build(deps): Bump the prod-minor-patch group in /ruby with 2 updates

[dependabot]

Bumps the prod-minor-patch group in /ruby with 2 updates: excon and httparty.

Updates excon from 1.7.1 to 1.7.2

Changelog

Sourced from excon's changelog.

1.7.2 2026-09-28

• updated bundled certs

Commits

• 920d5e8 v1.7.2
• ee10e36 update bundled certs
• See full diff in compare view

Updates httparty from 0.24.2 to 0.24.3

Release notes

Sourced from httparty's releases.

v0.24.3

Full Changelog: jnunemaker/httparty@v0.24.2...v0.24.3

Bug Fixes

• Support the json gem 3.x, which removed the quirks_mode parser option. (#846)
• Fix the MultiXml deprecation warning with multi_xml 0.9+. (#838, thanks @​robzolkos)
• A UTF-8 byte order mark (BOM) is now stripped from responses that don't declare a charset. Before, a BOM-prefixed JSON response without a charset raised JSON::ParserError. (#852)
• A response body that is only a BOM, or a BOM followed by whitespace, now parses to nil like any other blank body, instead of raising or returning the whitespace. (#851, thanks @​januththedev)
• parsed_response and response.body are separate strings for UTF-8 text responses, as in 0.24.2. (#854)

Performance

• raise_on with a Range (e.g. 500..599) checks the range directly instead of building a regex for every code in it. (#843, thanks @​MaxLap)
• Parsing allocates fewer objects per response. (#854)

Behavior Changes

For text/plain, text/html and text/csv responses without a charset, a leading BOM is now removed from parsed_response, matching what already happened when charset=utf-8 was set. If you worked around the BOM by matching it (for example a CSV header of "\xEF\xBB\xBFid"), that match will now be "id". Workarounds like delete_prefix("") keep working.

These are unchanged: response.body and to_s (raw bytes), application/octet-stream and other formats HTTParty doesn't parse, and bodies declared in other charsets such as ISO-8859-1 or UTF-16.

Other

• Specs no longer need a UTF-8 locale. (#853)
• README and example updates. (#836, thanks @​harland-davis; #837, thanks @​zed-0xff)

Commits

• 781fc54 Merge pull request #855 from jnunemaker/release-0.24.3
• 354efac Merge pull request #856 from jnunemaker/fix-apache-formatter-time-flake
• d0a08e5 Freeze time in the Apache formatter spec
• f9e61f8 Release 0.24.3
• 215ca29 Merge pull request #854 from jnunemaker/fix/utf8-parsed-response-copy
• 8445772 Check for the BOM without allocating
• 11ac82c Clarify which encodings Parser#parse copies and cover more paths
• 5276cbd Return a copy of UTF-8 bodies from Parser#parse again
• cd10b5e Merge pull request #852 from jnunemaker/fix/bom-without-charset
• 10d81c4 Merge pull request #853 from jnunemaker/fix-spec-fixture-encoding
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions