Skip to content

Bump the ruby-minor-patch group across 1 directory with 11 updates #3468

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
dependabot wants to merge 1 commit into from
Closed

Bump the ruby-minor-patch group across 1 directory with 11 updates #3468

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 22, 2025 •
edited
Loading

Bumps the ruby-minor-patch group with 11 updates in the / directory:

Package From To
kamal 2.9.0 2.10.1
thruster 0.1.16 0.1.17
i18n-js 4.2.3 4.2.4
loofah 2.24.1 2.25.0
twilio-ruby 7.8.4 7.9.0
debug 1.11.0 1.11.1
bundler-audit 0.9.2 0.9.3
dotenv-rails 3.1.8 3.2.0
i18n-tasks 1.0.15 1.1.2
selenium-webdriver 4.38.0 4.39.0
faker 3.5.2 3.5.3

Updates kamal from 2.9.0 to 2.10.1

Release notes

Sourced from kamal's releases.

v2.10.1

What's Changed

Full Changelog: basecamp/kamal@v2.10.0...v2.10.1

v2.10.0

What's Changed

New Contributors

Full Changelog: basecamp/kamal@v2.9.0...v2.10.0

Commits
  • 30f8aef Bump version for 2.10.1
  • e744e40 Merge pull request #1738 from basecamp/revert-accessory-volume-change
  • 849faf3 Pass accessory volume through as is
  • f5ec8cb Bump version for 2.10.0
  • 910729c Doc fixes for Kamal 2.10
  • e40731a Merge pull request #1731 from basecamp/boot-parallel-roles
  • 3682280 Boot in parallel for roles on the same host
  • 4ca210c Merge pull request #1730 from basecamp/check-roles-before-removing
  • f86156b Check roles before removing images and directories
  • 40d4d8f Merge pull request #1729 from basecamp/only-set-destination-env-if-there-is-one
  • Additional commits viewable in compare view

Updates thruster from 0.1.16 to 0.1.17

Changelog

Sourced from thruster's changelog.

v0.1.17 / 2025-12-16

  • Mitigate BREACH attacks with random jitter and optional compression guard (#102)
Commits
  • 97dd28d Bump version
  • 5a11890 Merge pull request #107 from basecamp/workflow-fix
  • 0f43f3e Restrict workflow permission
  • ef864ed Merge pull request #106 from basecamp/update-deps
  • 3ea6321 Update Go version & deps
  • 704a825 Merge pull request #105 from basecamp/handler-refactor
  • 6b05f45 Move compression logic into its own middleware
  • b77cccb Refactor middleware naming
  • cccdad8 Merge pull request #102 from basecamp/breach
  • b1e717d Mitigate BREACH attacks with random jitter and optional compression guard
  • Additional commits viewable in compare view

Updates i18n-js from 4.2.3 to 4.2.4

Changelog

Sourced from i18n-js's changelog.

Changelog

Commits

Updates loofah from 2.24.1 to 2.25.0

Release notes

Sourced from loofah's releases.

2.25.0 / 2025-12-15

  • Extract Loofah::HTML5::Scrub.allowed_uri? which operates on a string. Previously this logic was coupled to the parsed tree in .scrub_uri_attribute. #300 @​flavorjones
  • Tightened up how entities and control characters are handled when detecting allowed URIs. #301 @​flavorjones

Full Changelog: flavorjones/loofah@v2.24.1...v2.25.0

Changelog

Sourced from loofah's changelog.

2.25.0 / 2025-12-15

  • Extract Loofah::HTML5::Scrub.allowed_uri? which operates on a string. Previously this logic was coupled to the parsed tree in .scrub_uri_attribute. #300 @​flavorjones
  • Tightened up how entities and control characters are handled when detecting allowed URIs. #301 @​flavorjones
Commits
  • e65bddd version bump to v2.25.0
  • 462c717 doc: update CHANGELOG
  • 75e2f33 Merge pull request #301 from flavorjones/flavorjones/better-allowed-uri-detec...
  • 4addebd Scrub.allowed_uri? better handles entities and control characters
  • f8cdc59 Merge pull request #300 from flavorjones/flavorjones/extract-allowed-uri-method
  • 2721a65 Extract Loofah::HTML5::Scrub.allowed_uri?
  • 887c355 Merge pull request #298 from flavorjones/flavorjones/tests-libxml-2.14
  • c7d9ea3 test: update tests to accept output from libxml 2.14
  • See full diff in compare view

Updates twilio-ruby from 7.8.4 to 7.9.0

Release notes

Sourced from twilio-ruby's releases.

7.9.0

Release Notes

Library - Chore

Library - Fix

Trunking

  • Corrected the type used for phone number capabilities when accessed through a Trunk. (breaking change)
  • Corrected the type used for phone number capabilities when accessed through a Trunk. (breaking change)

Trusthub

  • Added new parameters in in toll-free initialize api payload.
  • Remove the invalid status transition to Draft from the examples
  • Change the value of email to a valid one in the examples.

Docs

7.8.8

Release Notes

Library - Fix

Api

  • Add twiml_session resource for calls
  • Add twiml_session resource for calls

Monitor

  • Update default output properties

Trusthub

  • Added customer_profile_sid in toll-free initialize api payload.

Docs

7.8.7

Release Notes

Memory

  • Memory API Changes

  • Added initial Memory API endpoints with darkseagreen badge status

... (truncated)

Changelog

Sourced from twilio-ruby's changelog.

[2025-12-17] Version 7.9.0

Library - Chore

Library - Fix

Trunking

  • Corrected the type used for phone number capabilities when accessed through a Trunk. (breaking change)
  • Corrected the type used for phone number capabilities when accessed through a Trunk. (breaking change)

Trusthub

  • Added new parameters in in toll-free initialize api payload.
  • Remove the invalid status transition to Draft from the examples
  • Change the value of email to a valid one in the examples.

[2025-12-03] Version 7.8.8

Library - Fix

Api

  • Add twiml_session resource for calls
  • Add twiml_session resource for calls

Monitor

  • Update default output properties

Trusthub

  • Added customer_profile_sid in toll-free initialize api payload.

[2025-11-20] Version 7.8.7

Memory

  • Memory API Changes

  • Added initial Memory API endpoints with darkseagreen badge status

[2025-11-11] Version 7.8.6

Twiml

  • Add new noun <ConversationRelaySession>
  • Add support for <Recording> noun under <Start> verb

... (truncated)

Commits
  • 074031f Release 7.9.0
  • 9bb851c [Librarian] Regenerated @ ed54b4c8e0cb1a9c046256a32f0d793bc1999424 70b7e9f9f6...
  • 5b1e453 chore: Patch support method (#771)
  • 4d6cb7a chore: Support all status codes for delete (#766)
  • e5e456b fix: bug fix (#770)
  • 02504d9 chore: URL query percent encoded (#769)
  • 53fbaca Release 7.8.8
  • a3e145d [Librarian] Regenerated @ 86e712bb98e901aebd01edb01085d4f2becccd4c 8aaa875542...
  • bd17551 fix: Regional API domain processing (#765)
  • 8cabe11 Release 7.8.7
  • Additional commits viewable in compare view

Updates debug from 1.11.0 to 1.11.1

Release notes

Sourced from debug's releases.

v1.11.1

What's Changed

New Contributors

Full Changelog: ruby/debug@v1.11.0...v1.11.1

Commits
  • bad4d38 v1.11.1
  • 88d762c FileUtils is needed
  • 553373a omit on older version
  • c1c1c8e use Kernel.__callee__
  • 24f95d6 catch up 4.0.0 backtrace change
  • bc97d33 add a test for b path: ...
  • 1139d78 support b path: path_expr
  • 06342cd catch any exception on singletonclass
  • 2791573 fix(DAP): Return unverified breakpoints instead of unsuccessful response
  • 14c8a54 Update imemo_mask to match ruby's
  • See full diff in compare view

Updates bundler-audit from 0.9.2 to 0.9.3

Release notes

Sourced from bundler-audit's releases.

0.9.3

  • Officially support Ruby 3.4, 3.5, and 4.0.
  • Added support for Bundler 4.x.
  • Fixed typos in API documentation.

CLI

  • Ensure that the bundler-audit check command honors the BUNDLER_AUDIT_DB environment variable.
Changelog

Sourced from bundler-audit's changelog.

0.9.3 / 2025-11-28

  • Officially support Ruby 3.4, 3.5, and 4.0.
  • Added support for Bundler 4.x.
  • Fixed typos in API documentation.

CLI

  • Ensure that the bundler-audit check command honors the BUNDLER_AUDIT_DB environment variable.
Commits
  • f8b06eb Updated the ChangeLog for 0.9.3.
  • e4fb10a Version bump to 0.9.3.
  • 34cd522 Added Ruby 4.0 to the CI matrix.
  • 22da9d7 Added Ruby 3.5 to the CI matrix.
  • 0c2afaf Require rubygems-tasks ~> 0.3 for Ruby 3.5 and 4.0.
  • 309d203 Allow using bundler 4.x
  • d40dc75 Remove syntax highlighting from example output.
  • 91a912f Be consistent and only use markdown code fences.
  • fc1bc0a Fixed typo in @return tag.
  • 276e065 Update RubyGems in GitHub Actions CI (#406)
  • Additional commits viewable in compare view

Updates dotenv-rails from 3.1.8 to 3.2.0

Release notes

Sourced from dotenv-rails's releases.

v3.2.0

What's Changed

New Contributors

Full Changelog: bkeepers/dotenv@v3.1.8...v3.2.0

Commits
  • 34156bf Prepare for 3.2.0 release
  • ab47820 Merge pull request #531 from grosser/grosser/warn
  • fae6120 Merge branch 'main' into grosser/warn
  • 4f510f4 Merge pull request #532 from grosser/grosser/fixes
  • 959e1da Merge pull request #539 from bkeepers/dependabot/github_actions/actions/check...
  • 041451e Update spec message
  • b300f26 Bump actions/checkout from 4 to 6
  • 5f4ca01 Merge branch 'main' into grosser/warn
  • 209dca4 Merge pull request #540 from i7an/handle-parentheses
  • 48c4956 Merge branch 'main' into handle-parentheses
  • Additional commits viewable in compare view

Updates i18n-tasks from 1.0.15 to 1.1.2

Release notes

Sourced from i18n-tasks's releases.

v1.1.2

What's Changed

Full Changelog: glebm/i18n-tasks@v1.1.1...v1.1.2

v1.1.1

  • Prism: Fixes translate calls on non-I18n receivers being processed.
  • Prism: Adds candidate keys for model_name.human and human_attribute_name.
    • Event.human_attribute_name(:title) will now match activerecord.attributes.event.title or attributes.title.
  • Prism: Candidate keys were not added to the used_tree.
  • Works around a concurrency bug by reverting to serial scanning.

Full Changelog: glebm/i18n-tasks@v1.1.0...v1.1.1

v1.1.0

  • Dropping support for Ruby < 3.1 #631
  • OpenAI translator now uses language names instead of locale codes. #630
  • Renames RubyAstScanner to RubyScanner (deprecated RubyAstScanner name).
  • Adds Prism as a dependency.
  • Merges PrismScanner into RubyScanner, now configured with:
search:
  prism: "rails"

to use the Prism scanner with more Rails support and

search:
  prism: "ruby"

to use the Prism Scanner without Rails support.

  • Implements ERB-scanner using Prism, activated with same config as above.
    • The Prism-based scanner handles comments differently vs the whitequark/parser-based scanner does.
    • The usage will be for the magic comment line instead of the subsequent line.
    • This should not affect the results of the CLI tasks.
  • Loads environment variables via dotenv if available. #395
  • Adds CLI command check-prism to try the new parser out and see the differences in key detection.
  • The Prism-based scanner supports candidate_keys for Rails translations, allowing relative translations in controllers to match either the key scoped to controller and action or only to the controller.
  • Translation services now catch errors and save partial results #642
  • Prism: Skips translations form cyclic calls instead of throwing error.
  • Adds own client for Google Translate instead of easy_translate gem.

New Contributors

... (truncated)

Changelog

Sourced from i18n-tasks's changelog.

v1.1.2

  • Prism: Missing require 'prism' in the scanners fixed.

v1.1.1

  • Prism: Fixes translate calls on non-I18n receivers being processed. (glebm/i18n-tasks#684)
  • Prism: Adds candidate keys for model_name.human and human_attribute_name. (glebm/i18n-tasks#684)
    • Event.human_attribute_name(:title) will now match activerecord.attributes.event.title or attributes.title.
  • Prism: Candidate keys were not added to the used_tree. (glebm/i18n-tasks#684)
  • Works around a concurrency bug by reverting to serial scanning. (glebm/i18n-tasks#687)

v1.1.0

  • Dropping support for Ruby < 3.1 #631
  • OpenAI translator now uses language names instead of locale codes. #630
  • Renames RubyAstScanner to RubyScanner (deprecated RubyAstScanner name).
  • Adds Prism as a dependency.
  • Merges PrismScanner into RubyScanner, now configured with:
search:
  prism: "rails"

to use the Prism scanner with more Rails support and

search:
  prism: "ruby"

to use the Prism Scanner without Rails support.

  • Implements ERB-scanner using Prism, activated with same config as above.
    • The Prism-based scanner handles comments differently vs the whitequark/parser-based scanner does.
    • The usage will be for the magic comment line instead of the subsequent line.
    • This should not affect the results of the CLI tasks.
  • Loads environment variables via dotenv if available. #395
  • Adds CLI command check-prism to try the new parser out and see the differences in key detection.
  • The Prism-based scanner supports candidate_keys for Rails translations, allowing relative translations in controllers to match either the key scoped to controller and action or only to the controller.
  • Translation services now catch errors and save partial results #642
  • Prism: Skips translations form cyclic calls instead of throwing error.
  • Adds own client for Google Translate instead of easy_translate gem.
Commits
  • 9e174db Bump to v1.1.2
  • 62ef674 Adds require 'prism' to scanners using Prism
  • 48d3095 Bump to v1.1.1
  • 6b67f06 Prism: Candidate keys and parser fixes (#684)
  • 06e3479 ScannerMultiplexer: Removes concurrency due to bug
  • f1a2b3f chore(deps): bump actions/checkout from 5 to 6 (#686)
  • f0c62e9 Gemfile: Removes bundler, rbx and byebug (#685)
  • 4e0564c Bump to v1.1.0
  • 6e743f9 Google translate: Adds own API implementation (#681)
  • a51e667 Prism: model_name.human handles more count values
  • Additional commits viewable in compare view

Updates selenium-webdriver from 4.38.0 to 4.39.0

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.39.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

... (truncated)

Changelog

Sourced from selenium-webdriver's changelog.

4.39.0 (2025-12-06)

  • Add CDP for Chrome 143 and remove 140
Commits
  • 126f156 [build] Prepare for release of Selenium 4.39.0 (#16672)
  • 080c81f fix flaky Ruby test devtools_spec.rb
  • d6ed112 Revert "[rb] add mutable and immutable record objects to manage serialization"
  • 9f20834 [rb] add mutable and immutable record objects to manage serialization
  • 9829448 bump versions to nightly
  • See full diff in compare view

Updates faker from 3.5.2 to 3.5.3

Release notes

Sourced from faker's releases.

v3.5.3

v3.5.3 (2025-12-02)

Wishing you a cozy and calm Holiday season ☃️

This version adds and improves some locales, fixes some bugs, and deprecates some generators.

Thanks to all contributors!

Deprecated generators

Improvements & Bug Fixes

Chores

Update local dependencies

New Contributors

... (truncated)

Changelog

Sourced from faker's changelog.

v3.5.3 (2025-12-02)

Wishing you a cozy and calm Holiday season ☃️

This version adds and improves some locales, fixes some bugs, and deprecates some generators.

Thanks to all contributors!

Deprecated generators

Improvements & Bug Fixes

@dependabot
Bump the ruby-minor-patch group across 1 directory with 11 updates
96bcce0 
Bumps the ruby-minor-patch group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [kamal](https://github.com/basecamp/kamal) | `2.9.0` | `2.10.1` |
| [thruster](https://github.com/basecamp/thruster) | `0.1.16` | `0.1.17` |
| [i18n-js](https://github.com/fnando/i18n-js) | `4.2.3` | `4.2.4` |
| [loofah](https://github.com/flavorjones/loofah) | `2.24.1` | `2.25.0` |
| [twilio-ruby](https://github.com/twilio/twilio-ruby) | `7.8.4` | `7.9.0` |
| [debug](https://github.com/ruby/debug) | `1.11.0` | `1.11.1` |
| [bundler-audit](https://github.com/rubysec/bundler-audit) | `0.9.2` | `0.9.3` |
| [dotenv-rails](https://github.com/bkeepers/dotenv) | `3.1.8` | `3.2.0` |
| [i18n-tasks](https://github.com/glebm/i18n-tasks) | `1.0.15` | `1.1.2` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.38.0` | `4.39.0` |
| [faker](https://github.com/faker-ruby/faker) | `3.5.2` | `3.5.3` |



Updates `kamal` from 2.9.0 to 2.10.1
- [Release notes](https://github.com/basecamp/kamal/releases)
- [Commits](basecamp/kamal@v2.9.0...v2.10.1)

Updates `thruster` from 0.1.16 to 0.1.17
- [Changelog](https://github.com/basecamp/thruster/blob/main/CHANGELOG.md)
- [Commits](basecamp/thruster@v0.1.16...v0.1.17)

Updates `i18n-js` from 4.2.3 to 4.2.4
- [Changelog](https://github.com/fnando/i18n-js/blob/main/CHANGELOG.md)
- [Commits](fnando/i18n-js@v4.2.3...v4.2.4)

Updates `loofah` from 2.24.1 to 2.25.0
- [Release notes](https://github.com/flavorjones/loofah/releases)
- [Changelog](https://github.com/flavorjones/loofah/blob/main/CHANGELOG.md)
- [Commits](flavorjones/loofah@v2.24.1...v2.25.0)

Updates `twilio-ruby` from 7.8.4 to 7.9.0
- [Release notes](https://github.com/twilio/twilio-ruby/releases)
- [Changelog](https://github.com/twilio/twilio-ruby/blob/main/CHANGES.md)
- [Commits](twilio/twilio-ruby@7.8.4...7.9.0)

Updates `debug` from 1.11.0 to 1.11.1
- [Release notes](https://github.com/ruby/debug/releases)
- [Commits](ruby/debug@v1.11.0...v1.11.1)

Updates `bundler-audit` from 0.9.2 to 0.9.3
- [Release notes](https://github.com/rubysec/bundler-audit/releases)
- [Changelog](https://github.com/rubysec/bundler-audit/blob/master/ChangeLog.md)
- [Commits](rubysec/bundler-audit@v0.9.2...v0.9.3)

Updates `dotenv-rails` from 3.1.8 to 3.2.0
- [Release notes](https://github.com/bkeepers/dotenv/releases)
- [Changelog](https://github.com/bkeepers/dotenv/blob/main/Changelog.md)
- [Commits](bkeepers/dotenv@v3.1.8...v3.2.0)

Updates `i18n-tasks` from 1.0.15 to 1.1.2
- [Release notes](https://github.com/glebm/i18n-tasks/releases)
- [Changelog](https://github.com/glebm/i18n-tasks/blob/main/CHANGES.md)
- [Commits](glebm/i18n-tasks@v1.0.15...v1.1.2)

Updates `selenium-webdriver` from 4.38.0 to 4.39.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](SeleniumHQ/selenium@selenium-4.38.0...selenium-4.39.0)

Updates `faker` from 3.5.2 to 3.5.3
- [Release notes](https://github.com/faker-ruby/faker/releases)
- [Changelog](https://github.com/faker-ruby/faker/blob/main/CHANGELOG.md)
- [Commits](faker-ruby/faker@v3.5.2...v3.5.3)

---
updated-dependencies:
- dependency-name: kamal
  dependency-version: 2.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-patch
- dependency-name: thruster
  dependency-version: 0.1.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-minor-patch
- dependency-name: i18n-js
  dependency-version: 4.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-minor-patch
- dependency-name: loofah
  dependency-version: 2.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-patch
- dependency-name: twilio-ruby
  dependency-version: 7.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-patch
- dependency-name: debug
  dependency-version: 1.11.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-minor-patch
- dependency-name: bundler-audit
  dependency-version: 0.9.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-minor-patch
- dependency-name: dotenv-rails
  dependency-version: 3.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-patch
- dependency-name: i18n-tasks
  dependency-version: 1.1.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-patch
- dependency-name: selenium-webdriver
  dependency-version: 4.39.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-patch
- dependency-name: faker
  dependency-version: 3.5.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 22, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 29, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 29, 2025
@dependabot dependabot bot deleted the dependabot/bundler/ruby-minor-patch-fbc0173416 branch December 29, 2025 20:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant