Skip to content

Bump the bundler-dependencies group across 1 directory with 10 updates - #3053

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/bundler-dependencies-2cd7a96fc7
Open

Bump the bundler-dependencies group across 1 directory with 10 updates#3053
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/bundler-dependencies-2cd7a96fc7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the bundler-dependencies group with 6 updates in the / directory:

Package From To
faker 3.6.1 3.8.0
globalid 1.3.0 1.4.0
sentry-rails 6.5.0 6.6.2
standard 1.54.0 1.56.0
selenium-webdriver 4.41.0 4.46.0
timecop 0.9.10 0.9.11

Updates faker from 3.6.1 to 3.8.0

Release notes

Sourced from faker's releases.

v3.8.0

Changes

Enabling lazy load

This version introduces lazy loading. It means users will only pay for what they use. Faker loads 2x faster when it's enabled.

Lazy loading the generators is disabled by default. To enable it, choose one of the configuration options below:

1 - Set lazy load as a Faker Config

Faker::Config.lazy_loading = true

2 - Set lazy load as an environment variable

FAKER_LAZY_LOAD = 1

We hope you get to see the improvement by enabling it. Please file a bug report for any issues!

Thanks to @​jeremyevans for the mentoring, and to @​thdaraujo for pairing and code reviews.

Full Changelog: faker-ruby/faker@v3.7.1...v3.8.0

v3.7.1

Thanks to all contributors!

Drops support for Ruby 3.1

What's changed

Update development dependencies

New Contributors

Full Changelog: faker-ruby/faker@v3.6.1...v3.7.1

Changelog

Sourced from faker's changelog.

v3.8.0 (2026-04-16)

Enabling lazy load

This version introduces lazy loading. It means users will only pay for what they use. Faker loads 2x faster when it's enabled.

Lazy loading the generators is disabled by default. To enable it, choose one of the configuration options below:

1 - Set lazy load as a Faker Config

Faker::Config.lazy_loading = true

2 - Set lazy load as an environment variable

FAKER_LAZY_LOAD = 1

We hope you get to see the improvement by enabling it. Please file a bug report for any issues!

Thanks to @​jeremyevans for the mentoring, and to @​thdaraujo for pairing and code reviews.

Full Changelog: faker-ruby/faker@v3.7.1...v3.8.0

v3.7.1 (2026-04-14)

Thanks to all contributors!

Drops support for Ruby 3.1

What's changed

Update development dependencies

New Contributors

... (truncated)

Commits

Updates globalid from 1.3.0 to 1.4.0

Release notes

Sourced from globalid's releases.

v1.4.0

What's Changed

New Contributors

Full Changelog: rails/globalid@v1.3.0...v1.4.0

Commits
  • c81267b Release 1.4.0
  • ce280b7 Frozen string literals
  • 9325789 Merge pull request #203 from xijo/support_model_class_override_for_custom_loc...
  • 241657b Allow custom locators to override model class derivation
  • dc5bc56 Merge pull request #204 from paulRbr/dont-constantize-model-when-not-needed
  • 2649897 Don't try to constantize GID's class too soon
  • 018ccf1 Merge pull request #202 from Drowze/swappable-uri-parser
  • 0f2efb5 Change the underlying URI parser (from RFC2396 to RFC3986)
  • 4fd30dd Merge pull request #206 from rosa/fetch
  • 948503f Add GlobalID::Locator.fetch with distinct not-found and unavailable errors
  • Additional commits viewable in compare view

Updates sentry-rails from 6.5.0 to 6.6.2

Changelog

Sourced from sentry-rails's changelog.

6.6.2

Bug Fixes 🐛

6.6.1

Bug Fixes 🐛

6.6.0

New Features ✨

  • (yabeda) Add sentry-yabeda adapter gem by @​dingsdax in #2925

    There's a new sentry-yabeda gem that integrates Sentry Metrics with Yabeda. Add the new gem to your Gemfile:

    gem "sentry-yabeda"

    Initialize Sentry with metrics enabled. The Yabeda adapter registers itself automatically when sentry-yabeda is required — there's no extra setup:

    Sentry.init do |config|
  config.dsn = ENV["SENTRY_DSN"]
  config.enable_metrics = true
end

  • Add release detection from Kamal deployment by @​t27duck in #2895

Bug Fixes 🐛

Internal Changes 🔧

We made some memory performance and caching improvements with the help of pi-autoresearch. Enjoy the lower overhead!

... (truncated)

Commits

Updates sentry-ruby from 6.5.0 to 6.6.2

Changelog

Sourced from sentry-ruby's changelog.

6.6.2

Bug Fixes 🐛

6.6.1

Bug Fixes 🐛

6.6.0

New Features ✨

  • (yabeda) Add sentry-yabeda adapter gem by @​dingsdax in #2925

    There's a new sentry-yabeda gem that integrates Sentry Metrics with Yabeda. Add the new gem to your Gemfile:

    gem "sentry-yabeda"

    Initialize Sentry with metrics enabled. The Yabeda adapter registers itself automatically when sentry-yabeda is required — there's no extra setup:

    Sentry.init do |config|
  config.dsn = ENV["SENTRY_DSN"]
  config.enable_metrics = true
end

  • Add release detection from Kamal deployment by @​t27duck in #2895

Bug Fixes 🐛

Internal Changes 🔧

We made some memory performance and caching improvements with the help of pi-autoresearch. Enjoy the lower overhead!

... (truncated)

Commits
  • 3e2219c release: 6.6.2
  • 7c26095 fix(metrics): Dup attributes in capture_metric (#2965)
  • 3a55ed2 release: 6.6.1
  • 129ada3 fix: guard TelemetryEventBuffer against re-entrant mutex acquisition (#2964)
  • 1754a7f release: 6.6.0
  • af610cd fix(stacktrace): stop leaking internal frame state into event payload (#2962)
  • 427612b fix(tests): proper dummy transport clean up for hub cloning (#2957)
  • 3b64cc2 feat(yabeda): Add sentry-yabeda adapter gem (#2925)
  • f6e0ad1 perf: Use FilenameCache in profilers (#2919)
  • e2a073a perf: Add FilenameCache to cache compute_filename results (#2904)
  • Additional commits viewable in compare view

Updates standard from 1.54.0 to 1.56.0

Changelog

Sourced from standard's changelog.

1.56.0

1.55.0

Commits
  • d695ba0 🏆⚽️ v1.56.0
  • 86a92fa Merge pull request #823 from standardrb/upgrade-2026-07-15
  • dfcaef8 Fixes Parallel's overzealous update
  • 5e68710 Updates rubocop to 1.88
  • 95f959b Merge pull request #822 from standardrb/dependabot/bundler/ruby-lsp-0.26.10
  • 42c9d35 Bump ruby-lsp from 0.26.9 to 0.26.10
  • 79cd977 Merge pull request #818 from standardrb/dependabot/bundler/language_server-pr...
  • 3011204 Bump language_server-protocol from 3.17.0.5 to 3.17.0.6
  • 505e8e6 Merge pull request #797 from standardrb/dependabot/bundler/ruby-lsp-0.26.9
  • af5498a Merge pull request #816 from standardrb/dependabot/github_actions/step-securi...
  • Additional commits viewable in compare view

Updates selenium-webdriver from 4.41.0 to 4.46.0

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.46.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

... (truncated)

Changelog

Sourced from selenium-webdriver's changelog.

4.46.0 (2026-07-10)

  • Support CDP versions: v148, v149, v150
  • trim whitespace around NO_PROXY entries (#17565)
  • add ClientConfig for HTTP client customization (#17699)
  • generate the BiDi protocol layer from the shared binding-neutral schema (#17731)

4.45.0 (2026-06-15)

  • Support CDP versions: v147, v148, v149
  • deprecate curb http client support (#17443)
  • move Ruby bindings to use typescript get attribute atom (#17524)
  • Move atoms to use the typescript versions (#17532)
  • deprecate Chromium Profile classes (#17557)
  • update bazel test tags (#17558)
  • separate concerns between Service, DriverFinder, and Options (#17564)
  • fix using environment variables to set drivers (#17571)
  • create more obvious test guard keywords as aliases (#17636)

4.44.0 (2026-05-12)

  • Support CDP versions: v146, v147, v148
  • Modern Firefox does not like both the -v and --log flags at the same time (#17412)
  • Fix credential issue with private key (#17188)

4.43.0 (2026-04-09)

  • Support CDP versions: v145, v146, v147

4.42.0 (2026-04-08)

  • Support CDP versions: v144, v145, v146
Commits
  • df5a634 [build] Prepare for release of selenium-4.46.0 (#17763)
  • ee4057c Add guidance for testing conventions in each language (#16734)
  • 6283602 [rb] generate the BiDi protocol layer from the shared binding-neutral schema ...
  • 39394dd [rb] guard flaky safari test
  • 6f7ddb3 [rb] Add copyright header for client_config.rbs (#17722)
  • cab142e [rb] add ClientConfig for HTTP client customization (#17699)
  • ea8ad9b [build] add copyright headers to rbs, pyi, ts, mjs, and erb files (#17720)
  • c0b8ff6 [rb] trim whitespace around NO_PROXY entries (#17565)
  • 54ad310 [build] Automated Browser Version Update (#17687)
  • 945692a [build] Reset versions to nightly after 4.45.0 release
  • Additional commits viewable in compare view

Updates timecop from 0.9.10 to 0.9.11

Changelog

Sourced from timecop's changelog.

v0.9.11

  • Fix Time.new keyword arguments on JRuby 10 (#443)
  • Fix time-only DateTime.parse (HH:MM format) incorrectly using host clock under freeze (#440)
  • Require Ruby >= 2.1.0 (#423)
  • Revert travel_offset precision change (#430)
Commits
  • b3c9a5a get ready for our next release 0.9.11 (#444)
  • 4e84492 Fix Time.new keyword arguments on JRuby 10 (#443)
  • b06405e (434) strptime_with_mock_date :: Fix year boundary (#437)
  • bb4a3c1 Fix time-only DateTime.parse under freeze (#440)
  • e4bba8c Improve and fix CI (#439)
  • d695c6f Require Ruby >= 2.1.0 (#423)
  • ce3e6bb Revert "Calculate travel_offset to align with the precision of argument to Ti...
  • 477ce9a add ruby 3.3 to ci matrix (#429)
  • e05c2c0 Calculate travel_offset to align with the precision of argument to Timecop.tr...
  • See full diff in compare view

Updates actionpack from 8.1.3 to 8.1.3.1

Release notes

Sourced from actionpack's releases.

8.1.3.1

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • No changes.

Action Pack

  • No changes.

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

  • No changes.

Active Storage

  • Disable libvips's unfuzzed image loaders and savers.

    libvips flags some of its loaders and savers as "unfuzzed" or "untrusted", meaning they are only safe for trusted content. Active Storage will call Vips.block_untrusted(true) to disable them while booting. An application that needs a specific loader or saver may re-enable it in an initializer.

... (truncated)

Changelog

Sourced from actionpack's changelog.

Rails 8.1.3.1 (July 29, 2026)

  • No changes.
Commits

Updates actionview from 8.1.3 to 8.1.3.1

Release notes

Sourced from actionview's releases.

8.1.3.1

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • No changes.

Action Pack

  • No changes.

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

  • No changes.

Active Storage

  • Disable libvips's unfuzzed image loaders and savers.

    libvips flags some of its loaders and savers as "unfuzzed" or "untrusted", meaning they are only safe for trusted content. Active Storage will call Vips.block_untrusted(true) to disable them while booting. An application that needs a specific loader or saver may re-enable it in an initializer.

... (truncated)

Changelog

Sourced from actionview's changelog.

Rails 8.1.3.1 (July 29, 2026)

  • No changes.
Commits

Updates activerecord from 8.1.3 to 8.1.3.1

Release notes

Sourced from activerecord's releases.

8.1.3.1

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • No changes.

Action Pack

  • No changes.

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

  • No changes.

Active Storage

  • Disable libvips's unfuzzed image loaders and savers.

    libvips flags some of its loaders and savers as "unfuzzed" or "untrusted", meaning they are only safe for trusted content. Active Storage will call Vips.block_untrusted(true) to disable them while booting. An application that needs a specific loader or saver may re-enable it in an initializer.

... (truncated)

Changelog

Sourced from activerecord's changelog.

Rails 8.1.3.1 (July 29, 2026)

  • No changes.
Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
actionpack [> 6.1.4.4]
activerecord [> 6.1.4.4]
actionview [> 6.1.4.4]
selenium-webdriver [< 4.10, > 4.9.0]
selenium-webdriver [>= 4.11.a, < 4.12]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Note: Dependabot was ignoring updates to this dependency, but since you've updated it yourself we've started tracking it for you again. 🤖

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the bundler-dependencies group across 1 directory with 10 updates
4040c7d 
Bumps the bundler-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [faker](https://github.com/faker-ruby/faker) | `3.6.1` | `3.8.0` |
| [globalid](https://github.com/rails/globalid) | `1.3.0` | `1.4.0` |
| [sentry-rails](https://github.com/getsentry/sentry-ruby) | `6.5.0` | `6.6.2` |
| [standard](https://github.com/standardrb/standard) | `1.54.0` | `1.56.0` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.41.0` | `4.46.0` |
| [timecop](https://github.com/travisjeffery/timecop) | `0.9.10` | `0.9.11` |



Updates `faker` from 3.6.1 to 3.8.0
- [Release notes](https://github.com/faker-ruby/faker/releases)
- [Changelog](https://github.com/faker-ruby/faker/blob/main/CHANGELOG.md)
- [Commits](faker-ruby/faker@v3.6.1...v3.8.0)

Updates `globalid` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/rails/globalid/releases)
- [Commits](rails/globalid@v1.3.0...v1.4.0)

Updates `sentry-rails` from 6.5.0 to 6.6.2
- [Release notes](https://github.com/getsentry/sentry-ruby/releases)
- [Changelog](https://github.com/getsentry/sentry-ruby/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-ruby@6.5.0...6.6.2)

Updates `sentry-ruby` from 6.5.0 to 6.6.2
- [Release notes](https://github.com/getsentry/sentry-ruby/releases)
- [Changelog](https://github.com/getsentry/sentry-ruby/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-ruby@6.5.0...6.6.2)

Updates `standard` from 1.54.0 to 1.56.0
- [Release notes](https://github.com/standardrb/standard/releases)
- [Changelog](https://github.com/standardrb/standard/blob/main/CHANGELOG.md)
- [Commits](standardrb/standard@v1.54.0...v1.56.0)

Updates `selenium-webdriver` from 4.41.0 to 4.46.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](SeleniumHQ/selenium@selenium-4.41.0...selenium-4.46.0)

Updates `timecop` from 0.9.10 to 0.9.11
- [Changelog](https://github.com/travisjeffery/timecop/blob/master/History.md)
- [Commits](travisjeffery/timecop@v0.9.10...v0.9.11)

Updates `actionpack` from 8.1.3 to 8.1.3.1
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.3.1/actionpack/CHANGELOG.md)
- [Commits](rails/rails@v8.1.3...v8.1.3.1)

Updates `actionview` from 8.1.3 to 8.1.3.1
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.3.1/actionview/CHANGELOG.md)
- [Commits](rails/rails@v8.1.3...v8.1.3.1)

Updates `activerecord` from 8.1.3 to 8.1.3.1
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.3.1/activerecord/CHANGELOG.md)
- [Commits](rails/rails@v8.1.3...v8.1.3.1)

---
updated-dependencies:
- dependency-name: faker
  dependency-version: 3.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: globalid
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: sentry-rails
  dependency-version: 6.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: sentry-ruby
  dependency-version: 6.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: standard
  dependency-version: 1.56.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: selenium-webdriver
  dependency-version: 4.46.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: timecop
  dependency-version: 0.9.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: actionpack
  dependency-version: 8.1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: actionview
  dependency-version: 8.1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: activerecord
  dependency-version: 8.1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies changes or issues relating to a dependency ruby Pull requests that update Ruby code labels Jul 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies changes or issues relating to a dependency ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants