Skip to content

build(deps): bump the bundler-minor-and-patch group across 1 directory with 14 updates - #194

Merged
github-actions[bot] merged 1 commit into
masterfrom
dependabot/bundler/bundler-minor-and-patch-7eb012d023
Nov 4, 2026
Merged

build(deps): bump the bundler-minor-and-patch group across 1 directory with 14 updates#194
github-actions[bot] merged 1 commit into
masterfrom
dependabot/bundler/bundler-minor-and-patch-7eb012d023

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the bundler-minor-and-patch group with 14 updates in the / directory:

Package From To
mysql2 0.5.6 0.5.7
uglifier 4.2.0 4.2.1
tzinfo-data 1.2024.1 1.2026.6
devise-encryptable 0.2.0 0.3.0
recaptcha 5.17.0 5.21.2
whenever 1.0.0 1.1.4
jquery-rails 4.6.0 4.6.1
nori 2.7.1 2.9.1
config 5.5.1 5.6.1
icalendar 2.12.2 2.13.0
geocoder 1.8.3 1.8.6
jbuilder 2.12.0 2.15.1
pundit 2.3.2 2.5.2
selenium-webdriver 4.46.0 4.52.0

Updates mysql2 from 0.5.6 to 0.5.7

Release notes

Sourced from mysql2's releases.

0.5.7

What's Changed

New Contributors

Full Changelog: brianmario/mysql2@0.5.6...0.5.7

Commits
  • c79b3c1 bump version
  • 0f38974 Expose db attribute of MYSQL client struct (#1245)
  • b63d2e8 Correct MariaDB runtime library verison check (#1406)
  • 441b104 CI: select better MariaDB mirrors because some block GitHub Actions (#1401)
  • 99a6cc3 CI: Add an option to use SSL certifications generated from specific host. (#1...
  • 3adb531 rb_mysql_result_free_result is now executed if the result is 0 rows. (#1399)
  • 794ca50 Merge pull request #1400 from sodabrew/update-rake-compiler
  • cd6fc60 CI: fixes for centos 7 dockerfile
  • f10e767 CI: Allow newer rake, rake-compiler dependencies
  • 57b8df1 README: Remove link to Travis CI
  • Additional commits viewable in compare view

Updates uglifier from 4.2.0 to 4.2.1

Changelog

Sourced from uglifier's changelog.

4.2.1 (22 September 2024)

  • fix Ruby 3.4 compatiblity, drop Ruby 2.3 and older support (#195)
  • fix typos (#194)
Commits
  • 959b740 Bump version to 4.2.1
  • 5a6a6f4 Update changelog
  • f7ee1a2 Merge branch 'drop-base64'
  • b808f14 Merge pull request #194 from kianmeng/fix-typos
  • 46b75e4 Bump required ruby version to 2.4
  • 81fbc31 Merge pull request #196 from lautis/ci-ruby-versions
  • 030a33e Use released version of alaska runtime to run tests
  • 15d317d Update build matrix
  • 89c6136 Drop base64 gem from dependency
  • 0947f7c Merge pull request #191 from SimenB/master-1
  • Additional commits viewable in compare view

Updates tzinfo-data from 1.2024.1 to 1.2026.6

Release notes

Sourced from tzinfo-data's releases.

v1.2026.6

Based on version 2026f of the IANA Time Zone Database.

v1.2026.5

Based on version 2026e of the IANA Time Zone Database (https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/message/VXIA4AU73OQL3OZ3ZBZHWIASIIVBGUJV/).

v1.2026.4

Based on version 2026d of the IANA Time Zone Database (https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/message/L4IGHJRBUQR53F7RTEHM5IS7ZMBR3YXP/).

v1.2026.3

Based on version 2026c of the IANA Time Zone Database (https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/message/NVHSX2PAQIT44U5FCCEVNJJYXQMMTJSA/).

v1.2026.2

Based on version 2026b of the IANA Time Zone Database (https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/message/VX2Z3CBO6KHTYZNBBKFFWM7ZCI6TVCXP/).

v1.2026.1

Based on version 2026a of the IANA Time Zone Database (https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/message/ASPLBE3A4BAEXIOQ3KZ6EJSJWBU6L53G/).

v1.2025.3

Based on version 2025c of the IANA Time Zone Database (https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/message/TAGXKYLMAQRZRFTERQ33CEKOW7KRJVAK/).

v1.2025.2

Based on version 2025b of the IANA Time Zone Database (https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/message/6JVHNHLB6I2WAYTQ75L6KEPEQHFXAJK3/).

v1.2025.1

Based on version 2025a of the IANA Time Zone Database (https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/message/MWII7R3HMCEDNUCIYQKSSTYYR7UWK4OQ/).

v1.2024.2

Based on version 2024b of the IANA Time Zone Database (https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/message/IZ7AO6WRE3W3TWBL5IR6PMQUL433BQIE/).

Commits
  • 2726762 Update to tzdata version 2026f.
  • 496785a Update actions/cache to v6 and actions/checkout to v7.
  • 8df8bad Update to tzdata version 2026e.
  • a0803f7 Update to tzdata version 2026d.
  • a826afe Update to tzdata version 2026c.
  • 256b802 Update to JRuby 10.1.
  • 2b9af11 Update to tzdata version 2026b.
  • 5e9d667 Update to tzdata version 2026a.
  • 3a03d35 Rebuild modules for 2026 (adding an additional year of future data).
  • 73971d9 Update copyright years.
  • Additional commits viewable in compare view

Updates devise-encryptable from 0.2.0 to 0.3.0

Release notes

Sourced from devise-encryptable's releases.

v0.3.0

https://github.com/heartcombo/devise-encryptable/blob/v0.3.0/Changelog.md#030

Changelog

Sourced from devise-encryptable's changelog.

0.3.0

  • Support Rails 7 - 8.1, drop support < 7
  • Support Ruby 2.7 - 3.4 and 4.0, drop support < 2.7
  • Switch license from Apache-2.0 to MIT, matching Devise
Commits
  • b70a222 Release v0.3.0
  • 2f704d3 Bundle update
  • b40123f Bundle update
  • 902f796 Bundle update
  • 9c10ecb Configure default permissions as read-only for the workflow
  • cc2ea45 Stop building both branch & PR with pushes
  • 7ddb63c Ignore test/** folder for GH default code scanning
  • 6df12f4 No need to redefine these password attributes
  • 74db84b Remove check for Rails version >= 5
  • 81491bf Stop updating copyright every year [ci skip]
  • Additional commits viewable in compare view

Updates recaptcha from 5.17.0 to 5.21.2

Changelog

Sourced from recaptcha's changelog.

5.21.2

  • make env fall back to Rails.env if it is unset

5.21.1

  • Fix flash not being updated when responding to :turbo_stream requests

5.21.0

  • add referer header to #api_verification_entreprise

5.20.0

  • turn recpatch reply into a object with logic

5.19.0

  • require a minimum lenght of 100 for responses, configured via response_minimum

5.18.0

  • Add key setup to v3 example in README
  • Remove unnecessary id from textarea - This was unused and may cause accessability concerns if there is more than one recaptcha on the page due to multiple elements with the same id
  • Update to latest version of rubocop
  • Drop support for Ruby 2.7; add Ruby 3.3
  • Add i18n: de, es, it, pt, pt-BR
  • Added recaptcha_failure_reason

5.16.0

  • Allow usage of options[:turbo] as well as options[:turbolinks] for recaptcha_v3

5.15.0

  • Add 3.2 to the list of Ruby CI versions
  • Add ability to submit verify_recaptcha via POST with JSON Body with options[:json] = true

5.14.0

  • drop json dependency

5.13.1

  • Permit actions as symbol

5.13.0

  • Added option to ignore_no_element.

5.12.3

  • Remove score fallback for enterprise
  • Update enterprise tests to v1 assessment schema

5.12.2

  • Fix minimum score for enterprise

5.12.1

  • Fix Japanese locale

5.12.0

... (truncated)

Commits
  • 9b261bb v5.21.2
  • 9978e7a cleanup
  • feb2b6d Merge pull request #476 from duncantmiller/fix/skip-env-reliability-in-multit...
  • d702043 Fix skip_env? to fall back to Rails.env when default_env is nil
  • f68fe96 changelog
  • eb99b5e Merge pull request #473 from jrodriigues/master
  • f4c4f93 Fix changelog tag
  • d1e8483 v5.21.1
  • 47b5a3b Merge pull request #472 from jrodriigues/master
  • 37584ef Allow flash messages when responding to turbo_stream requests
  • Additional commits viewable in compare view

Updates whenever from 1.0.0 to 1.1.4

Release notes

Sourced from whenever's releases.

v1.1.4

What's Changed

Maintenance

New Contributors

Full Changelog: javan/whenever@v1.1.3...v1.1.4

v1.1.3

What's Changed

Enhancements

Maintenance

Full Changelog: javan/whenever@v1.1.2...v1.1.3

v1.1.2

What's Changed

Enhancements

Maintenance

New Contributors

Full Changelog: javan/whenever@v1.1.1...v1.1.2

v1.1.1

What's Changed

Bug Fixed

Maintenance

... (truncated)

Changelog

Sourced from whenever's changelog.

1.1.4 / October 21, 2026

1.1.3 / September 15, 2026

1.1.2 / January 18, 2026

1.1.1 / December 8, 2025

1.1.0 / November 21, 2025

... (truncated)

Commits
  • 7bc7ecb Bump to v1.1.4
  • f8ead97 Merge pull request #877 from sampokuokkanen/gemspec-without-tests
  • 75cacd3 Don't ship tests in the gem
  • c9fd8c3 Bump to v1.1.3
  • 64bf9fd Merge pull request #854 from combinaut/add-support-for-sequential-job-definit...
  • 6c11e2b Allow sequential jobs to continue by default
  • 972deb2 Add support for sequential job definitions
  • 756163e Merge pull request #876 from javan/dependabot/github_actions/actions/checkout-7
  • b4975d3 Bump actions/checkout from 6 to 7
  • 75f19b0 Merge pull request #875 from javan/github-actions-permissions
  • Additional commits viewable in compare view

Updates jquery-rails from 4.6.0 to 4.6.1

Changelog

Sourced from jquery-rails's changelog.

4.6.1

  • update jquery to 3.7.1
Commits

Updates nori from 2.7.1 to 2.9.1

Release notes

Sourced from nori's releases.

v2.9.1

Fixed

  • Under :serializable, a typecast value no longer drops the node's attributes. A text node whose content gets converted to a non-String (by :advanced_typecasting or a bare type= cast) now takes the same hash shape as string values: <status source="ldap">true</status> becomes {"#text" => true, "@source" => "ldap"} instead of a bare true that silently lost @source. This closes a data-dependent hole in the profile's no-silent-loss promise, where the same element kept or dropped its attributes depending on what its text happened to look like. The value at #text is whatever the typecasting produced. Combined with standards: true no typecasting happens and #text is always a string.

  • The #text key of the :serializable hash shape now goes through :convert_tags_to like every other key. Previously a key-converting formula (for example one that symbolizes keys) produced converted element and attribute keys next to a raw "#text" string key in the same hash. Nori's contract is that a :convert_tags_to formula sees every key it emits, which also means a caller who prefers a plain text key over the XML JSON convention can now map "#text" in their formula.

Changelog: https://github.com/savonrb/nori/blob/main/CHANGELOG.md Commits: savonrb/nori@v2.9.0...v2.9.1

v2.9.0

Changed

  • The :standards profile no longer applies schema-less typing. Under Nori.new(standards: true), :advanced_typecasting now defaults to false (an explicit advanced_typecasting: true still wins), and the bare un-namespaced type= and nil= attributes become ordinary attributes instead of casting instructions. No more type= conversions (integer, date, decimal, array, file, ...), and only a prefixed xsi:nil="true" marks an element nil. These conventions come from Rails' Hash.from_xml (inherited via crack and merb), not from any XML spec. Without a schema, character data is just text. Knowing that <id>123</id> holds an integer is the business of a schema-aware layer, not a guess from string shape. Parsing without the profile is completely unchanged.

Added

  • Add the :serializable profile option. Nori.new(serializable: true) returns plain, directly-serializable data with no custom value classes. A text node that also has attributes becomes a Hash in the XML JSON convention ({"#text" => content} merged with our existing @-prefixed attributes instead of a Nori::StringWithAttributes, and a text node without attributes becomes a plain String. A type="file" node is no longer decoded into a Nori::StringIOFile, it folds into text and attributes like any other node, leaving the base64 content untouched for the caller to decode. That type= decoding is a Rails/ActiveSupport Hash.from_xml convention Nori inherited via crack and merb, not part of any XML spec, which is why the plain-data profile drops it. With this, values survive to_json, to_yaml, and Marshal. Opt-in on the 2.x line, probably the default in Nori 3.0. Reported by @​ArnoldMEDLINQ (#107), thanks to @​dub357 for pinpointing the cause and finding #106, and thanks to @​ekzobrain whose hash-shape approach this builds on.

Changelog: https://github.com/savonrb/nori/blob/main/CHANGELOG.md Commits: savonrb/nori@v2.8.0...v2.9.0

v2.8.0

Added

  • Add the :standards profile option. Nori.new(standards: true) turns on Nori's spec-correct parsing as a group rather than one flag at a time. Its first members are xml:space honoring (whitespace-only text under xml:space="preserve" is kept instead of stripped, with inheritance and xml:space="default" reset per XML 1.0 §2.10) and the XML string-value model for empty elements (implies :consistent_empty_tags with an empty-string :empty_tag_value, both still overridable). Opt-in on the 2.x line, default in 3.0. Thanks to @​md5 for raising the xml:space="preserve" case on #97.

  • #97 Add the :consistent_empty_tags option (#109). When enabled, every empty tag becomes the :empty_tag_value, whether it has attributes or not. A string value keeps the attributes accessible via #attributes, and an explicit xsi:nil="true" always becomes nil. Reported by @​lukasbischof, who also proposed a fix in #98. Thanks to @​md5 for surfacing another instance of it and pinpointing the cause.

Fixed

  • Whitespace-only CDATA content is no longer stripped. A <![CDATA[ ]]> section is the author's explicit literal-data marker, so its content is now preserved as text instead of being dropped, on both the Nokogiri and REXML parsers. Previously such a tag parsed to nil (or, with attributes, dropped the content and kept only the attributes). Non-whitespace CDATA is unchanged, and ordinary whitespace-only text is still stripped as before. Surfaced while auditing whitespace handling for #97, the same empty-tag/whitespace spec-compliance work as the :consistent_empty_tags option above.

Changelog: https://github.com/savonrb/nori/blob/main/CHANGELOG.md Commits: savonrb/nori@v2.17.1...v2.18.0

Changelog

Sourced from nori's changelog.

[2.9.1] - 2026-07-05

Fixed

  • Under :serializable, a typecast value no longer drops the node's attributes. A text node whose content gets converted to a non-String (by :advanced_typecasting or a bare type= cast) now takes the same hash shape as string values: <status source="ldap">true</status> becomes {"#text" => true, "@source" => "ldap"} instead of a bare true that silently lost @source. This closes a data-dependent hole in the profile's no-silent-loss promise, where the same element kept or dropped its attributes depending on what its text happened to look like. The value at #text is whatever the typecasting produced. Combined with standards: true no typecasting happens and #text is always a string.

  • The #text key of the :serializable hash shape now goes through :convert_tags_to like every other key. Previously a key-converting formula (for example one that symbolizes keys) produced converted element and attribute keys next to a raw "#text" string key in the same hash. Nori's contract is that a :convert_tags_to formula sees every key it emits, which also means a caller who prefers a plain text key over the XML JSON convention can now map "#text" in their formula.

[2.9.0] - 2026-07-05

Changed

  • The :standards profile no longer applies schema-less typing. Under Nori.new(standards: true), :advanced_typecasting now defaults to false (an explicit advanced_typecasting: true still wins), and the bare un-namespaced type= and nil= attributes become ordinary attributes instead of casting instructions. No more type= conversions (integer, date, decimal, array, file, ...), and only a prefixed xsi:nil="true" marks an element nil. These conventions come from Rails' Hash.from_xml (inherited via crack and merb), not from any XML spec. Without a schema, character data is just text. Knowing that <id>123</id> holds an integer is the business of a schema-aware layer, not a guess from string shape. Parsing without the profile is completely unchanged.

Added

  • Add the :serializable profile option. Nori.new(serializable: true) returns plain, directly-serializable data with no custom value classes. A text node that also has attributes becomes a Hash in the XML JSON convention ({"#text" => content} merged with our existing @-prefixed attributes instead of a Nori::StringWithAttributes, and a text node without attributes becomes a plain String. A type="file" node is no longer decoded into a Nori::StringIOFile, it folds into text and attributes like any other node, leaving the base64 content untouched for the caller to decode. That type= decoding is a Rails/ActiveSupport Hash.from_xml convention Nori inherited via crack and merb, not part of any XML spec, which is why the plain-data profile drops it. With this, values survive to_json, to_yaml, and Marshal. Opt-in on the 2.x line, probably the default in Nori 3.0. Reported by @​ArnoldMEDLINQ (#107), thanks to @​dub357 for pinpointing the cause and finding #106, and thanks to @​ekzobrain whose hash-shape approach this builds on.

[2.8.0] - 2026-07-04

Added

  • Add the :standards profile option. Nori.new(standards: true) turns on Nori's spec-correct parsing as a group rather than one flag at a time. Its first members are xml:space honoring (whitespace-only text under xml:space="preserve" is kept instead of stripped, with inheritance and xml:space="default" reset per XML 1.0 §2.10) and the XML string-value model for empty elements (implies :consistent_empty_tags with an empty-string :empty_tag_value, both still overridable). Opt-in on the 2.x line, default in 3.0. Thanks to @​md5 for raising the xml:space="preserve" case on #97.

  • #97 Add the :consistent_empty_tags option (#109). When enabled, every empty tag becomes the :empty_tag_value, whether it has attributes or not. A string value keeps the attributes accessible via #attributes, and an explicit xsi:nil="true" always becomes nil. Reported by @​lukasbischof, who also proposed a fix in #98. Thanks to @​md5 for surfacing another instance of it and pinpointing the cause.

Fixed

  • Whitespace-only CDATA content is no longer stripped. A <![CDATA[ ]]> section is the author's explicit literal-data marker, so its content is now preserved as text instead of being dropped, on both the Nokogiri and REXML parsers. Previously such a tag parsed to nil (or, with attributes, dropped the content and kept only the attributes). Non-whitespace CDATA is unchanged, and ordinary whitespace-only text is still stripped as before. Surfaced while auditing whitespace handling for #97, the same empty-tag/whitespace spec-compliance work as the :consistent_empty_tags option above.
Commits
  • b209ee8 Prepare 2.9.1
  • 214991c Pin remaining standards + serializable behavior
  • e1f22d9 Never drop attributes on typecast values under :serializable
  • 43d0de9 Pass the #text key through :convert_tags_to
  • 4a99590 Prepare 2.9.0
  • 6ef20f4 Stop schema-less typing under the :standards profile
  • 51d2e08 Use shields for better cache invalidation
  • b11ab63 Add SimpleCov coverage with Coveralls
  • 79b3e10 Remove broken codeclimate badge
  • 1906d9b Pin how character-reference whitespace is parsed
  • Additional commits viewable in compare view

Updates config from 5.5.1 to 5.6.1

Release notes

Sourced from config's releases.

5.6.1

What's Changed

Full Changelog: rubyconfig/config@5.6.0...5.6.1

5.6.0

What's Changed

Full Changelog: rubyconfig/config@5.5.2...5.6.0

5.5.2

What's Changed

New Contributors

Full Changelog: rubyconfig/config@5.5.0...5.5.2

Changelog

Sourced from config's changelog.

5.6.1

  • fix(security): replace IO.read with File.read #378

5.6.0

  • Added extra_sources in initializer (#366)

5.5.2

  • Fix warning: ostruct was loaded from the standard library with Ruby 3.3.5 and 3.4+ (#363)
Commits

Updates icalendar from 2.12.2 to 2.13.0

Changelog

Sourced from icalendar's changelog.

2.13.0 - 2026-10-11

  • Generate CATEGORIES as a single comma-separated line instead of one line per value, matching how Google Calendar and Nextcloud expect it (#226). Setting categories = [...] now stores the joined value as one item, so code that reads #categories expecting one entry per category will see a single combined entry instead; append_categories is unaffected and still adds a separate line. - Carlos Kvasir
  • Replace OpenStruct with Structs in Duration, Recur and UtcOffset values and drop the ostruct dependency (#329). Requires Ruby 2.5 or newer, for Struct's keyword_init:. The parts keep the same readers and setters, but #value is now a Struct, so assigning an attribute that isn't one of its parts raises NoMethodError. - David Corson-Knowles
  • Correct negative fractional-hour TZInfo offsets - ac1982

2.12.5 - 2026-09-25

  • Generate timezone transition onsets and recurrence dates using the previous UTC offset. - Ben Abulafia
  • Limit parsing depth
  • Remove TZID from DATE values - Henry Blyth

2.12.4 - 2026-07-31

  • TEXT unescape fix - Vincent Gao

2.12.3 - 2026-05-13

  • Memory use optimization - Jared Menard
  • Run CI against Ruby 4.0 - Artem Chubchenko
Commits
  • 41d3889 Bump version to 2.13.0
  • d726dd3 Merge pull request #332 from ac1982/fix/negative-fractional-timezone-offsets
  • 2d093aa Merge pull request #330 from corsonknowles/remove-ostruct
  • 65e8026 Use keyword_init Structs and require Ruby 2.5
  • 23215c4 Correct negative fractional-hour TZInfo offsets
  • 426ea97 Merge pull request #331 from carloskvasir/categories-single-line
  • 5207402 Generate CATEGORIES as a single comma-separated line
  • 97fa1f4 Replace OpenStruct with Structs in Duration, Recur and UtcOffset
  • 0bcfef3 Bump version to 2.12.5
  • 18803f0 Merge pull request #326 from bensynapse/fix-timezone-transition-onsets
  • Additional commits viewable in compare view

Updates geocoder from 1.8.3 to 1.8.6

Changelog

Sourced from geocoder's changelog.

1.8.6 (2025 Sep 21)

  • Add support for IPInfo Lite lookup (thanks github.com/iltempo).
  • Various minor fixes and improvements.

1.8.5 (2024 Dec 18)

  • Fix bug when working with IPAddr objects (thanks github.com/ledermann and github.com/mattlemx).

1.8.4 (2024 Dec 4)

  • Add support for Azure lookup (thanks github.com/AhlOct).
  • Several fixes for Mapbox and Bing lookups (thanks github.com/tmh-dev and github.com/iBlackShadow).
Commits
  • d3515db Prepare for release of gem version 1.8.6.
  • 737d16f Merge pull request #1694 from Intrepidd/update-data-gouv-fr-domain
  • 4b50c08 Merge pull request #1695 from cprodhomme/patch-1
  • 31545ee Update README_API_GUIDE.md
  • 3a90b5a Update BAN domain
  • b2c0aa5 Merge pull request #1691 from TheRusskiy/radius-column-arel
  • cd58cab add "arel" to near_test spec
  • 63ca470 radius column can be an instance of Arel.sql
  • eaf85fe Merge pull request #1688 from skillstopractice/master
  • 00369bb Update tests to use data['place_name'] for Mapbox
  • Additional commits viewable in compare view

Updates jbuilder from 2.12.0 to 2.15.1

Release notes

Sourced from jbuilder's releases.

v2.15.1

What's Changed

New Contributors

Full Changelog: rails/jbuilder@v2.15.0...v2.15.1

v2.15.0

What's Changed

New Contributors

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Nov 4, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) November 4, 2026 20:14
@dependabot dependabot Bot changed the title build(deps): bump the bundler-minor-and-patch group with 14 updates build(deps): bump the bundler-minor-and-patch group across 1 directory with 14 updates Nov 4, 2026
@dependabot
dependabot Bot force-pushed the dependabot/bundler/bundler-minor-and-patch-7eb012d023 branch from bdee867 to e7125bc Compare November 4, 2026 20:23
@russellporter

russellporter commented Nov 4, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/bundler/bundler-minor-and-patch-7eb012d023 branch 2 times, most recently from da16567 to c1acb7d Compare November 4, 2026 21:19
@dependabot
build(deps): bump the bundler-minor-and-patch group across 1 director…
bb2a45b 
…y with 14 updates

Bumps the bundler-minor-and-patch group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [mysql2](https://github.com/brianmario/mysql2) | `0.5.6` | `0.5.7` |
| [uglifier](https://github.com/lautis/uglifier) | `4.2.0` | `4.2.1` |
| [tzinfo-data](https://github.com/tzinfo/tzinfo-data) | `1.2024.1` | `1.2026.6` |
| [devise-encryptable](https://github.com/plataformatec/devise-encryptable) | `0.2.0` | `0.3.0` |
| [recaptcha](https://github.com/ambethia/recaptcha) | `5.17.0` | `5.21.2` |
| [whenever](https://github.com/javan/whenever) | `1.0.0` | `1.1.4` |
| [jquery-rails](https://github.com/rails/jquery-rails) | `4.6.0` | `4.6.1` |
| [nori](https://github.com/savonrb/nori) | `2.7.1` | `2.9.1` |
| [config](https://github.com/rubyconfig/config) | `5.5.1` | `5.6.1` |
| [icalendar](https://github.com/icalendar/icalendar) | `2.12.2` | `2.13.0` |
| [geocoder](https://github.com/alexreisner/geocoder) | `1.8.3` | `1.8.6` |
| [jbuilder](https://github.com/rails/jbuilder) | `2.12.0` | `2.15.1` |
| [pundit](https://github.com/varvet/pundit) | `2.3.2` | `2.5.2` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.46.0` | `4.52.0` |



Updates `mysql2` from 0.5.6 to 0.5.7
- [Release notes](https://github.com/brianmario/mysql2/releases)
- [Commits](brianmario/mysql2@0.5.6...0.5.7)

Updates `uglifier` from 4.2.0 to 4.2.1
- [Changelog](https://github.com/lautis/uglifier/blob/master/CHANGELOG.md)
- [Commits](lautis/uglifier@v4.2.0...v4.2.1)

Updates `tzinfo-data` from 1.2024.1 to 1.2026.6
- [Release notes](https://github.com/tzinfo/tzinfo-data/releases)
- [Commits](tzinfo/tzinfo-data@v1.2024.1...v1.2026.6)

Updates `devise-encryptable` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/plataformatec/devise-encryptable/releases)
- [Changelog](https://github.com/heartcombo/devise-encryptable/blob/main/Changelog.md)
- [Commits](heartcombo/devise-encryptable@v0.2.0...v0.3.0)

Updates `recaptcha` from 5.17.0 to 5.21.2
- [Changelog](https://github.com/ambethia/recaptcha/blob/master/CHANGELOG.md)
- [Commits](ambethia/recaptcha@v5.17.0...v5.21.2)

Updates `whenever` from 1.0.0 to 1.1.4
- [Release notes](https://github.com/javan/whenever/releases)
- [Changelog](https://github.com/javan/whenever/blob/main/CHANGELOG.md)
- [Commits](javan/whenever@v1.0.0...v1.1.4)

Updates `jquery-rails` from 4.6.0 to 4.6.1
- [Changelog](https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md)
- [Commits](rails/jquery-rails@v4.6.0...v4.6.1)

Updates `nori` from 2.7.1 to 2.9.1
- [Release notes](https://github.com/savonrb/nori/releases)
- [Changelog](https://github.com/savonrb/nori/blob/main/CHANGELOG.md)
- [Commits](savonrb/nori@v2.7.1...v2.9.1)

Updates `config` from 5.5.1 to 5.6.1
- [Release notes](https://github.com/rubyconfig/config/releases)
- [Changelog](https://github.com/rubyconfig/config/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubyconfig/config/commits/5.6.1)

Updates `icalendar` from 2.12.2 to 2.13.0
- [Changelog](https://github.com/icalendar/icalendar/blob/main/CHANGELOG.md)
- [Commits](icalendar/icalendar@v2.12.2...v2.13.0)

Updates `geocoder` from 1.8.3 to 1.8.6
- [Changelog](https://github.com/alexreisner/geocoder/blob/master/CHANGELOG.md)
- [Commits](alexreisner/geocoder@v1.8.3...v1.8.6)

Updates `jbuilder` from 2.12.0 to 2.15.1
- [Release notes](https://github.com/rails/jbuilder/releases)
- [Commits](rails/jbuilder@v2.12.0...v2.15.1)

Updates `pundit` from 2.3.2 to 2.5.2
- [Changelog](https://github.com/varvet/pundit/blob/main/CHANGELOG.md)
- [Commits](varvet/pundit@v2.3.2...v2.5.2)

Updates `selenium-webdriver` from 4.46.0 to 4.52.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](SeleniumHQ/selenium@selenium-4.46.0...selenium-4.52.0)

---
updated-dependencies:
- dependency-name: config
  dependency-version: 5.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-minor-and-patch
- dependency-name: devise-encryptable
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-minor-and-patch
- dependency-name: geocoder
  dependency-version: 1.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler-minor-and-patch
- dependency-name: icalendar
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-minor-and-patch
- dependency-name: jbuilder
  dependency-version: 2.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-minor-and-patch
- dependency-name: jquery-rails
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler-minor-and-patch
- dependency-name: mysql2
  dependency-version: 0.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler-minor-and-patch
- dependency-name: nori
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-minor-and-patch
- dependency-name: pundit
  dependency-version: 2.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-minor-and-patch
- dependency-name: recaptcha
  dependency-version: 5.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-minor-and-patch
- dependency-name: selenium-webdriver
  dependency-version: 4.52.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler-minor-and-patch
- dependency-name: tzinfo-data
  dependency-version: 1.2026.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-minor-and-patch
- dependency-name: uglifier
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler-minor-and-patch
- dependency-name: whenever
  dependency-version: 1.1.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bundler/bundler-minor-and-patch-7eb012d023 branch from c1acb7d to bb2a45b Compare November 4, 2026 21:23
@github-actions
github-actions Bot merged commit 8b45725 into master Nov 4, 2026
6 checks passed
@github-actions
github-actions Bot deleted the dependabot/bundler/bundler-minor-and-patch-7eb012d023 branch November 4, 2026 21:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@russellporter