Skip to content

Bump the ruby-security-and-maintenance group across 1 directory with 3 updates - #20

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/api/ruby-security-and-maintenance-7cff9d29b7
Closed

Bump the ruby-security-and-maintenance group across 1 directory with 3 updates#20
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/api/ruby-security-and-maintenance-7cff9d29b7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the ruby-security-and-maintenance group with 3 updates in the /api directory: bootsnap, resend and solid_queue.

Updates bootsnap from 1.24.1 to 1.26.0

Release notes

Sourced from bootsnap's releases.

v1.26.0

What's Changed

  • Handle top level Coverage constant being defined, but without it being the true stdlib coverage module.
  • Fix bootsnap precompile that could generate a corrupted cache entry if an already cached YAML file was modified without changing its size.
  • Workaround a potential Ruby SEGV if Bootsnap.instrumentation raised an error.

v1.25.0

What's Changed

  • Improve YAML parsing cache to more efficiently handle Time, Date and DateTime.

  • Don't invalidate the compile cache when YJIT is toggled. YJIT is a runtime JIT and doesn't change the serialized instruction sequences that are cached, but enabling it (via --yjit, RUBYOPT, or RubyVM::YJIT.enable) adds a +YJIT marker to RUBY_DESCRIPTION ( +YJIT <token> on YJIT_SUPPORT builds), which is part of the cache key. This previously discarded the entire compile cache whenever YJIT was enabled at runtime but not at precompile time (or vice versa). The marker is now stripped before hashing.

  • Fix CompileCache::Native.fetch and .precompile reading a non-String path argument (e.g. a Pathname) with RSTRING_PTR. Regression from 1.24.0.

Full Changelog: rails/bootsnap@v1.24.6...v1.25.0

v1.24.6

What's Changed

  • Fix detection of Ruby bug #22023 on some patch versions of Ruby 3.4, and properly apply the workaround.

Full Changelog: rails/bootsnap@v1.24.5...v1.24.6

v1.24.5

What's Changed

  • No longer load the config file by default when setup is done manually. This is so cli applications like homebrew don't mistakenly load another app's boostnap config.

Full Changelog: rails/bootsnap@v1.24.4...v1.24.5

v1.24.4

What's Changed

  • Fix several compatibility issues with Ruby 4.0.4, particularly the should not compile with coverage error. See #547.
  • Fix Bootsnap.enable_frozen_string_literal to work even when coverage is enabled. Unfortunately only possible on Ruby 4.0.4+. On older rubies if coverage is enabled a warning will be issued and the feature won't work.
  • Reduced cache files header size from 64 to 32 bytes, and got rid of the random padding element.
  • Avoid leaking a private method in Object when testing for Parse.y bugs.

Full Changelog: rails/bootsnap@v1.24.3...v1.24.4

... (truncated)

Changelog

Sourced from bootsnap's changelog.

1.26.0

  • Handle top level Coverage constant being defined, but without it being the true stdlib coverage module.
  • Fix bootsnap precompile that could generate a corrupted cache entry if an already cached YAML file was modified without changing its size.
  • Workaround a potential Ruby SEGV if Bootsnap.instrumentation raised an error.

1.25.0

  • Improve YAML parsing cache to more efficiently handle Time, Date and DateTime.

  • Don't invalidate the compile cache when YJIT is toggled. YJIT is a runtime JIT and doesn't change the serialized instruction sequences that are cached, but enabling it (via --yjit, RUBYOPT, or RubyVM::YJIT.enable) adds a +YJIT marker to RUBY_DESCRIPTION ( +YJIT <token> on YJIT_SUPPORT builds), which is part of the cache key. This previously discarded the entire compile cache whenever YJIT was enabled at runtime but not at precompile time (or vice versa). The marker is now stripped before hashing.

  • Fix CompileCache::Native.fetch and .precompile reading a non-String path argument (e.g. a Pathname) with RSTRING_PTR. Regression from 1.24.0.

1.24.6

  • Fix detection of Ruby bug #22023 on some patch versions of Ruby 3.4, and properly apply the workaround.

1.24.5

  • No longer load the config file by default when setup is done manually. This is so cli applications like homebrew don't mistakenly load another app's boostnap config.

1.24.4

  • Fix several compatibility issues with Ruby 4.0.4, particularly the should not compile with coverage error. See #547.
  • Fix Bootsnap.enable_frozen_string_literal to work even when coverage is enabled. Unfortunately only possible on Ruby 4.0.4+. On older rubies if coverage is enabled a warning will be issued and the feature won't work.
  • Reduced cache files header size from 64 to 32 bytes, and got rid of the random padding element.
  • Avoid leaking a private method in Object when testing for Parse.y bugs.

1.24.3

  • Fix the 1.24.2 workaround to parse Ruby files with UTF-8 even when the LANG environment variable is unset or set to C.

1.24.2

  • Workaround two Ruby bugs in RubyVM::InstructionSequence.compile_file, that were causing files to be loaded with the old Ruby parser instead of Prism, causing issues with some pattern matching syntax. Ref: https://bugs.ruby-lang.org/issues/22023
Commits
  • 67a7290 Release 1.26.0
  • 1881b9a Merge pull request #573 from byroot/same-size-miscompilation
  • 605bbeb Fix precompilation when regenerating an existing cache entry of the same size
  • 5fd59da Merge pull request #569 from OskarEichler/codex/accept-tempfile-fd-zero
  • 70550c7 Merge pull request #568 from OskarEichler/codex/remove-umask-debug-output
  • 8aed2ed Accept tempfile descriptor zero
  • f7457ea Remove umask debug output
  • 9ee62a2 Merge pull request #567 from byroot/rename-mod
  • 7c8178e Handle write(2) being interrupted.
  • 3e755ca atomic_write_cache_file: stop leaking FD on error
  • Additional commits viewable in compare view

Updates resend from 1.3.0 to 1.14.0

Release notes

Sourced from resend's releases.

v1.14.0

What's Changed

New Contributors

Full Changelog: resend/resend-ruby@v1.13.0...v1.14.0

v1.13.0

What's Changed

Full Changelog: resend/resend-ruby@v1.12.0...v1.13.0

v1.12.0

What's Changed

Full Changelog: resend/resend-ruby@v1.11.0...v1.12.0

v1.11.0

What's Changed

Full Changelog: resend/resend-ruby@v1.10.0...v1.11.0

v1.10.0

What's Changed

Full Changelog: resend/resend-ruby@v1.9.0...v1.10.0

... (truncated)

Commits
  • 5d02bb9 chore: bump version to 1.14.0 (#237)
  • 57c8f2e feat(webhooks): add event replay endpoint (#236)
  • f5f9d7d docs(webhooks): add event listing examples (#233)
  • 83b17d5 Add Action Mailbox ingress for receiving emails in Rails (#234)
  • 9011058 feat(contacts): add support for listing contacts by segment (#235)
  • 834b829 chore: bump version to 1.13.0 (#232)
  • c81cfd3 feat(webhooks): add event listing endpoints (#229)
  • 0a20a87 chore: bump version to 1.12.0 (#231)
  • 384c5df feat: add Segments.update method to rename a segment (#230)
  • 909d57a chore(deps): update dependency rubocop to v1.90.0 (#227)
  • Additional commits viewable in compare view

Updates solid_queue from 1.5.0 to 1.7.0

Release notes

Sourced from solid_queue's releases.

v1.7.0 - batches

This is a big one! Solid Queue finally supports job batches thanks to @​jpcamara. Check the README for more details about how to use these. This took ages despite being a very requested feature 😅 Big thanks to @​jpcamara for his patience, refinements and production-app tests!

What's Changed

New Contributors

Full Changelog: rails/solid_queue@v1.6.0...v1.7.0

v1.6.0 - fiber execution mode (with Async)

A long-awaited feature thanks to @​crmne on this release: instead of using a thread pool to run jobs in multiple threads per works, you can now use fibers on a single fiber reactor thread. To use this, you just need to specify the number of fibers instead of the number of threads in your worker configuration, like this:

workers:
  - queues: "api*"
    fibers: 100
    polling_interval: 0.05

It uses Async under the hood, so you need to have that as a dependency for it to work. Also, you need to be using fiber isolation in Rails (config.active_support.isolation_level`` = :fiber).

This can be very useful for I/O-bound workloads, such as those involving LLM calls.

What's Changed

New Contributors

Full Changelog: rails/solid_queue@v1.5.1...v1.6.0

v1.5.1

What's Changed

... (truncated)

Commits
  • e2b5384 Bump solid_queue to 1.7.0
  • 5352228 Reset pooled connections when flipping the batches schema in tests
  • 112bb1c Refine batch support after a full review
  • 1bcac83 Add batch support
  • fcb5f7a Name the supervisor's stop checkpoint and simplify its lifecycle
  • 124176a Honour TERM received during supervisor boot before forking workers
  • 174cb07 Protect the shutdown reap from release failures too
  • 0526401 Replace terminated forks even if releasing their claimed jobs fails
  • 6816e52 Include the error in fail_many_claimed events and document recovery
  • fc5fb59 Wait longer for the supervisor to fail the killed worker's job
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Sep 1, 2026
@netlify

netlify Bot commented Sep 1, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for hafa-code canceled.

Name Link
🔨 Latest commit c9fb1b7
🔍 Latest deploy log https://app.netlify.com/projects/hafa-code/deploys/6aa562ad11a401000869479c

@dependabot
dependabot Bot force-pushed the dependabot/bundler/api/ruby-security-and-maintenance-7cff9d29b7 branch from a7b5cf7 to d96ea12 Compare September 5, 2026 14:32
@dependabot
Bump the ruby-security-and-maintenance group across 1 directory with …
c9fb1b7 
…3 updates

Bumps the ruby-security-and-maintenance group with 3 updates in the /api directory: [bootsnap](https://github.com/rails/bootsnap), [resend](https://github.com/resend/resend-ruby) and [solid_queue](https://github.com/rails/solid_queue).


Updates `bootsnap` from 1.24.1 to 1.26.0
- [Release notes](https://github.com/rails/bootsnap/releases)
- [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md)
- [Commits](rails/bootsnap@v1.24.1...v1.26.0)

Updates `resend` from 1.3.0 to 1.14.0
- [Release notes](https://github.com/resend/resend-ruby/releases)
- [Changelog](https://github.com/resend/resend-ruby/blob/main/CHANGELOG.md)
- [Commits](resend/resend-ruby@v1.3.0...v1.14.0)

Updates `solid_queue` from 1.5.0 to 1.7.0
- [Release notes](https://github.com/rails/solid_queue/releases)
- [Commits](rails/solid_queue@v1.5.0...v1.7.0)

---
updated-dependencies:
- dependency-name: bootsnap
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-security-and-maintenance
- dependency-name: resend
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-security-and-maintenance
- dependency-name: solid_queue
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-security-and-maintenance
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bundler/api/ruby-security-and-maintenance-7cff9d29b7 branch from d96ea12 to c9fb1b7 Compare September 12, 2026 14:33
@coderabbitai

coderabbitai Bot commented Sep 12, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: b214b282-6d1c-4150-9b3e-8b8ba045d6e0

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot @github

dependabot Bot commented on behalf of github Sep 19, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 19, 2026
@dependabot
dependabot Bot deleted the dependabot/bundler/api/ruby-security-and-maintenance-7cff9d29b7 branch September 19, 2026 14:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants