Skip to content

Bump the ruby group with 6 updates#113

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/ruby-64970968a5
Closed

Bump the ruby group with 6 updates#113
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/ruby-64970968a5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the ruby group with 6 updates:

Package From To
propshaft 1.3.1 1.3.2
rake 13.3.1 13.4.2
puma 7.2.0 8.0.1
rubocop 1.86.0 1.86.1
faker 3.6.1 3.8.0
view_component 4.6.0 4.8.0

Updates propshaft from 1.3.1 to 1.3.2

Release notes

Sourced from propshaft's releases.

v1.3.2

What's Changed

New Contributors

Full Changelog: rails/propshaft@v1.3.1...v1.3.2

Commits
  • eb59571 Bump version for 1.3.2
  • 8335366 Add charset=utf-8 to Content-Type for CSS and HTML assets (#264)
  • 67def02 Merge pull request #265 from flavorjones/fix-ci-minitest
  • 2f9965a Support minitest 6 where possible, pin < 6 elsewhere
  • See full diff in compare view

Updates rake from 13.3.1 to 13.4.2

Commits
  • 503b8ec v13.4.2
  • 46038e7 Merge pull request #723 from ruby/fix/testopts-preserve-existing-value
  • 604a3d9 Isolate TESTOPTS env in TestRakeTestTask setup/teardown
  • 5886caa Preserve ENV["TESTOPTS"] when verbose is enabled
  • 92193ac v13.4.1
  • b74be0b Merge pull request #721 from ruby/fix/add-options-to-gemspec
  • 829f66d Add lib/rake/options.rb to gemspec
  • 2d55bc4 v13.4.0
  • 1415070 Exclude dependabot updates from release note
  • b3dc948 Merge pull request #713 from pvdb/simplify_standard_system_dir
  • Additional commits viewable in compare view

Updates puma from 7.2.0 to 8.0.1

Release notes

Sourced from puma's releases.

v8.0.1

  • Bugfixes

    • Fix prune_bundler stripping user-configured BUNDLE_* env vars (e.g. BUNDLE_WITHOUT) on re-exec, which caused workers to crash on boot (#3929)
  • Performance

    • Use blocks for debug logging to avoid creating log messages when debug is disabled (#3920)
  • Docs

    • Fix incorrect hook names in gRPC docs (#3923)
    • Reword v8 upgrade guide IPv6 bullet for clarity (#3928)

v8.0.0 - Into the Arena

Read our Version 8 Upgrade Guide.

  • Features

    • Add env["puma.mark_as_io_bound"] API and max_io_threads config to allow IO-bound requests to exceed the thread pool max, enabling better handling of mixed workloads (#3816, #3894)
    • Add single and cluster DSL hooks for mode-specific configuration (#3621)
    • Add on_force option to shutdown_debug to only dump thread backtraces on forced (non-graceful) shutdown (#3671)
    • Add API to dynamically update min and max thread counts at runtime via update_thread_pool_min_max and ServerPluginControl (#3658)
    • Use SIGPWR for thread backtrace dumps on Linux/JRuby where SIGINFO is unavailable (#3829)
  • Bugfixes

    • Fix phased restart for fork_worker to avoid forking from stale worker 0 when it has been replaced (#3853)
  • Performance

    • JRuby HTTP parser improvements: pre-allocated header keys, perfect hash lookup, reduced memory copies (#3838)
    • Cache downcased header key in str_headers to avoid redundant String#downcase calls, reducing allocations by ~50% per response (#3874)
  • Refactor

    • Collect env processing into dedicated client_env.rb module (#3582)
    • Move event to default configuration (#3872)
  • Docs

    • Add gRPC guide for configuring gRPC lifecycle hooks in clustered mode (#3885)
    • Add 7.0 upgrade guide, move 5.0/6.0 upgrade guides to docs directory (#3900)
    • Correct default values for persistent_timeout and worker_boot_timeout in DSL docs (#3912)
    • Add file descriptor limit warning in test helper for contributors (#3893)
  • Breaking changes

    • Default production bind address changed from 0.0.0.0 to :: (IPv6) when a non-loopback IPv6 interface is available; falls back to 0.0.0.0 if IPv6 is unavailable (#3847)
Changelog

Sourced from puma's changelog.

8.0.1 / 2026-04-27

  • Bugfixes

    • Fix prune_bundler stripping user-configured BUNDLE_* env vars (e.g. BUNDLE_WITHOUT) on re-exec, which caused workers to crash on boot (#3929)
  • Performance

    • Use blocks for debug logging to avoid creating log messages when debug is disabled (#3920)
  • Docs

    • Fix incorrect hook names in gRPC docs (#3923)
    • Reword v8 upgrade guide IPv6 bullet for clarity (#3928)

8.0.0 / 2026-03-27

  • Features

    • Add env["puma.mark_as_io_bound"] API and max_io_threads config to allow IO-bound requests to exceed the thread pool max, enabling better handling of mixed workloads (#3816, #3894)
    • Add single and cluster DSL hooks for mode-specific configuration (#3621)
    • Add on_force option to shutdown_debug to only dump thread backtraces on forced (non-graceful) shutdown (#3671)
    • Add API to dynamically update min and max thread counts at runtime via update_thread_pool_min_max and ServerPluginControl (#3658)
    • Use SIGPWR for thread backtrace dumps on Linux/JRuby where SIGINFO is unavailable (#3829)
  • Bugfixes

    • Fix phased restart for fork_worker to avoid forking from stale worker 0 when it has been replaced (#3853)
  • Performance

    • JRuby HTTP parser improvements: pre-allocated header keys, perfect hash lookup, reduced memory copies (#3838)
    • Cache downcased header key in str_headers to avoid redundant String#downcase calls, reducing allocations by ~50% per response (#3874)
  • Refactor

    • Collect env processing into dedicated client_env.rb module (#3582)
    • Move event to default configuration (#3872)
  • Docs

    • Add gRPC guide for configuring gRPC lifecycle hooks in clustered mode (#3885)
    • Add 7.0 upgrade guide, move 5.0/6.0 upgrade guides to docs directory (#3900)
    • Correct default values for persistent_timeout and worker_boot_timeout in DSL docs (#3912)
    • Add file descriptor limit warning in test helper for contributors (#3893)
  • Breaking changes

    • Default production bind address changed from 0.0.0.0 to :: (IPv6) when a non-loopback IPv6 interface is available; falls back to 0.0.0.0 if IPv6 is unavailable (#3847)
Commits
  • cee7e61 Release v8.0.1 (#3932)
  • f955caf Fix prune_bundler stripping user-configured BUNDLE_* env vars on re-exec (#3929)
  • 97996aa ci: test_error_logger.rb - fix TruffleRuby error (#3930)
  • 03825bc Build(deps): Bump actions/github-script from 8 to 9 (#3925)
  • 053efae Reword v8 upgrade guide ipv6 bullet (#3928)
  • b19f35a Fix incorrect hook names in gRPC docs (#3923)
  • eeabe4b Use blocks for debug logging to avoid creating messages if debug disabled (#3...
  • 08f63d4 Release v8.0.0 (#3914)
  • 7406cc1 Fix IPv4-mapped IPv6 addresses in REMOTE_ADDR and request logs (#3916)
  • e090243 Build(deps): Bump actions/checkout from 4 to 6 (#3915)
  • Additional commits viewable in compare view

Updates rubocop from 1.86.0 to 1.86.1

Release notes

Sourced from rubocop's releases.

RuboCop v1.86.1

Bug fixes

  • #11051: Fix Style/AccessModifierDeclarations inline autocorrect dropping comments between the access modifier and the following method definition. (@​dduugg)
  • #14665: Cache plugin integration in CopHelper to avoid repeated loading. (@​55728)
  • #15091: Fix Lint/DuplicateMethods false positives for anonymous classes in constant assignments and method return values. (@​eugeneius)
  • #15055: Fix Lint/DuplicateMethods false positives with anonymous classes inside blocks (e.g. RSpec let, describe). (@​ShkumbinDelija)
  • #15035: Exclude included_modules from Style/ModuleMemberExistenceCheck. (@​koic)
  • #15087: Fix false positive for Style/RedundantLineContinuation when using interpolated string literals. (@​koic)
  • #14361: Fix false positive in file_to_include? when a relative Include pattern matches a parent directory name in the absolute file path. (@​jonas054)
  • #15090: Fix false positives for Layout/EmptyLineAfterGuardClause when consecutive guard clauses use and return. (@​eugeneius)
  • #15070: Fix false positive for Lint/RedundantSafeNavigation when chained safe navigation is used in a conditional expression with InferNonNilReceiver enabled. (@​koic)
  • #15074: Fix false positives in Style/RedundantParentheses when using parentheses around an endless range in assignment. (@​koic)
  • #15048: Fix issue where the url_for is missing for Cops without instance methods. (@​Fryguy)
  • #15051: Fix Style/RedundantParentheses handling of beginless ranges. (@​oggy)
  • #14980: Fix Lint/Syntax zero-length diagnostic range for syntax errors at EOF. (@​55728)
  • #15084: Handle heredocs with methods calls correctly when fixing guard clauses. (@​G-Rath)
  • #11398: Fix incorrect Include path adjustment when local config overrides an inherited Include. (@​jonas054)
  • #15092: Fix Layout/EndAlignment cop error on an empty begin. (@​viralpraxis)
  • #15059: Fix an error in Layout/LineLength when SplitStrings option is enabled and __FILE__ is used. (@​jeromedalbert)
  • #5876: Fix Lint/UnusedMethodArgument false positive when block argument is used via yield. (@​dduugg)
  • #15093: Return tool execution errors instead of protocol errors in MCP server. (@​koic)

Changes

  • #15005: Make Style/OneClassPerFile exclude spec/**/* and test/**/* by default. (@​koic)
  • #15081: Relax parallel dependency to >= 1.10. (@​koic)
  • #15063: Disable Style/RedundantStructKeywordInit cop by default. (@​koic)
Changelog

Sourced from rubocop's changelog.

1.86.1 (2026-04-09)

Bug fixes

  • #11051: Fix Style/AccessModifierDeclarations inline autocorrect dropping comments between the access modifier and the following method definition. ([@​dduugg][])
  • #14665: Cache plugin integration in CopHelper to avoid repeated loading. ([@​55728][])
  • #15091: Fix Lint/DuplicateMethods false positives for anonymous classes in constant assignments and method return values. ([@​eugeneius][])
  • #15055: Fix Lint/DuplicateMethods false positives with anonymous classes inside blocks (e.g. RSpec let, describe). ([@​ShkumbinDelija][])
  • #15035: Exclude included_modules from Style/ModuleMemberExistenceCheck. ([@​koic][])
  • #15087: Fix false positive for Style/RedundantLineContinuation when using interpolated string literals. ([@​koic][])
  • #14361: Fix false positive in file_to_include? when a relative Include pattern matches a parent directory name in the absolute file path. ([@​jonas054][])
  • #15090: Fix false positives for Layout/EmptyLineAfterGuardClause when consecutive guard clauses use and return. ([@​eugeneius][])
  • #15070: Fix false positive for Lint/RedundantSafeNavigation when chained safe navigation is used in a conditional expression with InferNonNilReceiver enabled. ([@​koic][])
  • #15074: Fix false positives in Style/RedundantParentheses when using parentheses around an endless range in assignment. ([@​koic][])
  • #15048: Fix issue where the url_for is missing for Cops without instance methods. ([@​Fryguy][])
  • #15051: Fix Style/RedundantParentheses handling of beginless ranges. ([@​oggy][])
  • #14980: Fix Lint/Syntax zero-length diagnostic range for syntax errors at EOF. ([@​55728][])
  • #15084: Handle heredocs with methods calls correctly when fixing guard clauses. ([@​G-Rath][])
  • #11398: Fix incorrect Include path adjustment when local config overrides an inherited Include. ([@​jonas054][])
  • #15092: Fix Layout/EndAlignment cop error on an empty begin. ([@​viralpraxis][])
  • #15059: Fix an error in Layout/LineLength when SplitStrings option is enabled and __FILE__ is used. ([@​jeromedalbert][])
  • #5876: Fix Lint/UnusedMethodArgument false positive when block argument is used via yield. ([@​dduugg][])
  • #15093: Return tool execution errors instead of protocol errors in MCP server. ([@​koic][])

Changes

  • #15005: Make Style/OneClassPerFile exclude spec/**/* and test/**/* by default. ([@​koic][])
  • #15081: Relax parallel dependency to >= 1.10. ([@​koic][])
  • #15063: Disable Style/RedundantStructKeywordInit cop by default. ([@​koic][])
Commits
  • af80266 Cut 1.86.1
  • eb504ce Update Changelog
  • 9c8fe2c Merge pull request #15085 from G-Rath/fix-style-guard
  • 11d796a Merge pull request #15093 from koic/fix_return_tool_execution_errors_instead_...
  • 4450067 Return tool execution errors instead of protocol errors in MCP server
  • ff64180 Merge pull request #15092 from viralpraxis/fix-an-error-for-layout-end-alignm...
  • 11e04c0 Merge pull request #15091 from eugeneius/duplicate_methods_anonymous_classes
  • b8deea4 Merge pull request #15090 from eugeneius/guard_clause_and_return
  • e130020 Fix Layout/EndAlignment cop error on an empty begin
  • 4808594 Fix DuplicateMethods for anonymous classes in constant assignments and methods
  • Additional commits viewable in compare view

Updates faker from 3.6.1 to 3.8.0

Release notes

Sourced from faker's releases.

v3.8.0

Changes

Enabling lazy load

This version introduces lazy loading. It means users will only pay for what they use. Faker loads 2x faster when it's enabled.

Lazy loading the generators is disabled by default. To enable it, choose one of the configuration options below:

1 - Set lazy load as a Faker Config

Faker::Config.lazy_loading = true

2 - Set lazy load as an environment variable

FAKER_LAZY_LOAD = 1

We hope you get to see the improvement by enabling it. Please file a bug report for any issues!

Thanks to @​jeremyevans for the mentoring, and to @​thdaraujo for pairing and code reviews.

Full Changelog: faker-ruby/faker@v3.7.1...v3.8.0

v3.7.1

Thanks to all contributors!

Drops support for Ruby 3.1

What's changed

Update development dependencies

New Contributors

Full Changelog: faker-ruby/faker@v3.6.1...v3.7.1

Changelog

Sourced from faker's changelog.

v3.8.0 (2026-04-16)

Enabling lazy load

This version introduces lazy loading. It means users will only pay for what they use. Faker loads 2x faster when it's enabled.

Lazy loading the generators is disabled by default. To enable it, choose one of the configuration options below:

1 - Set lazy load as a Faker Config

Faker::Config.lazy_loading = true

2 - Set lazy load as an environment variable

FAKER_LAZY_LOAD = 1

We hope you get to see the improvement by enabling it. Please file a bug report for any issues!

Thanks to @​jeremyevans for the mentoring, and to @​thdaraujo for pairing and code reviews.

Full Changelog: faker-ruby/faker@v3.7.1...v3.8.0


v3.7.1 (2026-04-14)

Thanks to all contributors!

Drops support for Ruby 3.1

What's changed

Update development dependencies

New Contributors

... (truncated)

Commits

Updates view_component from 4.6.0 to 4.8.0

Release notes

Sourced from view_component's releases.

4.8.0

  • Add compile.view_component ActiveSupport::Notifications event for eager compilation at boot time.

    Joel Hawksley, GitHub Copilot

4.7.0

  • Fix stale content cache when slots are accessed before render_in.

    Jared Armstrong

  • Add rubocop-view_component to resources.

    Andy Waite

  • Fix bug where inheritance of components with formatless templates improperly raised a NoMethodError.

    GitHub Copilot, Joel Hawksley, Cameron Dutro

Changelog

Sourced from view_component's changelog.

4.8.0

  • Add compile.view_component ActiveSupport::Notifications event for eager compilation at boot time.

    Joel Hawksley, GitHub Copilot

4.7.0

  • Fix stale content cache when slots are accessed before render_in.

    Jared Armstrong

  • Add rubocop-view_component to resources.

    Andy Waite

  • Fix bug where inheritance of components with formatless templates improperly raised a NoMethodError.

    GitHub Copilot, Joel Hawksley, Cameron Dutro

Commits
  • d7e8cb4 Merge pull request #2615 from ViewComponent/release-4-8-0
  • 091e30a fix flaky tesT
  • 9e0dae4 release 4.8.0
  • ef90407 Merge pull request #2613 from ViewComponent/instrument-compilation
  • d920918 clean up test
  • 3cc6d61 simplify test
  • d7947fc Add compile.view_component ActiveSupport::Notifications event for eager compi...
  • 5d84af8 Merge pull request #2612 from ViewComponent/dependabot/bundler/propshaft-1.3.2
  • 8f4ef89 Bump propshaft from 1.3.1 to 1.3.2
  • 9ae4d79 Merge pull request #2611 from ViewComponent/dependabot/bundler/yard-0.9.43
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ruby group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [propshaft](https://github.com/rails/propshaft) | `1.3.1` | `1.3.2` |
| [rake](https://github.com/ruby/rake) | `13.3.1` | `13.4.2` |
| [puma](https://github.com/puma/puma) | `7.2.0` | `8.0.1` |
| [rubocop](https://github.com/rubocop/rubocop) | `1.86.0` | `1.86.1` |
| [faker](https://github.com/faker-ruby/faker) | `3.6.1` | `3.8.0` |
| [view_component](https://github.com/viewcomponent/view_component) | `4.6.0` | `4.8.0` |


Updates `propshaft` from 1.3.1 to 1.3.2
- [Release notes](https://github.com/rails/propshaft/releases)
- [Commits](rails/propshaft@v1.3.1...v1.3.2)

Updates `rake` from 13.3.1 to 13.4.2
- [Release notes](https://github.com/ruby/rake/releases)
- [Changelog](https://github.com/ruby/rake/blob/master/History.rdoc)
- [Commits](ruby/rake@v13.3.1...v13.4.2)

Updates `puma` from 7.2.0 to 8.0.1
- [Release notes](https://github.com/puma/puma/releases)
- [Changelog](https://github.com/puma/puma/blob/main/History.md)
- [Commits](puma/puma@v7.2.0...v8.0.1)

Updates `rubocop` from 1.86.0 to 1.86.1
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.86.0...v1.86.1)

Updates `faker` from 3.6.1 to 3.8.0
- [Release notes](https://github.com/faker-ruby/faker/releases)
- [Changelog](https://github.com/faker-ruby/faker/blob/main/CHANGELOG.md)
- [Commits](faker-ruby/faker@v3.6.1...v3.8.0)

Updates `view_component` from 4.6.0 to 4.8.0
- [Release notes](https://github.com/viewcomponent/view_component/releases)
- [Changelog](https://github.com/ViewComponent/view_component/blob/main/docs/CHANGELOG.md)
- [Commits](ViewComponent/view_component@v4.6.0...v4.8.0)

---
updated-dependencies:
- dependency-name: propshaft
  dependency-version: 1.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby
- dependency-name: rake
  dependency-version: 13.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby
- dependency-name: puma
  dependency-version: 8.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: ruby
- dependency-name: rubocop
  dependency-version: 1.86.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby
- dependency-name: faker
  dependency-version: 3.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby
- dependency-name: view_component
  dependency-version: 4.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels May 1, 2026
@dependabot @github

dependabot Bot commented on behalf of github May 29, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this May 29, 2026
@dependabot dependabot Bot deleted the dependabot/bundler/ruby-64970968a5 branch May 29, 2026 00:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants