Skip to content

Bump the bundler-dependencies group across 1 directory with 11 updates - #3071

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/bundler-dependencies-7c551666ee
Open

Bump the bundler-dependencies group across 1 directory with 11 updates#3071
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/bundler-dependencies-7c551666ee

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the bundler-dependencies group with 11 updates in the / directory:

Package From To
faker 3.6.1 3.8.0
globalid 1.3.0 1.4.0
image_processing 2.0.2 2.2.0
pg 1.6.3 1.7.0
standard 1.54.0 1.56.0
selenium-webdriver 4.41.0 4.50.0
timecop 0.9.10 0.9.11
webmock 3.26.2 3.26.4
actionpack 8.1.3 8.1.4
actionview 8.1.3 8.1.4
activerecord 8.1.3 8.1.4

Updates faker from 3.6.1 to 3.8.0

Release notes

Sourced from faker's releases.

v3.8.0

Changes

Enabling lazy load

This version introduces lazy loading. It means users will only pay for what they use. Faker loads 2x faster when it's enabled.

Lazy loading the generators is disabled by default. To enable it, choose one of the configuration options below:

1 - Set lazy load as a Faker Config

Faker::Config.lazy_loading = true

2 - Set lazy load as an environment variable

FAKER_LAZY_LOAD = 1

We hope you get to see the improvement by enabling it. Please file a bug report for any issues!

Thanks to @​jeremyevans for the mentoring, and to @​thdaraujo for pairing and code reviews.

Full Changelog: faker-ruby/faker@v3.7.1...v3.8.0

v3.7.1

Thanks to all contributors!

Drops support for Ruby 3.1

What's changed

Update development dependencies

New Contributors

Full Changelog: faker-ruby/faker@v3.6.1...v3.7.1

Changelog

Sourced from faker's changelog.

v3.8.0 (2026-04-16)

Enabling lazy load

This version introduces lazy loading. It means users will only pay for what they use. Faker loads 2x faster when it's enabled.

Lazy loading the generators is disabled by default. To enable it, choose one of the configuration options below:

1 - Set lazy load as a Faker Config

Faker::Config.lazy_loading = true

2 - Set lazy load as an environment variable

FAKER_LAZY_LOAD = 1

We hope you get to see the improvement by enabling it. Please file a bug report for any issues!

Thanks to @​jeremyevans for the mentoring, and to @​thdaraujo for pairing and code reviews.

Full Changelog: faker-ruby/faker@v3.7.1...v3.8.0

v3.7.1 (2026-04-14)

Thanks to all contributors!

Drops support for Ruby 3.1

What's changed

Update development dependencies

New Contributors

... (truncated)

Commits

Updates globalid from 1.3.0 to 1.4.0

Release notes

Sourced from globalid's releases.

v1.4.0

What's Changed

New Contributors

Full Changelog: rails/globalid@v1.3.0...v1.4.0

Commits
  • c81267b Release 1.4.0
  • ce280b7 Frozen string literals
  • 9325789 Merge pull request #203 from xijo/support_model_class_override_for_custom_loc...
  • 241657b Allow custom locators to override model class derivation
  • dc5bc56 Merge pull request #204 from paulRbr/dont-constantize-model-when-not-needed
  • 2649897 Don't try to constantize GID's class too soon
  • 018ccf1 Merge pull request #202 from Drowze/swappable-uri-parser
  • 0f2efb5 Change the underlying URI parser (from RFC2396 to RFC3986)
  • 4fd30dd Merge pull request #206 from rosa/fetch
  • 948503f Add GlobalID::Locator.fetch with distinct not-found and unavailable errors
  • Additional commits viewable in compare view

Updates image_processing from 2.0.2 to 2.2.0

Changelog

Sourced from image_processing's changelog.

2.2.0 (2026-09-29)

  • Save in the #convert format when the destination path has no extension, such as a /dev/fd/N path (thanks to @​flavorjones)

2.1.0 (2026-09-01)

  • [minimagick] Add inherit_fds: so a loader can name an already-open input (thanks to @​flavorjones)

2.0.3 (2026-08-06)

  • Prevent remote code execution when operation names come from user input, closing bypasses through the #operation meta-builder, #method_missing, and nested #send calls (reported by @​szymonsec)

  • [minimagick] Prevent remote code execution through unsafe public methods (e.g. #instance_eval, #send) passed as loader/saver option names

Commits
  • d9737fb Set version to 2.2.0
  • 8f7b538 Handle missing AVIF encoder in tests
  • 92086c5 Handle AVIF format on extensionless destinations
  • 5827e83 Save in the #convert format to an extensionless destination (#150)
  • 3d990c3 Set version to 2.1.0
  • 722d900 Add inherit_fds: so a loader can name an already-open input (#147)
  • 1611c00 Bump to 2.0.3
  • 8cd14e9 Test on JRuby 10.1.x
  • 28684e7 Close more RCE security gaps
  • 0360dbd Remove ruby2_keywords usage (#145)
  • See full diff in compare view

Updates pg from 1.6.3 to 1.7.0

Changelog

Sourced from pg's changelog.

v1.7.0 [2026-10-02] Lars Kanis lars@greiz-reinsdorf.de

Added:

  • Add PG::Connection#embed_params and keyword :typename for its parameter casting. #726 This allows to generate SQL strings with embedded parameters for easier debugging.
  • Add PG::Connection#full_protocol_version which is new in PostgreSQL-18 #695
  • Add PG::Result#each_tuple #675
  • Add PG::TypeMap#query_param_encoders to retrieve encoders. #726
  • Deduplicate result field name strings for better performance. #750

Removed:

  • Remove compatibility to ruby < 3.1 and drops support of ruby-2.7 and ruby-3.0. #749
  • Remove GLV unlocking at all functions which process data modifiable in a second thread. #721 This avoids possible premature garbage collection of query parameters and possible VM crash due to concurrent data manipulation.
  • Remove :static_symbol result field names. #691
  • Remove enforced rpath addition when no rpath is configured in rbconfig. #699

Fixes:

  • Limit memory allocation on invalid input into PG::BinaryDecoder::Array. #743
  • Free COPY buffers when decoders raise to avoid possible memory leak in get_copy_data. #742
  • Prevent SQL injection in set_client_encoding. #741
  • Add GC_GUARD to temporary ruby objects for conninfo string to avoid it's GC'ed prematurely. #739
  • Remove option "quirks_mode" from JSON en/decoder to fix compat with json-3.0 gem. #737
  • Respect calendar type of Ruby and PostgreSQL. #725
  • Fix broken set_notice_(receiver|processor) callback after GC.compact. #734
  • Disable DNS resolution in ruby when a service file is used, so that the priority of parameters is equal to libpq. #635
  • Use RARRAY_LENINT to avoid possible overflow. #728
  • Fix possible integer overflow at PG::BinaryEncoder::CopyRow and PG::TextEncoder::CopyRow. #714, #715
  • Avoid possible integer overflow in query parameter encoding. #719
  • Ensure conninfo is a valid C string before closing the connection to avoid a double free of PGconn. #709
  • Raise on a too large input string to PG::TextEncoder::Bytea. #717
  • Check PG::BinaryEncoder::CopyRow array input size instead of producing an invalid output.
  • Remove accidentally copied "static" keyword from Copy and Record encoder. #711
  • Avoid possibility to replace typemap while being used in Copy and Record encoders and decoders. #707
  • Add GC_GUARD's for encoding converted strings sent to the server. #705
  • Fix incomplete transaction commit when thread is shutdown ungracefully. #704
  • Assign VALUE after registration per rb_gc_register_address() #703
  • Update dependencies for binary gems to PostgreSQL-18.6, OpenSSL-3.6.5, krb5-1.22.2 #752
Commits
  • fcf40c5 Add new gem signing certificate
  • d41e07a Merge pull request #753 from larskanis/rm-pgsql-10
  • 8e1ee8f Remove some conditions for PostgreSQL-10
  • 050c56d Fix typo in CHANGELOG and add version note
  • 2c4934e Bump VERSION to 1.7.0
  • f644ba2 Update release notes once more
  • b16542d Merge pull request #752 from larskanis/upd-binaries
  • 66b27c6 Update dependencies for binary gems to
  • 6a07394 Add CHANGELOG entry for pg-1.7.0
  • 5390356 Merge pull request #749 from larskanis/minruby-3.1
  • Additional commits viewable in compare view

Updates standard from 1.54.0 to 1.56.0

Changelog

Sourced from standard's changelog.

1.56.0

1.55.0

Commits
  • d695ba0 🏆⚽️ v1.56.0
  • 86a92fa Merge pull request #823 from standardrb/upgrade-2026-07-15
  • dfcaef8 Fixes Parallel's overzealous update
  • 5e68710 Updates rubocop to 1.88
  • 95f959b Merge pull request #822 from standardrb/dependabot/bundler/ruby-lsp-0.26.10
  • 42c9d35 Bump ruby-lsp from 0.26.9 to 0.26.10
  • 79cd977 Merge pull request #818 from standardrb/dependabot/bundler/language_server-pr...
  • 3011204 Bump language_server-protocol from 3.17.0.5 to 3.17.0.6
  • 505e8e6 Merge pull request #797 from standardrb/dependabot/bundler/ruby-lsp-0.26.9
  • af5498a Merge pull request #816 from standardrb/dependabot/github_actions/step-securi...
  • Additional commits viewable in compare view

Updates selenium-webdriver from 4.41.0 to 4.50.0

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.50.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

... (truncated)

Changelog

Sourced from selenium-webdriver's changelog.

4.50.0 (2026-09-30)

  • Support CDP versions: v152, v153, v154
  • render WebSocket debug log lines lazily (#18033)
  • Implement driver methods for installing and uninstalling web extensions via BiDi (#17879)
  • [build] Automated CDDL Spec Update (#18046)
  • [build] replace the BiDi KNOWN_INCOMPLETE allowlist with spec-shaped CDDL overlays (#18057)
  • [build] generate the BiDi schema vendor section from Mozilla's Firefox CDDL (#18060)
  • remove deprecated Firefox profile extension and cert methods (#18066)
  • [build] add support for Mozilla's Commands fragment in the BiDi schema (#18071)
  • [build] Automated Browser Version Update (major) with CDP (#18067)
  • [build] Automated CDDL Spec Update (#18075)

4.49.0 (2026-09-09)

  • Support CDP versions: v151, v152, v153
  • derive BiDi field names and enum value types in the schema (#17966)
  • [build] Automated CDDL Spec Update (#17990)
  • [build] ship prebuilt Selenium Manager Linux arm64 binary in all bindings (#17999)
  • [build] Automated Browser Version Update (major) with CDP (#18005)

4.48.0 (2026-08-27)

  • Support CDP versions: v150, v151, v152
  • add low-level BiDi protocol integration specs (#17878)
  • [build] Automated Browser Version Update (major) with CDP (#17910)
  • fix silent hang on oversized WebSocket frames (#17655)
  • always reject a missing required inbound BiDi field (#17936)
  • accept a whole-valued float for an integer BiDi field (#17939)
  • reject an inbound BiDi scalar outside its union's declared arms (#17947)

4.47.0 (2026-08-10)

  • Support CDP versions: v149, v150, v151
  • support WebDriver BiDi on Safari Preview and move #bidi onto Driver (#17729)
  • link generated BiDi elements to their spec definitions (#17781)
  • add objectOnly/preserveExtras/scalar-primitive BiDi schema signals (#17784)
  • construct the BiDi transport inside the domain from a connection (#17796)
  • route BiDiBridge navigation through the generated Protocol::BrowsingContext (#17785)
  • resolve spec runfiles via Bazel::Runfiles (#17810)
  • [build] standardize generated-file license and not to edit markers across generators (#17816)
  • validate nullable-constant BiDi params outbound (#17818)
  • [build] upgrade rules_ruby to 0.28.0 and drop vendored Bazel::Runfiles workaround (#17824)
  • [build] Merge vendor cddl files into shared BiDi schema and implement custom Firefox webExtension options (#17840)
  • [grid] honor client-advertised se:remoteUrl for reachable BiDi/CDP/VNC URLs (#17790)
  • tolerate and warn on missing required inbound BiDi fields, with SE_BIDI_STRICT to escalate (#17844)
  • remove deprecated FTP proxy support (#17846)
  • prevent CDP access with Firefox (#17849)
  • test matchers assert log entries by id and optional messages and match severity (#17848)
  • [bidi] Correct float/enum type fidelity in the shared schema and validate primitives outbound in Ruby (#17852)

... (truncated)

Commits
  • ca2a966 [build] Prepare for release of selenium-4.50.0 (#18105)
  • 27ef657 [rb] add bidi tests for recent spec updates
  • 76febdc [build] Automated Dependency Update (#18082)
  • 6f841aa [build] Automated CDDL Spec Update (#18075)
  • 52a288e [build] Automated Browser Version Update (major) with CDP (#18067)
  • acd7ce8 [rb] remove stale Windows pending guard from Firefox signed directory addon test
  • 748477d [rb] remove dead headless, browser and remote config_settings
  • 6ff202a [rb] fix flaky test by not applying timeouts to the setup navigation
  • 27c86e2 [build] add support for Mozilla's Commands fragment in the BiDi schema (#18071)
  • 59b28c4 [rb] fix nightly web extension spec failures on Safari and Windows
  • Additional commits viewable in compare view

Updates timecop from 0.9.10 to 0.9.11

Changelog

Sourced from timecop's changelog.

v0.9.11

  • Fix Time.new keyword arguments on JRuby 10 (#443)
  • Fix time-only DateTime.parse (HH:MM format) incorrectly using host clock under freeze (#440)
  • Require Ruby >= 2.1.0 (#423)
  • Revert travel_offset precision change (#430)
Commits
  • b3c9a5a get ready for our next release 0.9.11 (#444)
  • 4e84492 Fix Time.new keyword arguments on JRuby 10 (#443)
  • b06405e (434) strptime_with_mock_date :: Fix year boundary (#437)
  • bb4a3c1 Fix time-only DateTime.parse under freeze (#440)
  • e4bba8c Improve and fix CI (#439)
  • d695c6f Require Ruby >= 2.1.0 (#423)
  • ce3e6bb Revert "Calculate travel_offset to align with the precision of argument to Ti...
  • 477ce9a add ruby 3.3 to ci matrix (#429)
  • e05c2c0 Calculate travel_offset to align with the precision of argument to Timecop.tr...
  • See full diff in compare view

Updates webmock from 3.26.2 to 3.26.4

Release notes

Sourced from webmock's releases.

3.26.4

  • Fix race condition in HTTPClient adapter async requests by @​koic in #1131

3.26.3

  • Confirm to work with curb 1.3.7

    Thanks to Josch Bockler

  • Fix NameError in async-http adapter on protocol-http1 >= 0.40

    Thanks to Leslie Hoare

Changelog

Sourced from webmock's changelog.

3.26.4

  • Fix race condition in HTTPClient adapter async requests by @​koic in #1131

3.26.3

  • Confirm to work with curb 1.3.7

    Thanks to Josch Bockler

  • Fix NameError in async-http adapter on protocol-http1 >= 0.40

    Thanks to Leslie Hoare

Commits
  • 0fdbad0 Version 3.26.4
  • b187df8 Merge pull request #1131 from koic/fix_race_condition_in_httpclient_adapter_a...
  • f275724 Fix race condition in HTTPClient adapter async requests
  • ee409ac Version 3.26.3
  • 2c976d5 Merge pull request #1127 from jbockler/curb-1.3
  • 5b40155 Confirm to work with curb 1.3.7
  • f685e7e Merge pull request #1130 from lesleh/fix-async-http-status-description
  • a50557e Fix NameError in async-http adapter on protocol-http1 >= 0.40
  • See full diff in compare view

Updates actionpack from 8.1.3 to 8.1.4

Release notes

Sourced from actionpack's releases.

8.1.4

Active Support

  • Fix the debug error page rendering for SyntaxErrors with multi-line messages.

    Marco Roth

  • Make ActiveSupport::JSON.decode compatible with the upcoming json 3.0 gem.

    Earlopain

  • Fix number_to_human_size crashing for sizes above a terabyte by supporting petabyte, exabyte, and zettabyte storage units.

    Kenta Ishizaki

  • Fix Range#sole raising NoMethodError when the enumerable core extension isn't already loaded.

    Kenta Ishizaki

  • Fix ActiveSupport::Cache::FileStore raising NameError for FileUtils when fileutils isn't already loaded.

    Kenta Ishizaki

  • Fix Enumerable#in_order_of with filter: true dropping nil elements explicitly named in the series.

    Kenta Ishizaki

  • Keep HashWithIndifferentAccess#filter returning a HashWithIndifferentAccess instead of a plain Hash.

    Kenta Ishizaki

  • Fix number_to_human and number_to_human_size crashing when :precision is nil.

    Kenta Ishizaki

  • Fix ActiveSupport::InheritableOptions#to_h to recursively flatten nested InheritableOptions parents.

    Andrew Novoselac

  • Fix ActiveSupport::StructuredEventSubscriber.debug_only leaking debug-only methods across subscriber subclasses.

    Kenta Ishizaki

... (truncated)

Changelog

Sourced from actionpack's changelog.

Rails 8.1.4 (September 24, 2026)

  • Fix the debug error page to not attempt to read source fragments from directory paths.

    Marco Roth

  • Apply source value mappings to dynamic Permissions Policy sources.

    Dynamic Permissions Policy sources (procs) now have source mappings applied to their resolved values, the same as static sources.

    Kenta Ishizaki

  • Allow ActionDispatch::Http::URL.path_for with trailing_slash: true and a blank path to accept query params and an anchor.

    Previously the blank path used a frozen "/", which raised a FrozenError when appending the query string.

    Kenta Ishizaki

  • Avoid mutating the params hash passed to ActionDispatch::Http::URL.url_for.

    Kenta Ishizaki

  • Honor falsy values (e.g. format: false, anchor: false) passed in the deprecated positional-hash form of routing DSL methods.

    Previously, false values were silently dropped without emitting a deprecation warning, causing the deprecated hash form to produce different routes than the keyword form.

    Kenta Ishizaki

  • Honor the deprecated namespace hash :path, :shallow_path, and :shallow_prefix options when passed as false.

    Kenta Ishizaki

  • Fix the deprecated scope hash :except option to apply to except instead of only.

    Kenta Ishizaki

  • Reject malformed hosts with extra ports in ActionDispatch::HostAuthorization.

    When an allowed host is configured with an explicit port, a Host header with an additional port (e.g. www.example.com:80:80) is no longer accepted.

... (truncated)

Commits

Updates actionview from 8.1.3 to 8.1.4

Release notes

Sourced from actionview's releases.

8.1.4

Active Support

  • Fix the debug error page rendering for SyntaxErrors with multi-line messages.

    Marco Roth

  • Make ActiveSupport::JSON.decode compatible with the upcoming json 3.0 gem.

    Earlopain

  • Fix number_to_human_size crashing for sizes above a terabyte by supporting petabyte, exabyte, and zettabyte storage units.

    Kenta Ishizaki

  • Fix Range#sole raising NoMethodError when the enumerable core extension isn't already loaded.

    Kenta Ishizaki

  • Fix ActiveSupport::Cache::FileStore raising NameError for FileUtils when fileutils isn't already loaded.

    Kenta Ishizaki

  • Fix Enumerable#in_order_of with filter: true dropping nil elements explicitly named in the series.

    Kenta Ishizaki

  • Keep HashWithIndifferentAccess#filter returning a HashWithIndifferentAccess instead of a plain Hash.

    Kenta Ishizaki

  • Fix number_to_human and number_to_human_size crashing when :precision is nil.

    Kenta Ishizaki

  • Fix ActiveSupport::InheritableOptions#to_h to recursively flatten nested InheritableOptions parents.

    Andrew Novoselac

  • Fix ActiveSupport::StructuredEventSubscriber.debug_only leaking debug-only methods across subscriber subclasses.

    Kenta Ishizaki

... (truncated)

Changelog

Sourced from actionview's changelog.

Rails 8.1.4 (September 24, 2026)

  • Fix non-ASCII strict locals defaults rendering as mojibake.

    When a template declared a non-ASCII default in its locals: magic comment and its body was ASCII-only, the handler returned ASCII-8BIT code and the compiled method definition was retagged with it, corrupting the default.

    Carlos Daniel Pohlod

  • Fix the :ruby render tracker not being registered for ERB templates when eager_load is enabled.

    Gabriel Quaresma

  • Fix Encoding::CompatibilityError when digesting templates with non-ASCII content via DependencyTracker::RubyTracker.

    File-backed templates are loaded as ASCII-8BIT. RubyTracker now passes template.encode! to the handler (matching Template#compiled_source) so handlers such as Haml/Temple can concatenate static UTF-8 strings without raising. Fixes #58203.

    Edil Talantbek uulu

  • Fix week_field to not emit invalid week strings at ISO year boundaries.

    Kenta Ishizaki...

    Description has been truncated

@dependabot
Bump the bundler-dependencies group across 1 directory with 11 updates
2a77648 
Bumps the bundler-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [faker](https://github.com/faker-ruby/faker) | `3.6.1` | `3.8.0` |
| [globalid](https://github.com/rails/globalid) | `1.3.0` | `1.4.0` |
| [image_processing](https://github.com/janko/image_processing) | `2.0.2` | `2.2.0` |
| [pg](https://github.com/ged/ruby-pg) | `1.6.3` | `1.7.0` |
| [standard](https://github.com/standardrb/standard) | `1.54.0` | `1.56.0` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.41.0` | `4.50.0` |
| [timecop](https://github.com/travisjeffery/timecop) | `0.9.10` | `0.9.11` |
| [webmock](https://github.com/bblimke/webmock) | `3.26.2` | `3.26.4` |
| [actionpack](https://github.com/rails/rails) | `8.1.3` | `8.1.4` |
| [actionview](https://github.com/rails/rails) | `8.1.3` | `8.1.4` |
| [activerecord](https://github.com/rails/rails) | `8.1.3` | `8.1.4` |



Updates `faker` from 3.6.1 to 3.8.0
- [Release notes](https://github.com/faker-ruby/faker/releases)
- [Changelog](https://github.com/faker-ruby/faker/blob/main/CHANGELOG.md)
- [Commits](faker-ruby/faker@v3.6.1...v3.8.0)

Updates `globalid` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/rails/globalid/releases)
- [Commits](rails/globalid@v1.3.0...v1.4.0)

Updates `image_processing` from 2.0.2 to 2.2.0
- [Changelog](https://github.com/janko/image_processing/blob/master/CHANGELOG.md)
- [Commits](janko/image_processing@v2.0.2...v2.2.0)

Updates `pg` from 1.6.3 to 1.7.0
- [Changelog](https://github.com/ged/ruby-pg/blob/master/CHANGELOG.md)
- [Commits](ged/ruby-pg@v1.6.3...v1.7.0)

Updates `standard` from 1.54.0 to 1.56.0
- [Release notes](https://github.com/standardrb/standard/releases)
- [Changelog](https://github.com/standardrb/standard/blob/main/CHANGELOG.md)
- [Commits](standardrb/standard@v1.54.0...v1.56.0)

Updates `selenium-webdriver` from 4.41.0 to 4.50.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](SeleniumHQ/selenium@selenium-4.41.0...selenium-4.50.0)

Updates `timecop` from 0.9.10 to 0.9.11
- [Changelog](https://github.com/travisjeffery/timecop/blob/master/History.md)
- [Commits](travisjeffery/timecop@v0.9.10...v0.9.11)

Updates `webmock` from 3.26.2 to 3.26.4
- [Release notes](https://github.com/bblimke/webmock/releases)
- [Changelog](https://github.com/bblimke/webmock/blob/master/CHANGELOG.md)
- [Commits](bblimke/webmock@v3.26.2...v3.26.4)

Updates `actionpack` from 8.1.3 to 8.1.4
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.4/actionpack/CHANGELOG.md)
- [Commits](rails/rails@v8.1.3...v8.1.4)

Updates `actionview` from 8.1.3 to 8.1.4
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.4/actionview/CHANGELOG.md)
- [Commits](rails/rails@v8.1.3...v8.1.4)

Updates `activerecord` from 8.1.3 to 8.1.4
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.4/activerecord/CHANGELOG.md)
- [Commits](rails/rails@v8.1.3...v8.1.4)

---
updated-dependencies:
- dependency-name: faker
  dependency-version: 3.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: globalid
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: image_processing
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: pg
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: standard
  dependency-version: 1.56.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: selenium-webdriver
  dependency-version: 4.50.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: timecop
  dependency-version: 0.9.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: webmock
  dependency-version: 3.26.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: actionpack
  dependency-version: 8.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: actionview
  dependency-version: 8.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: activerecord
  dependency-version: 8.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies changes or issues relating to a dependency ruby Pull requests that update Ruby code labels Oct 7, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies changes or issues relating to a dependency ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants