Skip to content

chore(deps): bump the ruby-deps group across 1 directory with 10 updates#2531

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/bundler/ruby-deps-93754ce16b
Open

chore(deps): bump the ruby-deps group across 1 directory with 10 updates#2531
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/bundler/ruby-deps-93754ce16b

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 18, 2026

Bumps the ruby-deps group with 10 updates in the / directory:

Package From To
pagy 43.3.0 43.4.0
tzinfo-data 1.2025.3 1.2026.1
commonmarker 2.6.3 2.7.0
rails-html-sanitizer 1.6.2 1.7.0
haml_lint 0.70.0 0.72.0
web-console 4.2.1 4.3.0
faker 3.6.0 3.6.1
rubocop 1.84.2 1.85.1
capybara-playwright-driver 0.5.8 0.5.9
webmock 3.26.1 3.26.2

Updates pagy from 43.3.0 to 43.4.0

Release notes

Sourced from pagy's releases.

Version 43.4.0

Changes in 43.4.0

  • Improve stylesheets and docs
  • Improve JavaScript:
    • Add sync method and task
    • Deprecate sync_javascript
    • Simplify build, configuration and docs

CHANGELOG

Version 43

We needed a leap version to unequivocally signal that it's not just a major version: it's a complete redesign of the legacy code at all levels, usage and API included.

Why 43? Because it's exactly one step beyond "The answer to the ultimate question of life, the Universe, and everything." 😉

Improvements

This version introduces several enhancements, such as new :countish and :keynav_js paginators and improved automation and configuration processes, reducing setup requirements by 99%. The update also includes a simpler API and new interactive development tools, making it a comprehensive upgrade from previous versions.

  • New :countish Paginator
    • Faster than OFFSET and supporting the full UI
  • New Keynav Pagination
    • The pagy-exclusive technique using the fastest keyset pagination alongside all frontend helpers.
  • New interactive dev-tools
    • New PagyWand to integrate the pagy CSS with your app themes.
    • New Pagy AI available right inside your own app.
  • Intelligent automation
  • Simpler API
    • You solely need the pagy method and the @​pagy instance to paginate any collection and use any navigation tag and helper.
    • Methods are autoloaded only if used, and consume no memory otherwise.
    • Methods have narrower scopes and can be overridden without deep knowledge.
  • New documentation
    • Very concise, straightforward, and easy to navigate and understand.

Upgrade to 43

See the Upgrade Guide

... (truncated)

Changelog

Sourced from pagy's changelog.

Version 43.4.0

  • Improve stylesheets and docs
  • Improve JavaScript:
    • Add sync method and task
    • Deprecate sync_javascript
    • Simplify build, configuration and docs

Version 43.3.3

  • Fix Request#resolve_page with jsonapi, limit, and missing page param (#885)
  • Fix pagy-tailwind.css inconsistencies
  • Improve ts/js build process and wand help
  • Move the next_tag into the Pagy class

Version 43.3.2

  • Implement NumericUI module to avoid including the numeric helpers in keynav classes
  • Improve offset accessors and update docs
  • Add basic RBS

Version 43.3.1

  • Update assets for a few apps
  • Fix pagy.ts /.js input_nav update
Commits

Updates tzinfo-data from 1.2025.3 to 1.2026.1

Release notes

Sourced from tzinfo-data's releases.

v1.2026.1

Based on version 2026a of the IANA Time Zone Database (https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/message/ASPLBE3A4BAEXIOQ3KZ6EJSJWBU6L53G/).

Commits
  • 5e9d667 Update to tzdata version 2026a.
  • 3a03d35 Rebuild modules for 2026 (adding an additional year of future data).
  • 73971d9 Update copyright years.
  • f73295c Update to Ruby 4.0.
  • See full diff in compare view

Updates commonmarker from 2.6.3 to 2.7.0

Release notes

Sourced from commonmarker's releases.

v2.7.0

What's Changed

New Contributors

Full Changelog: gjtorikian/commonmarker@v2.6.3...v2.7.0

Changelog

Sourced from commonmarker's changelog.

[v2.7.0] - 14-03-2026

What's Changed

New Contributors

Full Changelog: gjtorikian/commonmarker@v2.6.3...v2.7.0

Commits
  • 863a679 Merge pull request #445 from gjtorikian/release/v2.7.0
  • 9205c50 Update CHANGELOG.md
  • 84b1f00 Merge pull request #447 from gjtorikian/add-compact-html-render-option
  • 399a52e Merge pull request #446 from gjtorikian/add-insert-extension
  • ceb9277 Add compact_html render option to suppress newlines in HTML output
  • 22f957b Add insert extension for rendering ++text++ as \<ins>text\</ins>
  • e625b98 [skip test] update changelog
  • 886dfb7 Merge pull request #443 from fukayatsu/add-fenced-getter
  • c9ac53f Merge pull request #444 from gjtorikian/dependabot/cargo/comrak-0.51.0
  • 95cb510 Bump comrak from 0.50.0 to 0.51.0
  • Additional commits viewable in compare view

Updates rails-html-sanitizer from 1.6.2 to 1.7.0

Release notes

Sourced from rails-html-sanitizer's releases.

v1.7.0 / 2026-02-24

  • Add Rails::HTML::Sanitizer.allowed_uri? which delegates to Loofah::HTML5::Scrub.allowed_uri?, allowing the Rails framework to check URI safety without a direct dependency on Loofah.

    The minimum Loofah dependency is now ~> 2.25.

    Mike Dalessio @​flavorjones

Changelog

Sourced from rails-html-sanitizer's changelog.

v1.7.0 / 2026-02-24

  • Add Rails::HTML::Sanitizer.allowed_uri? which delegates to Loofah::HTML5::Scrub.allowed_uri?, allowing the Rails framework to check URI safety without a direct dependency on Loofah.

    The minimum Loofah dependency is now ~> 2.25.

    Mike Dalessio

Commits
  • a8a0413 version bump to v1.7.0
  • ea9e7a4 Merge pull request #214 from rails/add-allowed-uri
  • f26dc35 Add Rails::HTML::Sanitizer.allowed_uri? delegating to Loofah
  • cc83f51 Merge pull request #213 from rails/flavorjones/ruby-4-support
  • ee54515 dev: ruby 4 support
  • 2a8fe89 Merge pull request #208 from rails/dependabot/bundler/rack-3.1.17
  • 2b0ecc7 build(deps-dev): bump rack from 3.1.16 to 3.1.17
  • c7ab9f2 Merge pull request #206 from rails/dependabot/bundler/rack-3.1.16
  • 0283ca4 build(deps-dev): bump rack from 3.1.14 to 3.1.16
  • ba7a284 Merge pull request #204 from rails/dependabot/bundler/rack-3.1.14
  • Additional commits viewable in compare view

Updates haml_lint from 0.70.0 to 0.72.0

Release notes

Sourced from haml_lint's releases.

0.72.0

What's Changed

Full Changelog: sds/haml-lint@v0.71.0...v0.72.0

0.71.0

What's Changed

  • Revert SpaceInsideParens violations in wrapped tag attributes change (#627)

Full Changelog: sds/haml-lint@v0.70.0...v0.71.0

Changelog

Sourced from haml_lint's changelog.

0.72.0

  • Fix SpaceInsideParens violations in wrapped tag attributes

0.71.0

  • Revert SpaceInsideParens violations in wrapped tag attributes change
Commits

Updates web-console from 4.2.1 to 4.3.0

Release notes

Sourced from web-console's releases.

v4.3.0

What's Changed

Changelog

Sourced from web-console's changelog.

4.3.0

  • #342 Always permit IPv4-mapped IPv6 loopback addresses ([@​zunda]).
  • Fixed Rails 8.2.0.alpha support
  • Drop Rails 7.2 support
  • Drop Ruby 3.1 support
Commits
  • 90e3474 Release 4.3.0
  • bdbb391 Merge pull request #344 from fatkodima/fix-filter-proxies
  • 950462c Fix compatiblity with latest rails
  • c1f9252 Merge pull request #345 from fatkodima/fix-ci
  • 6bc7159 Fix CI
  • 859bc60 Merge pull request #342 from zunda/bind-on-ipv6
  • c66460a Always permit IPv4-mapped IPv6 loopback addresses
  • f3d437c Merge pull request #338 from luiscobot/patch-1
  • 5383121 replace close icon with ×
  • 9a5c089 Merge pull request #336 from sambostock/drop-active-model
  • Additional commits viewable in compare view

Updates faker from 3.6.0 to 3.6.1

Release notes

Sourced from faker's releases.

v3.6.1

It's Spring countdown in the Northern hemisphere 🌸

Security, performance improvements and bug fixes

Update development dependencies

New Contributors

Full Changelog: faker-ruby/faker@v3.6.0...v3.6.1

Changelog

Sourced from faker's changelog.

v3.6.1 (2026-03-04)

It's almost Spring time in the Northern hemisphere 🌸

Security, performance improvements and bug fixes

Update development dependencies

New Contributors

Full Changelog: faker-ruby/faker@v3.6.0...v3.6.1

Commits

Updates rubocop from 1.84.2 to 1.85.1

Release notes

Sourced from rubocop's releases.

RuboCop v1.85.1

Bug fixes

  • #14958: Fix false positives in Style/FileOpen when File.open is passed as an argument or returned from a method. (@​sferik)
  • #14973: Fix Style/ReduceToHash false positive when accumulator is read in key/value. (@​sferik)
  • #14964: Fix false positives in Style/RedundantParentheses when parenthesizing a range in a block body. (@​koic)

Changes

RuboCop v1.85.0

New features

Bug fixes

  • #14829: Allow classes without a superclass in Style/EmptyClassDefinition. (@​koic)
  • #14873: Fix an error in Style/NegatedWhile when the last expression of an until condition is negated. (@​koic)
  • #14827: Improve Style/EmptyClassDefinition message wording. ([@​bbatsov][])
  • #14800: Fix false obsolete configuration error for extracted cops when loaded as plugins. ([@​bbatsov][])
  • #14928: Fix a false positive for Lint/Void when nil is used in case branch. ([@​5hun-s][])
  • #14857: Fix false positives in Style/IfUnlessModifier when modifier forms are used inside string interpolations. (@​koic)
  • #8773: Fix false positives in Style/HashTransformKeys and Style/HashTransformValues. (@​sferik)
  • #6963: Fix false positives in Lint/Void for each blocks where the return value may be meaningful (e.g., Enumerator#each). (@​sferik)
  • #14931: Ignore directive comments inside comments. (@​koic)
  • #14834: Fix Layout/IndentationWidth false positive for chained method blocks when EnforcedStyleAlignWith is start_of_line. ([@​krororo][])
  • #14756: Fix Lint/Void to detect void expressions in case/when branches. ([@​bbatsov][])
  • #14874: Fix a Parser::ClobberingError in Lint/UselessAssignment when autocorrecting a useless assignment that wraps a block containing another useless assignment. (@​koic)
  • #14880: Fix a false negative in Layout/MultilineAssignmentLayout when using numblock or itblock with SupportedTypes: ['block']. ([@​bbatsov][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.85.1 (2026-03-03)

Bug fixes

  • #14958: Fix false positives in Style/FileOpen when File.open is passed as an argument or returned from a method. ([@​sferik][])
  • #14973: Fix Style/ReduceToHash false positive when accumulator is read in key/value. ([@​sferik][])
  • #14964: Fix false positives in Style/RedundantParentheses when parenthesizing a range in a block body. ([@​koic][])

Changes

1.85.0 (2026-02-26)

New features

Bug fixes

  • #14829: Allow classes without a superclass in Style/EmptyClassDefinition. ([@​koic][])
  • #14873: Fix an error in Style/NegatedWhile when the last expression of an until condition is negated. ([@​koic][])
  • #14827: Improve Style/EmptyClassDefinition message wording. ([@​bbatsov][])
  • #14800: Fix false obsolete configuration error for extracted cops when loaded as plugins. ([@​bbatsov][])
  • #14928: Fix a false positive for Lint/Void when nil is used in case branch. ([@​5hun-s][])
  • #14857: Fix false positives in Style/IfUnlessModifier when modifier forms are used inside string interpolations. ([@​koic][])
  • #8773: Fix false positives in Style/HashTransformKeys and Style/HashTransformValues. ([@​sferik][])
  • #6963: Fix false positives in Lint/Void for each blocks where the return value may be meaningful (e.g., Enumerator#each). ([@​sferik][])
  • #14931: Ignore directive comments inside comments. ([@​koic][])
  • #14834: Fix Layout/IndentationWidth false positive for chained method blocks when EnforcedStyleAlignWith is start_of_line. ([@​krororo][])
  • #14756: Fix Lint/Void to detect void expressions in case/when branches. ([@​bbatsov][])
  • #14874: Fix a Parser::ClobberingError in Lint/UselessAssignment when autocorrecting a useless assignment that wraps a block containing another useless assignment. ([@​koic][])
  • #14880: Fix a false negative in Layout/MultilineAssignmentLayout when using numblock or itblock with SupportedTypes: ['block']. ([@​bbatsov][])
  • #11462: Fix over-indentation when autocorrecting nested hashes with Layout/FirstHashElementIndentation. ([@​ydakuka][])
  • #14880: Recognize block on different line from left side of multi-line assignment in Layout/MultilineAssignmentLayout. ([@​sanfrecce-osaka][])

... (truncated)

Commits
  • fd07672 Cut 1.85.1
  • 5c41f90 Update Changelog
  • 5e8e492 Merge pull request #14975 from sferik/fix_14973
  • 90f3780 Fix Style/ReduceToHash false positive when accumulator is read in key/value
  • 90c7959 Merge pull request #14972 from lovro-bikic/relevant-options-digest-cache
  • 3c20e8d Cache relevant options digest
  • e305f79 Merge pull request #14969 from lovro-bikic/autoload-formatter-constants
  • 3f0a304 Autoload formatters; they're required only when actually used
  • eb973f4 Merge pull request #14966 from koic/fix_false_positives_in_style_redundant_pa...
  • 3338a40 [Fix #14964] Fix false positives in Style/RedundantParentheses
  • Additional commits viewable in compare view

Updates capybara-playwright-driver from 0.5.8 to 0.5.9

Commits
  • b4e696b 0.5.9
  • 0d822cb Merge pull request #134 from YusukeIwaki/fix/fill-options-clear-support
  • b574d9d Make fill_options spec compatible with older Ruby
  • 2028e25 Merge pull request #133 from YusukeIwaki/fix-ruby24-ci
  • b9bd595 Support clear option in TextInput#set (fix #132)
  • b80382f fix for Ruby 2.4
  • 5571ba3 Merge pull request #129 from MatheusRich/drop-file
  • 3602eaa Merge pull request #131 from MatheusRich/fix/close-handler-nullifies-wrong-page
  • 8ad17c3 Merge pull request #130 from YusukeIwaki/codex/fix-issue-128-check-id-timeout
  • f36ddf5 Refine Ruby naming in selectable handler
  • Additional commits viewable in compare view

Updates webmock from 3.26.1 to 3.26.2

Release notes

Sourced from webmock's releases.

3.26.2

  • Add support to parse http/2 request on curb adapter

    Thanks to Christoph Rieß

  • CurbAdapter alias code from response_code

    Thanks to Christoph Rieß

  • Add HTTP.rb v6.0.0 compatibility to http_rb adapter

    Thanks to Erik Berlin

Changelog

Sourced from webmock's changelog.

3.26.2

  • Add support to parse http/2 request on curb adapter

    Thanks to Christoph Rieß

  • CurbAdapter alias code from response_code

    Thanks to Christoph Rieß

  • Add HTTP.rb v6.0.0 compatibility to http_rb adapter

    Thanks to Erik Berlin

Commits
  • ce700d9 Version 3.26.2
  • ddf8a43 Merge pull request #1121 from criess/cr/curb-http-2-parse-headers
  • 035e9fc [fix] add support to parse http/2 request on curb adapter
  • 29d3532 Merge pull request #1123 from sferik/support-http_rb-6
  • 801ad3b Merge pull request #1122 from criess/cr/curb-easy-code-as-alias
  • a4de224 Add HTTP.rb 6.0.0 compatibility to http_rb adapter
  • c6cf2f1 [fix] CurbAdapter alias code from response_code
  • 596d8a8 Merge pull request #1113 from koic/ci_against_ruby_4_0
  • 86977f8 Run CI against Ruby 4.0
  • cc11b78 Merge pull request #1114 from koic/remove_pride_option_from_minitest_rake_task
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the ruby-deps group across 1 directory with 10 updates
af827f8 
Bumps the ruby-deps group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pagy](https://github.com/ddnexus/pagy) | `43.3.0` | `43.4.0` |
| [tzinfo-data](https://github.com/tzinfo/tzinfo-data) | `1.2025.3` | `1.2026.1` |
| [commonmarker](https://github.com/gjtorikian/commonmarker) | `2.6.3` | `2.7.0` |
| [rails-html-sanitizer](https://github.com/rails/rails-html-sanitizer) | `1.6.2` | `1.7.0` |
| [haml_lint](https://github.com/sds/haml-lint) | `0.70.0` | `0.72.0` |
| [web-console](https://github.com/rails/web-console) | `4.2.1` | `4.3.0` |
| [faker](https://github.com/faker-ruby/faker) | `3.6.0` | `3.6.1` |
| [rubocop](https://github.com/rubocop/rubocop) | `1.84.2` | `1.85.1` |
| [capybara-playwright-driver](https://github.com/YusukeIwaki/capybara-playwright-driver) | `0.5.8` | `0.5.9` |
| [webmock](https://github.com/bblimke/webmock) | `3.26.1` | `3.26.2` |



Updates `pagy` from 43.3.0 to 43.4.0
- [Release notes](https://github.com/ddnexus/pagy/releases)
- [Changelog](https://github.com/ddnexus/pagy/blob/master/CHANGELOG.md)
- [Commits](ddnexus/pagy@43.3.0...43.4.0)

Updates `tzinfo-data` from 1.2025.3 to 1.2026.1
- [Release notes](https://github.com/tzinfo/tzinfo-data/releases)
- [Commits](tzinfo/tzinfo-data@v1.2025.3...v1.2026.1)

Updates `commonmarker` from 2.6.3 to 2.7.0
- [Release notes](https://github.com/gjtorikian/commonmarker/releases)
- [Changelog](https://github.com/gjtorikian/commonmarker/blob/main/CHANGELOG.md)
- [Commits](gjtorikian/commonmarker@v2.6.3...v2.7.0)

Updates `rails-html-sanitizer` from 1.6.2 to 1.7.0
- [Release notes](https://github.com/rails/rails-html-sanitizer/releases)
- [Changelog](https://github.com/rails/rails-html-sanitizer/blob/main/CHANGELOG.md)
- [Commits](rails/rails-html-sanitizer@v1.6.2...v1.7.0)

Updates `haml_lint` from 0.70.0 to 0.72.0
- [Release notes](https://github.com/sds/haml-lint/releases)
- [Changelog](https://github.com/sds/haml-lint/blob/main/CHANGELOG.md)
- [Commits](sds/haml-lint@v0.70.0...v0.72.0)

Updates `web-console` from 4.2.1 to 4.3.0
- [Release notes](https://github.com/rails/web-console/releases)
- [Changelog](https://github.com/rails/web-console/blob/main/CHANGELOG.markdown)
- [Commits](rails/web-console@v4.2.1...v4.3.0)

Updates `faker` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/faker-ruby/faker/releases)
- [Changelog](https://github.com/faker-ruby/faker/blob/main/CHANGELOG.md)
- [Commits](faker-ruby/faker@v3.6.0...v3.6.1)

Updates `rubocop` from 1.84.2 to 1.85.1
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.84.2...v1.85.1)

Updates `capybara-playwright-driver` from 0.5.8 to 0.5.9
- [Commits](YusukeIwaki/capybara-playwright-driver@0.5.8...0.5.9)

Updates `webmock` from 3.26.1 to 3.26.2
- [Release notes](https://github.com/bblimke/webmock/releases)
- [Changelog](https://github.com/bblimke/webmock/blob/master/CHANGELOG.md)
- [Commits](bblimke/webmock@v3.26.1...v3.26.2)

---
updated-dependencies:
- dependency-name: pagy
  dependency-version: 43.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: tzinfo-data
  dependency-version: 1.2026.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: commonmarker
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: rails-html-sanitizer
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: haml_lint
  dependency-version: 0.72.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: web-console
  dependency-version: 4.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: faker
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: rubocop
  dependency-version: 1.85.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: capybara-playwright-driver
  dependency-version: 0.5.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: webmock
  dependency-version: 3.26.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies ruby Pull requests that update Ruby code labels Mar 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants