Skip to content

Bump the bundler-dependencies group across 1 directory with 12 updates - #3064

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/bundler-dependencies-06f9615cba
Open

Bump the bundler-dependencies group across 1 directory with 12 updates#3064
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/bundler-dependencies-06f9615cba

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the bundler-dependencies group with 8 updates in the / directory:

Package From To
faker 3.6.1 3.8.0
globalid 1.3.0 1.4.0
image_processing 2.0.2 2.0.3
sentry-rails 6.5.0 6.7.0
standard 1.54.0 1.56.0
selenium-webdriver 4.41.0 4.47.0
timecop 0.9.10 0.9.11
webmock 3.26.2 3.26.3

Updates faker from 3.6.1 to 3.8.0

Release notes

Sourced from faker's releases.

v3.8.0

Changes

Enabling lazy load

This version introduces lazy loading. It means users will only pay for what they use. Faker loads 2x faster when it's enabled.

Lazy loading the generators is disabled by default. To enable it, choose one of the configuration options below:

1 - Set lazy load as a Faker Config

Faker::Config.lazy_loading = true

2 - Set lazy load as an environment variable

FAKER_LAZY_LOAD = 1

We hope you get to see the improvement by enabling it. Please file a bug report for any issues!

Thanks to @​jeremyevans for the mentoring, and to @​thdaraujo for pairing and code reviews.

Full Changelog: faker-ruby/faker@v3.7.1...v3.8.0

v3.7.1

Thanks to all contributors!

Drops support for Ruby 3.1

What's changed

Update development dependencies

New Contributors

Full Changelog: faker-ruby/faker@v3.6.1...v3.7.1

Changelog

Sourced from faker's changelog.

v3.8.0 (2026-04-16)

Enabling lazy load

This version introduces lazy loading. It means users will only pay for what they use. Faker loads 2x faster when it's enabled.

Lazy loading the generators is disabled by default. To enable it, choose one of the configuration options below:

1 - Set lazy load as a Faker Config

Faker::Config.lazy_loading = true

2 - Set lazy load as an environment variable

FAKER_LAZY_LOAD = 1

We hope you get to see the improvement by enabling it. Please file a bug report for any issues!

Thanks to @​jeremyevans for the mentoring, and to @​thdaraujo for pairing and code reviews.

Full Changelog: faker-ruby/faker@v3.7.1...v3.8.0

v3.7.1 (2026-04-14)

Thanks to all contributors!

Drops support for Ruby 3.1

What's changed

Update development dependencies

New Contributors

... (truncated)

Commits

Updates globalid from 1.3.0 to 1.4.0

Release notes

Sourced from globalid's releases.

v1.4.0

What's Changed

New Contributors

Full Changelog: rails/globalid@v1.3.0...v1.4.0

Commits
  • c81267b Release 1.4.0
  • ce280b7 Frozen string literals
  • 9325789 Merge pull request #203 from xijo/support_model_class_override_for_custom_loc...
  • 241657b Allow custom locators to override model class derivation
  • dc5bc56 Merge pull request #204 from paulRbr/dont-constantize-model-when-not-needed
  • 2649897 Don't try to constantize GID's class too soon
  • 018ccf1 Merge pull request #202 from Drowze/swappable-uri-parser
  • 0f2efb5 Change the underlying URI parser (from RFC2396 to RFC3986)
  • 4fd30dd Merge pull request #206 from rosa/fetch
  • 948503f Add GlobalID::Locator.fetch with distinct not-found and unavailable errors
  • Additional commits viewable in compare view

Updates image_processing from 2.0.2 to 2.0.3

Changelog

Sourced from image_processing's changelog.

2.0.3 (2026-06-08)

  • Prevent remote code execution when operation names come from user input, closing bypasses through the #operation meta-builder, #method_missing, and nested #send calls (reported by @​szymonsec)

  • [minimagick] Prevent remote code execution through unsafe public methods (e.g. #instance_eval, #send) passed as loader/saver option names

Commits

Updates sentry-rails from 6.5.0 to 6.7.0

Changelog

Sourced from sentry-rails's changelog.

6.7.0

New Features ✨

Bug Fixes 🐛

Rails

Other

  • (test) Kill threaded global workers before clearing Sentry globals by @​solnic in #2990
  • Isolate inherited hubs under hub_isolation_level = :fiber by @​SeanLF in #3036

Internal Changes 🔧

6.6.2

Bug Fixes 🐛

6.6.1

Bug Fixes 🐛

6.6.0

New Features ✨

  • (yabeda) Add sentry-yabeda adapter gem by @​dingsdax in #2925

    There's a new sentry-yabeda gem that integrates Sentry Metrics with Yabeda. Add the new gem to your Gemfile:

    gem "sentry-yabeda"

... (truncated)

Commits
  • c39c42d release: 6.7.0
  • 0121462 ci: 🤖 Update pinned CI lockfiles (#3045)
  • 9278dd4 fix(rails): guard execution context with send_default_pii (#3043)
  • 5abda56 ci: 🤖 Update pinned CI lockfiles (#3040)
  • d739a8d fix(rails): ensure Rails.error.set_context is not lost (#3024)
  • 395aca9 chore(rails): AJ tracing convention compliance (#3031)
  • b02a915 ci: 🤖 Update pinned CI lockfiles (#3027)
  • 9f70c7a fix(active_job): Consumer span op should be queue.process (#3021)
  • 3ddf4a9 feat(rails): support for solid queue (#2942)
  • 7ab412f feat: add config.hub_isolation_level for fiber-safe hub storage (Falcon/async...
  • Additional commits viewable in compare view

Updates sentry-ruby from 6.5.0 to 6.7.0

Changelog

Sourced from sentry-ruby's changelog.

6.7.0

New Features ✨

Bug Fixes 🐛

Rails

Other

  • (test) Kill threaded global workers before clearing Sentry globals by @​solnic in #2990
  • Isolate inherited hubs under hub_isolation_level = :fiber by @​SeanLF in #3036

Internal Changes 🔧

6.6.2

Bug Fixes 🐛

6.6.1

Bug Fixes 🐛

6.6.0

New Features ✨

  • (yabeda) Add sentry-yabeda adapter gem by @​dingsdax in #2925

    There's a new sentry-yabeda gem that integrates Sentry Metrics with Yabeda. Add the new gem to your Gemfile:

    gem "sentry-yabeda"

... (truncated)

Commits
  • c39c42d release: 6.7.0
  • 0121462 ci: 🤖 Update pinned CI lockfiles (#3045)
  • 5abda56 ci: 🤖 Update pinned CI lockfiles (#3040)
  • e89d3bc fix: isolate inherited hubs under hub_isolation_level = :fiber (#3036)
  • 395aca9 chore(rails): AJ tracing convention compliance (#3031)
  • b02a915 ci: 🤖 Update pinned CI lockfiles (#3027)
  • d405668 fix: correct Scope extra parameter typo (#3023)
  • 3ddf4a9 feat(rails): support for solid queue (#2942)
  • 7ab412f feat: add config.hub_isolation_level for fiber-safe hub storage (Falcon/async...
  • b625f46 ci: 🤖 Update pinned CI lockfiles (#3019)
  • Additional commits viewable in compare view

Updates standard from 1.54.0 to 1.56.0

Changelog

Sourced from standard's changelog.

1.56.0

1.55.0

Commits
  • d695ba0 🏆⚽️ v1.56.0
  • 86a92fa Merge pull request #823 from standardrb/upgrade-2026-07-15
  • dfcaef8 Fixes Parallel's overzealous update
  • 5e68710 Updates rubocop to 1.88
  • 95f959b Merge pull request #822 from standardrb/dependabot/bundler/ruby-lsp-0.26.10
  • 42c9d35 Bump ruby-lsp from 0.26.9 to 0.26.10
  • 79cd977 Merge pull request #818 from standardrb/dependabot/bundler/language_server-pr...
  • 3011204 Bump language_server-protocol from 3.17.0.5 to 3.17.0.6
  • 505e8e6 Merge pull request #797 from standardrb/dependabot/bundler/ruby-lsp-0.26.9
  • af5498a Merge pull request #816 from standardrb/dependabot/github_actions/step-securi...
  • Additional commits viewable in compare view

Updates selenium-webdriver from 4.41.0 to 4.47.0

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.47.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

... (truncated)

Changelog

Sourced from selenium-webdriver's changelog.

4.47.0 (2026-08-10)

  • Support CDP versions: v149, v150, v151
  • support WebDriver BiDi on Safari Preview and move #bidi onto Driver (#17729)
  • link generated BiDi elements to their spec definitions (#17781)
  • add objectOnly/preserveExtras/scalar-primitive BiDi schema signals (#17784)
  • construct the BiDi transport inside the domain from a connection (#17796)
  • route BiDiBridge navigation through the generated Protocol::BrowsingContext (#17785)
  • resolve spec runfiles via Bazel::Runfiles (#17810)
  • [build] standardize generated-file license and not to edit markers across generators (#17816)
  • validate nullable-constant BiDi params outbound (#17818)
  • [build] upgrade rules_ruby to 0.28.0 and drop vendored Bazel::Runfiles workaround (#17824)
  • [build] Merge vendor cddl files into shared BiDi schema and implement custom Firefox webExtension options (#17840)
  • [grid] honor client-advertised se:remoteUrl for reachable BiDi/CDP/VNC URLs (#17790)
  • tolerate and warn on missing required inbound BiDi fields, with SE_BIDI_STRICT to escalate (#17844)
  • remove deprecated FTP proxy support (#17846)
  • prevent CDP access with Firefox (#17849)
  • test matchers assert log entries by id and optional messages and match severity (#17848)
  • [bidi] Correct float/enum type fidelity in the shared schema and validate primitives outbound in Ruby (#17852)
  • [bidi] mark BiDi types extensible per spec and update Ruby handling (#17853)
  • raise typed WebDriver errors for BiDi from a generated error-code map (#17855)
  • allow pending test guards to require matching provided exception (#17859)
  • pass --enable-chrome-logs unless CHROME_LOG_FILE is set (#17858)
  • support custom vendor specific capabilities in options classes (#17862)
  • validate BiDi outbound ref fields against their declared type (#17861)
  • generate BiDi domain type accessors and union variant factories (#17865)
  • deprecate invalid Firefox profile code (#17871)
  • [build] Automated Browser Version Update with CDP (#17873)

4.46.0 (2026-07-10)

  • Support CDP versions: v148, v149, v150
  • trim whitespace around NO_PROXY entries (#17565)
  • add ClientConfig for HTTP client customization (#17699)
  • generate the BiDi protocol layer from the shared binding-neutral schema (#17731)

4.45.0 (2026-06-15)

  • Support CDP versions: v147, v148, v149
  • deprecate curb http client support (#17443)
  • move Ruby bindings to use typescript get attribute atom (#17524)
  • Move atoms to use the typescript versions (#17532)
  • deprecate Chromium Profile classes (#17557)
  • update bazel test tags (#17558)
  • separate concerns between Service, DriverFinder, and Options (#17564)
  • fix using environment variables to set drivers (#17571)
  • create more obvious test guard keywords as aliases (#17636)

4.44.0 (2026-05-12)

... (truncated)

Commits
  • 9175ed9 [build] Prepare for release of selenium-4.47.0 (#17896)
  • a25afbb [build] Automated Browser Version Update with CDP (#17873)
  • 960abd2 [dotnet][java][js][rb] deprecate invalid Firefox profile code (#17871)
  • 5b1cde1 [rb] generate BiDi domain type accessors and union variant factories (#17865)
  • 014d72b [rb] fix tests and custom matchers to work with SE_DEBUG (#17863)
  • e0658c9 [rb] validate BiDi outbound ref fields against their declared type (#17861)
  • 0ad0c51 [rb] support custom vendor specific capabilities in options classes (#17862)
  • 10eeb94 [dotnet][java][py][rb] pass --enable-chrome-logs unless CHROME_LOG_FILE is se...
  • 4c6f3a5 [rb] allow pending test guards to require matching provided exception (#17859)
  • 89ad5bb [rb] raise typed WebDriver errors for BiDi from a generated error-code map (#...
  • Additional commits viewable in compare view

Updates timecop from 0.9.10 to 0.9.11

Changelog

Sourced from timecop's changelog.

v0.9.11

  • Fix Time.new keyword arguments on JRuby 10 (#443)
  • Fix time-only DateTime.parse (HH:MM format) incorrectly using host clock under freeze (#440)
  • Require Ruby >= 2.1.0 (#423)
  • Revert travel_offset precision change (#430)
Commits
  • b3c9a5a get ready for our next release 0.9.11 (#444)
  • 4e84492 Fix Time.new keyword arguments on JRuby 10 (#443)
  • b06405e (434) strptime_with_mock_date :: Fix year boundary (#437)
  • bb4a3c1 Fix time-only DateTime.parse under freeze (#440)
  • e4bba8c Improve and fix CI (#439)
  • d695c6f Require Ruby >= 2.1.0 (#423)
  • ce3e6bb Revert "Calculate travel_offset to align with the precision of argument to Ti...
  • 477ce9a add ruby 3.3 to ci matrix (#429)
  • e05c2c0 Calculate travel_offset to align with the precision of argument to Timecop.tr...
  • See full diff in compare view

Updates webmock from 3.26.2 to 3.26.3

Release notes

Sourced from webmock's releases.

3.26.3

  • Confirm to work with curb 1.3.7

    Thanks to Josch Bockler

  • Fix NameError in async-http adapter on protocol-http1 >= 0.40

    Thanks to Leslie Hoare

Changelog

Sourced from webmock's changelog.

3.26.3

  • Confirm to work with curb 1.3.7

    Thanks to Josch Bockler

  • Fix NameError in async-http adapter on protocol-http1 >= 0.40

    Thanks to Leslie Hoare

Commits
  • ee409ac Version 3.26.3
  • 2c976d5 Merge pull request #1127 from jbockler/curb-1.3
  • 5b40155 Confirm to work with curb 1.3.7
  • f685e7e Merge pull request #1130 from lesleh/fix-async-http-status-description
  • a50557e Fix NameError in async-http adapter on protocol-http1 >= 0.40
  • See full diff in compare view

Updates actionpack from 8.1.3 to 8.1.3.1

Release notes

Sourced from actionpack's releases.

8.1.3.1

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • No changes.

Action Pack

  • No changes.

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

  • No changes.

Active Storage

  • Disable libvips's unfuzzed image loaders and savers.

    libvips flags some of its loaders and savers as "unfuzzed" or "untrusted", meaning they are only safe for trusted content. Active Storage will call Vips.block_untrusted(true) to disable them while booting. An application that needs a specific loader or saver may re-enable it in an initializer.

... (truncated)

Changelog

Sourced from actionpack's changelog.

Rails 8.1.3.1 (July 29, 2026)

  • No changes.
Commits

Updates actionview from 8.1.3 to 8.1.3.1

Release notes

Sourced from actionview's releases.

8.1.3.1

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • No changes.

Action Pack

  • No changes.

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

  • No changes.

Active Storage

  • Disable libvips's unfuzzed image loaders and savers.

    libvips flags some of its loaders and savers as "unfuzzed" or "untrusted", meaning they are only safe for trusted content. Active Storage will call Vips.block_untrusted(true) to disable them while booting. An application that needs a specific loader or saver may re-enable it in an initializer.

... (truncated)

Changelog

Sourced from actionview's changelog.

Rails 8.1.3.1 (July 29, 2026)

  • No changes.
Commits

Updates activerecord from 8.1.3 to 8.1.3.1

Release notes

Sourced from activerecord's releases.

8.1.3.1

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • No changes.

Action Pack

  • No changes.

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

  • No changes.

Active Storage

  • Disable libvips's unfuzzed image loaders and savers.

    libvips flags some of its loaders and savers as "unfuzzed" or "untrusted", meaning they are only safe for trusted content. Active Storage will call Vips.block_untrusted(true) to disable them while booting. An application that needs a specific loader or saver may re-enable it in an initializer.

... (truncated)

Changelog

Sourced from activerecord's changelog.

Rails 8.1.3.1 (July 29, 2026)

  • No changes.
Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
selenium-webdriver [< 4.10, > 4.9.0]
selenium-webdriver [>= 4.11.a, < 4.12]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major v...

Description has been truncated

@dependabot
Bump the bundler-dependencies group across 1 directory with 12 updates
b8b3289 
Bumps the bundler-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [faker](https://github.com/faker-ruby/faker) | `3.6.1` | `3.8.0` |
| [globalid](https://github.com/rails/globalid) | `1.3.0` | `1.4.0` |
| [image_processing](https://github.com/janko/image_processing) | `2.0.2` | `2.0.3` |
| [sentry-rails](https://github.com/getsentry/sentry-ruby) | `6.5.0` | `6.7.0` |
| [standard](https://github.com/standardrb/standard) | `1.54.0` | `1.56.0` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.41.0` | `4.47.0` |
| [timecop](https://github.com/travisjeffery/timecop) | `0.9.10` | `0.9.11` |
| [webmock](https://github.com/bblimke/webmock) | `3.26.2` | `3.26.3` |



Updates `faker` from 3.6.1 to 3.8.0
- [Release notes](https://github.com/faker-ruby/faker/releases)
- [Changelog](https://github.com/faker-ruby/faker/blob/main/CHANGELOG.md)
- [Commits](faker-ruby/faker@v3.6.1...v3.8.0)

Updates `globalid` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/rails/globalid/releases)
- [Commits](rails/globalid@v1.3.0...v1.4.0)

Updates `image_processing` from 2.0.2 to 2.0.3
- [Changelog](https://github.com/janko/image_processing/blob/master/CHANGELOG.md)
- [Commits](janko/image_processing@v2.0.2...v2.0.3)

Updates `sentry-rails` from 6.5.0 to 6.7.0
- [Release notes](https://github.com/getsentry/sentry-ruby/releases)
- [Changelog](https://github.com/getsentry/sentry-ruby/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-ruby@6.5.0...6.7.0)

Updates `sentry-ruby` from 6.5.0 to 6.7.0
- [Release notes](https://github.com/getsentry/sentry-ruby/releases)
- [Changelog](https://github.com/getsentry/sentry-ruby/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-ruby@6.5.0...6.7.0)

Updates `standard` from 1.54.0 to 1.56.0
- [Release notes](https://github.com/standardrb/standard/releases)
- [Changelog](https://github.com/standardrb/standard/blob/main/CHANGELOG.md)
- [Commits](standardrb/standard@v1.54.0...v1.56.0)

Updates `selenium-webdriver` from 4.41.0 to 4.47.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](SeleniumHQ/selenium@selenium-4.41.0...selenium-4.47.0)

Updates `timecop` from 0.9.10 to 0.9.11
- [Changelog](https://github.com/travisjeffery/timecop/blob/master/History.md)
- [Commits](travisjeffery/timecop@v0.9.10...v0.9.11)

Updates `webmock` from 3.26.2 to 3.26.3
- [Release notes](https://github.com/bblimke/webmock/releases)
- [Changelog](https://github.com/bblimke/webmock/blob/master/CHANGELOG.md)
- [Commits](bblimke/webmock@v3.26.2...v3.26.3)

Updates `actionpack` from 8.1.3 to 8.1.3.1
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.3.1/actionpack/CHANGELOG.md)
- [Commits](rails/rails@v8.1.3...v8.1.3.1)

Updates `actionview` from 8.1.3 to 8.1.3.1
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.3.1/actionview/CHANGELOG.md)
- [Commits](rails/rails@v8.1.3...v8.1.3.1)

Updates `activerecord` from 8.1.3 to 8.1.3.1
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.3.1/activerecord/CHANGELOG.md)
- [Commits](rails/rails@v8.1.3...v8.1.3.1)

---
updated-dependencies:
- dependency-name: faker
  dependency-version: 3.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: globalid
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: image_processing
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: sentry-rails
  dependency-version: 6.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: sentry-ruby
  dependency-version: 6.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: standard
  dependency-version: 1.56.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: selenium-webdriver
  dependency-version: 4.47.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: timecop
  dependency-version: 0.9.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: webmock
  dependency-version: 3.26.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: actionpack
  dependency-version: 8.1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: actionview
  dependency-version: 8.1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: activerecord
  dependency-version: 8.1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies changes or issues relating to a dependency ruby Pull requests that update Ruby code labels Aug 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies changes or issues relating to a dependency ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants