Skip to content

Bump the ruby-minor-and-patch group across 1 directory with 9 updates - #130

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/ruby-minor-and-patch-ee84d01181
Open

Bump the ruby-minor-and-patch group across 1 directory with 9 updates#130
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/ruby-minor-and-patch-ee84d01181

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the ruby-minor-and-patch group with 9 updates in the / directory:

Package From To
solid_queue 1.4.0 1.7.0
solid_cable 4.0.0 4.0.2
bootsnap 1.24.6 1.26.0
thruster 0.1.21 0.1.26
slack-ruby-client 3.1.0 3.2.0
omniauth-google-oauth2 1.2.2 1.2.3
sidekiq 8.1.6 8.1.7
brakeman 8.0.5 8.0.6
selenium-webdriver 4.45.0 4.48.0

Updates solid_queue from 1.4.0 to 1.7.0

Release notes

Sourced from solid_queue's releases.

v1.7.0 - batches

This is a big one! Solid Queue finally supports job batches thanks to @​jpcamara. Check the README for more details about how to use these. This took ages despite being a very requested feature 😅 Big thanks to @​jpcamara for his patience, refinements and production-app tests!

What's Changed

New Contributors

Full Changelog: rails/solid_queue@v1.6.0...v1.7.0

v1.6.0 - fiber execution mode (with Async)

A long-awaited feature thanks to @​crmne on this release: instead of using a thread pool to run jobs in multiple threads per works, you can now use fibers on a single fiber reactor thread. To use this, you just need to specify the number of fibers instead of the number of threads in your worker configuration, like this:

workers:
  - queues: "api*"
    fibers: 100
    polling_interval: 0.05

It uses Async under the hood, so you need to have that as a dependency for it to work. Also, you need to be using fiber isolation in Rails (config.active_support.isolation_level`` = :fiber).

This can be very useful for I/O-bound workloads, such as those involving LLM calls.

What's Changed

New Contributors

Full Changelog: rails/solid_queue@v1.5.1...v1.6.0

v1.5.1

What's Changed

... (truncated)

Commits
  • e2b5384 Bump solid_queue to 1.7.0
  • 5352228 Reset pooled connections when flipping the batches schema in tests
  • 112bb1c Refine batch support after a full review
  • 1bcac83 Add batch support
  • fcb5f7a Name the supervisor's stop checkpoint and simplify its lifecycle
  • 124176a Honour TERM received during supervisor boot before forking workers
  • 174cb07 Protect the shutdown reap from release failures too
  • 0526401 Replace terminated forks even if releasing their claimed jobs fails
  • 6816e52 Include the error in fail_many_claimed events and document recovery
  • fc5fb59 Wait longer for the supervisor to fail the killed worker's job
  • Additional commits viewable in compare view

Updates solid_cable from 4.0.0 to 4.0.2

Release notes

Sourced from solid_cable's releases.

v4.0.2

What's Changed

Full Changelog: rails/solid_cable@v4.0.1...v4.0.2

v4.0.1

What's Changed

New Contributors

Full Changelog: rails/solid_cable@v4.0.0...v4.0.1

Commits
  • 4a41ec8 Version bump
  • f781e4d Reset retry counter on each successful poll (#84)
  • cf0695c Version bump
  • c968ba7 Reset reconnect_attempt after successfuly accessing the DB. (#82)
  • 5ea0f55 Update adapter to handle ActionCable adapterization in 8.2 (#80)
  • 89d34d7 Run ci against different rails versions (#79)
  • See full diff in compare view

Updates bootsnap from 1.24.6 to 1.26.0

Release notes

Sourced from bootsnap's releases.

v1.26.0

What's Changed

  • Handle top level Coverage constant being defined, but without it being the true stdlib coverage module.
  • Fix bootsnap precompile that could generate a corrupted cache entry if an already cached YAML file was modified without changing its size.
  • Workaround a potential Ruby SEGV if Bootsnap.instrumentation raised an error.

v1.25.0

What's Changed

  • Improve YAML parsing cache to more efficiently handle Time, Date and DateTime.

  • Don't invalidate the compile cache when YJIT is toggled. YJIT is a runtime JIT and doesn't change the serialized instruction sequences that are cached, but enabling it (via --yjit, RUBYOPT, or RubyVM::YJIT.enable) adds a +YJIT marker to RUBY_DESCRIPTION ( +YJIT <token> on YJIT_SUPPORT builds), which is part of the cache key. This previously discarded the entire compile cache whenever YJIT was enabled at runtime but not at precompile time (or vice versa). The marker is now stripped before hashing.

  • Fix CompileCache::Native.fetch and .precompile reading a non-String path argument (e.g. a Pathname) with RSTRING_PTR. Regression from 1.24.0.

Full Changelog: rails/bootsnap@v1.24.6...v1.25.0

Changelog

Sourced from bootsnap's changelog.

1.26.0

  • Handle top level Coverage constant being defined, but without it being the true stdlib coverage module.
  • Fix bootsnap precompile that could generate a corrupted cache entry if an already cached YAML file was modified without changing its size.
  • Workaround a potential Ruby SEGV if Bootsnap.instrumentation raised an error.

1.25.0

  • Improve YAML parsing cache to more efficiently handle Time, Date and DateTime.

  • Don't invalidate the compile cache when YJIT is toggled. YJIT is a runtime JIT and doesn't change the serialized instruction sequences that are cached, but enabling it (via --yjit, RUBYOPT, or RubyVM::YJIT.enable) adds a +YJIT marker to RUBY_DESCRIPTION ( +YJIT <token> on YJIT_SUPPORT builds), which is part of the cache key. This previously discarded the entire compile cache whenever YJIT was enabled at runtime but not at precompile time (or vice versa). The marker is now stripped before hashing.

  • Fix CompileCache::Native.fetch and .precompile reading a non-String path argument (e.g. a Pathname) with RSTRING_PTR. Regression from 1.24.0.

Commits
  • 67a7290 Release 1.26.0
  • 1881b9a Merge pull request #573 from byroot/same-size-miscompilation
  • 605bbeb Fix precompilation when regenerating an existing cache entry of the same size
  • 5fd59da Merge pull request #569 from OskarEichler/codex/accept-tempfile-fd-zero
  • 70550c7 Merge pull request #568 from OskarEichler/codex/remove-umask-debug-output
  • 8aed2ed Accept tempfile descriptor zero
  • f7457ea Remove umask debug output
  • 9ee62a2 Merge pull request #567 from byroot/rename-mod
  • 7c8178e Handle write(2) being interrupted.
  • 3e755ca atomic_write_cache_file: stop leaking FD on error
  • Additional commits viewable in compare view

Updates thruster from 0.1.21 to 0.1.26

Changelog

Sourced from thruster's changelog.

v0.1.26 / 2026-08-24

  • Add X-Request-ID header to requests and logs (#148)
  • Build with Go 1.27.0 (#147)
  • Build with Go 1.26.6 (#145)

v0.1.25 / 2026-08-11

  • Bypass all uncacheable requests (#142)

v0.1.24 / 2026-08-11

  • Use struct types as cache keys

v0.1.23 / 2026-07-16

  • Build with Go 1.26.5 (#140)

v0.1.22 / 2026-06-29

  • Build with Go 1.26.4
  • Exclude image types from compression (#137)
Commits
  • cda91ad Bump version
  • 318a0fc Merge pull request #148 from basecamp/request-id
  • f25e0fb Keep owned headers out of hop-by-hop stripping
  • e95cad7 Add X-Request-ID to requests, responses and logs
  • de6ec48 Merge pull request #147 from basecamp/go-1.27
  • 5a33fe7 Update x/crypto, x/net
  • 8e26507 Update klauspost/compress to v1.19.2
  • 06f3e8a Build with Go 1.27.0
  • e7173c5 Merge pull request #145 from erikthoreson24/bump-go-1.26.6-security
  • f84d58d bump go to 1.26.6
  • Additional commits viewable in compare view

Updates slack-ruby-client from 3.1.0 to 3.2.0

Changelog

Sourced from slack-ruby-client's changelog.

3.2.0 (2026/07/05)

Commits
  • 6595302 Preparing for release, 3.2.0.
  • 0acffec Merge pull request #578 from slack-ruby/automated-api-update
  • c7bbc73 Update API from slack-api-ref@38cb2f4 (2026-07-05)
  • 7552a74 Merge pull request #589 from dblock/fix-hash-inspect-format-drift
  • 253307e Render hash/array literals deterministically in generated specs
  • 1ff45ee Merge pull request #588 from dblock/fix-markdown-text-mutual-exclusion
  • 4e0cff4 Update CHANGELOG for #588
  • f8b12a5 Regenerate Web API from slack-api-ref@38cb2f40
  • 1d7b02c Fix text/markdown_text mutual exclusion in chat methods
  • 03ff0e6 Merge pull request #587 from slack-ruby/dependabot/github_actions/actions/che...
  • Additional commits viewable in compare view

Updates omniauth-google-oauth2 from 1.2.2 to 1.2.3

Release notes

Sourced from omniauth-google-oauth2's releases.

v1.2.3

Security

  • Verify caller-supplied ID tokens against Google's published signing keys before trusting them. An ID token sent alongside a direct access_token callback was previously decoded without checking its signature, so extra.id_info and extra.id_token could be populated from a forged token. uid and info were never affected, as they come from the userinfo endpoint. A caller-supplied ID token genuinely issued by Google for the same user and a trusted client continues to be accepted after verification.
  • Require a caller-supplied ID token to describe the same user as the access token it was sent with, by comparing the token's sub against the userinfo subject. A verified signature only proves Google issued the token, not that it belongs to the person the access token identifies, so without this a genuine ID token for one user could be paired with an access token for another and leave uid and extra.id_info describing different people. The at_hash claim is checked first as a fast path, and this subject check settles the cases at_hash cannot: tokens that omit the claim, and tokens whose at_hash is stale because the client refreshed its access token after sign-in. This check runs even when skip_info is set, as that option trims the auth hash rather than waiving verification.
  • The bundled example app no longer disables TLS certificate verification. Anyone who copied that line into an application should remove it: it turns off certificate checking for every Faraday-based request in the process, not just the ones this gem makes.

Added

  • reset_jwks_cache! for clearing the cached Google signing keys between tests.
  • cached_jwks, the class-level fetch-and-cache primitive behind it, which takes the fetch itself as a block.
  • JWKS_URL, JWKS_CACHE_TTL, and JWKS_RETRY_INTERVAL constants, and a JwksUnavailable error.
  • An upper bound of < 4 on the jwt dependency. This is precautionary rather than a response to a released version: it keeps a future major release from being picked up before it has been verified against this strategy.

Deprecated

  • Nothing.

Removed

  • The fallback that placed the opaque access token in extra.id_token when no ID token was present. extra.id_token is now absent in that case rather than holding a value that was never an ID token. This was only reachable with skip_jwt set; without it the fallback raised instead.

Fixed

  • Ignore every credential field a caller supplies in a direct access-token callback apart from the access token itself and a verified ID token. refresh_token and token expiry in particular cannot be verified, so they are no longer carried through.
  • Avoid decoding opaque access tokens as JWTs when no ID token is available.
  • Fail with a normal authentication failure when a callback carries no usable credential, such as an ID token with no access token, a JSON body that is not an object, or an unparseable body. Previously these raised a NoMethodError or TypeError that OmniAuth turned into a failure whose message was the raw Ruby error, so applications received an unstable message parameter such as undefined method 'expired?' instead of invalid_credentials.
  • Serve the cached signing keys when Google's key endpoint is briefly unreachable, and back off before refetching, rather than retrying on every request, including when nothing is cached yet.
  • Reject a signing key response that is not an object with a keys array, rather than passing it on to be interpreted as some other kind of key.
  • Cap how often an ID token naming an unrecognised key can force a key refresh, so it cannot be used to drive unbounded outbound requests while holding the shared cache lock. Key rotation still resolves within JWKS_RETRY_INTERVAL.
  • jwt_leeway now also applies when verifying caller-supplied ID tokens, matching how it already behaved for the extra block.
  • Support non-rewindable JSON request bodies under Rack 3.
  • Accept ID tokens issued to any configured authorized_client_ids, matching the audiences already accepted for access tokens.
  • Reuse successfully verified ID token claims when building extra, so each ID token is decoded and validated only once per request.
Changelog

Sourced from omniauth-google-oauth2's changelog.

1.2.3 - 2026-08-31

Security

  • Verify caller-supplied ID tokens against Google's published signing keys before trusting them. An ID token sent alongside a direct access_token callback was previously decoded without checking its signature, so extra.id_info and extra.id_token could be populated from a forged token. uid and info were never affected, as they come from the userinfo endpoint. A caller-supplied ID token genuinely issued by Google for the same user and a trusted client continues to be accepted after verification.
  • Require a caller-supplied ID token to describe the same user as the access token it was sent with, by comparing the token's sub against the userinfo subject. A verified signature only proves Google issued the token, not that it belongs to the person the access token identifies, so without this a genuine ID token for one user could be paired with an access token for another and leave uid and extra.id_info describing different people. The at_hash claim is checked first as a fast path, and this subject check settles the cases at_hash cannot: tokens that omit the claim, and tokens whose at_hash is stale because the client refreshed its access token after sign-in. This check runs even when skip_info is set, as that option trims the auth hash rather than waiving verification.
  • The bundled example app no longer disables TLS certificate verification. Anyone who copied that line into an application should remove it: it turns off certificate checking for every Faraday-based request in the process, not just the ones this gem makes.

Added

  • reset_jwks_cache! for clearing the cached Google signing keys between tests.
  • cached_jwks, the class-level fetch-and-cache primitive behind it, which takes the fetch itself as a block.
  • JWKS_URL, JWKS_CACHE_TTL, and JWKS_RETRY_INTERVAL constants, and a JwksUnavailable error.
  • An upper bound of < 4 on the jwt dependency. This is precautionary rather than a response to a released version: it keeps a future major release from being picked up before it has been verified against this strategy.

Deprecated

  • Nothing.

Removed

  • The fallback that placed the opaque access token in extra.id_token when no ID token was present. extra.id_token is now absent in that case rather than holding a value that was never an ID token. This was only reachable with skip_jwt set; without it the fallback raised instead.

Fixed

  • Ignore every credential field a caller supplies in a direct access-token callback apart from the access token itself and a verified ID token. refresh_token and token expiry in particular cannot be verified, so they are no longer carried through.
  • Avoid decoding opaque access tokens as JWTs when no ID token is available.
  • Fail with a normal authentication failure when a callback carries no usable credential, such as an ID token with no access token, a JSON body that is not an object, or an unparseable body. Previously these raised a NoMethodError or TypeError that OmniAuth turned into a failure whose message was the raw Ruby error, so applications received an unstable message parameter such as undefined method 'expired?' instead of invalid_credentials.
  • Serve the cached signing keys when Google's key endpoint is briefly unreachable, and back off before refetching, rather than retrying on every request, including when nothing is cached yet.
  • Reject a signing key response that is not an object with a keys array, rather than passing it on to be interpreted as some other kind of key.
  • Cap how often an ID token naming an unrecognised key can force a key refresh, so it cannot be used to drive unbounded outbound requests while holding the shared cache lock. Key rotation still resolves within JWKS_RETRY_INTERVAL.
  • jwt_leeway now also applies when verifying caller-supplied ID tokens, matching how it already behaved for the extra block.
  • Support non-rewindable JSON request bodies under Rack 3.
  • Accept ID tokens issued to any configured authorized_client_ids, matching the audiences already accepted for access tokens.
  • Reuse successfully verified ID token claims when building extra, so each ID token is decoded and validated only once per request.
Commits
  • c2fa91f Fix token info cache keying and log injection, and require core ID token claims
  • c6af73e Reduce redundant JWKS cache timestamp calculations
  • 778c990 Tiny README.md correction
  • eae8feb Clarify CHANGELOG.md
  • ef303e6 Accept ID tokens from authorized client IDs and fix Ruby 2.5 compatibility
  • e5be50e Verify caller-supplied ID tokens against Google's signing keys and bind them ...
  • 650aab9 Update example to show AJAX payloads
  • 0b87f3f Fix ID token spoofing in direct access-token callbacks
  • 41796b6 specify that jwt must be less than version 4 (#476)
  • 5559071 Better CHANGELOG.md
  • See full diff in compare view

Updates sidekiq from 8.1.6 to 8.1.7

Changelog

Sourced from sidekiq's changelog.

8.1.7

  • Forward compatibililty with Active Job 8.1 #7019
  • Many minor fixes and test improvements [hammadxcm]
Commits

Updates brakeman from 8.0.5 to 8.0.6

Release notes

Sourced from brakeman's releases.

8.0.6 - EOL Dates

Changelog

Sourced from brakeman's changelog.

8.0.6 - 2026-08-13

  • Fix EOL date for Rails 8.0 (yeaseul-kim)
  • Add EOL dates for Rails 8.1 and Ruby 4.0
  • Fix command injection false positives (Jacob Evelyn)
  • Fix unused variable warning (viralpraxis)
Commits
  • fffc483 Bump to 8.0.6
  • b7218fe Update CHANGES
  • c6be6cc Merge pull request #2034 from yeaseul-kim/fix-rails-8-0-eol-date
  • 4c191dd Fix EOL date for Rails 8.0
  • e7bda16 Merge pull request #2033 from presidentbeef/add-ruby-rails-eol-dates
  • dd4f0b9 Add EOL date for Ruby 4.0
  • 7ca100a Add EOL date for Rails 8.1
  • a53a456 Merge pull request #2022 from JacobEvelyn/main
  • bf3fdc9 Merge pull request #2030 from viralpraxis/fix-unusued-gem-release-date
  • 20f74ac Brakeman.ensure_latest: fix unsued release_date variable
  • Additional commits viewable in compare view

Updates selenium-webdriver from 4.45.0 to 4.48.0

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.48.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

New Contributors

Full Changelog: SeleniumHQ/selenium@selenium-4.47.0...selenium-4.48.0

... (truncated)

Changelog

Sourced from selenium-webdriver's changelog.

4.48.0 (2026-08-27)

  • Support CDP versions: v150, v151, v152
  • add low-level BiDi protocol integration specs (#17878)
  • [build] Automated Browser Version Update (major) with CDP (#17910)
  • fix silent hang on oversized WebSocket frames (#17655)
  • always reject a missing required inbound BiDi field (#17936)
  • accept a whole-valued float for an integer BiDi field (#17939)
  • reject an inbound BiDi scalar outside its union's declared arms (#17947)

4.47.0 (2026-08-10)

  • Support CDP versions: v149, v150, v151
  • support WebDriver BiDi on Safari Preview and move #bidi onto Driver (#17729)
  • link generated BiDi elements to their spec definitions (#17781)
  • add objectOnly/preserveExtras/scalar-primitive BiDi schema signals (#17784)
  • construct the BiDi transport inside the domain from a connection (#17796)
  • route BiDiBridge navigation through the generated Protocol::BrowsingContext (#17785)
  • resolve spec runfiles via Bazel::Runfiles (#17810)
  • [build] standardize generated-file license and not to edit markers across generators (#17816)
  • validate nullable-constant BiDi params outbound (#17818)
  • [build] upgrade rules_ruby to 0.28.0 and drop vendored Bazel::Runfiles workaround (#17824)
  • [build] Merge vendor cddl files into shared BiDi schema and implement custom Firefox webExtension options (#17840)
  • [grid] honor client-advertised se:remoteUrl for reachable BiDi/CDP/VNC URLs (#17790)
  • tolerate and warn on missing required inbound BiDi fields, with SE_BIDI_STRICT to escalate (#17844)
  • remove deprecated FTP proxy support (#17846)
  • prevent CDP access with Firefox (#17849)
  • test matchers assert log entries by id and optional messages and match severity (#17848)
  • [bidi] Correct float/enum type fidelity in the shared schema and validate primitives outbound in Ruby (#17852)
  • [bidi] mark BiDi types extensible per spec and update Ruby handling (#17853)
  • raise typed WebDriver errors for BiDi from a generated error-code map (#17855)
  • allow pending test guards to require matching provided exception (#17859)
  • pass --enable-chrome-logs unless CHROME_LOG_FILE is set (#17858)
  • support custom vendor specific capabilities in options classes (#17862)
  • validate BiDi outbound ref fields against their declared type (#17861)
  • generate BiDi domain type accessors and union variant factories (#17865)
  • deprecate invalid Firefox profile code (#17871)
  • [build] Automated Browser Version Update with CDP (#17873)

4.46.0 (2026-07-10)

  • Support CDP versions: v148, v149, v150
  • trim whitespace around NO_PROXY entries (#17565)
  • add ClientConfig for HTTP client customization (#17699)
  • generate the BiDi protocol layer from the shared binding-neutral schema (#17731)
Commits
  • 27f5213 [build] Prepare for release of selenium-4.48.0 (#17956)
  • 7bfaedb [rb] reject an inbound BiDi scalar outside its union's declared arms (#17947)
  • 6df5706 [rb] accept a whole-valued float for an integer BiDi field (#17939)
  • 1dd3004 [rb] always reject a missing required inbound BiDi field (#17936)
  • eb28a14 [rb] fix silent hang on oversized WebSocket frames (#17655)
  • 194545f [rb] fix Safari test failures (#17922)
  • 3e38711 [build] Automated Browser Version Update (major) with CDP (#17910)
  • 0003281 [rb] add low-level BiDi protocol integration specs (#17878)
  • b4b73af [build] Update lockfiles for nightly versions
  • 1ed71ed [build] Reset versions to nightly after selenium-4.47.0 release
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the ruby-minor-and-patch group across 1 directory with 9 updates
e360ff1 
Bumps the ruby-minor-and-patch group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [solid_queue](https://github.com/rails/solid_queue) | `1.4.0` | `1.7.0` |
| [solid_cable](https://github.com/rails/solid_cable) | `4.0.0` | `4.0.2` |
| [bootsnap](https://github.com/rails/bootsnap) | `1.24.6` | `1.26.0` |
| [thruster](https://github.com/basecamp/thruster) | `0.1.21` | `0.1.26` |
| [slack-ruby-client](https://github.com/slack-ruby/slack-ruby-client) | `3.1.0` | `3.2.0` |
| [omniauth-google-oauth2](https://github.com/zquestz/omniauth-google-oauth2) | `1.2.2` | `1.2.3` |
| [sidekiq](https://github.com/sidekiq/sidekiq) | `8.1.6` | `8.1.7` |
| [brakeman](https://github.com/presidentbeef/brakeman) | `8.0.5` | `8.0.6` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.45.0` | `4.48.0` |



Updates `solid_queue` from 1.4.0 to 1.7.0
- [Release notes](https://github.com/rails/solid_queue/releases)
- [Commits](rails/solid_queue@v1.4.0...v1.7.0)

Updates `solid_cable` from 4.0.0 to 4.0.2
- [Release notes](https://github.com/rails/solid_cable/releases)
- [Commits](rails/solid_cable@v4.0.0...v4.0.2)

Updates `bootsnap` from 1.24.6 to 1.26.0
- [Release notes](https://github.com/rails/bootsnap/releases)
- [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md)
- [Commits](rails/bootsnap@v1.24.6...v1.26.0)

Updates `thruster` from 0.1.21 to 0.1.26
- [Changelog](https://github.com/basecamp/thruster/blob/main/CHANGELOG.md)
- [Commits](basecamp/thruster@v0.1.21...v0.1.26)

Updates `slack-ruby-client` from 3.1.0 to 3.2.0
- [Changelog](https://github.com/slack-ruby/slack-ruby-client/blob/master/CHANGELOG.md)
- [Commits](slack-ruby/slack-ruby-client@v3.1.0...v3.2.0)

Updates `omniauth-google-oauth2` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/zquestz/omniauth-google-oauth2/releases)
- [Changelog](https://github.com/zquestz/omniauth-google-oauth2/blob/master/CHANGELOG.md)
- [Commits](zquestz/omniauth-google-oauth2@v1.2.2...v1.2.3)

Updates `sidekiq` from 8.1.6 to 8.1.7
- [Changelog](https://github.com/sidekiq/sidekiq/blob/main/Changes.md)
- [Commits](sidekiq/sidekiq@v8.1.6...v8.1.7)

Updates `brakeman` from 8.0.5 to 8.0.6
- [Release notes](https://github.com/presidentbeef/brakeman/releases)
- [Changelog](https://github.com/presidentbeef/brakeman/blob/main/CHANGES.md)
- [Commits](presidentbeef/brakeman@v8.0.5...v8.0.6)

Updates `selenium-webdriver` from 4.45.0 to 4.48.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](SeleniumHQ/selenium@selenium-4.45.0...selenium-4.48.0)

---
updated-dependencies:
- dependency-name: solid_queue
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-and-patch
- dependency-name: solid_cable
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-minor-and-patch
- dependency-name: bootsnap
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-and-patch
- dependency-name: thruster
  dependency-version: 0.1.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-minor-and-patch
- dependency-name: slack-ruby-client
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-and-patch
- dependency-name: omniauth-google-oauth2
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-minor-and-patch
- dependency-name: sidekiq
  dependency-version: 8.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-minor-and-patch
- dependency-name: brakeman
  dependency-version: 8.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-minor-and-patch
- dependency-name: selenium-webdriver
  dependency-version: 4.48.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Sep 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants