Bumps the dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [bootsnap](https://github.com/rails/bootsnap) | `1.20.1` | `1.21.0` | | [argon2](https://github.com/technion/ruby-argon2) | `2.3.2` | `2.3.3` | | [bootstrap](https://github.com/twbs/bootstrap-rubygem) | `5.3.5` | `5.3.8` | | [omniauth-apple](https://github.com/nhosoya/omniauth-apple) | `1.3.0` | `1.4.0` | | [dalli](https://github.com/petergoldstein/dalli) | `3.2.8` | `4.0.0` | | [opentelemetry-instrumentation-all](https://github.com/open-telemetry/opentelemetry-ruby-contrib) | `0.89.1` | `0.90.1` | | [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) | `1.209.0` | `1.211.0` | | [minitest-focus](https://github.com/seattlerb/minitest-focus) | `1.4.0` | `1.4.1` |
Updates `bootsnap` from 1.20.1 to 1.21.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rails/bootsnap/blob/main/CHANGELOG.md">bootsnap's changelog</a>.</em></p> <blockquote> <h1>1.21.0</h1> <ul> <li>Fix the <code>require</code> decorator to handle <code>Bootsnap.unload_cache!</code> being called.</li> <li>Minor optimization: Eagerly clear cache buffers to appease the GC.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rails/bootsnap/commit/92edbf7ef8c8c26277884fb5d373c1a1fa0743fd"><code>92edbf7</code></a> Release 1.21.0</li> <li><a href="https://github.com/rails/bootsnap/commit/f4908947b6718c788cd8e44d16b480cfe23275c0"><code>f490894</code></a> Merge pull request <a href="https://redirect.github.com/rails/bootsnap/issues/520">#520</a> from byroot/handle-unload</li> <li><a href="https://github.com/rails/bootsnap/commit/4a559a0db625369bd189c89ea3f3465e6548ed01"><code>4a559a0</code></a> Fix the <code>require</code> decorator to handle <code>Bootsnap.unload_cache!</code> being called</li> <li><a href="https://github.com/rails/bootsnap/commit/417dd84ee30bbe172c6af84c876f73843ebcd413"><code>417dd84</code></a> Merge pull request <a href="https://redirect.github.com/rails/bootsnap/issues/518">#518</a> from byroot/clear-buffers</li> <li><a href="https://github.com/rails/bootsnap/commit/7d57a706ce72a11ec928e201093bd3e4d2f868b7"><code>7d57a70</code></a> Eagerly clear cache buffers</li> <li><a href="https://github.com/rails/bootsnap/commit/018fcb8fb4cc8d4593766d37be85f0c19cc5b91a"><code>018fcb8</code></a> Add Ruby 4.0 to the CI matrix</li> <li>See full diff in <a href="https://github.com/rails/bootsnap/compare/v1.20.1...v1.21.0">compare view</a></li> </ul> </details> <br /> Updates `argon2` from 2.3.2 to 2.3.3 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/technion/ruby-argon2/commit/747fef31d86b7eeb20c35b90292b2831ce9641be"><code>747fef3</code></a> Bump version</li> <li><a href="https://github.com/technion/ruby-argon2/commit/d281278b46f0d3fd0a61dc6f4e5beb0a0c356c97"><code>d281278</code></a> Fix build on Ruby 4.0 (<a href="https://redirect.github.com/technion/ruby-argon2/issues/69">#69</a>)</li> <li>See full diff in <a href="https://github.com/technion/ruby-argon2/compare/v2.3.2...v2.3.3">compare view</a></li> </ul> </details> <br /> Updates `bootstrap` from 5.3.5 to 5.3.8 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/twbs/bootstrap-rubygem/commit/b4003b33f906f0783711f94bc8d1a6a8ccac0534"><code>b4003b3</code></a> Update to v5.3.8</li> <li><a href="https://github.com/twbs/bootstrap-rubygem/commit/e16da549fb566ae143d42d65d0403178de8fedd1"><code>e16da54</code></a> Update to v5.3.7</li> <li><a href="https://github.com/twbs/bootstrap-rubygem/commit/f7a2c7f4dd0bdde7a9ca67b809813005a0048344"><code>f7a2c7f</code></a> Update to v5.3.6</li> <li><a href="https://github.com/twbs/bootstrap-rubygem/commit/087adf94d68c45e0fa5051f4e3fe4729b2e58bf4"><code>087adf9</code></a> Fix tests</li> <li>See full diff in <a href="https://github.com/twbs/bootstrap-rubygem/compare/v5.3.5...v5.3.8">compare view</a></li> </ul> </details> <br /> Updates `omniauth-apple` from 1.3.0 to 1.4.0 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/nhosoya/omniauth-apple/commits">compare view</a></li> </ul> </details> <br /> Updates `dalli` from 3.2.8 to 4.0.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/petergoldstein/dalli/blob/main/CHANGELOG.md">dalli's changelog</a>.</em></p> <blockquote> <h1>4.0.0</h1> <p>BREAKING CHANGES:</p> <ul> <li>Require Ruby 3.1+ (dropped support for Ruby 2.6, 2.7, and 3.0)</li> <li>Removed <code>Dalli::Server</code> deprecated alias - use <code>Dalli::Protocol::Binary</code> instead</li> <li>Removed <code>:compression</code> option - use <code>:compress</code> instead</li> <li>Removed <code>close_on_fork</code> method - use <code>reconnect_on_fork</code> instead</li> </ul> <p>Other changes:</p> <ul> <li>Add security warning when using default Marshal serializer (silence with <code>silence_marshal_warning: true</code>)</li> <li>Add defense-in-depth input validation for stats command arguments</li> <li>Add <code>string_fastpath</code> option to skip serialization for simple strings (byroot)</li> <li>Meta protocol set performance improvement (danmayer)</li> <li>Fix connection_pool 3.0 compatibility for Rack session store</li> <li>Fix session recovery after deletion (stengineering0)</li> <li>Fix cannot read response data included terminator <code>\r\n</code> when use meta protocol (matsubara0507)</li> <li>Support SERVER_ERROR response from Memcached as per the <a href="https://github.com/memcached/memcached/blob/e43364402195c8e822bb8f88755a60ab8bbed62a/doc/protocol.txt#L172">memcached spec</a> (grcooper)</li> <li>Update Socket timeout handling to use Socket#timeout= when available (nickamorim)</li> <li>Serializer: reraise all .load errors as UnmarshalError (olleolleolle)</li> <li>Reconnect gracefully when a fork is detected instead of crashing (PatrickTulskie)</li> <li>Update CI to test against memcached 1.6.40</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/petergoldstein/dalli/commit/9c65c4edba30686c42cde9474dc964bf638c8acc"><code>9c65c4e</code></a> Increase benchmark CI job timeout to 30 minutes</li> <li><a href="https://github.com/petergoldstein/dalli/commit/80b0e32507eab6e580ff5582e6b23c32857f2abf"><code>80b0e32</code></a> Fix Rubocop cop name for newer versions</li> <li><a href="https://github.com/petergoldstein/dalli/commit/48290a734c00bbb7bd3427bdaab654ec709486c2"><code>48290a7</code></a> Dalli 4.0.0 release</li> <li><a href="https://github.com/petergoldstein/dalli/commit/7a99cda6320077aad2f450c888333a762b7b23d0"><code>7a99cda</code></a> Bump github/codeql-action from 3 to 4</li> <li><a href="https://github.com/petergoldstein/dalli/commit/95040ba1ccee1b9b167cb9a900788a0066dd18e7"><code>95040ba</code></a> Bump actions/checkout from 4 to 6</li> <li><a href="https://github.com/petergoldstein/dalli/commit/cf320e66b7de3643f78d7f5efff6b68656371c18"><code>cf320e6</code></a> Fix benchmark script GC memory leak causing OOM (exit code 137)</li> <li><a href="https://github.com/petergoldstein/dalli/commit/11442637f55c43855772a2c021f404f880b0192d"><code>1144263</code></a> Add Ruby 4.0 to test matrix</li> <li><a href="https://github.com/petergoldstein/dalli/commit/c810c86ed1c34a996ad34eef448a30b44067a174"><code>c810c86</code></a> Bump actions/upload-artifact from 4 to 6</li> <li><a href="https://github.com/petergoldstein/dalli/commit/7e8df3d40aa52c4c0e5872617b2967bc480c24ce"><code>7e8df3d</code></a> Fix Rubocop offenses</li> <li><a href="https://github.com/petergoldstein/dalli/commit/352f442795dcf18e64c8ef3bb7a498d98c5d9b5a"><code>352f442</code></a> Fix connection_pool 3.0 compatibility</li> <li>Additional commits viewable in <a href="https://github.com/petergoldstein/dalli/compare/v3.2.8...v4.0.0">compare view</a></li> </ul> </details> <br /> Updates `opentelemetry-instrumentation-all` from 0.89.1 to 0.90.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-ruby-contrib/releases">opentelemetry-instrumentation-all's releases</a>.</em></p> <blockquote> <h2>opentelemetry-instrumentation-all 0.90.1</h2> <h3>v0.90.1 / 2026-01-13</h3> <ul> <li>ADDED: Fixed release version</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-ruby-contrib/blob/main/instrumentation/all/CHANGELOG.md">opentelemetry-instrumentation-all's changelog</a>.</em></p> <blockquote> <h3>v0.90.1 / 2026-01-13</h3> <ul> <li>ADDED: Fixed release version</li> </ul> <h3>v0.90.0 / 2025-01-13</h3> <ul> <li>ADDED: Add SQL Comment Propagator</li> <li>ADDED: HTTP Client Semconv v1.17 Span Naming</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/open-telemetry/opentelemetry-ruby-contrib/commit/c4049c0e8cbd8dc8e8393687bafd9c40fe9bd063"><code>c4049c0</code></a> release: Release opentelemetry-instrumentation-all 0.90.1 (was 0.89.1) (<a href="https://redirect.github.com/open-telemetry/opentelemetry-ruby-contrib/issues/1942">#1942</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-ruby-contrib/commit/e8223d2131fd2afdf603c929ec17d202cda92e7b"><code>e8223d2</code></a> release: Release 12 gems (<a href="https://redirect.github.com/open-telemetry/opentelemetry-ruby-contrib/issues/1940">#1940</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-ruby-contrib/commit/1259808040ec563f552977272baa7bef58dc0c4c"><code>1259808</code></a> chore: Remove Explicit Bundler Dependency (<a href="https://redirect.github.com/open-telemetry/opentelemetry-ruby-contrib/issues/1901">#1901</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-ruby-contrib/commit/ceab92cfc24f13399abb0720add7c4dd6962f64d"><code>ceab92c</code></a> ci: Rake dependency updates (<a href="https://redirect.github.com/open-telemetry/opentelemetry-ruby-contrib/issues/1913">#1913</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-ruby-contrib/commit/347b0817ca15ae76357e8497ecd4958cebd114fc"><code>347b081</code></a> chore(deps): update dependency rubocop to '~&gt; 1.82.0' (<a href="https://redirect.github.com/open-telemetry/opentelemetry-ruby-contrib/issues/1878">#1878</a>)</li> <li>See full diff in <a href="https://github.com/open-telemetry/opentelemetry-ruby-contrib/compare/opentelemetry-instrumentation-all/v0.89.1...opentelemetry-instrumentation-all/v0.90.1">compare view</a></li> </ul> </details> <br /> Updates `aws-sdk-s3` from 1.209.0 to 1.211.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md">aws-sdk-s3's changelog</a>.</em></p> <blockquote> <h2>1.211.0 (2026-01-08)</h2> <ul> <li> <p>Feature - Code Generated Changes, see <code>./build_tools</code> or <code>aws-sdk-core</code>'s CHANGELOG.md for details.</p> </li> <li> <p>Issue - Falls back to header request checksums when using custom endpoints or endpoint providers for PutObject and UploadPart operations.</p> </li> </ul> <h2>1.210.1 (2026-01-06)</h2> <ul> <li>Issue - Normalize response encoding to UTF-8 for proper XML error parsing in HTTP 200 responses.</li> </ul> <h2>1.210.0 (2026-01-05)</h2> <ul> <li> <p>Feature - Code Generated Changes, see <code>./build_tools</code> or <code>aws-sdk-core</code>'s CHANGELOG.md for details.</p> </li> <li> <p>Feature - Added <code>:http_chunk_size</code> parameter to <code>TransferManager#upload_file</code> to control the buffer size when streaming request bodies over HTTP. Larger chunk sizes may improve network throughput at the cost of higher memory usage (Ruby MRI only).</p> </li> <li> <p>Feature - Improved memory efficiency when calculating request checksums for large file uploads (Ruby MRI only).</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/aws/aws-sdk-ruby/commits">compare view</a></li> </ul> </details> <br /> Updates `minitest-focus` from 1.4.0 to 1.4.1 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/minitest/minitest-focus/blob/master/History.rdoc">minitest-focus's changelog</a>.</em></p> <blockquote> <p>=== 1.4.1 / 2025-12-31</p> <ul> <li> <p>4 bug fixes:</p> <ul> <li>MT6: Load focus plugin if minitest/focus is required. (mattbrictson)</li> <li>Loosened the minitest dependency to include MT6.</li> <li>Dropped MT4.</li> <li>MT6: Minor option processing fixes.</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/minitest/minitest-focus/commit/3ae1eb4b69b313b5a052a4a8606d1a34e902fa5e"><code>3ae1eb4</code></a> prepped for release</li> <li><a href="https://github.com/minitest/minitest-focus/commit/d80b151ccb78de224829cecf7168bcae47eb41f8"><code>d80b151</code></a> - Load focus plugin if minitest/focus is required. (mattbrictson)</li> <li><a href="https://github.com/minitest/minitest-focus/commit/abb452aadba325e9a63febd6b96b80c0f12c4288"><code>abb452a</code></a> - Minor option processing fixes for MT6.</li> <li><a href="https://github.com/minitest/minitest-focus/commit/40913ad09313ec5a46b9df74fcda5fb5dbfc2b39"><code>40913ad</code></a> - Loosened the minitest dependency to include MT6. Dropped MT4</li> <li><a href="https://github.com/minitest/minitest-focus/commit/02cbbc41519c04bf46b1bf14042e2a0ceddb7763"><code>02cbbc4</code></a> Gave History and README rdoc extension.</li> <li>See full diff in <a href="https://github.com/seattlerb/minitest-focus/compare/v1.4.0...v1.4.1">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> You can view, comment on, or merge this pull request online at: https://github.com/openstreetmap/openstreetmap-website/pull/6704 -- Commit Summary -- * Bump the dependencies group across 1 directory with 8 updates -- File Changes -- M Gemfile.lock (99) -- Patch Links -- https://github.com/openstreetmap/openstreetmap-website/pull/6704.patch https://github.com/openstreetmap/openstreetmap-website/pull/6704.diff -- Reply to this email directly or view it on GitHub: https://github.com/openstreetmap/openstreetmap-website/pull/6704 You are receiving this because you are subscribed to this thread. Message ID: <openstreetmap/openstreetmap-website/pull/[email protected]>
_______________________________________________ rails-dev mailing list [email protected] https://lists.openstreetmap.org/listinfo/rails-dev
