Skip to content

Bump the bundler group with 19 updates#1388

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bundler/bundler-56b48bc8cd
Open

Bump the bundler group with 19 updates#1388
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bundler/bundler-56b48bc8cd

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps the bundler group with 19 updates:

Package From To
activeadmin 3.5.0 3.5.1
aws-sdk-s3 1.216.0 1.220.0
bootsnap 1.23.0 1.24.1
flipper 1.4.0 1.4.1
flipper-active_record 1.4.0 1.4.1
flipper-ui 1.4.0 1.4.1
good_job 4.13.3 4.18.2
newrelic_rpm 10.2.0 10.4.0
pagy 43.4.2 43.5.3
puma 7.2.0 8.0.1
strong_migrations 2.5.2 2.7.0
faker 3.6.1 3.8.0
rails_best_practices 1.23.3 1.23.4
rubocop 1.85.1 1.86.1
rubocop-capybara 2.22.1 2.23.0
parallel_tests 5.6.0 5.7.0
prosopite 2.1.2 2.2.0
rspec-openapi 0.25.0 0.25.1
selenium-webdriver 4.41.0 4.43.0

Updates activeadmin from 3.5.0 to 3.5.1

Release notes

Sourced from activeadmin's releases.

v3.5.1

What's Changed

Full Changelog: activeadmin/activeadmin@v3.5.0...v3.5.1

Commits

Updates aws-sdk-s3 from 1.216.0 to 1.220.0

Changelog

Sourced from aws-sdk-s3's changelog.

1.220.0 (2026-04-22)

  • Feature - This release adds five additional checksum algorithms for S3 data integrity (MD5, SHA-512, XXHash3, XXHash64, XXHash128) and support for S3 Inventory on directory buckets (S3 Express One Zone).

1.219.0 (2026-04-07)

  • Feature - Updated list of the valid AWS Region values for the LocationConstraint parameter for general purpose buckets.

1.218.0 (2026-03-31)

  • Feature - Add Bucket Metrics configuration support to directory buckets

1.217.1 (2026-03-30)

  • Issue - Fix require_https_for_sse_cpk option being ignored; the HTTPS enforcement for SSE-CPK operations now correctly respects the configured value, allowing it to be disabled for local development.

1.217.0 (2026-03-18)

  • Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.
Commits

Updates bootsnap from 1.23.0 to 1.24.1

Release notes

Sourced from bootsnap's releases.

v1.24.1

What's Changed

  • Fix encoding of Ruby source files loaded when BOOTSNAP_READONLY is set. Files would incorectly be loaded in ASCII-8BIT causing literal strings outside the pure ASCII range to have ASCII-8BIT encoding instead of UTF-8. This bug was introduced in 1.24.0.

Full Changelog: rails/bootsnap@v1.24.0...v1.24.1

v1.24.0

What's Changed

  • Added a hook API to customize Ruby compilation.

Full Changelog: rails/bootsnap@v1.23.0...v1.24.0

Changelog

Sourced from bootsnap's changelog.

1.24.1

  • Fix encoding of Ruby source files loaded when BOOTSNAP_READONLY is set. Files would incorectly be loaded in ASCII-8BIT causing literal strings outside the pure ASCII range to have ASCII-8BIT encoding instead of UTF-8. This bug was introduced in 1.24.0.

1.24.0

  • Added a hook API to customize Ruby compilation.
Commits
  • 51ccecc Release 1.24.1
  • e4479c0 Merge pull request #538 from byroot/debug-compiler-encoding
  • d6d8768 Fix ISeq.input_to_output to respect default external encoding
  • dc57c20 Release 1.24.0
  • 481b9b9 Avoid interning string on every call
  • 81e6db4 Merge pull request #535 from byroot/compilation-backends
  • 320ca02 Allow to substitute the Ruby compiler
  • See full diff in compare view

Updates flipper from 1.4.0 to 1.4.1

Release notes

Sourced from flipper's releases.

v1.4.1

What's Changed

Full Changelog: flippercloud/flipper@v1.4.0...v1.4.1

Commits
  • bc8e58d Bump version to 1.4.1
  • 5e9e096 Merge pull request #987 from flippercloud/claude/youthful-hugle
  • 603b770 Skip ETag header on cache_bust to prevent stale webhook syncs
  • 7f4daa5 Merge pull request #982 from flippercloud/strict-adapter-sync-mode
  • 7621476 Add sync mode bypass to Strict adapter
  • 7e6ce79 Note to purge release URLs after releasing
  • b7ffde3 Add Superset workspace support to scripts
  • 04215f7 Merge pull request #979 from flippercloud/worktree-wild-watching-cloud
  • ca399d9 Fix poller thread cleanup for test stability
  • 640f32f Clean up disable_fully_enable review feedback
  • Additional commits viewable in compare view

Updates flipper-active_record from 1.4.0 to 1.4.1

Release notes

Sourced from flipper-active_record's releases.

v1.4.1

What's Changed

Full Changelog: flippercloud/flipper@v1.4.0...v1.4.1

Commits
  • bc8e58d Bump version to 1.4.1
  • 5e9e096 Merge pull request #987 from flippercloud/claude/youthful-hugle
  • 603b770 Skip ETag header on cache_bust to prevent stale webhook syncs
  • 7f4daa5 Merge pull request #982 from flippercloud/strict-adapter-sync-mode
  • 7621476 Add sync mode bypass to Strict adapter
  • 7e6ce79 Note to purge release URLs after releasing
  • b7ffde3 Add Superset workspace support to scripts
  • 04215f7 Merge pull request #979 from flippercloud/worktree-wild-watching-cloud
  • ca399d9 Fix poller thread cleanup for test stability
  • 640f32f Clean up disable_fully_enable review feedback
  • Additional commits viewable in compare view

Updates flipper-ui from 1.4.0 to 1.4.1

Release notes

Sourced from flipper-ui's releases.

v1.4.1

What's Changed

Full Changelog: flippercloud/flipper@v1.4.0...v1.4.1

Commits
  • bc8e58d Bump version to 1.4.1
  • 5e9e096 Merge pull request #987 from flippercloud/claude/youthful-hugle
  • 603b770 Skip ETag header on cache_bust to prevent stale webhook syncs
  • 7f4daa5 Merge pull request #982 from flippercloud/strict-adapter-sync-mode
  • 7621476 Add sync mode bypass to Strict adapter
  • 7e6ce79 Note to purge release URLs after releasing
  • b7ffde3 Add Superset workspace support to scripts
  • 04215f7 Merge pull request #979 from flippercloud/worktree-wild-watching-cloud
  • ca399d9 Fix poller thread cleanup for test stability
  • 640f32f Clean up disable_fully_enable review feedback
  • Additional commits viewable in compare view

Updates good_job from 4.13.3 to 4.18.2

Release notes

Sourced from good_job's releases.

v4.18.2

Review the Changelog for more details.

What's Changed

Full Changelog: bensheldon/good_job@v4.18.1...v4.18.2

v4.18.1

Review the Changelog for more details.

What's Changed

Full Changelog: bensheldon/good_job@v4.18.0...v4.18.1

v4.18.0

Review the Changelog for more details.

New features

Small changes and fixes

Full Changelog: bensheldon/good_job@v4.17.0...v4.18.0

v4.17.0

Review the Changelog for more details.

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from good_job's changelog.

v4.18.2 (2026-04-20)

Full Changelog

Implemented enhancements:

  • Add dashboard indexes for queue_name, created_at, and discarded jobs #1754 (AliOsm)

Fixed bugs:

  • ArgumentError: GoodJob::Job(...) is not an ActiveRecord::Relation #1759
  • Fix ArgumentError when using perform_throttle without a label #1760 (bensheldon)

Merged pull requests:

  • Speed up succeeded count via complement subtraction #1758 (AliOsm)
  • Speed up ScheduledByQueueChart with inner-query pushdown and (scheduled_at, queue_name) index #1757 (AliOsm)

v4.18.1 (2026-04-18)

Full Changelog

Implemented enhancements:

  • Add an ActiveJob extension for throttling #315

Fixed bugs:

  • Make job lifecycle methods lock-strategy-aware #1756 (bensheldon)
  • Fix concurrent PG connection access in ProcessHeartbeat#refresh_process #1755 (bensheldon)

Closed issues:

  • Job stuck in queued state and never picked up #1590
  • Refactor the Notifier to be more of a generic Reactor #811

v4.18.0 (2026-04-17)

Full Changelog

Implemented enhancements:

  • Make bulk action buttons responsive to job state filter #1751 (bensheldon)
  • Introduce GoodJob::InterruptedError string for interrupted execution records #1750 (bensheldon)
  • Add GoodJob.handled_exceptions config; include NotImplementedError by default #1748 (bensheldon)
  • Allow adding the currently executing job to a batch #1746 (bensheldon)
  • Show split enabled/paused badge for cron schedules in navbar #1744 (bensheldon)

Fixed bugs:

... (truncated)

Commits
  • 6637ecc Release good_job v4.18.2
  • 04779eb Fix ArgumentError when using perform_throttle without a label (#1760)
  • f795b9c Speed up succeeded count via complement subtraction (#1758)
  • b3996b3 Speed up ScheduledByQueueChart with inner-query pushdown and (scheduled_at, q...
  • 26620ce Add dashboard indexes for queue_name, created_at, and discarded jobs (#1754)
  • 18f743e Release good_job v4.18.1
  • c212c18 Make job lifecycle methods lock-strategy-aware (#1756)
  • 99c2bfa Fix concurrent PG connection access in ProcessHeartbeat#refresh_process (#1755)
  • cdf7369 Release good_job v4.18.0
  • 0bab557 Replace AR attributes API with explicit accessors; add breaking migration spe...
  • Additional commits viewable in compare view

Updates newrelic_rpm from 10.2.0 to 10.4.0

Changelog

Sourced from newrelic_rpm's changelog.

v10.4.0

  • Feature: Add Rails.event instrumentation for structured logging

    The agent now supports Rails.event as structured log events. When enabled, events published via Rails.event.notify are captured and forwarded to New Relic as log events. Event payloads, tags, context, timestamps, and source locations are automatically captured as log attributes.

    This instrumentation can be configured with the following options:

    • instrumentation.rails_event_logger - Controls whether Rails.event instrumentation is enabled. Defaults to use the value of application_logging.enabled.
    • instrumentation.rails_event_logger.event_names - An array of specific event names to capture. When empty (default), all Rails.event notifications are captured. Use this to filter events by name, for example: ['user.signup', 'payment.processed'].

    PR#3526

  • Feature: Add instrumentation for Rails Active Job Continuations

    The agent now instruments Rails Active Job Continuations, providing visibility into individual step execution within long-running jobs. Step names are included in segment metrics (e.g., Ruby/ActiveJob/default/MyJob/step/process_records) and step-specific attributes like cursor position, resumed status, and interrupted status are captured. A new configuration option, disable_active_job_step_names, allows users to exclude step names from metric names to reduce metric cardinality if needed (defaults to false). PR#3493

  • Feature: Add sidekiq.separate_transactions configuration option

    A new configuration option, sidekiq.separate_transactions, allows Sidekiq jobs executed during a web transaction to run in their own separate transaction. When enabled, this prevents Sidekiq job execution time from being included in web transaction metrics, providing more accurate performance data. The feature is opt-in (default: false) to maintain backward compatibility. This only affects jobs executed during active web transactions; jobs starting independently or nested within other background jobs are unaffected. Issue#3364 PR#3514

  • Bugfix: Update regexes that may have been vulnerable to ReDOS attacks

    Previously, the agent had a few regexes identified as possible targets for polynomial time complexity (ReDOS) attacks. Those regexes are now updated to address the concerns. PR#3520

  • Bugfix: Prevent crashes during HTTPX segment creation

    Previously, if start_external_request_segment encountered an error and returned nil, the agent would trigger a NoMethodError when attempting to add headers to the missing segment. We've added a guard check to ensure the instrumentation handles these cases gracefully.

    Bravo to @​thebravoman for the report! Issue#3509 PR#3510

  • Bugfix: Make Transaction#finish idempotent

    Previously, if the Transaction#finish method was called multiple times, more than one transaction could be created for the same operation. Now, a mutex protects calls to Transaction#finish to make sure finish operations only run once. PR#3513

  • Bugfix: Log deprecation warning for Datastores.wrap API once

    Previously, this warning was being logged on every call to Datastores.wrap. Now, it will be logged only on the first call. In addition, the documentation has been updated to note the deprecated status of the second and third callback arguments. Issue#3516 PR#3519

v10.3.0

  • Feature: Add database query naming via SQL comments

    Database queries can now be explicitly named using SQL comments. Queries can include /* NewRelicQueryName: CustomName */ comments to assign stable names for better tracking and identification. This is especially useful for tracking specific database queries during performance regressions or incidents. PR#3480

  • Feature: Add Semantic Logger instrumentation

    The agent now supports Semantic Logger log forwarding and decoration for the semantic_logger gem versions 4.6.0+. If you were previously using Semantic Logger's built-in New Relic appender, it is recommended to choose one approach to avoid sending duplicate logs. New Relic's Semantic Logger instrumentation can be disabled by setting instrumentation.semantic_logger to disabled. PR#3467

    Thanks to @​jdelStrother for providing valuable feedback that helped shape this instrumentation.

... (truncated)

Commits
  • 0f1fe8f Merge pull request #3532 from newrelic/prerelease_updates_10.4.0-pre
  • f34a083 bump version
  • 8299519 Merge pull request #3526 from newrelic/rails81_structured_events
  • ae8a80c Merge pull request #3514 from newrelic/sidekiq-separate-transactions
  • d906750 update wording
  • 8e3bba9 Merge branch 'dev' into sidekiq-separate-transactions
  • 813d972 Merge branch 'dev' into rails81_structured_events
  • 08f1f5a Merge pull request #3493 from newrelic/rails_81_activejob_continuations
  • 2f01487 add more tests
  • cc22111 Merge branch 'dev' into rails_81_activejob_continuations
  • Additional commits viewable in compare view

Updates pagy from 43.4.2 to 43.5.3

Release notes

Sourced from pagy's releases.

Version 43.5.3

Changes in 43.5.3

  • Autoload series, a_lambda and page_label
  • Add Hungarian localization file for Pagy (#896)

CHANGELOG

Version 43

We needed a leap version to unequivocally signal that it's not just a major version: it's a complete redesign of the legacy code at all levels, usage and API included.

Why 43? Because it's exactly one step beyond "The answer to the ultimate question of life, the Universe, and everything." 😉

Improvements

This version introduces several enhancements, such as new :countish and :keynav_js paginators and improved automation and configuration processes, reducing setup requirements by 99%. The update also includes a simpler API and new interactive development tools, making it a comprehensive upgrade from previous versions.

  • New :countish Paginator
    • Faster than OFFSET and supporting the full UI
  • New Keynav Pagination
    • The pagy-exclusive technique using the fastest keyset pagination alongside all frontend helpers.
  • New interactive dev-tools
    • New PagyWand to integrate the pagy CSS with your app themes.
    • New Pagy AI available right inside your own app.
  • Intelligent automation
  • Simpler API
    • You solely need the pagy method and the @​pagy instance to paginate any collection and use any navigation tag and helper.
    • Methods are autoloaded only if used, and consume no memory otherwise.
    • Methods have narrower scopes and can be overridden without deep knowledge.
  • New documentation
    • Very concise, straightforward, and easy to navigate and understand.

Upgrade to 43

See the Upgrade Guide

... (truncated)

Changelog

Sourced from pagy's changelog.

Version 43.5.3

  • Autoload series, a_lambda and page_label
  • Add Hungarian localization file for Pagy (#896)

Version 43.5.2

  • Add type validation for page and limit keys type (close #895)
  • Simplify series_nav_js removing "pagy-rjs" CSS class (Fix #894)

Version 43.5.1

  • Remove ghost code from cli; improve tests

Version 43.5.0

  • Update javascripts according to es-linting
  • Update min ruby version to 3.3 (remove EOL 3.2)
  • Implement the NEW pagy/next entrypoint to run the NEXT version now
  • Refactor deprecations:
    • Deprecated :client_max_limit in favor of :max_limit; moved code into deprecation.rb
    • Move deprecated options out of class code, to keep the code clean
  • Remove RBS resources. Not worth the maintenance effort.

Version 43.4.4

  • Make typecasting in Keyset based classes safer and more efficient

Version 43.4.3

  • Deprecate the :max_pages option (close #890)
Commits

Updates puma from 7.2.0 to 8.0.1

Release notes

Sourced from puma's releases.

v8.0.1

  • Bugfixes

    • Fix prune_bundler stripping user-configured BUNDLE_* env vars (e.g. BUNDLE_WITHOUT) on re-exec, which caused workers to crash on boot (#3929)

  • Performance

    • Use blocks for debug logging to avoid creating log messages when debug is disabled (#3920)

  • Docs

    • Fix incorrect hook names in gRPC docs (#3923)
    • Reword v8 upgrade guide IPv6 bullet for clarity (#3928)

v8.0.0 - Into the Arena

Read our Version 8 Upgrade Guide.

  • Features

    • Add env["puma.mark_as_io_bound"] API and max_io_threads config to allow IO-bound requests to exceed the thread pool max, enabling better handling of mixed workloads (#3816, #3894)
    • Add single and cluster DSL hooks for mode-specific configuration (#3621)
    • Add on_force option to shutdown_debug to only dump thread backtraces on forced (non-graceful) shutdown (#3671)
    • Add API to dynamically update min and max thread counts at runtime via update_thread_pool_min_max and ServerPluginControl (#3658)
    • Use SIGPWR for thread backtrace dumps on Linux/JRuby where SIGINFO is unavailable (#3829)

  • Bugfixes

    • Fix phased restart for fork_worker to avoid forking from stale worker 0 when it has been replaced (#3853)

  • Performance

    • JRuby HTTP parser improvements: pre-allocated header keys, perfect hash lookup, reduced memory copies (#3838)
    • Cache downcased header key in str_headers to avoid redundant String#downcase calls, reducing allocations by ~50% per response (#3874)

  • Refactor

    • Collect env processing into dedicated client_env.rb module (#3582)
    • Move event to default configuration (#3872)

  • Docs

    • Add gRPC guide for configuring gRPC lifecycle hooks in clustered mode (#3885)
    • Add 7.0 upgrade guide, move 5.0/6.0 upgrade guides to docs directory (#3900)
    • Correct default values for persistent_timeout and worker_boot_timeout in DSL docs (#3912)
    • Add file descriptor limit warning in test helper for contributors (#3893)

  • Breaking changes

    • Default production bind address changed from 0.0.0.0 to :: (IPv6) when a non-loopback IPv6 interface is available; falls back to 0.0.0.0 if IPv6 is unavailable (#3847)
Changelog

Sourced from puma's changelog.

8.0.1 / 2026-04-27

  • Bugfixes

    • Fix prune_bundler stripping user-configured BUNDLE_* env vars (e.g. BUNDLE_WITHOUT) on re-exec, which caused workers to crash on boot (#3929)

  • Performance

    • Use blocks for debug logging to avoid creating log messages when debug is disabled (#3920)

  • Docs

    • Fix incorrect hook names in gRPC docs (#3923)
    • Reword v8 upgrade guide IPv6 bullet for clarity (#3928)

8.0.0 / 2026-03-27

  • Features

    • Add env["puma.mark_as_io_bound"] API and max_io_threads config to allow IO-bound requests to exceed the thread pool max, enabling better handling of mixed workloads (#3816, #3894)
    • Add single and cluster DSL hooks for mode-specific configuration (#3621)
    • Add on_force option to shutdown_debug to only dump thread backtraces on forced (non-graceful) shutdown (#3671)
    • Add API to dynamically update min and max thread counts at runtime via update_thread_pool_min_max and ServerPluginControl (#3658)
    • Use SIGPWR for thread backtrace dumps on Linux/JRuby where SIGINFO is unavailable (#3829)

  • Bugfixes

    • Fix phased restart for fork_worker to avoid forking from stale worker 0 when it has been replaced (#3853)

  • Performance

    • JRuby HTTP parser improvements: pre-allocated header keys, perfect hash lookup, reduced memory copies (#3838)
    • Cache downcased header key in str_headers to avoid redundant String#downcase calls, reducing allocations by ~50% per response (#3874)

  • Refactor

    • Collect env processing into dedicated client_env.rb module (#3582)
    • Move event to default configuration (#3872)

  • Docs

    • Add gRPC guide for configuring gRPC lifecycle hooks in clustered mode (#3885)
    • Add 7.0 upgrade guide, move 5.0/6.0 upgrade guides to docs directory (#3900)
    • Correct default values for persistent_timeout and worker_boot_timeout in DSL docs (#3912)
    • Add file descriptor limit warning in test helper for contributors (#3893)

  • Breaking changes

    • Default production bind address changed from 0.0.0.0 to :: (IPv6) when a non-loopback IPv6 interface is available; falls back to 0.0.0.0 if IPv6 is unavailable (#3847)
Commits
  • cee7e61 Release v8.0.1 (#3932)
  • f955caf Fix prune_bundler stripping user-configured BUNDLE_* env vars on re-exec (#3929)
  • 97996aa ci: test_error_logger.rb - fix TruffleRuby error (#3930)
  • 03825bc Build(deps): Bump actions/github-script from 8 to 9 (#3925)
  • 053efae Reword v8 upgrade guide ipv6 bullet (#3928)
  • b19f35a Fix incorrect hook names in gRPC docs (#3923)
  • eeabe4b Use blocks for debug logging to avoid creating messages if debug disabled (#3...
  • 08f63d4 Release v8.0.0 (#3914)
  • 7406cc1 Fix IPv4-mapped IPv6 addresses in REMOTE_ADDR and request logs (#3916)
  • e090243 Build(deps): Bump actions/checkout from 4 to 6 (#3915)
  • Additional commits viewable in compare view

Updates strong_migrations from 2.5.2 to 2.7.0

Changelog

Sourced from strong_migrations's changelog.

2.7.0 (2026-04-25)

  • Added check for add_foreign_key with MySQL and MariaDB
  • Added check for add_column with callable default value with MySQL and MariaDB

2.6.0 (2026-04-07)

  • Added check for algorithm: :copy with MySQL and MariaDB
  • Added check for lock: :shared and lock: :exclusive with MySQL and MariaDB
  • Dropped support for Ruby < 3.3 and Active Record < 7.2
Commits
  • 2e8bc96 Version bump to 2.7.0 [skip ci]
  • 6c55ccb Updated test style to match error message
  • 1fe1b87 Updated readme style to match error message [skip ci]
  • a8fcfcb Updated style [skip ci]
  • 1f4ee37 Moved comment [skip ci]
  • 693f832 Updated skip comment [skip ci]
  • 7354f82 Improved error message for callable default values
  • c2b3494 Improved error message for callable default values
  • 15b6a55 Removed comment that applies to Postgres < 11 [skip ci]
  • c9a2a29 Improved error message
  • Additional commits viewable in compare view

Updates faker from 3.6.1 to 3.8.0

Release notes

Sourced from faker's releases.

v3.8.0

Changes

Enabling lazy load

This version introduces lazy loading. It means users will only pay for what they use. Faker loads 2x faster when it's enabled.

Lazy loading the generators is disabled by default. To enable it, choose one of the configuration options below:

1 - Set lazy load as a Faker Config

Faker::Config.lazy_loading = true

2 - Set lazy load as an environment variable

FAKER_LAZY_LOAD = 1

We hope you get to see the improvement by enabling it. Please file a bug report for any issues!

Thanks to @​jeremyevans for the mentoring, and to @​thdaraujo for pairing and code reviews.

Full Changelog: faker-ruby/faker@v3.7.1...v3.8.0

v3.7.1

Thanks to all contributors!

Drops support for Ruby 3.1

What's changed

Update development dependencies

New Contributors

Full Changelog: faker-ruby/faker@v3.6.1...v3.7.1

Changelog

Sourced from faker's changelog.

v3.8.0 (2026-04-16)

Enabling lazy load

This version introduces lazy loading. It means users will only pay for what they use. Faker loads 2x faster when it's enabled.

Lazy...

Description has been truncated

@dependabot
Bump the bundler group with 19 updates
c9376f5 
Bumps the bundler group with 19 updates:

| Package | From | To |
| --- | --- | --- |
| [activeadmin](https://github.com/activeadmin/activeadmin) | `3.5.0` | `3.5.1` |
| [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) | `1.216.0` | `1.220.0` |
| [bootsnap](https://github.com/rails/bootsnap) | `1.23.0` | `1.24.1` |
| [flipper](https://github.com/flippercloud/flipper) | `1.4.0` | `1.4.1` |
| [flipper-active_record](https://github.com/flippercloud/flipper) | `1.4.0` | `1.4.1` |
| [flipper-ui](https://github.com/flippercloud/flipper) | `1.4.0` | `1.4.1` |
| [good_job](https://github.com/bensheldon/good_job) | `4.13.3` | `4.18.2` |
| [newrelic_rpm](https://github.com/newrelic/newrelic-ruby-agent) | `10.2.0` | `10.4.0` |
| [pagy](https://github.com/ddnexus/pagy) | `43.4.2` | `43.5.3` |
| [puma](https://github.com/puma/puma) | `7.2.0` | `8.0.1` |
| [strong_migrations](https://github.com/ankane/strong_migrations) | `2.5.2` | `2.7.0` |
| [faker](https://github.com/faker-ruby/faker) | `3.6.1` | `3.8.0` |
| [rails_best_practices](https://github.com/flyerhzm/rails_best_practices) | `1.23.3` | `1.23.4` |
| [rubocop](https://github.com/rubocop/rubocop) | `1.85.1` | `1.86.1` |
| [rubocop-capybara](https://github.com/rubocop/rubocop-capybara) | `2.22.1` | `2.23.0` |
| [parallel_tests](https://github.com/grosser/parallel_tests) | `5.6.0` | `5.7.0` |
| [prosopite](https://github.com/charkost/prosopite) | `2.1.2` | `2.2.0` |
| [rspec-openapi](https://github.com/exoego/rspec-openapi) | `0.25.0` | `0.25.1` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.41.0` | `4.43.0` |


Updates `activeadmin` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/activeadmin/activeadmin/releases)
- [Changelog](https://github.com/activeadmin/activeadmin/blob/master/CHANGELOG.md)
- [Commits](activeadmin/activeadmin@v3.5.0...v3.5.1)

Updates `aws-sdk-s3` from 1.216.0 to 1.220.0
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `bootsnap` from 1.23.0 to 1.24.1
- [Release notes](https://github.com/rails/bootsnap/releases)
- [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md)
- [Commits](rails/bootsnap@v1.23.0...v1.24.1)

Updates `flipper` from 1.4.0 to 1.4.1
- [Release notes](https://github.com/flippercloud/flipper/releases)
- [Changelog](https://github.com/flippercloud/flipper/blob/main/Changelog.md)
- [Commits](flippercloud/flipper@v1.4.0...v1.4.1)

Updates `flipper-active_record` from 1.4.0 to 1.4.1
- [Release notes](https://github.com/flippercloud/flipper/releases)
- [Changelog](https://github.com/flippercloud/flipper/blob/main/Changelog.md)
- [Commits](flippercloud/flipper@v1.4.0...v1.4.1)

Updates `flipper-ui` from 1.4.0 to 1.4.1
- [Release notes](https://github.com/flippercloud/flipper/releases)
- [Changelog](https://github.com/flippercloud/flipper/blob/main/Changelog.md)
- [Commits](flippercloud/flipper@v1.4.0...v1.4.1)

Updates `good_job` from 4.13.3 to 4.18.2
- [Release notes](https://github.com/bensheldon/good_job/releases)
- [Changelog](https://github.com/bensheldon/good_job/blob/main/CHANGELOG.md)
- [Commits](bensheldon/good_job@v4.13.3...v4.18.2)

Updates `newrelic_rpm` from 10.2.0 to 10.4.0
- [Release notes](https://github.com/newrelic/newrelic-ruby-agent/releases)
- [Changelog](https://github.com/newrelic/newrelic-ruby-agent/blob/dev/CHANGELOG.md)
- [Commits](newrelic/newrelic-ruby-agent@10.2.0...10.4.0)

Updates `pagy` from 43.4.2 to 43.5.3
- [Release notes](https://github.com/ddnexus/pagy/releases)
- [Changelog](https://github.com/ddnexus/pagy/blob/master/docs/CHANGELOG.md)
- [Commits](ddnexus/pagy@43.4.2...43.5.3)

Updates `puma` from 7.2.0 to 8.0.1
- [Release notes](https://github.com/puma/puma/releases)
- [Changelog](https://github.com/puma/puma/blob/main/History.md)
- [Commits](puma/puma@v7.2.0...v8.0.1)

Updates `strong_migrations` from 2.5.2 to 2.7.0
- [Changelog](https://github.com/ankane/strong_migrations/blob/master/CHANGELOG.md)
- [Commits](ankane/strong_migrations@v2.5.2...v2.7.0)

Updates `faker` from 3.6.1 to 3.8.0
- [Release notes](https://github.com/faker-ruby/faker/releases)
- [Changelog](https://github.com/faker-ruby/faker/blob/main/CHANGELOG.md)
- [Commits](faker-ruby/faker@v3.6.1...v3.8.0)

Updates `rails_best_practices` from 1.23.3 to 1.23.4
- [Changelog](https://github.com/flyerhzm/rails_best_practices/blob/main/CHANGELOG.md)
- [Commits](flyerhzm/rails_best_practices@v1.23.3...v1.23.4)

Updates `rubocop` from 1.85.1 to 1.86.1
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.85.1...v1.86.1)

Updates `rubocop-capybara` from 2.22.1 to 2.23.0
- [Release notes](https://github.com/rubocop/rubocop-capybara/releases)
- [Changelog](https://github.com/rubocop/rubocop-capybara/blob/main/CHANGELOG.md)
- [Commits](rubocop/rubocop-capybara@v2.22.1...v2.23.0)

Updates `parallel_tests` from 5.6.0 to 5.7.0
- [Changelog](https://github.com/grosser/parallel_tests/blob/master/CHANGELOG.md)
- [Commits](grosser/parallel_tests@v5.6.0...v5.7.0)

Updates `prosopite` from 2.1.2 to 2.2.0
- [Release notes](https://github.com/charkost/prosopite/releases)
- [Commits](charkost/prosopite@2.1.2...2.2.0)

Updates `rspec-openapi` from 0.25.0 to 0.25.1
- [Release notes](https://github.com/exoego/rspec-openapi/releases)
- [Changelog](https://github.com/exoego/rspec-openapi/blob/master/CHANGELOG.md)
- [Commits](exoego/rspec-openapi@v0.25.0...v0.25.1)

Updates `selenium-webdriver` from 4.41.0 to 4.43.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](SeleniumHQ/selenium@selenium-4.41.0...selenium-4.43.0)

---
updated-dependencies:
- dependency-name: activeadmin
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: aws-sdk-s3
  dependency-version: 1.220.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: bootsnap
  dependency-version: 1.24.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: flipper
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: flipper-active_record
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: flipper-ui
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: good_job
  dependency-version: 4.18.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: newrelic_rpm
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: pagy
  dependency-version: 43.5.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: puma
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: bundler
- dependency-name: strong_migrations
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: faker
  dependency-version: 3.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: rails_best_practices
  dependency-version: 1.23.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: rubocop
  dependency-version: 1.86.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: rubocop-capybara
  dependency-version: 2.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: parallel_tests
  dependency-version: 5.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: prosopite
  dependency-version: 2.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: rspec-openapi
  dependency-version: 0.25.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: selenium-webdriver
  dependency-version: 4.43.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels May 4, 2026
This was referenced May 4, 2026
Closed
Closed
Closed
Closed
Closed
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented May 4, 2026

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants