Skip to content

Bump the ruby-security-and-maintenance group across 1 directory with 3 updates - #11

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/api/ruby-security-and-maintenance-50949148e4
Closed

Bump the ruby-security-and-maintenance group across 1 directory with 3 updates#11
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/api/ruby-security-and-maintenance-50949148e4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 7, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the ruby-security-and-maintenance group with 3 updates in the /api directory: bootsnap, resend and solid_queue.

Updates bootsnap from 1.24.1 to 1.24.6

Release notes

Sourced from bootsnap's releases.

v1.24.6

What's Changed

  • Fix detection of Ruby bug #22023 on some patch versions of Ruby 3.4, and properly apply the workaround.

Full Changelog: rails/bootsnap@v1.24.5...v1.24.6

v1.24.5

What's Changed

  • No longer load the config file by default when setup is done manually. This is so cli applications like homebrew don't mistakenly load another app's boostnap config.

Full Changelog: rails/bootsnap@v1.24.4...v1.24.5

v1.24.4

What's Changed

  • Fix several compatibility issues with Ruby 4.0.4, particularly the should not compile with coverage error. See #547.
  • Fix Bootsnap.enable_frozen_string_literal to work even when coverage is enabled. Unfortunately only possible on Ruby 4.0.4+. On older rubies if coverage is enabled a warning will be issued and the feature won't work.
  • Reduced cache files header size from 64 to 32 bytes, and got rid of the random padding element.
  • Avoid leaking a private method in Object when testing for Parse.y bugs.

Full Changelog: rails/bootsnap@v1.24.3...v1.24.4

v1.24.3

  • Fix the 1.24.2 workaround to parse Ruby files with UTF-8 even when the LANG environment variable is unset or set to C.

Full Changelog: rails/bootsnap@v1.24.2...v1.24.3

v1.24.2

What's Changed

  • Workaround two Ruby bugs in RubyVM::InstructionSequence.compile_file, that were causing files to be loaded with the old Ruby parser instead of Prism, causing issues with some pattern matching syntax. Ref: https://bugs.ruby-lang.org/issues/22023

Full Changelog: rails/bootsnap@v1.24.1...v1.24.2

Changelog

Sourced from bootsnap's changelog.

1.24.6

  • Fix detection of Ruby bug #22023 on some patch versions of Ruby 3.4, and properly apply the workaround.

1.24.5

  • No longer load the config file by default when setup is done manually. This is so cli applications like homebrew don't mistakenly load another app's boostnap config.

1.24.4

  • Fix several compatibility issues with Ruby 4.0.4, particularly the should not compile with coverage error. See #547.
  • Fix Bootsnap.enable_frozen_string_literal to work even when coverage is enabled. Unfortunately only possible on Ruby 4.0.4+. On older rubies if coverage is enabled a warning will be issued and the feature won't work.
  • Reduced cache files header size from 64 to 32 bytes, and got rid of the random padding element.
  • Avoid leaking a private method in Object when testing for Parse.y bugs.

1.24.3

  • Fix the 1.24.2 workaround to parse Ruby files with UTF-8 even when the LANG environment variable is unset or set to C.

1.24.2

  • Workaround two Ruby bugs in RubyVM::InstructionSequence.compile_file, that were causing files to be loaded with the old Ruby parser instead of Prism, causing issues with some pattern matching syntax. Ref: https://bugs.ruby-lang.org/issues/22023
Commits
  • 026e183 Release 1.24.6
  • 263e346 Merge pull request #556 from byroot/remove-canary
  • 7c31cd8 Check for [Bug #22023] by checking Ruby version rather than a canary
  • 54eba76 Merge pull request #554 from byroot/namespace-overflow
  • fe963d5 bs_cache_path: account for namespace length
  • 7b42db6 Merge pull request #553 from arpitjain099/chore/declare-workflow-perms
  • 113b184 ci: add permissions: contents: read to ci
  • d6ca050 Release 1.24.5
  • 579aa0e Merge pull request #552 from byroot/fix-bootsnap-config
  • 2884e89 Only load config file is directed to by .setup
  • Additional commits viewable in compare view

Updates resend from 1.3.0 to 1.7.0

Release notes

Sourced from resend's releases.

v1.7.0

What's Changed

New Contributors

Full Changelog: resend/resend-ruby@v1.6.0...v1.7.0

v1.6.0

What's Changed

New Contributors

Full Changelog: resend/resend-ruby@v1.5.0...v1.6.0

v1.5.0

What's Changed

Full Changelog: resend/resend-ruby@v1.4.0...v1.5.0

v1.4.0

What's Changed

... (truncated)

Changelog

Sourced from resend's changelog.

[1.7.0] - 2026-07-31

Added

  • Suppressions - New Resend::Suppressions module to add (add), list (list), retrieve (get), and remove (remove) suppressed email addresses. get and remove accept either a suppression ID or the suppressed email address. list supports origin filtering (bounce, complaint, manual) plus the standard limit/after/before pagination params. New Resend::Suppressions::Batch module handles up to 100 addresses at a time via add and remove. (#208)

Changed

  • ⚠️ 404 responses now raise Resend::Error::NotFoundError instead of Resend::Error::InvalidRequestError, matching the documented intent of the (previously unreachable) NotFoundError class. Code rescuing Resend::Error or Resend::Error::ServerError is unaffected; code rescuing InvalidRequestError specifically to catch 404s should rescue NotFoundError instead. (#210)

[1.6.0] - 2026-07-09

Added

  • OAuth grants - New Resend::OAuthGrants module to list (GET /oauth/grants) and revoke (DELETE /oauth/grants/:id) OAuth grants. list supports the standard limit/after/before pagination params. (#197)
  • Domain claims - New Resend::Domains::Claims module to claim a domain verified by another account (create), retrieve the latest claim (get), and trigger verification/ownership transfer (verify). (#194)

[1.0.0] - 2025-10-31

Overview

This major release introduces breaking changes to the Contacts API and deprecates the Audiences API in favor of Segments. If you only use the SDK for sending emails or the Audiences API, you can upgrade to v1.0.0 without any code changes. The breaking changes are limited to the Contacts API only.

⚠️ BREAKING CHANGES

Contacts API Changes

  • ⚠️ Change Contacts.create to accept hash parameter with optional audience_id - Previously required audience_id in params, now it's optional. Supports global contacts.
  • ⚠️ Change Contacts.get from get(audience_id, id) to get(params) - Now accepts a hash with optional audience_id and required id or email. Raises ArgumentError: "Missing \id` or `email` field"` when neither is provided.
  • ⚠️ Change Contacts.list from list(audience_id, params = {}) to list(params = {}) - Now accepts a hash with optional audience_id and pagination params
  • ⚠️ Change Contacts.remove from remove(audience_id, contact_id) to remove(params) - Now accepts a hash with optional audience_id and required id or email. Raises ArgumentError: "Missing \id` or `email` field"` when neither is provided.
  • ⚠️ Change Contacts.update error message - Error changed from "id or email is required" to "Missing \id` or `email` field"` to match Node.js SDK format
  • ⚠️ Change Contacts.update to accept optional audience_id - Previously required audience_id in params, now it's optional

Before (v0.x):

# Methods used positional arguments and required audience_id
Resend::Contacts.create(audience_id: "aud_123", email: "user@example.com", first_name: "John")
contact = Resend::Contacts.get("aud_123", "contact_123")
contacts = Resend::Contacts.list("aud_123")
contacts = Resend::Contacts.list("aud_123", limit: 10)
Resend::Contacts.update(audience_id: "aud_123", id: "contact_123", first_name: "Jane")
Resend::Contacts.remove("aud_123", "contact_123")

After (v1.0.0):

# Methods use hash parameters and support optional audience_id
</tr></table>

... (truncated)

Commits
  • 0bdf01e chore: bump version to 1.7.0 (#213)
  • 2e17892 chore(deps-dev): bump rails-html-sanitizer from 1.7.0 to 1.7.1 (#207)
  • 958635c chore(deps-dev): bump websocket-driver from 0.8.1 to 0.8.2 (#205)
  • f7aca8f chore(deps-dev): bump loofah from 2.25.1 to 2.25.2 (#204)
  • 8c49621 chore(deps): update dependency httparty to "~> 0.24.0" (#153)
  • db60773 chore(deps): update dependency rails to v8.1.3.1 (#211)
  • f7cca37 fix(errors): map 404 to NotFoundError instead of InvalidRequestError (#210)
  • aff0165 feat: add suppressions endpoints (#208)
  • 3368cf5 chore(deps-dev): bump websocket-driver from 0.8.0 to 0.8.1 (#202)
  • 1bc2a0d chore: update sync_prs_to_linear action hash to a54e4298f0 (#201)
  • Additional commits viewable in compare view

Updates solid_queue from 1.5.0 to 1.6.0

Release notes

Sourced from solid_queue's releases.

v1.6.0 - fiber execution mode (with Async)

A long-awaited feature thanks to @​crmne on this release: instead of using a thread pool to run jobs in multiple threads per works, you can now use fibers on a single fiber reactor thread. To use this, you just need to specify the number of fibers instead of the number of threads in your worker configuration, like this:

workers:
  - queues: "api*"
    fibers: 100
    polling_interval: 0.05

It uses Async under the hood, so you need to have that as a dependency for it to work. Also, you need to be using fiber isolation in Rails (config.active_support.isolation_level`` = :fiber).

This can be very useful for I/O-bound workloads, such as those involving LLM calls.

What's Changed

New Contributors

Full Changelog: rails/solid_queue@v1.5.1...v1.6.0

v1.5.1

What's Changed

New Contributors

Full Changelog: rails/solid_queue@v1.5.0...v1.5.1

Commits
  • 86f3d92 Bump solid_queue to 1.6.0
  • 2a479f6 Document how to update dynamic recurring tasks
  • 7f59932 Roll back transactions leaked by killed job threads in tests
  • 9c0d5d3 Reorganize the execution pools under SolidQueue::Pool
  • 30b92ca Move the fiber worker checks to Configuration
  • 6e27144 Extract a base class for the execution pools
  • 08e6098 Rescue only the code that runs with capacity reserved when posting
  • 000e8ba Report errors escaping the execution future
  • 5270cc8 Simplify worker initialization
  • 50468fa Start the fiber pool's reactor lazily on first use
  • Additional commits viewable in compare view

Greptile Summary

The PR updates the API’s Ruby dependency set.

  • Raises Resend’s constraint to 1.7.
  • Updates Bootsnap to 1.24.6 and Solid Queue to 1.6.0.
  • Refreshes associated transitive dependencies and checksums.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed
Filename Overview
api/Gemfile Raises the Resend dependency constraint from the 1.x series starting at 1.0 to the 1.7 series.
api/Gemfile.lock Resolves the requested Bootsnap, Resend, and Solid Queue updates alongside compatible transitive dependency changes.

Reviews (2): Last reviewed commit: "Bump the ruby-security-and-maintenance g..." | Re-trigger Greptile

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Aug 7, 2026
@netlify

netlify Bot commented Aug 7, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for hafa-code canceled.

Name Link
🔨 Latest commit ee2fc7f
🔍 Latest deploy log https://app.netlify.com/projects/hafa-code/deploys/6a773e349caabf00088cf368

@dependabot
Bump the ruby-security-and-maintenance group across 1 directory with …
ee2fc7f 
…3 updates

Bumps the ruby-security-and-maintenance group with 3 updates in the /api directory: [bootsnap](https://github.com/rails/bootsnap), [resend](https://github.com/resend/resend-ruby) and [solid_queue](https://github.com/rails/solid_queue).


Updates `bootsnap` from 1.24.1 to 1.24.6
- [Release notes](https://github.com/rails/bootsnap/releases)
- [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md)
- [Commits](rails/bootsnap@v1.24.1...v1.24.6)

Updates `resend` from 1.3.0 to 1.7.0
- [Release notes](https://github.com/resend/resend-ruby/releases)
- [Changelog](https://github.com/resend/resend-ruby/blob/main/CHANGELOG.md)
- [Commits](resend/resend-ruby@v1.3.0...v1.7.0)

Updates `solid_queue` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/rails/solid_queue/releases)
- [Commits](rails/solid_queue@v1.5.0...v1.6.0)

---
updated-dependencies:
- dependency-name: bootsnap
  dependency-version: 1.24.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-security-and-maintenance
- dependency-name: resend
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-security-and-maintenance
- dependency-name: solid_queue
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-security-and-maintenance
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bundler/api/ruby-security-and-maintenance-50949148e4 branch from c8da4c3 to ee2fc7f Compare August 8, 2026 14:33
@dependabot dependabot Bot changed the title Bump the ruby-security-and-maintenance group in /api with 3 updates Bump the ruby-security-and-maintenance group across 1 directory with 3 updates Aug 8, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 22, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 22, 2026
@dependabot
dependabot Bot deleted the dependabot/bundler/api/ruby-security-and-maintenance-50949148e4 branch August 22, 2026 14:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants