build(deps): bump the all-dependencies group across 1 directory with 15 updates by dependabot[bot] · Pull Request #21 · CLIuno/CLIuno-Rails-template

dependabot · 2026-10-08T06:24:54Z

Bumps the all-dependencies group with 15 updates in the / directory:

Package	From	To
rails	`8.1.3`	`8.1.4`
sqlite3	`2.5.0`	`2.9.6`
puma	`6.5.0`	`8.0.2`
jwt	`2.10.2`	`3.3.0`
solid_cache	`1.0.6`	`1.0.10`
solid_queue	`1.1.2`	`1.7.0`
solid_cable	`3.0.5`	`4.1.0`
bootsnap	`1.18.4`	`1.26.0`
kamal	`2.4.0`	`2.12.0`
thruster	`0.1.9`	`0.1.26`
debug	`1.10.0`	`1.11.1`
brakeman	`8.0.5`	`8.1.0`
rubocop-rails-omakase	`1.0.0`	`1.1.0`
net-smtp	`0.5.1`	`0.5.2`
net-imap	`0.5.4`	`0.6.7`

Updates rails from 8.1.3 to 8.1.4

Release notes

Sourced from rails's releases.

8.1.4

Active Support

Fix the debug error page rendering for SyntaxErrors with multi-line messages.

Marco Roth

Make ActiveSupport::JSON.decode compatible with the upcoming json 3.0 gem.

Earlopain

Fix number_to_human_size crashing for sizes above a terabyte by supporting petabyte, exabyte, and zettabyte storage units.

Kenta Ishizaki

Fix Range#sole raising NoMethodError when the enumerable core extension isn't already loaded.

Kenta Ishizaki

Fix ActiveSupport::Cache::FileStore raising NameError for FileUtils when fileutils isn't already loaded.

Kenta Ishizaki

Fix Enumerable#in_order_of with filter: true dropping nil elements explicitly named in the series.

Kenta Ishizaki

Keep HashWithIndifferentAccess#filter returning a HashWithIndifferentAccess instead of a plain Hash.

Kenta Ishizaki

Fix number_to_human and number_to_human_size crashing when :precision is nil.

Kenta Ishizaki

Fix ActiveSupport::InheritableOptions#to_h to recursively flatten nested InheritableOptions parents.

Andrew Novoselac

Fix ActiveSupport::StructuredEventSubscriber.debug_only leaking debug-only methods across subscriber subclasses.

Kenta Ishizaki

... (truncated)

Commits

c3466ea Preparing for 8.1.4 release
334dc3e Merge pull request #58854 from carlosdanielpohlod/strict-locals-ascii-only-body
8df6693 Merge pull request #58827 from rails/backport-alias-fallback-8-1-stable
2ed2c88 Define read_attribute_for_validation instead of aliasing send
2616145 Merge pull request #56705 from p8/activemodel/fix-read-attr-for-serialization...
20abac3 Merge pull request #58817 from yahonda/fix-alias-fallback-to-object-in-attrib...
2670772 Merge pull request #58733 from kwestein/create-or-find-by-deadlock
8236300 Merge pull request #58806 from Shopify/hm-wnqzpryypymkrxtn
e6288a8 Update CHANGELOGs for 8-1-stable backports
44a7fd4 Merge pull request #58799 from e-akashsaini/fix-tuple-where-key-corrupting-at...
Additional commits viewable in compare view

Updates sqlite3 from 2.5.0 to 2.9.6

Release notes

Sourced from sqlite3's releases.

2.9.6 / 2026-08-11

Security / Stability

Fix a garbage collection bug where the argument array passed to a custom aggregate function's step was not visible to the GC, so arguments could be collected mid-conversion when the aggregate takes two or more arguments, corrupting the values passed to step or crashing the process. See GHSA-mwm8-39rw-8826 for more information. #733 @jeremy

Fixed

Fix a leak where custom aggregate handler instances were never released, so a connection accumulated one instance per GROUP BY group per query for its lifetime. #722 @djmb

Fix GC compaction issues with custom functions, aggregates, collations, #trace and #authorizer=. These callbacks were registered with sqlite by passing a raw Ruby object pointer as user data; keeping the object reachable prevented collection but not relocation, after which sqlite held a stale address and the next call could raise NoMethodError, return a wrong result, or segfault. Affects applications that call GC.compact or run with GC.auto_compact = true. The equivalent issue in #busy_handler was fixed in #466. #723 @djmb

Fix the private methods Database#open_v2 and #open16 silently replacing a live connection and leaking the previous connection handle when invoked via send on an open database. They now raise SQLite3::Exception. #729 @flavorjones

Fix TEXT values containing an embedded NUL byte being truncated at the first NUL when passed as arguments to functions created with Database#define_function. #730 @flavorjones

Fix an exception raised inside a Database#define_function block leaving the connection's sqlite mutex held, which deadlocked any other thread that later used the connection. The exception now propagates to the caller and the connection remains usable. #731 @flavorjones

Database.new now raises ArgumentError when the filename or VFS name contains an embedded NUL byte (or an embedded 0x0000 code unit in a UTF-16 filename), instead of silently opening a path truncated at the NUL. #732 @flavorjones

Improved

When Database.new fails to open the database file, the underlying sqlite3 connection handle is now closed immediately instead of waiting for the garbage collector to clean it up. #719 @katafrakt
d8b1f7d23efd7abac285775a9566562fc7debfef79d594e3a20354406fb7907c  gems/sqlite3-2.9.6-aarch64-linux-gnu.gem
3579e1c98cdc7ff5c3722847bb63ed4e1efb7ff675cb5e1e48ef2d4da5fb3bc9  gems/sqlite3-2.9.6-aarch64-linux-musl.gem
33541500e3615da02afe54a9cc38b17a6985d3cf9d8b76d6d0a83002f114e7ec  gems/sqlite3-2.9.6-arm-linux-gnu.gem
c5490af48bb228fefa54314e9541375c3907e70f8109f3881b5ff97e1c93ae33  gems/sqlite3-2.9.6-arm-linux-musl.gem
849b5d7f795e60fe25076d62c72dd722beb45b3850b516ad978d60ee848ec15b  gems/sqlite3-2.9.6-arm64-darwin.gem
1f2b88f417fd0a8c1d5ef19c7e817d8b9c61bee6e33b6b36255fb6e40148e6f8  gems/sqlite3-2.9.6-x64-mingw-ucrt.gem
fbaa9f46f9708f57dd8a459b37fc269f9613e0cacf1547df01aa439cc45c20c0  gems/sqlite3-2.9.6-x86-linux-gnu.gem
6715026fbb5530e810b28ef43b9c4f84cd3c991f67b9d808a31fcc32b847abbd  gems/sqlite3-2.9.6-x86-linux-musl.gem
b5842fea77781c14da03fa7bc0feb82db03a69e135affcb6f5399cbd2797a5f3  gems/sqlite3-2.9.6-x86_64-darwin.gem
613188ce02f614126ddbc38c5e217ccffd6306d0dcd9adca9764547aa890a634  gems/sqlite3-2.9.6-x86_64-linux-gnu.gem
d493b11818a3573387a1d56e1ee8fa00da23a683a7a1cc063e7a0feeed843abf  gems/sqlite3-2.9.6-x86_64-linux-musl.gem
956fe606956420d04ac7157d3ace620c8caba2135b2e05c76e483493da24d08e  gems/sqlite3-2.9.6.gem
2.9.5 / 2026-06-07

Dependencies

Vendored sqlite is updated to v3.53.2 (from v3.53.1). #709 @flavorjones

Security / Stability

Fix use-after-free issue with custom functions, when the same function name is used with multiple arities. See GHSA-28hh-pr2h-2w89 for more information. #710 @flavorjones

Fix use-after-free issue with aggregate functions, if a statement is used after a soft database close. See GHSA-j7fr-3v8c-3qc3 for more information. #711 @flavorjones

... (truncated)

Changelog

Sourced from sqlite3's changelog.

2.9.6 / 2026-08-11

Security / Stability

Fix a garbage collection bug where the argument array passed to a custom aggregate function's step was not visible to the GC, so arguments could be collected mid-conversion when the aggregate takes two or more arguments, corrupting the values passed to step or crashing the process. See GHSA-mwm8-39rw-8826 for more information. #733 @jeremy

Fixed

Fix a leak where custom aggregate handler instances were never released, so a connection accumulated one instance per GROUP BY group per query for its lifetime. #722 @djmb

Fix GC compaction issues with custom functions, aggregates, collations, #trace and #authorizer=. These callbacks were registered with sqlite by passing a raw Ruby object pointer as user data; keeping the object reachable prevented collection but not relocation, after which sqlite held a stale address and the next call could raise NoMethodError, return a wrong result, or segfault. Affects applications that call GC.compact or run with GC.auto_compact = true. The equivalent issue in #busy_handler was fixed in #466. #723 @djmb

Fix the private methods Database#open_v2 and #open16 silently replacing a live connection and leaking the previous connection handle when invoked via send on an open database. They now raise SQLite3::Exception. #729 @flavorjones

Fix TEXT values containing an embedded NUL byte being truncated at the first NUL when passed as arguments to functions created with Database#define_function. #730 @flavorjones

Fix an exception raised inside a Database#define_function block leaving the connection's sqlite mutex held, which deadlocked any other thread that later used the connection. The exception now propagates to the caller and the connection remains usable. #731 @flavorjones

Database.new now raises ArgumentError when the filename or VFS name contains an embedded NUL byte (or an embedded 0x0000 code unit in a UTF-16 filename), instead of silently opening a path truncated at the NUL. #732 @flavorjones

Improved

When Database.new fails to open the database file, the underlying sqlite3 connection handle is now closed immediately instead of waiting for the garbage collector to clean it up. #719 @katafrakt

2.9.5 / 2026-06-07

Dependencies

Vendored sqlite is updated to v3.53.2 (from v3.53.1). #709 @flavorjones

Security / Stability

Fix use-after-free issue with custom functions, when the same function name is used with multiple arities. See GHSA-28hh-pr2h-2w89 for more information. #710 @flavorjones

Fix use-after-free issue with aggregate functions, if a statement is used after a soft database close. See GHSA-j7fr-3v8c-3qc3 for more information. #711 @flavorjones

2.9.4 / 2026-05-05

Vendored sqlite is updated to v3.53.1 (from v3.53.0). #704 @flavorjones

2.9.3 / 2026-04-15

Vendored sqlite is updated to v3.53.0 (from v3.51.3). #696 @flavorjones

2.9.2 / 2026-03-15

Vendored sqlite is updated to v3.51.3 (from v3.51.2). #688 @flavorjones

2.9.1 / 2026-02-28

... (truncated)

Commits

a52dc0d version bump to v2.9.6
cc5ac0c Root the aggregate argument array so GC cannot free live values (GHSA-mwm8-39...
abcb0f6 Reject database filenames and VFS names containing NUL (#732)
1d86b7a Raise when open_v2 or open16 is called on an open database (#729)
7230171 Stop a raise inside a UDF block from deadlocking other threads (#731)
2677f9a Pass TEXT values containing embedded NULs to UDFs intact (#730)
3de8f6e doc: update CHANGELOG.md
ac6bd2f Release aggregate instances when sqlite finishes with them (#722)
32460e9 Stop sqlite calling into moved Ruby objects (#723)
f600993 build(deps-dev): update rubocop-minitest requirement (#727)
Additional commits viewable in compare view

Updates puma from 6.5.0 to 8.0.2

Release notes

Sourced from puma's releases.

v8.0.2

Bugfixes

Anchor PROXY protocol v1 regex to string start and enforce max line length to prevent injection via crafted request bodies (#3944)

Parse PROXY protocol header only on the first request per connection to prevent spoofing on keep-alive connections (#3944)

Security advisories

CVE-2026-47736 / GHSA-qpgp-93vx-g8v8: Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion

CVE-2026-47737 / GHSA-2vqw-3mp8-cgmx: Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections

v8.0.1

Bugfixes

Fix prune_bundler stripping user-configured BUNDLE_* env vars (e.g. BUNDLE_WITHOUT) on re-exec, which caused workers to crash on boot (#3929)

Performance

Use blocks for debug logging to avoid creating log messages when debug is disabled (#3920)

Docs

Fix incorrect hook names in gRPC docs (#3923)

Reword v8 upgrade guide IPv6 bullet for clarity (#3928)

v8.0.0 - Into the Arena

Read our Version 8 Upgrade Guide.

Features

Add env["puma.mark_as_io_bound"] API and max_io_threads config to allow IO-bound requests to exceed the thread pool max, enabling better handling of mixed workloads (#3816, #3894)

Add single and cluster DSL hooks for mode-specific configuration (#3621)

Add on_force option to shutdown_debug to only dump thread backtraces on forced (non-graceful) shutdown (#3671)

Add API to dynamically update min and max thread counts at runtime via update_thread_pool_min_max and ServerPluginControl (#3658)

Use SIGPWR for thread backtrace dumps on Linux/JRuby where SIGINFO is unavailable (#3829)

Bugfixes

Fix phased restart for fork_worker to avoid forking from stale worker 0 when it has been replaced (#3853)

Performance

JRuby HTTP parser improvements: pre-allocated header keys, perfect hash lookup, reduced memory copies (#3838)

Cache downcased header key in str_headers to avoid redundant String#downcase calls, reducing allocations by ~50% per response (#3874)

Refactor

Collect env processing into dedicated client_env.rb module (#3582)

Move event to default configuration (#3872)

Docs

Add gRPC guide for configuring gRPC lifecycle hooks in clustered mode (#3885)

Add 7.0 upgrade guide, move 5.0/6.0 upgrade guides to docs directory (#3900)

Correct default values for persistent_timeout and worker_boot_timeout in DSL docs (#3912)

Add file descriptor limit warning in test helper for contributors (#3893)

... (truncated)

Changelog

Sourced from puma's changelog.

8.0.2 / 2026-05-27

Bugfixes

Anchor PROXY protocol v1 regex to string start and enforce max line length to prevent injection via crafted request bodies (#3944)

Parse PROXY protocol header only on the first request per connection to prevent spoofing on keep-alive connections (#3944)

8.0.1 / 2026-04-27

Bugfixes

Fix prune_bundler stripping user-configured BUNDLE_* env vars (e.g. BUNDLE_WITHOUT) on re-exec, which caused workers to crash on boot (#3929)

Performance

Use blocks for debug logging to avoid creating log messages when debug is disabled (#3920)

Docs

Fix incorrect hook names in gRPC docs (#3923)

Reword v8 upgrade guide IPv6 bullet for clarity (#3928)

8.0.0 / 2026-03-27

Features

Add env["puma.mark_as_io_bound"] API and max_io_threads config to allow IO-bound requests to exceed the thread pool max, enabling better handling of mixed workloads (#3816, #3894)

Add single and cluster DSL hooks for mode-specific configuration (#3621)

Add on_force option to shutdown_debug to only dump thread backtraces on forced (non-graceful) shutdown (#3671)

Add API to dynamically update min and max thread counts at runtime via update_thread_pool_min_max and ServerPluginControl (#3658)

Use SIGPWR for thread backtrace dumps on Linux/JRuby where SIGINFO is unavailable (#3829)

Bugfixes

Fix phased restart for fork_worker to avoid forking from stale worker 0 when it has been replaced (#3853)

Performance

JRuby HTTP parser improvements: pre-allocated header keys, perfect hash lookup, reduced memory copies (#3838)

Cache downcased header key in str_headers to avoid redundant String#downcase calls, reducing allocations by ~50% per response (#3874)

Refactor

Collect env processing into dedicated client_env.rb module (#3582)

Move event to default configuration (#3872)

Docs

Add gRPC guide for configuring gRPC lifecycle hooks in clustered mode (#3885)

Add 7.0 upgrade guide, move 5.0/6.0 upgrade guides to docs directory (#3900)

Correct default values for persistent_timeout and worker_boot_timeout in DSL docs (#3912)

Add file descriptor limit warning in test helper for contributors (#3893)

Breaking changes

Default production bind address changed from 0.0.0.0 to :: (IPv6) when a non-loopback IPv6 interface is available; falls back to 0.0.0.0 if IPv6 is unavailable (#3847)

7.2.1 / 2026-05-27

Bugfixes

... (truncated)

Commits

8085b75 Release v8.0.2 (#3945)
439c613 8.0.2 backport (#3944)
cee7e61 Release v8.0.1 (#3932)
f955caf Fix prune_bundler stripping user-configured BUNDLE_* env vars on re-exec (#3929)
97996aa ci: test_error_logger.rb - fix TruffleRuby error (#3930)
03825bc Build(deps): Bump actions/github-script from 8 to 9 (#3925)
053efae Reword v8 upgrade guide ipv6 bullet (#3928)
b19f35a Fix incorrect hook names in gRPC docs (#3923)
eeabe4b Use blocks for debug logging to avoid creating messages if debug disabled (#3...
08f63d4 Release v8.0.0 (#3914)
Additional commits viewable in compare view

Updates jwt from 2.10.2 to 3.3.0

Changelog

Sourced from jwt's changelog.

v3.3.0 (2026-09-11)

Full Changelog

Features:

Allow a leeway to be given for the iat claim verification #747 - (@denis1011101)

Revamp the error hierarchy under a new JWT::Error base class; signing failures now consistently raise JWT::EncodeError, see https://github.com/jwt/ruby-jwt/blob/main/UPGRADING.md #722 (@anakinj)

Fixes and enhancements:

Refactor JWT::JWK::Set#initialize so each construction path is a named method #758 (@anakinj)

Fix rejection of unknown algorithms from JWKs for RFC compliance and pquip #728

Fix the Style/DirectiveScope RuboCop offense failing the build #752

Fix JWT::JWK::Set sharing its key collection with the set it was copied from #751

Reset the decoded payload and verification state in JWT::EncodedToken#encoded_payload= #749

Fix JWT::Token#detach_payload! not invalidating an already rendered token #748

v3.2.0 (2026-05-13)

Full Changelog

Features:

Add enforce_hmac_key_length configuration option #716 - (@304)

Fixes and enhancements:

Reject nil and empty HMAC keys when signing and verifying (CVE-2026-45363 / GHSA-c32j-vqhx-rx3x)

Fix compatibility with the openssl 4.0 gem #706

Test against Ruby 4.0 on CI #707

Fix type error when header is not a JSON object #715 - (@304)

v3.1.2 (2025-06-28)

Full Changelog

Fixes and enhancements:

Avoid using the same digest across calls in JWT::JWA::Ecdsa and JWT::JWA::Rsa #697

Fix signing with a EC JWK #699 (@anakinj)

v3.1.1 (2025-06-24)

Full Changelog

Fixes and enhancements:

Require the algorithm to be provided when signing and verifying tokens using JWKs #695 (@anakinj)

... (truncated)

Commits

ccf2489 Prepare the v3.3.0 release (#762)
6cdacc3 Enforce parentheses on method calls with arguments (#761)
4a576f8 Declutter jwt_spec.rb (#760)
7ddcb0a Fix the RSA-PSS guard skipping the whole jwt_spec file (#759)
7cede0c Refactor JWT::JWK::Set#initialize (#758)
6ab1be7 Revamp error hierarchy (#722)
41fbf31 Invalidate the rendered token when detaching the payload (#757)
d8e231d Reset verification state when replacing the encoded payload (#756)
c25fb5e Fix JWT::JWK::Set sharing its key collection when copied (#751)
bec0ffd Isolate gem builds from release credentials (#755)
Additional commits viewable in compare view

Updates solid_cache from 1.0.6 to 1.0.10

Release notes

Sourced from solid_cache's releases.

v1.0.10

What's Changed

Revert "Generate reference to the database in the cache template for all envi…" by @djmb in rails/solid_cache#292

Full Changelog: rails/solid_cache@v1.0.9...v1.0.10

v1.0.9

What's Changed

Supporting Rails 8.1 && Ruby 3.4 in Github workflow by @p-schlickmann in rails/solid_cache#284

Update behavior tests and fix timeout stubbing by @djmb in rails/solid_cache#285

Update readme yaml config example by @andimrob in rails/solid_cache#273

Allow a single database in databases configuration by @djmb in rails/solid_cache#286

Generate reference to the database in the cache template for all envi… by @orbanbotond in rails/solid_cache#279

Remove frozen_string_literal from schema.rb by @ghiculescu in rails/solid_cache#256

Drop Ruby 3.1 from the test matrix by @djmb in rails/solid_cache#288

Support installing with SQL schema format by @djmb in rails/solid_cache#287

Rework the connects_to configuration in the README by @djmb in rails/solid_cache#289

New Contributors

@p-schlickmann made their first contribution in rails/solid_cache#284

@andimrob made their first contribution in rails/solid_cache#273

@orbanbotond made their first contribution in rails/solid_cache#279

@ghiculescu made their first contribution in rails/solid_cache#256

Full Changelog: rails/solid_cache@v1.0.8...v1.0.9

v1.0.8

What's Changed

Remove post install message by @djmb in rails/solid_cache#266

Update README.md by @maxnrp in rails/solid_cache#270

ActiveRecord connection -> with/lease_connection by @trevorturk in rails/solid_cache#275

New Contributors

@maxnrp made their first contribution in rails/solid_cache#270

@trevorturk made their first contribution in rails/solid_cache#275

Full Changelog: rails/solid_cache@v1.0.7...v1.0.8

v1.0.7

What's Changed

Docs: Fix Markdown formatting, add LRU acronym expansion by @andyatkinson in rails/solid_cache#223

Remove Rails 8/ruby 3.1 tests by @djmb in rails/solid_cache#224

Bump webrick from 1.8.1 to 1.8.2 by @dependabot in rails/solid_cache#225

Bump actionpack from 7.2.0 to 7.2.1.1 by @dependabot in rails/solid_cache#227

Fix a documentation error by @kfinn in rails/solid_cache#230

Update README with Manual Configuration by @allcentury in rails/solid_cache#231

Remove unused require by @y-yagi in rails/solid_cache#229

Clean up typos in /test, made some public methods in Connections module private by @rossme in rails/solid_cache#232

... (truncated)

Commits

004e101 Bump version for 1.0.10
d6870e8 Revert "Generate reference to the database in the cache template for all envi…"
7e4bc0c Bump version for 1.0.9
c9a2089 Rework the connects_to configuration in the README
f3d5aaa Support installing with SQL schema format
ac239f3 Drop Ruby 3.1 from the test matrix - its EOL
6d42973 Exclude schema files from rubocop
285100f Remove frozen_string_literal from schema.rb
fb7debd Generate reference to the database in the cache template for all envi… (#279)
bda73a2 Allow a single database in databases configuration
Additional commits viewable in compare view

Updates solid_queue from 1.1.2 to 1.7.0

Release notes

Sourced from solid_queue's releases.

v1.7.0 - batches

This is a big one! Solid Queue finally supports job batches thanks to @jpcamara. Check the README for more details about how to use these. This took ages despite being a very requested feature 😅 Big thanks to @jpcamara for his patience, refinements and production-app tests!

What's Changed

Clarify that concurrency + bulk enqueuing is a perf caveat, not unsafe by @Gnirt in rails/solid_queue#785

Wait for polling queries in logging tests instead of sleeping by @wintan1418 in rails/solid_queue#775

Keep semaphore slots held while blocked jobs are enqueued in concurrency test by @wintan1418 in rails/solid_queue#776

Give in-flight jobs enough pause to survive slow shutdowns in tests by @wintan1418 in rails/solid_queue#782

Include the error in fail_many_claimed events and document recovery by @wintan1418 in rails/solid_queue#779

Replace terminated forks even if releasing their claimed jobs fails by @wintan1418 in rails/solid_queue#781

Honour TERM received during supervisor boot before forking workers by @rafael-pissardo in rails/solid_queue#770

Batch Support by @jpcamara in rails/solid_queue#142

New Contributors

@Gnirt made their first contribution in rails/solid_queue#785

Full Changelog: rails/solid_queue@v1.6.0...v1.7.0

v1.6.0 - fiber execution mode (with Async)

A long-awaited feature thanks to @crmne on this release: instead of using a thread pool to run jobs in multiple threads per works, you can now use fibers on a single fiber reactor thread. To use this, you just need to specify the number of fibers instead of the number of threads in your worker configuration, like this:
workers:
  - queues: "api*"
    fibers: 100
    polling_interval: 0.05
It uses Async under the hood, so you need to have that as a dependency for it to work. Also, you need to be using fiber isolation in Rails (config.active_support.isolation_level`` = :fiber).

This can be very useful for I/O-bound workloads, such as those involving LLM calls.

What's Changed

Add fiber worker execution mode by @crmne in rails/solid_queue#728

Roll back transactions leaked by killed job threads in tests by @rosa in rails/solid_queue#773

Document how to update dynamic recurring tasks by @wintan1418 in rails/solid_queue#777

New Contributors

@crmne made their first contribution in rails/solid_queue#728

@wintan1418 made their first contribution in rails/solid_queue#777

Full Changelog: rails/solid_queue@v1.5.1...v1.6.0

v1.5.1

What's Changed

Fix flaky tests caused by leaked job threads and signal timing by @rosa in rails/solid_queue#766

Add an update generator to copy new migrations by @rosa in rails/solid_queue#765

Wait for the continuable job to start before interrupting it by @rosa in rails/solid_queue#767

Add --only-recurring to run just the recurring scheduler by @rafael-pissardo in rails/solid_queue#757

Use with_connection in DistinctValues by @trevorturk in rails/solid_queue#769

Replace forked processes that fail to boot by @sapandiwakar in rails/solid_queue#760

... (truncated)

Commits

e2b5384 Bump solid_queue to 1.7.0
5352228 Reset pooled connections when flipping the batches schema in tests
112bb1c Refine batch support after a full review
1bcac83 Add batch support
fcb5f7a Name the supervisor's stop checkpoint and simplify its lifecycle
124176a Honour TERM received during supervisor boot before forking workers
174cb07 Protect the shutdown reap from release failures too
0526401 Replace terminated forks even if releasing their claimed jobs fails
6816e52 Include the error in fail_many_claimed events and document recovery
fc5fb59 Wait longer for the supervisor to fail the killed worker's job
Additional commits viewable in compare view

Updates solid_cable from 3.0.5 to 4.1.0

Release notes

Sourced from solid_cable's releases.

v4.1.0

Rails World Edition

Use the channel hash directly instead of rehashing every poll by @npezza93 in rails/solid_cable#85

Memoize cable configuration by @npezza93 in rails/solid_cable#86

Batch writes together by @npezza93 in rails/solid_cable#87

Add encryption support by @npezza93 in rails/solid_cable#88

Update bench app and loadtest script by @npezza93 in rails/solid_cable#90

Bring autotrimming inline with solid cache by @npezza93 in rails/solid_cable#89

Full Changelog: rails/solid_cable@v4.0.2...v4.1.0

v4.0.2

What's Changed

Reset retry counter on each successful poll by @npezza93 in rails/solid_cable#84

Full Changelog: rails/solid_cable@v4.0.1...v4.0.2

v4.0.1

What's Changed

Run ci against different rails versions by @npezza93 in rails/solid_cable#79

Update adapter to handle ActionCable adapterization in 8.2 by @npezza93 in rails/solid_cable#80

Reset reconnect_attempt after successfuly accessing the DB. by @pascalbetz in rails/solid_cable#82

New Contributors

@pascalbetz made their first contribution in rails/solid_cable#82

Full Changelog: rails/solid_cable@v4.0.0...v4.0.1

v4.0.0

What's Changed

Upgrade ci to test against all ruby versions by @npezza93 in rails/solid_cable#76

Drop ruby 3.1 support by @npezza93 in rails/solid_cable#77

Retry if connection fails by @npezza93 in rails/solid_cable#75

Eagerly initialize last_id to avoid skipping messages by @xrav3nz in rails/solid_cable#78

Drop ruby 3.2 support by @npezza93

Harden CI by @npezza93

Add connection timeout error and not established to the list of retryable connection errors by @npezza93

New Contributors

@xrav3nz made their first contribution in rails/solid_cable#78

Full Changelog: rails/solid_cable@v3.0.12...v4.0.0

v3.0.12

What's Changed

Dont broadcast message in compute_if_present to avoid race condition by @npezza93 in rails/solid_cable#72

... (truncated)

Commits

1e4217e disable autotrimming
6bb0bd4 bump version
7e97e8c pass around the actual message
79b9839 Pass the actual messages to broadcast_batch
41b1059 better naming
56f41fe skip duping the current_channels
0585967 actually compress encrypted messages
a1d8b27 Remove channel index since we use channel_hash now
c75d007Description has been truncated

…15 updates Bumps the all-dependencies group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [rails](https://github.com/rails/rails) | `8.1.3` | `8.1.4` | | [sqlite3](https://github.com/sparklemotion/sqlite3-ruby) | `2.5.0` | `2.9.6` | | [puma](https://github.com/puma/puma) | `6.5.0` | `8.0.2` | | [jwt](https://github.com/jwt/ruby-jwt) | `2.10.2` | `3.3.0` | | [solid_cache](https://github.com/rails/solid_cache) | `1.0.6` | `1.0.10` | | [solid_queue](https://github.com/rails/solid_queue) | `1.1.2` | `1.7.0` | | [solid_cable](https://github.com/rails/solid_cable) | `3.0.5` | `4.1.0` | | [bootsnap](https://github.com/rails/bootsnap) | `1.18.4` | `1.26.0` | | [kamal](https://github.com/basecamp/kamal) | `2.4.0` | `2.12.0` | | [thruster](https://github.com/basecamp/thruster) | `0.1.9` | `0.1.26` | | [debug](https://github.com/ruby/debug) | `1.10.0` | `1.11.1` | | [brakeman](https://github.com/presidentbeef/brakeman) | `8.0.5` | `8.1.0` | | [rubocop-rails-omakase](https://github.com/rails/rubocop-rails-omakase) | `1.0.0` | `1.1.0` | | [net-smtp](https://github.com/ruby/net-smtp) | `0.5.1` | `0.5.2` | | [net-imap](https://github.com/ruby/net-imap) | `0.5.4` | `0.6.7` | Updates `rails` from 8.1.3 to 8.1.4 - [Release notes](https://github.com/rails/rails/releases) - [Commits](rails/rails@v8.1.3...v8.1.4) Updates `sqlite3` from 2.5.0 to 2.9.6 - [Release notes](https://github.com/sparklemotion/sqlite3-ruby/releases) - [Changelog](https://github.com/sparklemotion/sqlite3-ruby/blob/main/CHANGELOG.md) - [Commits](sparklemotion/sqlite3-ruby@v2.5.0...v2.9.6) Updates `puma` from 6.5.0 to 8.0.2 - [Release notes](https://github.com/puma/puma/releases) - [Changelog](https://github.com/puma/puma/blob/main/History.md) - [Commits](puma/puma@v6.5.0...v8.0.2) Updates `jwt` from 2.10.2 to 3.3.0 - [Release notes](https://github.com/jwt/ruby-jwt/releases) - [Changelog](https://github.com/jwt/ruby-jwt/blob/main/CHANGELOG.md) - [Commits](jwt/ruby-jwt@v2.10.2...v3.3.0) Updates `solid_cache` from 1.0.6 to 1.0.10 - [Release notes](https://github.com/rails/solid_cache/releases) - [Commits](rails/solid_cache@v1.0.6...v1.0.10) Updates `solid_queue` from 1.1.2 to 1.7.0 - [Release notes](https://github.com/rails/solid_queue/releases) - [Commits](rails/solid_queue@v1.1.2...v1.7.0) Updates `solid_cable` from 3.0.5 to 4.1.0 - [Release notes](https://github.com/rails/solid_cable/releases) - [Commits](rails/solid_cable@v3.0.5...v4.1.0) Updates `bootsnap` from 1.18.4 to 1.26.0 - [Release notes](https://github.com/rails/bootsnap/releases) - [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md) - [Commits](rails/bootsnap@v1.18.4...v1.26.0) Updates `kamal` from 2.4.0 to 2.12.0 - [Release notes](https://github.com/basecamp/kamal/releases) - [Commits](basecamp/kamal@v2.4.0...v2.12.0) Updates `thruster` from 0.1.9 to 0.1.26 - [Changelog](https://github.com/basecamp/thruster/blob/main/CHANGELOG.md) - [Commits](basecamp/thruster@v0.1.9...v0.1.26) Updates `debug` from 1.10.0 to 1.11.1 - [Release notes](https://github.com/ruby/debug/releases) - [Commits](ruby/debug@v1.10.0...v1.11.1) Updates `brakeman` from 8.0.5 to 8.1.0 - [Release notes](https://github.com/presidentbeef/brakeman/releases) - [Changelog](https://github.com/presidentbeef/brakeman/blob/main/CHANGES.md) - [Commits](presidentbeef/brakeman@v8.0.5...v8.1.0) Updates `rubocop-rails-omakase` from 1.0.0 to 1.1.0 - [Release notes](https://github.com/rails/rubocop-rails-omakase/releases) - [Commits](rails/rubocop-rails-omakase@v1.0.0...v1.1.0) Updates `net-smtp` from 0.5.1 to 0.5.2 - [Release notes](https://github.com/ruby/net-smtp/releases) - [Changelog](https://github.com/ruby/net-smtp/blob/master/NEWS.md) - [Commits](ruby/net-smtp@v0.5.1...v0.5.2) Updates `net-imap` from 0.5.4 to 0.6.7 - [Release notes](https://github.com/ruby/net-imap/releases) - [Commits](ruby/net-imap@v0.5.4...v0.6.7) --- updated-dependencies: - dependency-name: rails dependency-version: 8.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: sqlite3 dependency-version: 2.9.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: puma dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: jwt dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: solid_cache dependency-version: 1.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: solid_queue dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: solid_cable dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: bootsnap dependency-version: 1.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: kamal dependency-version: 2.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: thruster dependency-version: 0.1.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: debug dependency-version: 1.11.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: brakeman dependency-version: 8.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: rubocop-rails-omakase dependency-version: 1.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: net-smtp dependency-version: 0.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: net-imap dependency-version: 0.6.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-08T06:25:24Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults
Review profile: CHILL
Plan: Advanced
Run ID: dd890649-c998-4384-9d25-f650dd1b1b34

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot · 2026-10-10T19:10:17Z

Looks like these dependencies are no longer updatable, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Oct 8, 2026

dependabot Bot closed this Oct 10, 2026

dependabot Bot deleted the dependabot/bundler/all-dependencies-152fb05573 branch October 10, 2026 19:10

Navigation Menu

Repository navigation

build(deps): bump the all-dependencies group across 1 directory with 15 updates - #21

build(deps): bump the all-dependencies group across 1 directory with 15 updates#21
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bundler/all-dependencies-152fb05573

dependabot Bot commented on behalf of github Oct 8, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Oct 8, 2026

Review skipped

Uh oh!

dependabot Bot commented on behalf of github Oct 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

8.1.4

Active Support

2.9.6 / 2026-08-11

Security / Stability

Fixed

Improved

2.9.5 / 2026-06-07

Dependencies

Security / Stability

2.9.6 / 2026-08-11

Security / Stability

Fixed

Improved

2.9.5 / 2026-06-07

Dependencies

Security / Stability

2.9.4 / 2026-05-05

2.9.3 / 2026-04-15

2.9.2 / 2026-03-15

2.9.1 / 2026-02-28

v8.0.2

Security advisories

v8.0.1

v8.0.0 - Into the Arena

8.0.2 / 2026-05-27

8.0.1 / 2026-04-27

8.0.0 / 2026-03-27

7.2.1 / 2026-05-27

v3.3.0 (2026-09-11)

v3.2.0 (2026-05-13)

v3.1.2 (2025-06-28)

v3.1.1 (2025-06-24)

v1.0.10

What's Changed

v1.0.9

What's Changed

New Contributors

v1.0.8

What's Changed

New Contributors

v1.0.7

What's Changed

v1.7.0 - batches

What's Changed

New Contributors

v1.6.0 - fiber execution mode (with Async)

What's Changed

New Contributors

v1.5.1

What's Changed

v4.1.0

Rails World Edition

v4.0.2

What's Changed

v4.0.1

What's Changed

New Contributors

v4.0.0

What's Changed

New Contributors

v3.0.12

What's Changed

Uh oh!

coderabbitai Bot commented Oct 8, 2026

Review skipped

Uh oh!

dependabot Bot commented on behalf of github Oct 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 8, 2026 •

edited

Loading