Bump the ruby-dependencies group with 3 updates

[dependabot]

Bumps the ruby-dependencies group with 3 updates: brakeman, web-console and pagy.

Updates brakeman from 8.0.2 to 8.0.4

Release notes

Sourced from brakeman's releases.

8.0.3

• Add release age option for --ensure-latest (#1989)
• Fix polymorphic_name SQLi false positive (Fredrico Franco)
• Fix logger behavior when loading config files (#2009)
• Handle application names with module prefixes (#2011)

Changelog

Sourced from brakeman's changelog.

8.0.4 - 2026-02-26

• Load 'date' library for --ensure-latest

8.0.3 - 2026-02-26

• Fix polymorphic_name SQLi false positive (Fredrico Franco)
• Fix logger behavior when loading config files
• Handle application names with module prefixes
• Add release age option for --ensure-latest

Commits

• 2e55d45 Bump to 8.0.4
• d6c6c9a Merge pull request #2016 from presidentbeef/fix-ensure-latest-date
• 56f9324 Load 'date' for --ensure-latest
• 8b644a6 Bump to 8.0.3
• 08e0a18 Update CHANGES
• a29fe44 Merge pull request #2014 from FFederi/fix-polymorphic-name-false-positive
• 61150cf Fix polymorphic_name false positive
• f65d077 Merge pull request #2013 from presidentbeef/better_logger_loading_options
• c5dcda5 Fix logger behavior when loading config files
• c1d7ccc Merge pull request #2012 from presidentbeef/handle_application_config_better
• Additional commits viewable in compare view

Updates web-console from 4.2.1 to 4.3.0

Release notes

Sourced from web-console's releases.

v4.3.0

What's Changed

• Drop unused dependency on activemodel by @​sambostock in rails/web-console#336
• Use × as close button instead of letter X by @​luiscobot in rails/web-console#338
• Always permit IPv4-mapped IPv6 loopback addresses by @​zunda in rails/web-console#342
• Fix CI by @​fatkodima in rails/web-console#345
• Fix compatiblity with latest rails by @​fatkodima in rails/web-console#344

Changelog

Sourced from web-console's changelog.

4.3.0

• #342 Always permit IPv4-mapped IPv6 loopback addresses ([@​zunda]).
• Fixed Rails 8.2.0.alpha support
• Drop Rails 7.2 support
• Drop Ruby 3.1 support

Commits

• 90e3474 Release 4.3.0
• bdbb391 Merge pull request #344 from fatkodima/fix-filter-proxies
• 950462c Fix compatiblity with latest rails
• c1f9252 Merge pull request #345 from fatkodima/fix-ci
• 6bc7159 Fix CI
• 859bc60 Merge pull request #342 from zunda/bind-on-ipv6
• c66460a Always permit IPv4-mapped IPv6 loopback addresses
• f3d437c Merge pull request #338 from luiscobot/patch-1
• 5383121 replace close icon with ×
• 9a5c089 Merge pull request #336 from sambostock/drop-active-model
• Additional commits viewable in compare view

Updates pagy from 43.3.0 to 43.3.1

Release notes

Sourced from pagy's releases.

Version 43.3.1

Changes in 43.3.1

• Update assets for a few apps
• Fix pagy.ts /.js input_nav update

CHANGELOG

Version 43

We needed a leap version to unequivocally signal that it's not just a major version: it's a complete redesign of the legacy code at all levels, usage and API included.

Why 43? Because it's exactly one step beyond "The answer to the ultimate question of life, the Universe, and everything." 😉

Improvements

This version introduces several enhancements, such as new :countish and :keynav_js paginators and improved automation and configuration processes, reducing setup requirements by 99%. The update also includes a simpler API and new interactive development tools, making it a comprehensive upgrade from previous versions.

• New :countish Paginator
  • Faster than OFFSET and supporting the full UI
• New Keynav Pagination
  • The pagy-exclusive technique using the fastest keyset pagination alongside all frontend helpers.
• New interactive dev-tools
  • New PagyWand to integrate the pagy CSS with your app themes.
  • New Pagy AI available right inside your own app.
• Intelligent automation
  • Configuration requirements reduced by 99%.
  • Simplified JavaScript setup.
  • Automatic I18n loading.
• Simpler API
  • You solely need the pagy method and the @​pagy instance to paginate any collection and use any navigation tag and helper.
  • Methods are autoloaded only if used, and consume no memory otherwise.
  • Methods have narrower scopes and can be overridden without deep knowledge.
• New documentation
  • Very concise, straightforward, and easy to navigate and understand.

Upgrade to 43

See the Upgrade Guide

Changelog

Sourced from pagy's changelog.

Version 43.3.1

• Update assets for a few apps
• Fix pagy.ts /.js input_nav update

Commits

• 39b2be5 Merge branch 'dev'
• debc98c Version 43.3.1
• 8c4c5b3 Update gems
• 0655d3e Update RM run configurations
• e8acc65 Improve docs
• 61aa160 Parallelize e2e tests
• a100906 💎 Update assets for a few apps
• aa74bda Refactor e2e testing:
• 69533c3 Refactor PagyApp:
• bd839fd Add minitest-reporter and improve backatrace readability
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions