Skip to content

Bump the ruby-deps group with 14 updates - #1304

Merged
chadlwilson merged 1 commit into
masterfrom
dependabot/bundler/ruby-deps-521847b0f5
Aug 1, 2026
Merged

Bump the ruby-deps group with 14 updates#1304
chadlwilson merged 1 commit into
masterfrom
dependabot/bundler/ruby-deps-521847b0f5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the ruby-deps group with 14 updates:

Package From To
aws-sdk-s3 1.226.0 1.228.1
html-proofer 5.2.1 5.2.2
async 2.41.0 2.44.0
aws-partitions 1.1263.0 1.1277.0
aws-sdk-core 3.252.0 3.254.0
aws-sdk-kms 1.129.0 1.130.0
bigdecimal 3.3.1 4.1.2
concurrent-ruby 1.3.7 1.3.8
console 1.36.0 1.37.0
io-event 1.19.1 1.19.4
json 2.20.0 2.21.2
sass-embedded 1.101.0 1.102.0
tilt 2.7.0 2.8.0
ttfunk 1.8.0 1.7.0

Updates aws-sdk-s3 from 1.226.0 to 1.228.1

Changelog

Sourced from aws-sdk-s3's changelog.

1.228.1 (2026-07-23)

  • Issue - Ensure the source file is closed on multipart upload_file part failure, preventing leaked file descriptors (#3408).

1.228.0 (2026-07-16)

  • Feature - Documentation update for removing the 30 day minimum restriction for transition to Standard-IA or OneZone-IA storage classes

1.227.0 (2026-07-09)

  • Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.
Commits

Updates html-proofer from 5.2.1 to 5.2.2

Release notes

Sourced from html-proofer's releases.

v5.2.2

What's Changed

Full Changelog: gjtorikian/html-proofer@v5.2.1...v5.2.2

Changelog

Sourced from html-proofer's changelog.

[v5.2.2] - 28-07-2026

What's Changed

Full Changelog: gjtorikian/html-proofer@v5.2.1...v5.2.2

Commits
  • 1dae553 Merge pull request #878 from gjtorikian/release/v5.2.2
  • d2bc2a4 [skip test] update changelog
  • 5715743 Merge pull request #877 from gjtorikian/trailing-slash-expand-path
  • 79c6ba3 test(links): Serve the PDF hash fixture locally
  • 4af736a fix(external): Detect content type on live responses
  • d90fe91 Move dev deps to Gemfile
  • 64ffecc [auto-lint]: Lint files
  • 2a038b6 bump to 5.2.2
  • c8d288a fix: Read trailing slash from URL, not expanded path
  • See full diff in compare view

Updates async from 2.41.0 to 2.44.0

Release notes

Sourced from async's releases.

v2.44.0

  • Fixed scheduler cleanup after forking while other fibers are blocked.

v2.43.0

  • Propagate cancellation causes through task trees so child tasks observe the original cancellation cause.

v2.42.0

  • Sync and Async can now be invoked from a non-blocking fiber that has no scheduler (e.g. inside an Enumerator or a bare Fiber.new). Previously this raised RuntimeError: Running scheduler on non-blocking fiber!. The reactor is now run within Fiber.blocking, so the scheduler always runs on a blocking fiber.
Changelog

Sourced from async's changelog.

v2.44.0

  • Fixed scheduler cleanup after forking while other fibers are blocked.

v2.43.0

  • Propagate cancellation causes through task trees so child tasks observe the original cancellation cause.

v2.42.0

  • Sync and Async can now be invoked from a non-blocking fiber that has no scheduler (e.g. inside an Enumerator or a bare Fiber.new). Previously this raised RuntimeError: Running scheduler on non-blocking fiber!. The reactor is now run within Fiber.blocking, so the scheduler always runs on a blocking fiber.
Commits

Updates aws-partitions from 1.1263.0 to 1.1277.0

Changelog

Sourced from aws-partitions's changelog.

1.1277.0 (2026-07-31)

  • Feature - Updated the partitions source data that determines the AWS service regions and endpoints.

1.1276.0 (2026-07-30)

  • Feature - Added support for enumerating regions for Aws::PricingPlanManager.

1.1275.0 (2026-07-29)

  • Feature - Updated the partitions source data that determines the AWS service regions and endpoints.

1.1274.0 (2026-07-27)

  • Feature - Updated the partitions source data that determines the AWS service regions and endpoints.

1.1273.0 (2026-07-24)

  • Feature - Updated the partitions source data that determines the AWS service regions and endpoints.

1.1272.0 (2026-07-22)

  • Feature - Updated the partitions source data that determines the AWS service regions and endpoints.

1.1271.0 (2026-07-17)

  • Feature - Updated the partitions source data that determines the AWS service regions and endpoints.

1.1270.0 (2026-07-16)

  • Feature - Updated the partitions source data that determines the AWS service regions and endpoints.

1.1269.0 (2026-07-13)

  • Feature - Updated the partitions source data that determines the AWS service regions and endpoints.

1.1268.0 (2026-07-10)

  • Feature - Updated the partitions source data that determines the AWS service regions and endpoints.

... (truncated)

Commits

Updates aws-sdk-core from 3.252.0 to 3.254.0

Changelog

Sourced from aws-sdk-core's changelog.

3.254.0 (2026-07-09)

  • Feature - Serialize BigDecimal values as JSON numbers in document types for REST-JSON and JSON protocols.

3.253.0 (2026-07-08)

  • Feature - Updated Aws::Signin::Client with the latest API changes.

  • Feature - Adds support for OAuth 2.0 token operations in AWS Sign-In, CreateOAuth2TokenWithIAM (client credentials flow), IntrospectOAuth2TokenWithIAM (token inspection), and RevokeOAuth2TokenWithIAM (token revocation).

Commits

Updates aws-sdk-kms from 1.129.0 to 1.130.0

Changelog

Sourced from aws-sdk-kms's changelog.

1.130.0 (2026-07-09)

  • Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.
Commits

Updates bigdecimal from 3.3.1 to 4.1.2

Release notes

Sourced from bigdecimal's releases.

v4.1.2

What's Changed

New Contributors

Full Changelog: ruby/bigdecimal@v4.1.1...v4.1.2

v4.1.1

What's Changed

New Contributors

Full Changelog: ruby/bigdecimal@v4.1.0...v4.1.1

v4.1.0

What's Changed

... (truncated)

Changelog

Sourced from bigdecimal's changelog.

4.1.2

4.1.1

4.1.0

4.0.1

... (truncated)

Commits
  • 9160561 Bump version to v4.1.2 (#529)
  • 8050ec7 Update dtoa to version from Ruby 4.0 (#528)
  • f8a02b2 Merge pull request #526 from ruby/dependabot/github_actions/step-security/har...
  • ac9a5cd Bump step-security/harden-runner from 2.16.1 to 2.17.0
  • 6b51b99 Fix unary minus on unsigned type warning (#525)
  • 50b80b1 BigMath.exp overflow/underflow check (#523)
  • fc54487 Revert "Add a workaround for slow BigDecimal#to_f when it has large N_signifi...
  • 72937b7 Use '0'+n for converting single digit to char (#521)
  • 8ac1498 Merge pull request #517 from ruby/dependabot/github_actions/rubygems/release-...
  • 3c89db5 Merge pull request #518 from ruby/dependabot/github_actions/step-security/har...
  • Additional commits viewable in compare view

Updates concurrent-ruby from 1.3.7 to 1.3.8

Release notes

Sourced from concurrent-ruby's releases.

v1.3.8

What's Changed

New Contributors

Full Changelog: ruby-concurrency/concurrent-ruby@v1.3.7...v1.3.8

Changelog

Sourced from concurrent-ruby's changelog.

Release v1.3.8 (19 July 2026)

concurrent-ruby:

Commits
  • 0b88d5f Release 1.3.8
  • 0f83a98 Allow to use Concurrent::Map#compute_if_absent in a Ractor (#1109)
  • cc5a32f Programatically set the backtrace_location on exception:
  • See full diff in compare view

Updates console from 1.36.0 to 1.37.0

Release notes

Sourced from console's releases.

v1.37.0

  • Show compound units in elapsed time display.
Changelog

Sourced from console's changelog.

v1.37.0

  • Show compound units in elapsed time display.
Commits

Updates io-event from 1.19.1 to 1.19.4

Release notes

Sourced from io-event's releases.

v1.19.4

  • Capture errno immediately after epoll_wait / kevent, preventing stale or subsequently clobbered values from raising a spurious Errno::* when a native selector wait is interrupted or skipped.

v1.19.3

  • Prevent URing, EPoll, and KQueue from entering a native wait when a signal exception becomes pending during the GVL transition. On Ruby versions without RB_NOGVL_PENDING_INTR_FAIL, the fallback now refreshes pending-interrupt state immediately before releasing the GVL while preserving the caller's exception-delivery timing.

v1.19.2

  • Use rb_process_status_for when available to construct URing process_wait results directly from waitid, avoiding the extra reap syscall previously needed to build a Process::Status.
Changelog

Sourced from io-event's changelog.

v1.19.4

  • Capture errno immediately after epoll_wait / kevent, preventing stale or subsequently clobbered values from raising a spurious Errno::* when a native selector wait is interrupted or skipped.

v1.19.3

  • Prevent URing, EPoll, and KQueue from entering a native wait when a signal exception becomes pending during the GVL transition. On Ruby versions without RB_NOGVL_PENDING_INTR_FAIL, the fallback now refreshes pending-interrupt state immediately before releasing the GVL while preserving the caller's exception-delivery timing.

v1.19.2

  • Use rb_process_status_for when available to construct URing process_wait results directly from waitid, avoiding the extra reap syscall previously needed to build a Process::Status.
Commits

Updates json from 2.20.0 to 2.21.2

Release notes

Sourced from json's releases.

v2.21.2

What's Changed

Full Changelog: ruby/json@v2.21.1...v2.21.2

v2.21.0

What's Changed

  • JSON.generate now accept a sort_keys option, which takes either a boolean or a block.
  • Added #empty? and #partial_value? methods on JSON::ResumableParser.
  • Numerous correctness and performance fixes for JSON::ResumableParser.
  • Avoid triggering Ruby's float out of range warning when parsing out of range numbers.
  • Declare C types with Ruby 4.1 RUBY_TYPED_THREAD_SAFE_FREE.

Full Changelog: ruby/json@v2.20.0...v2.21.0

Changelog

Sourced from json's changelog.

2026-07-31 (2.21.2)

2026-07-13 (2.21.1)

  • Fix a compilation issue on Window and Microsoft Visual C++.

2026-07-12 (2.21.0)

  • JSON.generate now accept a sort_keys option, which takes either a boolean or a block.
  • Added #empty? and #partial_value? methods on JSON::ResumableParser.
  • Numerous correctness and performance fixes for JSON::ResumableParser.
  • Avoid triggering Ruby's float out of range warning when parsing out of range numbers.
  • Declare C types with Ruby 4.1 RUBY_TYPED_THREAD_SAFE_FREE.
Commits
  • 5a32e43 Release 2.21.2
  • 2c332bf Also don't compute ResumableParser cursor position for warning
  • 5499aa5 Improve max_nesting documentation
  • 499d9bc Fix the parser benchmark bytes report
  • f5fc245 Pass '-mno-outline' to the compiler (if supported) to prevent function outlin...
  • fd61def Release 2.21.1
  • db70b14 Rely on Ruby's HAVE_BUILTIN___BUILTIN_CLZLL
  • 9be0e8e Release 2.21.0
  • d1299d4 Avoid re-decoding an incomplete number on every ResumableParser chunk
  • cc010c4 Fix ResumableParser losing tokens before a feed-boundary suspension
  • Additional commits viewable in compare view

Updates sass-embedded from 1.101.0 to 1.102.0

Commits

Updates tilt from 2.7.0 to 2.8.0

Changelog

Sourced from tilt's changelog.

2.8.0 (2026-07-06)

  • Support rdoc 8 in the rdoc template (jeremyevans)
  • Support options added in recent Commonmarker versions in the Commonmarker template (halo) (#26)
Commits
  • b0ad5b9 Bump version to 2.8.0
  • 4aabc43 Fix CI rdoc version guard on JRuby
  • ba41618 Limit rdoc to < 8 on JRuby in CI
  • 95afeb0 Support rdoc 8 in the rdoc template
  • 5ebaf2f Decrease repetitions in Prawn test
  • 8c68520 Add Add JRuby 10.1 to CI
  • 6a0dae1 Bump copyright year
  • 9ae7371 Update to actions/checkout@v6
  • 5e934cb Update CHANGELOG
  • 689d22d Update rdoc guard in CI gemfile
  • Additional commits viewable in compare view

Updates ttfunk from 1.8.0 to 1.7.0

Changelog

Sourced from ttfunk's changelog.

[1.8.0][] - 2024-03-05

Fixed

  • Corrupted CFF index data

    there was a subtle bug in cff index implementation that resulted in a data corruption. in certain circumstances some items didn't get properly encoded. this happened when items were not previously accessed.

    this resulted, for instance, in missing glyphs. but only sometimes because indexes might've still contain data that shouldn't've been there. in combination with incorrect encoding (see further) this resulted in some glyphs still being rendered, sometimes even correctly.

    along with the fix a rather large api change landed. this resulted in quite a big diff.

    Alexander Mankuta

  • Incorrect CFF encoding in subsets

    TTFunk used to reuse encoding from the original font. This mapping was incorrect for subset fonts which used not just a subset of glyphs but also a different encoding.

    A separate issue was that some fonts have empty CFF encoding. This incorrect mapping resulted in encoding that mapped all codes to glyph 0.

    This had impact on Prawn in particular. PDF spec explicitly says that CFF encoding is not to be used in OpenType fonts. cmap table should directly index charstrings in the CFF table. Despite this PDF renderers still use CFF encoding to retrieve glyphs. So TTFunk has to discard the original CFF encoding and supply its own.

    Alexander Mankuta

  • maxp table

    The table is now correctly parsed and encoded for both TrueType and CFF-based OpenType fonts.

    Cameron Dutro, Alexander Mankuta

  • Files are closed sooner

    Files were garbage collected but could stay open for longer than necessary.

    Jon Burgess

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the ruby-deps group with 14 updates
a10aeeb 
Bumps the ruby-deps group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) | `1.226.0` | `1.228.1` |
| [html-proofer](https://github.com/gjtorikian/html-proofer) | `5.2.1` | `5.2.2` |
| [async](https://github.com/socketry/async) | `2.41.0` | `2.44.0` |
| [aws-partitions](https://github.com/aws/aws-sdk-ruby) | `1.1263.0` | `1.1277.0` |
| [aws-sdk-core](https://github.com/aws/aws-sdk-ruby) | `3.252.0` | `3.254.0` |
| [aws-sdk-kms](https://github.com/aws/aws-sdk-ruby) | `1.129.0` | `1.130.0` |
| [bigdecimal](https://github.com/ruby/bigdecimal) | `3.3.1` | `4.1.2` |
| [concurrent-ruby](https://github.com/ruby-concurrency/concurrent-ruby) | `1.3.7` | `1.3.8` |
| [console](https://github.com/socketry/console) | `1.36.0` | `1.37.0` |
| [io-event](https://github.com/socketry/io-event) | `1.19.1` | `1.19.4` |
| [json](https://github.com/ruby/json) | `2.20.0` | `2.21.2` |
| [sass-embedded](https://github.com/sass-contrib/sass-embedded-host-ruby) | `1.101.0` | `1.102.0` |
| [tilt](https://github.com/jeremyevans/tilt) | `2.7.0` | `2.8.0` |
| [ttfunk](https://github.com/prawnpdf/ttfunk) | `1.8.0` | `1.7.0` |


Updates `aws-sdk-s3` from 1.226.0 to 1.228.1
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `html-proofer` from 5.2.1 to 5.2.2
- [Release notes](https://github.com/gjtorikian/html-proofer/releases)
- [Changelog](https://github.com/gjtorikian/html-proofer/blob/main/CHANGELOG.md)
- [Commits](gjtorikian/html-proofer@v5.2.1...v5.2.2)

Updates `async` from 2.41.0 to 2.44.0
- [Release notes](https://github.com/socketry/async/releases)
- [Changelog](https://github.com/socketry/async/blob/main/releases.md)
- [Commits](socketry/async@v2.41.0...v2.44.0)

Updates `aws-partitions` from 1.1263.0 to 1.1277.0
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-partitions/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `aws-sdk-core` from 3.252.0 to 3.254.0
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-core/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `aws-sdk-kms` from 1.129.0 to 1.130.0
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-kms/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `bigdecimal` from 3.3.1 to 4.1.2
- [Release notes](https://github.com/ruby/bigdecimal/releases)
- [Changelog](https://github.com/ruby/bigdecimal/blob/master/CHANGES.md)
- [Commits](ruby/bigdecimal@v3.3.1...v4.1.2)

Updates `concurrent-ruby` from 1.3.7 to 1.3.8
- [Release notes](https://github.com/ruby-concurrency/concurrent-ruby/releases)
- [Changelog](https://github.com/ruby-concurrency/concurrent-ruby/blob/master/CHANGELOG.md)
- [Commits](ruby-concurrency/concurrent-ruby@v1.3.7...v1.3.8)

Updates `console` from 1.36.0 to 1.37.0
- [Release notes](https://github.com/socketry/console/releases)
- [Changelog](https://github.com/socketry/console/blob/main/releases.md)
- [Commits](socketry/console@v1.36.0...v1.37.0)

Updates `io-event` from 1.19.1 to 1.19.4
- [Release notes](https://github.com/socketry/io-event/releases)
- [Changelog](https://github.com/socketry/io-event/blob/main/releases.md)
- [Commits](socketry/io-event@v1.19.1...v1.19.4)

Updates `json` from 2.20.0 to 2.21.2
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](ruby/json@v2.20.0...v2.21.2)

Updates `sass-embedded` from 1.101.0 to 1.102.0
- [Commits](sass-contrib/sass-embedded-host-ruby@v1.101.0...v1.102.0)

Updates `tilt` from 2.7.0 to 2.8.0
- [Changelog](https://github.com/jeremyevans/tilt/blob/master/CHANGELOG.md)
- [Commits](jeremyevans/tilt@v2.7.0...v2.8.0)

Updates `ttfunk` from 1.8.0 to 1.7.0
- [Release notes](https://github.com/prawnpdf/ttfunk/releases)
- [Changelog](https://github.com/prawnpdf/ttfunk/blob/master/CHANGELOG.md)
- [Commits](prawnpdf/ttfunk@1.8.0...1.7.0)

---
updated-dependencies:
- dependency-name: aws-sdk-s3
  dependency-version: 1.228.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: html-proofer
  dependency-version: 5.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: async
  dependency-version: 2.44.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: aws-partitions
  dependency-version: 1.1277.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: aws-sdk-core
  dependency-version: 3.254.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: aws-sdk-kms
  dependency-version: 1.130.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: bigdecimal
  dependency-version: 4.1.2
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: concurrent-ruby
  dependency-version: 1.3.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: console
  dependency-version: 1.37.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: io-event
  dependency-version: 1.19.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: json
  dependency-version: 2.21.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: sass-embedded
  dependency-version: 1.102.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: tilt
  dependency-version: 2.8.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: ttfunk
  dependency-version: 1.7.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Aug 1, 2026
@chadlwilson
chadlwilson merged commit 4e700c5 into master Aug 1, 2026
1 check passed
@dependabot
dependabot Bot deleted the dependabot/bundler/ruby-deps-521847b0f5 branch August 1, 2026 10:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@chadlwilson