from 2.7.3 to 2.7.4

Release notes

Sourced from sqlite3's releases.

2.7.4 / 2025-09-19

Vendored sqlite is updated to v3.50.4 (from v3.50.3). #644 @flavorjones

071da898ef968c83f62b26ed644a4e7f3544034fb2518f99f88a354d9ab6381c  sqlite3-2.7.4-aarch64-linux-gnu.gem
a9484bef1ee9c3a55ed370baa5147823f844aebfe0df9350f2e9b5518aeee516  sqlite3-2.7.4-aarch64-linux-musl.gem
b7b35c9802533b1b313cb1bb8e36b5c37277b6019ccf6314740fc7d4503a13d6  sqlite3-2.7.4-arm-linux-gnu.gem
4809860528e429e24aad52b781ee56bc8e7e0d1a28b76cd6a24f5eded8e2d774  sqlite3-2.7.4-arm-linux-musl.gem
d5b09cd4e9542aa05f0db0eb7dd868102cc23072ae378e0453e59e0efaed89b8  sqlite3-2.7.4-arm64-darwin.gem
babc82166fd81580b1ff6c5a5d5aec414be14e592443ede2d849355e0dddca08  sqlite3-2.7.4-x64-mingw-ucrt.gem
cca2c067875c47b6e68e30728cac64db98fc05284e2a79df0484621c5e11c52b  sqlite3-2.7.4-x86-linux-gnu.gem
29d82949963b5b71b304f360802b35c04fb5ff7f37ab584f5c586cc45880fdd4  sqlite3-2.7.4-x86-linux-musl.gem
a51bcab41d09311ff7ac6bd4ea5cbdeee99f2e44f22c1b8472b541e9243c1d52  sqlite3-2.7.4-x86_64-darwin.gem
0755b458f5501e89c0d5a0003afc4fdd6fd059eb1fb1424221532917096da4be  sqlite3-2.7.4-x86_64-linux-gnu.gem
494b4ce35524f3bf8ef6741737d0c197086ed8ac4804220fa71d653b39d82a54  sqlite3-2.7.4-x86_64-linux-musl.gem
7fbc1fdb18ba1c0798fb298cb3c35c35bb1743b832a9aeb91add026a5614889c  sqlite3-2.7.4.gem

Changelog

Sourced from sqlite3's changelog.

2.7.4 / 2025-09-19

Vendored sqlite is updated to v3.50.4 (from v3.50.3). #644 @flavorjones

Commits

285e696 version bump to v2.7.4
c79221d Merge pull request #644 from sparklemotion/flavorjones/dep-sqlite-3.50.4
80e8a16 dep: update vendored sqlite3 to v3.50.4
f88c20d Merge pull request #643 from sparklemotion/dependabot/github_actions/actions/...
3ecc038 Merge pull request #640 from sparklemotion/dependabot/github_actions/actions/...
0b7ef45 build(deps): bump actions/upload-pages-artifact from 3 to 4
6f7868a build(deps): bump actions/download-artifact from 4 to 5
6332df1 Merge pull request #641 from sparklemotion/dependabot/github_actions/actions/...
4e8e710 build(deps): bump actions/checkout from 4 to 5
See full diff in compare view

Updates puma from 7.0.3 to 7.0.4

Changelog

Sourced from puma's changelog.

7.0.4 / 2025-09-23

Bugfixes

Fix SSL_shutdown error handling (#3703)

Strip whitespace from the beginnings of request header values. (#3742)

Performance

puma_http11.c: Use interned UTF-8 strings for hash keys (#3754)

Move sleep cluster logic to its own class (#3746, #3740)

Commits

a4c451c v7.0.4 (#3769)
474f4ac Remove global side effect from test (#3765)
30e0d22 Add test/rackup/sleep_fibonacci.ru, update benchmark hey files (#3758)
4cd1199 ci: test_puma_server_ssl.rb - catch error in thread (#3760)
684b715 Fix SSL_shutdown error handling (#3703)
7e0d127 Strip whitespace from the beginnings of request header values. (#3742)
b817da4 puma_http11.c: Use interned UTF-8 strings for hash keys (#3754)
943d9c7 Move sleep cluster logic to its own class (#3746)
7aadde5 ci: helper.rb - catch error writing to ENV['GITHUB_STEP_SUMMARY'] file (#3752)
48ffd34 Fixup benchmark scripts (#3753)
See full diff in compare view

Updates turbo-rails from 2.0.16 to 2.0.17

Release notes

Sourced from turbo-rails's releases.

v2.0.17

What's Changed

Fix typo in README.md by @brunocalmels in hotwired/turbo-rails#746

Remove compact call on locals in broadcast_rendering_with_defaults by @mathias234 in hotwired/turbo-rails#720

See https://github.com/hotwired/turbo/releases/tag/v8.0.18

New Contributors

@brunocalmels made their first contribution in hotwired/turbo-rails#746

@mathias234 made their first contribution in hotwired/turbo-rails#720

Commits

aeea473 @hotwired/turbo-rails v8.0.18
00e6cba Bump version
30cd8fc Merge pull request #720 from mathias234/remove-compact
4bf3c0b Merge pull request #746 from brunocalmels/patch-1
fe2b862 Fix typo in README.md
65afc97 Remove compact on locals
See full diff in compare view

Updates faraday from 2.13.4 to 2.14.0

Release notes

Sourced from faraday's releases.

v2.14.0

What's Changed

New features ✨

Use newer UnprocessableContent naming for 422 by @tylerhunt in lostisland/faraday#1638

Fixes 🐞

Convert strings to UTF-8 by @c960657 in lostisland/faraday#1624

Fix Response#to_hash when response not finished yet by @yykamei in lostisland/faraday#1639

Misc/Docs 📄

Lint: use filter_map by @olleolleolle in lostisland/faraday#1637

Bump actions/checkout from v4 to v5 by @dependabot[bot] in lostisland/faraday#1636

Fixes documentation by @dharamgollapudi in lostisland/faraday#1635

New Contributors

@c960657 made their first contribution in lostisland/faraday#1624

@dharamgollapudi made their first contribution in lostisland/faraday#1635

@tylerhunt made their first contribution in lostisland/faraday#1638

Full Changelog: lostisland/faraday@v2.13.4...v2.14.0

Commits

3201a42 Version bump to 2.14.0
edd8cc5 Fix Faraday::Response#to_hash when request is not finished yet (#1639)
0e008c5 Use newer Unprocessable Content naming for 422 (#1638)
c399e43 Fixes typo (#1635)
fd81a73 Convert strings to UTF-8 (#1624)
bc27144 Bump actions/checkout from 4 to 5 (#1636)
f0aab63 Lint: use filter_map (#1637)
See full diff in compare view

Updates recaptcha from 5.21.0 to 5.21.1

Changelog

Sourced from recaptcha's changelog.

5.21.1

Fix flash not being updated when responding to :turbo_stream requests

Commits

d1e8483 v5.21.1
47b5a3b Merge pull request #472 from jrodriigues/master
37584ef Allow flash messages when responding to turbo_stream requests
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [rails](https://github.com/rails/rails) | `8.0.2.1` | `8.0.3` | | [sqlite3](https://github.com/sparklemotion/sqlite3-ruby) | `2.7.3` | `2.7.4` | | [puma](https://github.com/puma/puma) | `7.0.3` | `7.0.4` | | [turbo-rails](https://github.com/hotwired/turbo-rails) | `2.0.16` | `2.0.17` | | [faraday](https://github.com/lostisland/faraday) | `2.13.4` | `2.14.0` | | [recaptcha](https://github.com/ambethia/recaptcha) | `5.21.0` | `5.21.1` | Updates `rails` from 8.0.2.1 to 8.0.3 - [Release notes](https://github.com/rails/rails/releases) - [Commits](rails/rails@v8.0.2.1...v8.0.3) Updates `sqlite3` from 2.7.3 to 2.7.4 - [Release notes](https://github.com/sparklemotion/sqlite3-ruby/releases) - [Changelog](https://github.com/sparklemotion/sqlite3-ruby/blob/main/CHANGELOG.md) - [Commits](sparklemotion/sqlite3-ruby@v2.7.3...v2.7.4) Updates `puma` from 7.0.3 to 7.0.4 - [Release notes](https://github.com/puma/puma/releases) - [Changelog](https://github.com/puma/puma/blob/master/History.md) - [Commits](puma/puma@v7.0.3...v7.0.4) Updates `turbo-rails` from 2.0.16 to 2.0.17 - [Release notes](https://github.com/hotwired/turbo-rails/releases) - [Commits](hotwired/turbo-rails@v2.0.16...v2.0.17) Updates `faraday` from 2.13.4 to 2.14.0 - [Release notes](https://github.com/lostisland/faraday/releases) - [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md) - [Commits](lostisland/faraday@v2.13.4...v2.14.0) Updates `recaptcha` from 5.21.0 to 5.21.1 - [Changelog](https://github.com/ambethia/recaptcha/blob/master/CHANGELOG.md) - [Commits](ambethia/recaptcha@v5.21.0...v5.21.1) --- updated-dependencies: - dependency-name: rails dependency-version: 8.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: sqlite3 dependency-version: 2.7.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: puma dependency-version: 7.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: turbo-rails dependency-version: 2.0.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: faraday dependency-version: 2.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: recaptcha dependency-version: 5.21.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Sep 29, 2025

cbeer merged commit eebc05f into master Sep 29, 2025
1 check failed

dependabot bot deleted the dependabot/bundler/dependencies-835a2150d8 branch September 29, 2025 14:05

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the dependencies group across 1 directory with 6 updates #80

Bump the dependencies group across 1 directory with 6 updates #80

Uh oh!

dependabot bot commented on behalf of github Sep 29, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Bump the dependencies group across 1 directory with 6 updates #80

Bump the dependencies group across 1 directory with 6 updates #80

Uh oh!

Conversation

dependabot bot commented on behalf of github Sep 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

8.0.3

Active Support

2.7.4 / 2025-09-19

2.7.4 / 2025-09-19

7.0.4 / 2025-09-23

v2.0.17

What's Changed

New Contributors

v2.14.0

What's Changed

New features ✨

Fixes 🐞

Misc/Docs 📄

New Contributors

5.21.1

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Sep 29, 2025 •

edited

Loading