Skip to content

build(deps): bump activerecord from 8.0.3 to 8.1.3#990

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/bundler/activerecord-8.1.3
Open

build(deps): bump activerecord from 8.0.3 to 8.1.3#990
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/bundler/activerecord-8.1.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps activerecord from 8.0.3 to 8.1.3.

Release notes

Sourced from activerecord's releases.

8.1.3

Active Support

  • Fix JSONGemCoderEncoder to correctly serialize custom object hash keys.

    When hash keys are custom objects whose as_json returns a Hash, the encoder now calls to_s on the original key object instead of on the as_json result.

    Before: hash = {CustomKey.new(123) => "value"} hash.to_json # => {"{:id=>123}":"value"}

    After: hash.to_json # => {"custom_123":"value"}

    Dan Sharp

  • Fix inflections to better handle overlapping acronyms.

    ActiveSupport::Inflector.inflections(:en) do |inflect|
      inflect.acronym "USD"
      inflect.acronym "USDC"
    end
    "USDC".underscore # => "usdc"

    Said Kaldybaev

  • Silence Dalli 4.0+ warning when using ActiveSupport::Cache::MemCacheStore.

    zzak

Active Model

  • Fix Ruby 4.0 delegator warning when calling inspect on attributes.

    Hammad Khan

  • Fix NoMethodError when deserialising Type::Integer objects marshalled under Rails 8.0.

    The performance optimisation that replaced @range with @max/@min broke Marshal compatibility. Objects serialised under 8.0 (with @range) and deserialised under 8.1 (expecting @max/@min) would crash with undefined method '<=' for nil because Marshal.load restores instance variables without calling initialize.

... (truncated)

Changelog

Sourced from activerecord's changelog.

Rails 8.1.3 (March 24, 2026)

  • Fix insert_all and upsert_all log message when called on anonymous classes.

    Gabriel Sobrinho

  • Respect ActiveRecord::SchemaDumper.ignore_tables when dumping SQLite virtual tables.

    Hans Schnedlitz

  • Restore previous instrumenter after execute_or_skip

    FutureResult#execute_or_skip replaces the thread's instrumenter with an EventBuffer to collect events published during async query execution. If the global async executor is saturated and the caller_runs fallback executes the task on the calling thread, we need to make sure the previous instrumenter is restored or the stale EventBuffer would stay in place and permanently swallow all subsequent sql.active_record notifications on that thread.

    Rosa Gutierrez

  • Bump the minimum PostgreSQL version to 9.5, due to usage of array_position function.

    Ivan Kuchin

  • Fix Ruby 4.0 delegator warning when calling inspect on ActiveRecord::Type::Serialized.

    Hammad Khan

  • Fix support for table names containing hyphens.

    Evgeniy Demin

  • Fix column deduplication for SQLite3 and PostgreSQL virtual (generated) columns.

    Column#== and Column#hash now account for virtual? so that the Deduplicable registry does not treat a generated column and a regular column with the same name and type as identical. Previously, if a generated column was registered first, a regular column on a different table could be deduplicated to the generated instance, silently excluding it from INSERT/UPDATE statements.

    Jay Huber

  • Fix PostgreSQL schema dumping to handle schema-qualified table names in foreign_key references that span different schemas.

    # before
    add_foreign_key "hst.event_log_attributes", "hst.event_logs" # emits correctly because they're in the same schema (hst)
    add_foreign_key "hst.event_log_attributes", "hst.usr.user_profiles", column: "created_by_id" # emits hst.user.* when user.* is expected
    

... (truncated)

Commits
  • fa8f081 Preparing for 8.1.3 release
  • 63cef3d Merge branch '8-1-sec' into 8-1-stable
  • 1db4b89 Preparing for 8.1.2.1 release
  • e449905 Merge pull request #57022 from byroot/sobrinho-main
  • 7d8eeea Merge pull request #56977 from hschne/26-03-fix-ignore-virtual-tables
  • 148e4d8 Merge pull request #56970 from nicolasva/fix_spatia_lite
  • 004eb65 Restore previous instrumenter after execute_or_skip
  • b8b23c0 Merge pull request #56932 from eglitobias/fix-dbconsole-notimplemented-message
  • 2250b16 Merge pull request #56951 from r-plus/patch-1
  • 635841a Merge pull request #56911 from toy/postgresql-9.5-required
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [activerecord](https://github.com/rails/rails) from 8.0.3 to 8.1.3.
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.3/activerecord/CHANGELOG.md)
- [Commits](rails/rails@v8.0.3...v8.1.3)

---
updated-dependencies:
- dependency-name: activerecord
  dependency-version: 8.1.3
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels May 4, 2026
Copy link
Copy Markdown

@github-actions github-actions Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dependabot merge

@codacy-production
Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity

Metric Results
Complexity 0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

Run reviewer

TIP This summary will be updated as you push new changes.

Copy link
Copy Markdown

@codacy-production codacy-production Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

While Codacy identifies the PR as up to standards, the Rails 8.1 upgrade is currently incomplete. Upgrading between minor Rails versions requires running the rails app:update task to synchronize configuration defaults and binary stubs, which is missing from this PR.

There are significant risks associated with the major version bumps of transitive dependencies, specifically minitest 6.x and connection_pool 3.x. Furthermore, the removal of the benchmark gem from activesupport and the new PostgreSQL 9.5 minimum requirement must be verified to prevent runtime and deployment failures.

About this PR

  • The upgrade introduces a new minimum PostgreSQL version (9.5). There is no verification in the PR that current development, CI, or production environments meet this requirement.

Test suggestions

  • Verify application initialization and database connection establishment on Rails 8.1.3.
  • Run the full test suite to ensure compatibility with Minitest 6.0.6 (major version bump).
  • Validate database connection pool stability and behavior with ConnectionPool 3.0.2.
  • Verify that the application still has access to the benchmark library or no longer requires it (removed from ActiveSupport dependencies).
  • Confirm that existing PostgreSQL environments (development, CI, staging, production) are version 9.5+.
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Verify application initialization and database connection establishment on Rails 8.1.3.
2. Run the full test suite to ensure compatibility with Minitest 6.0.6 (major version bump).
3. Validate database connection pool stability and behavior with ConnectionPool 3.0.2.
4. Verify that the application still has access to the `benchmark` library or no longer requires it (removed from ActiveSupport dependencies).
5. Confirm that existing PostgreSQL environments (development, CI, staging, production) are version 9.5+.
Low confidence findings
  • No smoke tests or regression tests were included in this PR. Given the major version jumps for core dependencies like minitest and connection_pool, automated verification is necessary to confirm stability.

TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback

Comment thread Gemfile.lock
activerecord (= 8.0.3)
activestorage (= 8.0.3)
activesupport (= 8.0.3)
rails (8.1.3)
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔴 HIGH RISK

Updating Rails to 8.1.3 requires running the update task to sync configuration defaults and binary stubs. This PR is currently missing those changes.

Try running the following prompt in your coding agent:

Run bin/rails app:update and include the resulting changes in config/ and bin/.

Comment thread Gemfile.lock
activesupport (= 8.1.3)
marcel (~> 1.0)
activesupport (8.0.3)
activesupport (8.1.3)
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 MEDIUM RISK

The dependency on the benchmark gem was removed in ActiveSupport 8.1. If your codebase uses the Benchmark module, you must add it to your Gemfile to prevent NameError or LoadError exceptions.

Try running the following prompt in your coding agent:

Add gem "benchmark" to the Gemfile.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants