Skip to content

Bump the bundler group with 3 updates - #75

Merged
dduugg merged 1 commit into
mainfrom
dependabot/bundler/bundler-3f95e54116
Sep 1, 2026
Merged

Bump the bundler group with 3 updates#75
dduugg merged 1 commit into
mainfrom
dependabot/bundler/bundler-3f95e54116

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the bundler group with 3 updates: activejob, rubyzip and sidekiq.

Updates activejob from 8.1.3 to 8.1.3.1

Release notes

Sourced from activejob's releases.

8.1.3.1

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • No changes.

Action Pack

  • No changes.

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

  • No changes.

Active Storage

  • Disable libvips's unfuzzed image loaders and savers.

    libvips flags some of its loaders and savers as "unfuzzed" or "untrusted", meaning they are only safe for trusted content. Active Storage will call Vips.block_untrusted(true) to disable them while booting. An application that needs a specific loader or saver may re-enable it in an initializer.

... (truncated)

Changelog

Sourced from activejob's changelog.

Rails 8.1.3.1 (July 29, 2026)

  • No changes.
Commits

Updates rubyzip from 3.4.1 to 3.5.0

Release notes

Sourced from rubyzip's releases.

v3.5.0

Version 3.5.0

The 3.5.x line adds the ability to set a Decrypter per-Entry as opposed to only per-InputStream. See README.md for details.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

Changelog

Sourced from rubyzip's changelog.

3.5.0 (2026-08-18)

  • Fix the link to Ruby doc in README to the latest version. #670
  • Support passing decrypter to encrypted entry via get_input_stream. #667
Commits
  • 5f3165c Update Changelog for release.
  • ac389c8 Fix the link to Ruby doc in README to the latest version.
  • 4209b02 Clarify README instructions for storing non-English filenames as UTF-8 for co...
  • c5b4023 Document per-Entry decryption in the README.
  • 7f9214f Bump version minor number due to new feature.
  • 69ee96b Support passing decrypter to encrypted entry via get_input_stream
  • See full diff in compare view

Updates sidekiq from 8.1.6 to 8.1.7

Changelog

Sourced from sidekiq's changelog.

8.1.7

  • Forward compatibililty with Active Job 8.1 #7019
  • Many minor fixes and test improvements [hammadxcm]
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the bundler group with 3 updates: [activejob](https://github.com/rails/rails), [rubyzip](https://github.com/rubyzip/rubyzip) and [sidekiq](https://github.com/sidekiq/sidekiq).


Updates `activejob` from 8.1.3 to 8.1.3.1
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.3.1/activejob/CHANGELOG.md)
- [Commits](rails/rails@v8.1.3...v8.1.3.1)

Updates `rubyzip` from 3.4.1 to 3.5.0
- [Release notes](https://github.com/rubyzip/rubyzip/releases)
- [Changelog](https://github.com/rubyzip/rubyzip/blob/main/Changelog.md)
- [Commits](rubyzip/rubyzip@v3.4.1...v3.5.0)

Updates `sidekiq` from 8.1.6 to 8.1.7
- [Changelog](https://github.com/sidekiq/sidekiq/blob/main/Changes.md)
- [Commits](sidekiq/sidekiq@v8.1.6...v8.1.7)

---
updated-dependencies:
- dependency-name: activejob
  dependency-version: 8.1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: rubyzip
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: sidekiq
  dependency-version: 8.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Sep 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 1, 2026 08:58
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Sep 1, 2026
@github-project-automation github-project-automation Bot moved this to Triage in Modularity Sep 1, 2026
@dduugg
dduugg merged commit 71c43ae into main Sep 1, 2026
10 checks passed
@dduugg
dduugg deleted the dependabot/bundler/bundler-3f95e54116 branch September 1, 2026 17:39
@github-project-automation github-project-automation Bot moved this from Triage to Done in Modularity Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

1 participant