Skip to content

Bump the minor-and-patch group with 5 updates - #378

Open
dependabot[bot] wants to merge 1 commit into
dev_4_0_3from
dependabot/bundler/minor-and-patch-55dfc80e31
Open

Bump the minor-and-patch group with 5 updates#378
dependabot[bot] wants to merge 1 commit into
dev_4_0_3from
dependabot/bundler/minor-and-patch-55dfc80e31

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 5 updates:

Package From To
activerecord-session_store 2.2.0 2.3.0
haml-rails 3.0.0 3.1.0
passenger 6.1.6 6.1.8
concurrent-ruby 1.3.7 1.3.8
rails 8.0.5 8.0.5.1

Updates activerecord-session_store from 2.2.0 to 2.3.0

Release notes

Sourced from activerecord-session_store's releases.

Version 2.3.0

What's Changed

New Contributors

Full Changelog: rails/activerecord-session_store@v2.2.0...v2.3.0

Commits
  • 74011f1 Avoid ruby warning
  • f53dce2 Prepare for 2.3.0
  • 2cfdc4e Merge pull request #166 from chaffeqa/patch-1
  • aab23c9 Add tests to make sure an empty save isn't made
  • d6a5e5e Update active_record_store.rb
  • e548d59 Optimization: prevent empty COMMIT calls
  • 6aa1ffe Merge PR #161
  • 07fd8cb Use model reference from env when it is available
  • d2dcde9 Merge pull request #222
  • 121f9ff Default to request's cookies_same_site_protection option
  • Additional commits viewable in compare view

Updates haml-rails from 3.0.0 to 3.1.0

Changelog

Sourced from haml-rails's changelog.

3.1.0

Features

  • Add Rails 8.1 and Ruby 4.0 support.

  • Add an authentication generator that produces Haml views for rails generate authentication (Rails 8+), generating passwords/new, passwords/edit, and sessions/new templates. #198 (Evan Brooks)

Bug fixes

  • Fix Haml fragment cache dependency detection on Rails 8.1. Rails 8.1 tightened its ERB dependency tracker to only match render calls inside <% %> tags, which stopped changes to a Haml partial from busting the cache of templates that render it. Haml templates now use the :ruby render tracker (available since Rails 7.2), which compiles the template before scanning for render calls. #200, fixes #199 (Nick Schimek)

  • Add Rails 8.1 scaffold templates. The generated scaffold partial now wraps each attribute in a <div> (instead of <p>) to match Rails 8.1's output.

Commits
  • d837c6f Version 3.1.0
  • 1335af8 Add regression test for Haml cache dependency detection
  • 0678214 Merge pull request #200 from NickSchimek/fix/haml-dependency-tracker-rails-8-1
  • 6117d6e Merge pull request #191 from tagliala/chore/strip-trailing-whitespaces
  • d08ed68 Rails 8.1 scaffold templates
  • b392b6c [CI] Use actions/checkout@v7
  • b9c1a09 [CI] CI against Rails 8.1
  • 5276403 [CI] benchmark has been gemified since Ruby 4.0
  • 0c9baa7 [CI] CI against Ruby 4.0
  • 7c7b4d8 Respect the <br>s in the original ERB templates
  • Additional commits viewable in compare view

Updates passenger from 6.1.6 to 6.1.8

Release notes

Sourced from passenger's releases.

Release 6.1.8

Release 6.1.7

Changelog

Sourced from passenger's changelog.

Release 6.1.8

  • [Nginx] Build Nginx dynamic modules against nginx-mod-devel sources on Enterprise Linux. Closes GH-2664.

Release 6.1.7

  • [Nginx] Build Nginx dynamic modules against nginx-mod-devel sources on Enterprise Linux 9. Closes GH-2664.
Commits
  • 445a23a copy oss changes to enterprise
  • ac49773 Fix packages being left behind
  • 28eb169 Fixup apt automation
  • a4b72fa Try to use nginx-dev we build for jammy/bullseye
  • f3264ca create nginx-dev package for jammy/bullseye
  • ffd2547 fix homebrew packaging check
  • b174b9f fix nginx module packaging issues
  • 62d6465 post-release tasks
  • 5c3edb3 include missed file in debian spkg
  • 47f74b8 homebrew match upstream formula
  • Additional commits viewable in compare view

Updates concurrent-ruby from 1.3.7 to 1.3.8

Release notes

Sourced from concurrent-ruby's releases.

v1.3.8

What's Changed

New Contributors

Full Changelog: ruby-concurrency/concurrent-ruby@v1.3.7...v1.3.8

Changelog

Sourced from concurrent-ruby's changelog.

Release v1.3.8 (19 July 2026)

concurrent-ruby:

Commits
  • 0b88d5f Release 1.3.8
  • 0f83a98 Allow to use Concurrent::Map#compute_if_absent in a Ractor (#1109)
  • cc5a32f Programatically set the backtrace_location on exception:
  • See full diff in compare view

Updates rails from 8.0.5 to 8.0.5.1

Release notes

Sourced from rails's releases.

8.0.5.1

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • No changes.

Action Pack

  • No changes.

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

  • No changes.

Active Storage

  • Disable libvips's unfuzzed image loaders and savers.

    libvips flags some of its loaders and savers as "unfuzzed" or "untrusted", meaning they are only safe for trusted content. Active Storage will call Vips.block_untrusted(true) to disable them while booting. An application that needs a specific loader or saver may re-enable it in an initializer.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the minor-and-patch group with 5 updates
6fa4ac4 
Bumps the minor-and-patch group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [activerecord-session_store](https://github.com/rails/activerecord-session_store) | `2.2.0` | `2.3.0` |
| [haml-rails](https://github.com/haml/haml-rails) | `3.0.0` | `3.1.0` |
| [passenger](https://github.com/phusion/passenger) | `6.1.6` | `6.1.8` |
| [concurrent-ruby](https://github.com/ruby-concurrency/concurrent-ruby) | `1.3.7` | `1.3.8` |
| [rails](https://github.com/rails/rails) | `8.0.5` | `8.0.5.1` |


Updates `activerecord-session_store` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/rails/activerecord-session_store/releases)
- [Changelog](https://github.com/rails/activerecord-session_store/blob/main/CHANGELOG.md)
- [Commits](rails/activerecord-session_store@v2.2.0...v2.3.0)

Updates `haml-rails` from 3.0.0 to 3.1.0
- [Changelog](https://github.com/haml/haml-rails/blob/master/CHANGELOG.md)
- [Commits](haml/haml-rails@v3.0.0...v3.1.0)

Updates `passenger` from 6.1.6 to 6.1.8
- [Release notes](https://github.com/phusion/passenger/releases)
- [Changelog](https://github.com/phusion/passenger/blob/stable-6.1/CHANGELOG)
- [Commits](phusion/passenger@release-6.1.6...release-6.1.8)

Updates `concurrent-ruby` from 1.3.7 to 1.3.8
- [Release notes](https://github.com/ruby-concurrency/concurrent-ruby/releases)
- [Changelog](https://github.com/ruby-concurrency/concurrent-ruby/blob/master/CHANGELOG.md)
- [Commits](ruby-concurrency/concurrent-ruby@v1.3.7...v1.3.8)

Updates `rails` from 8.0.5 to 8.0.5.1
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](rails/rails@v8.0.5...v8.0.5.1)

---
updated-dependencies:
- dependency-name: activerecord-session_store
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: haml-rails
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: passenger
  dependency-version: 6.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: concurrent-ruby
  dependency-version: 1.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: rails
  dependency-version: 8.0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Aug 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants