Skip to content

chore(deps): bump the ruby-deps group across 1 directory with 8 updates#2621

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bundler/ruby-deps-b8441ea57f
Open

chore(deps): bump the ruby-deps group across 1 directory with 8 updates#2621
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bundler/ruby-deps-b8441ea57f

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 25, 2026

Bumps the ruby-deps group with 8 updates in the / directory:

Package From To
carrierwave 3.1.2 3.1.3
pagy 43.5.3 43.5.5
icalendar 2.12.2 2.12.3
faraday 2.14.1 2.14.2
view_component 4.9.0 4.11.0
rubocop 1.86.1 1.86.2
rubocop-rails 2.35.0 2.35.2
bullet 8.1.1 8.1.2

Updates carrierwave from 3.1.2 to 3.1.3

Changelog

Sourced from carrierwave's changelog.

3.1.3 - 2026-05-23

Security

Commits

Updates pagy from 43.5.3 to 43.5.5

Release notes

Sourced from pagy's releases.

Version 43.5.5

Changes in 43.5.5

  • Rescue malformed page request param in Pagy::Keyset and KeynavJsPaginator (#907)
    • Rescue malformed page request param in Pagy::Keyset and KeynavJsPaginator
    • Simplify decoding logic

    Co-authored-by: Domizio Demichelis dd.nexus@gmail.com

CHANGELOG

Version 43

We needed a leap version to unequivocally signal that it's not just a major version: it's a complete redesign of the legacy code at all levels, usage and API included.

Why 43? Because it's exactly one step beyond "The answer to the ultimate question of life, the Universe, and everything." 😉

Improvements

This version introduces several enhancements, such as new :countish and :keynav_js paginators and improved automation and configuration processes, reducing setup requirements by 99%. The update also includes a simpler API and new interactive development tools, making it a comprehensive upgrade from previous versions.

  • New :countish Paginator
    • Faster than OFFSET and supporting the full UI
  • New Keynav Pagination
    • The pagy-exclusive technique using the fastest keyset pagination alongside all frontend helpers.
  • New interactive dev-tools
    • New PagyWand to integrate the pagy CSS with your app themes.
    • New Pagy AI available right inside your own app.
  • Intelligent automation
  • Simpler API
    • You solely need the pagy method and the @​pagy instance to paginate any collection and use any navigation tag and helper.
    • Methods are autoloaded only if used, and consume no memory otherwise.
    • Methods have narrower scopes and can be overridden without deep knowledge.
  • New documentation
    • Very concise, straightforward, and easy to navigate and understand.

Upgrade to 43

See the Upgrade Guide

... (truncated)

Changelog

Sourced from pagy's changelog.

Version 43.5.5

  • Rescue malformed page request param in Pagy::Keyset and KeynavJsPaginator (#907)
    • Rescue malformed page request param in Pagy::Keyset and KeynavJsPaginator
    • Simplify decoding logic

    Co-authored-by: Domizio Demichelis dd.nexus@gmail.com

Version 43.5.4

  • Fix SERIES_SLOTS loading error (close #902)
Commits
  • eb4a810 Merge branch 'dev'
  • 8ee37a0 Version 43.5.5
  • ac62e00 Improve comment/docs
  • 81215c4 Update gem and packages
  • 9161301 💎 Rescue malformed page request param in Pagy::Keyset and KeynavJsPaginator (...
  • 4e9118c Docs: fix input_nav_js link text in how-to guide (#903)
  • c1a0adb Merge branch 'dev'
  • 9dc8a75 Version 43.5.4
  • 3c85c53 Update gems and packages
  • 60429fe 💎 Fix SERIES_SLOTS loading error (close #902)
  • Additional commits viewable in compare view

Updates icalendar from 2.12.2 to 2.12.3

Changelog

Sourced from icalendar's changelog.

2.12.3 - 2026-05-13

  • Memory use optimization - Jared Menard
  • Run CI against Ruby 4.0 - Artem Chubchenko
Commits
  • e9a6818 Bump version to 2.12.3
  • 0f68d60 Merge pull request #322 from edgartheunready/jm/add-guard-clause
  • a25996f revert(deps): remove memory_profiler dev dependency
  • 7f04f9f fix: move memory_profiler to a dev dependency
  • a49f62d perf: add guard clause to avoid allocating unused hash
  • 0f7bd6a perf(benchmark): add memory profiling harness for per-event calendar wrapping
  • 0582b6f Merge pull request #321 from chubchenko/ruby-4.0
  • c79c638 Remove bundler version
  • f534050 Add Ruby 4.0 to CI
  • See full diff in compare view

Updates faraday from 2.14.1 to 2.14.2

Release notes

Sourced from faraday's releases.

v2.14.2

Security Note

This release contains a security fix, we recommend all users to upgrade as soon as possible. A Security Advisory with more details will be posted shortly.

What's Changed

New Contributors

Full Changelog: lostisland/faraday@v2.14.1...v2.14.2

Commits

Updates view_component from 4.9.0 to 4.11.0

Release notes

Sourced from view_component's releases.

4.11.0

  • Update render_in signature to accept **_ for compatibility with Rails #50623.

    Joel Hawksley

  • Fix translation scope resolution in nested lambda-backed slots. Relative t(".key") calls inside lambda-backed slots were resolving against an intermediate component's scope instead of the original partial's scope where the block was defined.

    Artin Boghosian

4.10.0

  • Fix NameError: uninitialized constant ViewComponent::SystemTestControllerNefariousPathError when booting in the test environment with eager_load = true.

    Joel Hawksley

  • Fix yielded content rendered at wrong location when using form helpers.

    Joel Hawksley, Markus

Changelog

Sourced from view_component's changelog.

4.11.0

  • Update render_in signature to accept **_ for compatibility with Rails #50623.

    Joel Hawksley

  • Fix translation scope resolution in nested lambda-backed slots. Relative t(".key") calls inside lambda-backed slots were resolving against an intermediate component's scope instead of the original partial's scope where the block was defined.

    Artin Boghosian

4.10.0

  • Fix NameError: uninitialized constant ViewComponent::SystemTestControllerNefariousPathError when booting in the test environment with eager_load = true.

    Joel Hawksley

  • Fix yielded content rendered at wrong location when using form helpers.

    Joel Hawksley, Markus

Commits
  • b1f6917 Merge pull request #2640 from ViewComponent/release-4-11-0
  • f54b15a bump allocations
  • 49b6685 release 4.11.0
  • e94672a Merge pull request #2636 from ViewComponent/render_in_api
  • 9360f6a Fix appraisal naming consistency: use underscores throughout
  • 5b6e732 whitespace
  • 8a8e8c0 Merge pull request #2634 from ViewComponent/dependabot/bundler/selenium-webdr...
  • 3469377 Rename rails_main-head gemfile to use underscore for appraisal compatibility
  • da30a8f Fix Rails main compatibility issues
  • 635645d fix
  • Additional commits viewable in compare view

Updates rubocop from 1.86.1 to 1.86.2

Release notes

Sourced from rubocop's releases.

RuboCop v1.86.2

New features

Bug fixes

  • #15156: Fix an error for Style/HashLookupMethod when chaining fetch (or []) calls on the same expression. (@​koic)
  • #15161: Fix an error for Style/ReduceToHash when nested each_with_object/inject/reduce calls would build hashes. (@​koic)
  • #15144: Fix an error in Style/SoleNestedConditional when autocorrecting nested conditionals containing comments. (@​koic)
  • #15040: Exclude constants from Style/ModuleMemberExistenceCheck. (@​t-daisuke)
  • #15155: Fix false negatives in Style/RedundantSelf when an explicit self receiver in one scope matches the LHS of an ||=, &&=, or op_asgn in another scope. (@​koic)
  • #15107: Fix false positives in Lint/RequireRelativeSelfPath when a non-.rb file uses require_relative with its own basename. (@​koic)
  • #15137: Fix incorrect "does not support IndentationWidth parameter" warning for Layout/ClosingParenthesisIndentation and Layout/CommentIndentation. (@​koic)
  • #15148: Fix false positives in Lint/RedundantSafeNavigation when safe navigation appears in rescue or ensure bodies. (@​koic)
  • #15147: Fix false positives in Lint/RedundantSafeNavigation when safe navigation appears in the body of unless. (@​koic)
  • #15163: Fix false positives in Style/Copyright when Notice pattern starts with \A#, uses \s metacharacters, or has multiple spaces after #. (@​koic)
  • #10179: Fix false positives in Style/DocumentDynamicEvalDefinition when the heredoc contains an escaped interpolation (\#{...}). (@​eyupcanakman)
  • #15154: Fix bug where specifying --out disables parallelization. (@​deivid-rodriguez)
  • #15106: Fix TargetFinder to work correctly inside hidden parent directories. (@​alpaca-tc)
  • #15102: Fix FrozenError in DisabledConfigFormatter for frozen array config parameters. (@​koic)
  • #15141: Fix incorrect autocorrect for Gemspec/RequireMFA causing an infinite loop when rubygems_mfa_required metadata uses a symbol key. (@​koic)
  • #15142: Fix infinite loop for --disable-uncorrectable and offense near heredoc. (@​jonas054)
  • #15054: Fix false positive for Layout/MultilineMethodCallIndentation when a dot-aligned method chain is inside a hash pair value. (@​nicolas-finary)
  • #15136: Fix false positive for Lint/MissingCopEnableDirective when # rubocop:disable is wrapped in a # rubocop:push / # rubocop:pop block. (@​koic)
  • #15115: Fix an incorrect autocorrect in Style/RegexpLiteral when the regexp contains unbalanced braces that conflict with the preferred %r delimiters. (@​koic)
  • #15130: Fix incorrect autocorrect in Style/Copyright when AutocorrectNotice lacks a # prefix or Notice pattern starts with ^#. (@​koic)
  • #14821: Fix Style/IfInsideElse autocorrect moving comments into the wrong branch when a comment precedes the nested if in an else. (@​hammadxcm)
  • #14583: Fix template extractor applying only the last fragment's autocorrection. (@​zeronosu77108)
  • #14971: Fix false positive for Style/WhileUntilModifier when the body is a conditional. (@​fujitanisora)
Changelog

Sourced from rubocop's changelog.

1.86.2 (2026-05-14)

New features

Bug fixes

  • #15156: Fix an error for Style/HashLookupMethod when chaining fetch (or []) calls on the same expression. ([@​koic][])
  • #15161: Fix an error for Style/ReduceToHash when nested each_with_object/inject/reduce calls would build hashes. ([@​koic][])
  • #15144: Fix an error in Style/SoleNestedConditional when autocorrecting nested conditionals containing comments. ([@​koic][])
  • #15040: Exclude constants from Style/ModuleMemberExistenceCheck. ([@​t-daisuke][])
  • #15155: Fix false negatives in Style/RedundantSelf when an explicit self receiver in one scope matches the LHS of an ||=, &&=, or op_asgn in another scope. ([@​koic][])
  • #15107: Fix false positives in Lint/RequireRelativeSelfPath when a non-.rb file uses require_relative with its own basename. ([@​koic][])
  • #15137: Fix incorrect "does not support IndentationWidth parameter" warning for Layout/ClosingParenthesisIndentation and Layout/CommentIndentation. ([@​koic][])
  • #15148: Fix false positives in Lint/RedundantSafeNavigation when safe navigation appears in rescue or ensure bodies. ([@​koic][])
  • #15147: Fix false positives in Lint/RedundantSafeNavigation when safe navigation appears in the body of unless. ([@​koic][])
  • #15163: Fix false positives in Style/Copyright when Notice pattern starts with \A#, uses \s metacharacters, or has multiple spaces after #. ([@​koic][])
  • #10179: Fix false positives in Style/DocumentDynamicEvalDefinition when the heredoc contains an escaped interpolation (\#{...}). ([@​eyupcanakman][])
  • #15154: Fix bug where specifying --out disables parallelization. ([@​deivid-rodriguez][])
  • #15106: Fix TargetFinder to work correctly inside hidden parent directories. ([@​alpaca-tc][])
  • #15102: Fix FrozenError in DisabledConfigFormatter for frozen array config parameters. ([@​koic][])
  • #15141: Fix incorrect autocorrect for Gemspec/RequireMFA causing an infinite loop when rubygems_mfa_required metadata uses a symbol key. ([@​koic][])
  • #15142: Fix infinite loop for --disable-uncorrectable and offense near heredoc. ([@​jonas054][])
  • #15054: Fix false positive for Layout/MultilineMethodCallIndentation when a dot-aligned method chain is inside a hash pair value. ([@​nicolas-finary][])
  • #15136: Fix false positive for Lint/MissingCopEnableDirective when # rubocop:disable is wrapped in a # rubocop:push / # rubocop:pop block. ([@​koic][])
  • #15115: Fix an incorrect autocorrect in Style/RegexpLiteral when the regexp contains unbalanced braces that conflict with the preferred %r delimiters. ([@​koic][])
  • #15130: Fix incorrect autocorrect in Style/Copyright when AutocorrectNotice lacks a # prefix or Notice pattern starts with ^#. ([@​koic][])
  • #14821: Fix Style/IfInsideElse autocorrect moving comments into the wrong branch when a comment precedes the nested if in an else. ([@​hammadxcm][])
  • #14583: Fix template extractor applying only the last fragment's autocorrection. ([@​zeronosu77108][])
  • #14971: Fix false positive for Style/WhileUntilModifier when the body is a conditional. ([@​fujitanisora][])
Commits
  • e513d33 Cut 1.86.2
  • 5fea1b5 Update Changelog
  • 2a3dfcd Don't use Registry#to_h
  • 836b275 Simplify registry internals
  • 90348d5 Fix false positives in Style/Copyright
  • 7419163 Fix extension suggestion documentation link
  • e467335 Merge pull request #15161 from koic/fix_an_error_for_style_reduce_to_hash.md
  • bd48b6b Merge pull request #15160 from lovro-bikic/autoload-mixins
  • b9cda61 Autoload mixins instead of requiring them
  • 55a8278 Fix an error for Style/ReduceToHash cop
  • Additional commits viewable in compare view

Updates rubocop-rails from 2.35.0 to 2.35.2

Release notes

Sourced from rubocop-rails's releases.

RuboCop Rails v2.35.2

Bug fixes

  • #1625: Fix false positives in Rails/StrongParametersExpect when using collection methods (such as delete, keys, merge, slice, dig, fetch, or transform_values) on params[:key], as well as block-style calls such as params[:key].each { ... } or params[:key].map(&:to_s). (@​koic)
  • #1627: Fix false positives in Rails/StrongParametersExpect for usages like params[:key].try(:method) and params[:key].try!(:method). (@​nicholasdower)

RuboCop Rails v2.35.1

Bug fixes

  • #1616: Fix false positives in Rails/StrongParametersExpect when using nil-safe conversion methods such as to_i, to_s, to_a, to_f, and to_h on params[:key]. (@​koic)
  • #1622: Fix false positives in Rails/StrongParametersExpect when using key-check methods such as key?, has_key?, include?, and member? on params[:key]. (@​koic)
  • #1620: Fix false positives in Rails/StrongParametersExpect when using type-check methods such as is_a?, kind_of?, and instance_of? on params[:key]. (@​koic)
Changelog

Sourced from rubocop-rails's changelog.

2.35.2 (2026-05-19)

Bug fixes

  • #1625: Fix false positives in Rails/StrongParametersExpect when using collection methods (such as delete, keys, merge, slice, dig, fetch, or transform_values) on params[:key], as well as block-style calls such as params[:key].each { ... } or params[:key].map(&:to_s). ([@​koic][])
  • #1627: Fix false positives in Rails/StrongParametersExpect for usages like params[:key].try(:method) and params[:key].try!(:method). ([@​nicholasdower][])

2.35.1 (2026-05-17)

Bug fixes

  • #1616: Fix false positives in Rails/StrongParametersExpect when using nil-safe conversion methods such as to_i, to_s, to_a, to_f, and to_h on params[:key]. ([@​koic][])
  • #1622: Fix false positives in Rails/StrongParametersExpect when using key-check methods such as key?, has_key?, include?, and member? on params[:key]. ([@​koic][])
  • #1620: Fix false positives in Rails/StrongParametersExpect when using type-check methods such as is_a?, kind_of?, and instance_of? on params[:key]. ([@​koic][])
Commits
  • 26f1034 Cut 2.35.2
  • 65841f0 Update Changelog
  • e89ab8e Merge pull request #1626 from koic/fix_false_positives_for_rails_strong_param...
  • e977fb9 [Fix #1625] Fix false positives in Rails/StrongParametersExpect
  • d56c5d7 Merge pull request #1627 from nicholasdower/try
  • 9bb461b Fix false positives for try and try! in Rails/StrongParametersExpect
  • 9585950 Reset the docs version
  • 8bfc91e Cut 2.35.1
  • 90f8242 Update Changelog
  • 1346310 Merge pull request #1624 from koic/fix_false_positives_for_rails_strong_param...
  • Additional commits viewable in compare view

Updates bullet from 8.1.1 to 8.1.2

Changelog

Sourced from bullet's changelog.

8.1.2 (05/25/2026)

  • Skip N+1 detection for optional polymorphic belongs_to whose *_type column is nil. ActiveRecord short-circuits the reader to nil without issuing SQL, so the access cannot represent an N+1 query and preloading would be a no-op.
  • Fix Set#<< corruption in UnusedEagerLoading#add_eager_loadings split branch
Commits
  • 02b71fd Bumping version to 8.1.2
  • b92d8d4 Merge pull request #773 from sloane/sloane/bullet-nil-polymorphic-false-positive
  • 5f416e7 Skip N+1 detection for polymorphic belongs_to with nil _type
  • 225aacb 📝 docs: clarify test wrapping requirements for Bullet
  • 8667044 Merge pull request #771 from martingjaldbaek/fix-add-eager-loadings-set-merge
  • 38cea31 Fix Set#<< corruption in UnusedEagerLoading#add_eager_loadings split branch
  • 8ae6eff Add failing regression test for add_eager_loadings split branch
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ruby-deps group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [carrierwave](https://github.com/carrierwaveuploader/carrierwave) | `3.1.2` | `3.1.3` |
| [pagy](https://github.com/ddnexus/pagy) | `43.5.3` | `43.5.5` |
| [icalendar](https://github.com/icalendar/icalendar) | `2.12.2` | `2.12.3` |
| [faraday](https://github.com/lostisland/faraday) | `2.14.1` | `2.14.2` |
| [view_component](https://github.com/viewcomponent/view_component) | `4.9.0` | `4.11.0` |
| [rubocop](https://github.com/rubocop/rubocop) | `1.86.1` | `1.86.2` |
| [rubocop-rails](https://github.com/rubocop/rubocop-rails) | `2.35.0` | `2.35.2` |
| [bullet](https://github.com/flyerhzm/bullet) | `8.1.1` | `8.1.2` |



Updates `carrierwave` from 3.1.2 to 3.1.3
- [Release notes](https://github.com/carrierwaveuploader/carrierwave/releases)
- [Changelog](https://github.com/carrierwaveuploader/carrierwave/blob/master/CHANGELOG.md)
- [Commits](carrierwaveuploader/carrierwave@v3.1.2...v3.1.3)

Updates `pagy` from 43.5.3 to 43.5.5
- [Release notes](https://github.com/ddnexus/pagy/releases)
- [Changelog](https://github.com/ddnexus/pagy/blob/master/docs/CHANGELOG.md)
- [Commits](ddnexus/pagy@43.5.3...43.5.5)

Updates `icalendar` from 2.12.2 to 2.12.3
- [Changelog](https://github.com/icalendar/icalendar/blob/main/CHANGELOG.md)
- [Commits](icalendar/icalendar@v2.12.2...v2.12.3)

Updates `faraday` from 2.14.1 to 2.14.2
- [Release notes](https://github.com/lostisland/faraday/releases)
- [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md)
- [Commits](lostisland/faraday@v2.14.1...v2.14.2)

Updates `view_component` from 4.9.0 to 4.11.0
- [Release notes](https://github.com/viewcomponent/view_component/releases)
- [Changelog](https://github.com/ViewComponent/view_component/blob/main/docs/CHANGELOG.md)
- [Commits](ViewComponent/view_component@v4.9.0...v4.11.0)

Updates `rubocop` from 1.86.1 to 1.86.2
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.86.1...v1.86.2)

Updates `rubocop-rails` from 2.35.0 to 2.35.2
- [Release notes](https://github.com/rubocop/rubocop-rails/releases)
- [Changelog](https://github.com/rubocop/rubocop-rails/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop-rails@v2.35.0...v2.35.2)

Updates `bullet` from 8.1.1 to 8.1.2
- [Changelog](https://github.com/flyerhzm/bullet/blob/main/CHANGELOG.md)
- [Commits](flyerhzm/bullet@8.1.1...8.1.2)

---
updated-dependencies:
- dependency-name: carrierwave
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: pagy
  dependency-version: 43.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: icalendar
  dependency-version: 2.12.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: faraday
  dependency-version: 2.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: view_component
  dependency-version: 4.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: rubocop
  dependency-version: 1.86.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: rubocop-rails
  dependency-version: 2.35.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: bullet
  dependency-version: 8.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies ruby Pull requests that update Ruby code labels May 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants