Skip to content

Bump activerecord from 6.1.4.1 to 7.1.5.2 - #499

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bundler/activerecord-7.1.5.2
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bundler/activerecord-7.1.5.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Contributor

Bumps activerecord from 6.1.4.1 to 7.1.5.2.

Release notes

Sourced from activerecord's releases.

7.1.5.2

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • Call inspect on ids in RecordNotFound error

    [CVE-2025-55193]

    Gannon McGibbon, John Hawthorn

Action View

  • No changes.

Action Pack

  • No changes.

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

  • No changes.

Active Storage

Remove dangerous transformations

[CVE-2025-24293]

... (truncated)

Commits
  • ddb56de Preparing for 7.1.5.2 release
  • b279e04 Update CHANGELOGs
  • 3beef20 Call inspect on ids in RecordNotFound error
  • 14c115b Preparing for 7.1.5.1 release
  • 8984f4c Revert "Merge pull request #53484 from zzak/query_cache-config-disable"
  • 30f7974 Revert "Merge pull request #53494 from zzak/re-53492"
  • 625ec92 Preparing for 7.1.5 release
  • d78c6e4 Merge pull request #53494 from zzak/re-53492
  • e60b786 Merge pull request #53484 from zzak/query_cache-config-disable
  • 3ddbd08 Merge remote-tracking branch 'origin/7-1-sec' into 7-1-stable
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file major ruby Pull requests that update ruby code labels Jul 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/bundler/activerecord-7.1.5.2 branch from 57e7f23 to 323b996 Compare July 24, 2026 05:11
Bumps [activerecord](https://github.com/rails/rails) from 6.1.4.1 to 7.1.5.2.
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.3.1/activerecord/CHANGELOG.md)
- [Commits](rails/rails@v6.1.4.1...v7.1.5.2)

---
updated-dependencies:
- dependency-name: activerecord
  dependency-version: 7.1.5.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bundler/activerecord-7.1.5.2 branch from 323b996 to 0daacd6 Compare July 31, 2026 11:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file major ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants