Skip to content

Bump the ruby_dependencies group across 1 directory with 16 updates#349

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bundler/ruby_dependencies-fb05a93dda
Open

Bump the ruby_dependencies group across 1 directory with 16 updates#349
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bundler/ruby_dependencies-fb05a93dda

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 26, 2026 •
edited
Loading

Bumps the ruby_dependencies group with 15 updates in the / directory:

Package From To
devise 4.9.4 5.0.0
kramdown 2.5.1 2.5.2
pagy 9.4.0 43.2.8
pg 1.6.2 1.6.3
puma 6.6.1 7.2.0
pundit 2.5.0 2.5.2
reactionview 0.1.2 0.2.0
rqrcode 3.1.0 3.2.0
bootsnap 1.18.6 1.21.1
factory_bot 6.5.5 6.5.6
pry 0.15.2 0.16.0
rspec-rails 7.1.1 8.0.2
listen 3.9.0 3.10.0
rack-mini-profiler 2.3.4 4.0.1
selenium-webdriver 3.142.7 4.40.0

Updates devise from 4.9.4 to 5.0.0

Release notes

Sourced from devise's releases.

v5.0.0

https://github.com/heartcombo/devise/blob/v5.0.0/CHANGELOG.md#500---2026-01-23

v5.0.0.rc

https://github.com/heartcombo/devise/blob/v5.0.0.rc/CHANGELOG.md#500rc---2025-12-31

Changelog

Sourced from devise's changelog.

5.0.0 - 2026-01-23

no changes

5.0.0.rc - 2025-12-31

  • breaking changes

    • Drop support to Ruby < 2.7

    • Drop support to Rails < 7.0

    • Remove deprecated :bypass option from sign_in helper, use bypass_sign_in instead. #5803

    • Remove deprecated devise_error_messages! helper, use render "devise/shared/error_messages", resource: resource instead. #5803

    • Remove deprecated scope second argument from sign_in(resource, :admin) controller test helper, use sign_in(resource, scope: :admin) instead. #5803

    • Remove deprecated Devise::TestHelpers, use Devise::Test::ControllerHelpers instead. #5803

    • Remove deprecated Devise::Models::Authenticatable::BLACKLIST_FOR_SERIALIZATION #5598

    • Remove deprecated Devise.activerecord51? method.

    • Remove SecretKeyFinder and use app.secret_key_base as the default secret key for Devise.secret_key if a custom Devise.secret_key is not provided.

      This is potentially a breaking change because Devise previously used the following order to find a secret key:

      app.credentials.secret_key_base > app.secrets.secret_key_base > application.config.secret_key_base > application.secret_key_base

      Now, it always uses application.secret_key_base. Make sure you're using the same secret key after the upgrade; otherwise, previously generated tokens for recoverable, lockable, and confirmable will be invalid. #5645

    • Change password instructions button label on devise view from Send me reset password instructions to Send me password reset instructions #5515

    • Change <br> tags separating form elements to wrapping them in <p> tags #5494

    • Replace [data-turbo-cache=false] with [data-turbo-temporary] on devise/shared/error_messages partial. This has been deprecated by Turbo since v7.3.0 (released on Mar 1, 2023).

      If you are using an older version of Turbo and the default devise template, you'll need to copy it over to your app and change that back to [data-turbo-cache=false].

  • enhancements

    • Add Rails 8 support.

      • Routes are lazy-loaded by default in test and development environments now so Devise loads them before Devise.mappings call. #5728

    • New apps using Rack 3.1+ will be generated using config.responder.error_status = :unprocessable_content, since :unprocessable_entity has been deprecated by Rack.

      Latest versions of Rails transparently convert :unprocessable_entity -> :unprocessable_content, and Devise will use that in the failure app to avoid Rack deprecation warnings for apps that are configured with :unprocessable_entity. They can also simply change their error_status to :unprocessable_content in latest Rack versions to avoid the warning.

    • Add Ruby 3.4 and 4.0 support.

    • Reenable Mongoid test suite across all Rails 7+ versions, to ensure we continue supporting it. Changes to dirty tracking to support Mongoid 8.0+. #5568

    • Password length validator is changed from

      validates_length_of :password, within: password_length, allow_blank: true`

      to

      validates_length_of :password, minimum: proc { password_length.min }, maximum: proc { password_length.max }, allow_blank: true

... (truncated)

Commits
  • c51da69 Release v5, no changes since RC
  • e9c534d Fix "Test is missing assertions" warnings
  • 731074b Stop updating copyright every year [ci skip]
  • 35920d2 Exclude Rails main + Ruby 3.2
  • 00a9778 Release v5.0.0.rc
  • 119a40f Fix gemspec and readme, Devise v5 will support Rails >= 7, not 6
  • 1096b60 Remove deprecated Devise.activerecord51? method
  • fc46631 Ensure auth keys at the start of the i18n msg are properly cased
  • 356b094 Downcase authentication keys and humanize error message (#4834)
  • 9a149ff Return 401 for sessions#destroy action with no user signed in (#4878)
  • Additional commits viewable in compare view

Updates kramdown from 2.5.1 to 2.5.2

Commits

Updates pagy from 9.4.0 to 43.2.8

Release notes

Sourced from pagy's releases.

Version 43.2.8

Changes in 43.2.8

  • Add fallback to 'en' for unknown locale. Implement #868.
  • Fix resolve_page with empty page in classes with non-integer page. Close #863
  • Simplify keyset syntax

CHANGELOG

Version 43

We needed a leap version to unequivocally signal that it's not just a major version: it's a complete redesign of the legacy code at all levels, usage and API included.

Why 43? Because it's exactly one step beyond "The answer to the ultimate question of life, the Universe, and everything." 😉

Improvements

This version introduces several enhancements, such as new :countish and :keynav_js paginators and improved automation and configuration processes, reducing setup requirements by 99%. The update also includes a simpler API and new interactive development tools, making it a comprehensive upgrade from previous versions.

  • New :countish Paginator
    • Faster than OFFSET and supporting the full UI
  • New Keynav Pagination
    • The pagy-exclusive technique using the fastest keyset pagination alongside all frontend helpers.
  • New interactive dev-tools
    • New PagyWand to integrate the pagy CSS with your app themes.
    • New Pagy AI available right inside your own app.
  • Intelligent automation
  • Simpler API
    • You solely need the pagy method and the @​pagy instance to paginate any collection and use any navigation tag and helper.
    • Methods are autoloaded only if used, and consume no memory otherwise.
    • Methods have narrower scopes and can be overridden without deep knowledge.
  • New documentation
    • Very concise, straightforward, and easy to navigate and understand.

Upgrade to 43

See the Upgrade Guide

... (truncated)

Changelog

Sourced from pagy's changelog.

Version 43.2.8

  • Add fallback to 'en' for unknown locale. Implement #868.
  • Fix resolve_page with empty page in classes with non-integer page. Close #863
  • Simplify keyset syntax

Version 43.2.7

  • Add a hint predicate for DB optimizers, to multi-column keysets
  • Improve code readability and style
  • Refactor anchor tag helpers

Version 43.2.6

  • Refactor i18n:
    • Raise exceptions for missing 'pagy' and 'p11n' keys in the dictionary file
    • Improve efficiency and readability

Version 43.2.5

  • Fix Pagy::I18n.locale to ensure to_s. Close #861.
  • Reduce endless methods to very short, paramless ones
  • Refactor the in_range? method:
    • Remove implicit assignation to empty page variable
  • Enforce freezing the Pagy::Request object and params
  • Refactor calendar:
    • Remove the marshaling
    • Improve use and naming of locals
    • Improve readability
  • Refactor linkable:
    • Improve use of locals
    • Extend conditional sub to fragment
    • Improve readability
  • Improve simplicity and readability

Version 43.2.4

  • Fix anchor_string option not being read from @​options in a_lambda. Close #857
  • Fix page '0' raising an exception

Version 43.2.3

  • Remove rerun
  • Improved direction handling in CSSs

Version 43.2.2

  • Refactor bin/pagy to use the Pagy::CLI class
  • Replace optimist with the optparse standard lib

... (truncated)

Commits
  • 53f6bbb Merge branch 'dev'
  • 11473ac Version 43.2.8
  • 344b319 💎 Add fallback to 'en' for unknown locale. Implement #868.
  • e32bd01 💎 Fix resolve_page with empty page in classes with non-integer page.
  • 48b6cc9 💎 Simplify keyset syntax
  • 4b12b01 Fix typos in documentation (#865)
  • 68c88af Merge branch 'dev'
  • 3ce9b7b Version 43.2.7
  • 283ad4d 💎 Add a hint predicate for DB optimizers, to multi-column keysets
  • eb7607d 💎 Improve code readability and style
  • Additional commits viewable in compare view

Updates pg from 1.6.2 to 1.6.3

Changelog

Sourced from pg's changelog.

v1.6.3 [2025-12-29] Lars Kanis lars@greiz-reinsdorf.de

Added:

  • Add binary gems for ruby-4.0, now providing ruby-3.0 to 4.0. #682
  • Update fat binary gem to OpenSSL-3.6.0 and PostgreSQL-18.1.
  • Improve documentation of PG::Result and README. #676
  • Update errorcodes to PostgreSQL-18.
  • Use rb_hash_new_capa on Ruby-3.2+ . #674
  • Deny any server communication on a frozen PG::Connection . #677
  • Fix possible race condition in PG::Result in Ractor context. #674

Removed:

  • Drop binary gem support for platform x86-mingw32. #682
  • Drop binary gems for ruby-2.7.
Commits
  • d4539c2 Bump VERSION to pg-1.6.3 and add release notes
  • 720900d Merge pull request #682 from larskanis/ruby-4.0
  • f605b59 Remove x86-mingw32 from binary builds
  • 5c69000 Update to ruby-4.0
  • 2acaf3d CI: workaround missing ruby-4.0 on Window
  • b500ded fix comment
  • bc3f2f8 CI: Macos-13 on Intel is deprecated
  • 77667eb Merge pull request #678 from larskanis/ci-update
  • 6e52ce5 CI: Update PostgreSQL on Macos
  • 6d40f50 CI: Print mkmf.log on failure on Macos
  • Additional commits viewable in compare view

Updates puma from 6.6.1 to 7.2.0

Release notes

Sourced from puma's releases.

v7.2.0

7.2.0 On The Corner

  • Features

    • Add workers :auto (#3827)
    • Make it possible to restrict control server commands to stats (#3787)

  • Bugfixes

    • Don't break if WEB_CONCURRENCY is set to a blank string (#3837)
    • Don't share server between worker 0 and descendants on refork (#3602)
    • Fix phase check race condition in Puma::Cluster#check_workers (#3690)
    • Fix advertising of CLI config before config files are loaded (#3823)

  • Performance

    • 17% faster HTTP parsing through pre-interning env keys (#3825)
    • Implement dsize and dcompact functions for Puma::HttpParser, which makes Puma's C-extension GC-compactible (#3828)

  • Refactor

    • Remove NoMethodError rescue in Reactor#select_loop (#3831)
    • Various cleanups in the C extension (#3814)
    • Monomorphize handle_request return (#3802)

  • Docs

    • Change link to docs/deployment.md in README.md (#3848)
    • Fix formatting for each signal description in signals.md (#3813)
    • Update deployment and Kubernetes docs with Puma configuration tips (#3807)
    • Rename master to main (#3809, #3808, #3800)
    • Fix some minor typos in the docs (#3804)
    • Add GOVERNANCE.md, MAINTAINERS (#3826)
    • Remove Code Climate badge (#3820)
    • Add @​joshuay03 to the maintainer list

  • CI

New Contributors

Full Changelog: puma/puma@v7.1.0...v7.2.0

v7.1.0

7.1.0 / 2025-10-16 - Neon Witch

neon_witch

... (truncated)

Changelog

Sourced from puma's changelog.

7.2.0 / 2026-01-20

  • Features

    • Add workers :auto (#3827)
    • Make it possible to restrict control server commands to stats (#3787)

  • Bugfixes

    • Don't break if WEB_CONCURRENCY is set to a blank string (#3837)
    • Don't share server between worker 0 and descendants on refork (#3602)
    • Fix phase check race condition in Puma::Cluster#check_workers (#3690)
    • Fix advertising of CLI config before config files are loaded (#3823)

  • Performance

    • 17% faster HTTP parsing through pre-interning env keys (#3825)
    • Implement dsize and dcompact functions for Puma::HttpParser, which makes Puma's C-extension GC-compactible (#3828)

  • Refactor

    • Remove NoMethodError rescue in Reactor#select_loop (#3831)
    • Various cleanups in the C extension (#3814)
    • Monomorphize handle_request return (#3802)

  • Docs

    • Change link to docs/deployment.md in README.md (#3848)
    • Fix formatting for each signal description in signals.md (#3813)
    • Update deployment and Kubernetes docs with Puma configuration tips (#3807)
    • Rename master to main (#3809, #3808, #3800)
    • Fix some minor typos in the docs (#3804)
    • Add GOVERNANCE.md, MAINTAINERS (#3826)
    • Remove Code Climate badge (#3820)
    • Add @​joshuay03 to the maintainer list

  • CI

7.1.0 / 2025-10-16

  • Features

    • Introduce after_worker_shutdown hook (#3707)
    • Reintroduce keepalive "fast inline" behavior. Provides faster (8x on JRuby & 1.4x on Ruby) pipeline processing (#3794)

  • Bugfixes

    • Skip reading zero bytes when request body is buffered (#3795)
    • Fix PUMA_LOG_CONFIG=1 logging twice with prune_bundler enabled (#3778)
    • Fix prune_bundler not showing in PUMA_LOG_CONFIG=1 output (#3779)
    • Guard ThreadPool method call, which may be nil during shutdown (#3791, #3790)
    • Set Thread.current.puma_server in Thread init code, not every request (#3774)
    • Fix race condition while deleting pidfile (#3657)

7.0.4 / 2025-09-23

... (truncated)

Commits

Updates pundit from 2.5.0 to 2.5.2

Changelog

Sourced from pundit's changelog.

2.5.2 (2025-09-24)

Fixed

  • Added config/rubocop-rspec.yml back from accidentally being excluded #866

2.5.1 (2025-09-12)

Fixed

  • Requiring only pundit/rspec no longer raises an error in Active Support #857
Commits
  • 2d665d6 Merge pull request #867 from varvet/kbs/release-v2.5.2
  • 7ff48a8 Bump to v2.5.2
  • 674abac Merge pull request #866 from varvet/kbs/add-rubocop-back
  • 923eebf Point changelog to PR
  • 4766850 Add rubocop config file back to gem release files
  • 27a840b Merge pull request #863 from varvet/kbs/fix-build-pipeline
  • 381b202 +3.4 -3.1 (EOL)
  • 4bb6a67 Merge pull request #862 from varvet/kbs/fix-build-pipeline
  • 6ceca0d Attempt code quality upload to qlty.sh instead
  • 82d918a Bump to v2.5.1
  • Additional commits viewable in compare view

Updates reactionview from 0.1.2 to 0.2.0

Release notes

Sourced from reactionview's releases.

v0.2.0

Fixed

Dependencies

Commits

Full Changelog: marcoroth/reactionview@v0.1.6...v0.2.0

v0.1.6

Added

Changed

Internals

New Contributors

Commits

Full Changelog: marcoroth/reactionview@v0.1.5...v0.1.6

v0.1.5

Changed

New Contributors

Commits

Full Changelog: marcoroth/reactionview@v0.1.4...v0.1.5

v0.1.4

Added

Fixed

New Contributors

... (truncated)

Commits

Updates rqrcode from 3.1.0 to 3.2.0

Release notes

Sourced from rqrcode's releases.

v3.2.0

What's Changed

Full Changelog: whomwah/rqrcode@v3.1.1...v3.2.0

v3.1.1

What's Changed

New Contributors

Full Changelog: whomwah/rqrcode@v3.1.0...v3.1.1

Changelog

Sourced from rqrcode's changelog.

[3.2.0] - 2026-01-08

Added

  • Comprehensive benchmarking suite in benchmark/ directory for measuring performance and memory usage across all export formats (SVG, PNG, HTML, ANSI)
  • benchmark_helper.rb providing shared utilities for IPS, memory, and stack profiling
  • Rake tasks for running benchmarks individually or all at once
  • benchmark/README.md explaining usage, metrics, and interpretation of results
  • AGENTS.md as a development guide for AI agents

Changed

  • SVG rendering: Improved by +130% (from 184 i/s to 424 i/s) with 71% memory reduction
  • HTML rendering: Now the fastest export format at 1,876 i/s (rendering-only benchmark)
  • Memory efficiency: HTML now uses 6x less memory than SVG (previously 22x)
  • Updated minimum Ruby version requirement to >= 3.2.0
  • Updated GitHub workflow Ruby matrix to test only supported versions (3.2, 3.3, 3.4, 4.0)
  • Updated README.md with benchmark documentation and contribution guidelines

[3.1.1] - 2025-11-25

  • Update required_ruby_version to support >= rather than ~> ready for Ruby 4
Commits
  • f0d6500 Merge pull request #164 from whomwah/releases/3.2.0
  • e3f69d6 chore(release): bump version to 3.2.0 and update changelog
  • ea5d9cd Merge pull request #163 from whomwah/feat/performance1
  • 36917bf perf(svg): optimize SVG path export for speed and output size
  • 4697d7d docs(benchmark): update benchmark results for 2026-01-08
  • 12a395d chore: update ruby support to >= 3.2 and update dependencies
  • ed9c3a4 refactor(html): optimize as_html for performance
  • a051501 refactor(svg): move color prefix logic to top-level render method
  • b4ef453 docs: add semantic commit message guidelines to AGENTS.md
  • 8220716 chore(deps): update rqrcode_core to 2.1.0
  • Additional commits viewable in compare view

Updates bootsnap from 1.18.6 to 1.21.1

Release notes

Sourced from bootsnap's releases.

v1.20.1

What's Changed

  • Handle broken symlinks in load path scanning code. Should fix Errno::ENOENT fstatat issues some users have encountered after upgrading to 1.20.0.

Full Changelog: rails/bootsnap@v1.20.0...v1.20.1

v1.20.0

What's Changed

  • Optimized load path scanning with a C extension. Should be about 2x faster on supported platforms.

Full Changelog: rails/bootsnap@v1.19.0...v1.20.0

Changelog

Sourced from bootsnap's changelog.

1.21.1

  • Prevent a Ruby crash while scanning load path if opendir fails without setting errno. According to the C spec this should not happen, but according to user reports, it did.

1.21.0

  • Fix the require decorator to handle Bootsnap.unload_cache! being called.
  • Minor optimization: Eagerly clear cache buffers to appease the GC.

1.20.1

  • Handle broken symlinks in load path scanning code. Should fix Errno::ENOENT fstatat issues some users have encountered after upgrading to 1.20.0.

1.20.0

  • Optimized load path scanning with a C extension. Should be about 2x faster on supported platforms.

1.19.0

  • Remove JSON parsing cache. Recent versions of the json gem are as fast as msgpack if not faster.
Commits
  • 182a809 Release 1.21.1
  • 1e59365 Merge pull request #522 from byroot/improve-scandir
  • a2ff4b8 Fallback to pure the pure ruby path scanner on unexpected error
  • 6003c14 Avoid crashing when opendir fails without setting errno
  • 92edbf7 Release 1.21.0
  • f490894 Merge pull request #520 from byroot/handle-unload
  • 4a559a0 Fix the require decorator to handle Bootsnap.unload_cache! being called
  • 417dd84 Merge pull request #518 from byroot/clear-buffers
  • 7d57a70 Eagerly clear cache buffers
  • 018fcb8 Add Ruby 4.0 to the CI matrix
  • Additional commits viewable in compare view

Updates factory_bot from 6.5.5 to 6.5.6

Release notes

Sourced from factory_bot's releases.

v6.5.6

What's Changed

New Contributors

Full Changelog: thoughtbot/factory_bot@v6.5.5...v6.5.6

Changelog

Sourced from factory_bot's changelog.

6.5.6 (October 22, 2025)

Commits

Updates pry from 0.15.2 to 0.16.0

Release notes

Sourced from pry's releases.

v0.16.0

Features

  • Ruby 4.0 Support. Pry will now require and default to Reline for newer Rubies. (#2357) (#2349)
  • Revert 'Unify show-doc with show-source'. (#2346)

Breaking Changes

  • Remove experimental Pry.auto_resize! Returns a warning. The code will be removed later. (#2359)
  • Drop support fo...

    Description has been truncated

@dependabot
Bump the ruby_dependencies group across 1 directory with 16 updates
92dd2e5 
Bumps the ruby_dependencies group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [devise](https://github.com/heartcombo/devise) | `4.9.4` | `5.0.0` |
| [kramdown](https://github.com/gettalong/kramdown) | `2.5.1` | `2.5.2` |
| [pagy](https://github.com/ddnexus/pagy) | `9.4.0` | `43.2.8` |
| [pg](https://github.com/ged/ruby-pg) | `1.6.2` | `1.6.3` |
| [puma](https://github.com/puma/puma) | `6.6.1` | `7.2.0` |
| [pundit](https://github.com/varvet/pundit) | `2.5.0` | `2.5.2` |
| [reactionview](https://github.com/marcoroth/reactionview) | `0.1.2` | `0.2.0` |
| [rqrcode](https://github.com/whomwah/rqrcode) | `3.1.0` | `3.2.0` |
| [bootsnap](https://github.com/rails/bootsnap) | `1.18.6` | `1.21.1` |
| [factory_bot](https://github.com/thoughtbot/factory_bot) | `6.5.5` | `6.5.6` |
| [pry](https://github.com/pry/pry) | `0.15.2` | `0.16.0` |
| [rspec-rails](https://github.com/rspec/rspec-rails) | `7.1.1` | `8.0.2` |
| [listen](https://github.com/guard/listen) | `3.9.0` | `3.10.0` |
| [rack-mini-profiler](https://github.com/MiniProfiler/rack-mini-profiler) | `2.3.4` | `4.0.1` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `3.142.7` | `4.40.0` |



Updates `devise` from 4.9.4 to 5.0.0
- [Release notes](https://github.com/heartcombo/devise/releases)
- [Changelog](https://github.com/heartcombo/devise/blob/main/CHANGELOG.md)
- [Commits](heartcombo/devise@v4.9.4...v5.0.0)

Updates `kramdown` from 2.5.1 to 2.5.2
- [Release notes](https://github.com/gettalong/kramdown/releases)
- [Changelog](https://github.com/gettalong/kramdown/blob/master/doc/news.page)
- [Commits](https://github.com/gettalong/kramdown/commits)

Updates `pagy` from 9.4.0 to 43.2.8
- [Release notes](https://github.com/ddnexus/pagy/releases)
- [Changelog](https://github.com/ddnexus/pagy/blob/master/docs/CHANGELOG.md)
- [Commits](ddnexus/pagy@9.4.0...43.2.8)

Updates `pg` from 1.6.2 to 1.6.3
- [Changelog](https://github.com/ged/ruby-pg/blob/master/CHANGELOG.md)
- [Commits](ged/ruby-pg@v1.6.2...v1.6.3)

Updates `puma` from 6.6.1 to 7.2.0
- [Release notes](https://github.com/puma/puma/releases)
- [Changelog](https://github.com/puma/puma/blob/main/History.md)
- [Commits](puma/puma@v6.6.1...v7.2.0)

Updates `pundit` from 2.5.0 to 2.5.2
- [Changelog](https://github.com/varvet/pundit/blob/main/CHANGELOG.md)
- [Commits](varvet/pundit@v2.5.0...v2.5.2)

Updates `reactionview` from 0.1.2 to 0.2.0
- [Release notes](https://github.com/marcoroth/reactionview/releases)
- [Commits](marcoroth/reactionview@v0.1.2...v0.2.0)

Updates `rqrcode` from 3.1.0 to 3.2.0
- [Release notes](https://github.com/whomwah/rqrcode/releases)
- [Changelog](https://github.com/whomwah/rqrcode/blob/main/CHANGELOG.md)
- [Commits](whomwah/rqrcode@v3.1.0...v3.2.0)

Updates `bootsnap` from 1.18.6 to 1.21.1
- [Release notes](https://github.com/rails/bootsnap/releases)
- [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md)
- [Commits](rails/bootsnap@v1.18.6...v1.21.1)

Updates `factory_bot` from 6.5.5 to 6.5.6
- [Release notes](https://github.com/thoughtbot/factory_bot/releases)
- [Changelog](https://github.com/thoughtbot/factory_bot/blob/main/NEWS.md)
- [Commits](thoughtbot/factory_bot@v6.5.5...v6.5.6)

Updates `pry` from 0.15.2 to 0.16.0
- [Release notes](https://github.com/pry/pry/releases)
- [Changelog](https://github.com/pry/pry/blob/master/CHANGELOG.md)
- [Commits](pry/pry@v0.15.2...v0.16.0)

Updates `rexml` from 3.4.3 to 3.4.4
- [Release notes](https://github.com/ruby/rexml/releases)
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md)
- [Commits](ruby/rexml@v3.4.3...v3.4.4)

Updates `rspec-rails` from 7.1.1 to 8.0.2
- [Changelog](https://github.com/rspec/rspec-rails/blob/main/Changelog.md)
- [Commits](rspec/rspec-rails@v7.1.1...v8.0.2)

Updates `listen` from 3.9.0 to 3.10.0
- [Release notes](https://github.com/guard/listen/releases)
- [Commits](guard/listen@v3.9.0...v3.10.0)

Updates `rack-mini-profiler` from 2.3.4 to 4.0.1
- [Release notes](https://github.com/MiniProfiler/rack-mini-profiler/releases)
- [Changelog](https://github.com/MiniProfiler/rack-mini-profiler/blob/master/CHANGELOG.md)
- [Commits](MiniProfiler/rack-mini-profiler@v2.3.4...v4.0.1)

Updates `selenium-webdriver` from 3.142.7 to 4.40.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](https://github.com/SeleniumHQ/selenium/commits/selenium-4.40.0)

---
updated-dependencies:
- dependency-name: devise
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby_dependencies
- dependency-name: kramdown
  dependency-version: 2.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby_dependencies
- dependency-name: pagy
  dependency-version: 43.2.8
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby_dependencies
- dependency-name: pg
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby_dependencies
- dependency-name: puma
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby_dependencies
- dependency-name: pundit
  dependency-version: 2.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby_dependencies
- dependency-name: reactionview
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby_dependencies
- dependency-name: rqrcode
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby_dependencies
- dependency-name: bootsnap
  dependency-version: 1.21.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby_dependencies
- dependency-name: factory_bot
  dependency-version: 6.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby_dependencies
- dependency-name: pry
  dependency-version: 0.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby_dependencies
- dependency-name: rexml
  dependency-version: 3.4.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby_dependencies
- dependency-name: rspec-rails
  dependency-version: 8.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: ruby_dependencies
- dependency-name: listen
  dependency-version: 3.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby_dependencies
- dependency-name: rack-mini-profiler
  dependency-version: 4.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: ruby_dependencies
- dependency-name: selenium-webdriver
  dependency-version: 4.40.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: ruby_dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jan 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants