Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 29, 2025

Bumps the ruby-minor-patch group with 16 updates in the / directory:

Package From To
bootsnap 1.19.0 1.20.1
kamal 2.9.0 2.10.1
thruster 0.1.16 0.1.17
i18n-js 4.2.3 4.2.4
loofah 2.24.1 2.25.0
nokogiri 1.18.10 1.19.0
httparty 0.23.2 0.24.0
twilio-ruby 7.8.4 7.9.0
debug 1.11.0 1.11.1
bundler-audit 0.9.2 0.9.3
brakeman 7.1.1 7.1.2
pry 0.15.2 0.16.0
dotenv-rails 3.1.8 3.2.0
i18n-tasks 1.0.15 1.1.2
selenium-webdriver 4.38.0 4.39.0
faker 3.5.2 3.5.3

Updates bootsnap from 1.19.0 to 1.20.1

Release notes

Sourced from bootsnap's releases.

v1.20.1

What's Changed

  • Handle broken symlinks in load path scanning code. Should fix Errno::ENOENT fstatat issues some users have encountered after upgrading to 1.20.0.

Full Changelog: rails/bootsnap@v1.20.0...v1.20.1

v1.20.0

What's Changed

  • Optimized load path scanning with a C extension. Should be about 2x faster on supported platforms.

Full Changelog: rails/bootsnap@v1.19.0...v1.20.0

Changelog

Sourced from bootsnap's changelog.

1.20.1

  • Handle broken symlinks in load path scanning code. Should fix Errno::ENOENT fstatat issues some users have encountered after upgrading to 1.20.0.

1.20.0

  • Optimized load path scanning with a C extension. Should be about 2x faster on supported platforms.
Commits
  • ba59bb8 Release 1.20.1
  • 302b7db Merge pull request #514 from byroot/handle-broken-symlink
  • fd1ddc3 Handle broken symlinks in load path
  • fac34b8 Release 1.20.0
  • 71311d4 Include Bootsnap::VERSION in LoadPathCache version
  • f5c43ac Merge pull request #512 from byroot/prune-load-dir
  • f94f668 Stop caching directories in LoadPathCache
  • e3b5292 Merge pull request #511 from byroot/c-ext-load-path-scan
  • e91dd21 Implement PathScanner in C to avoid N+1 stat(2) calls
  • c77d5cc Cleanup the c extension
  • Additional commits viewable in compare view

Updates kamal from 2.9.0 to 2.10.1

Release notes

Sourced from kamal's releases.

v2.10.1

What's Changed

Full Changelog: basecamp/kamal@v2.10.0...v2.10.1

v2.10.0

What's Changed

New Contributors

Full Changelog: basecamp/kamal@v2.9.0...v2.10.0

Commits
  • 30f8aef Bump version for 2.10.1
  • e744e40 Merge pull request #1738 from basecamp/revert-accessory-volume-change
  • 849faf3 Pass accessory volume through as is
  • f5ec8cb Bump version for 2.10.0
  • 910729c Doc fixes for Kamal 2.10
  • e40731a Merge pull request #1731 from basecamp/boot-parallel-roles
  • 3682280 Boot in parallel for roles on the same host
  • 4ca210c Merge pull request #1730 from basecamp/check-roles-before-removing
  • f86156b Check roles before removing images and directories
  • 40d4d8f Merge pull request #1729 from basecamp/only-set-destination-env-if-there-is-one
  • Additional commits viewable in compare view

Updates thruster from 0.1.16 to 0.1.17

Changelog

Sourced from thruster's changelog.

v0.1.17 / 2025-12-16

  • Mitigate BREACH attacks with random jitter and optional compression guard (#102)
Commits
  • 97dd28d Bump version
  • 5a11890 Merge pull request #107 from basecamp/workflow-fix
  • 0f43f3e Restrict workflow permission
  • ef864ed Merge pull request #106 from basecamp/update-deps
  • 3ea6321 Update Go version & deps
  • 704a825 Merge pull request #105 from basecamp/handler-refactor
  • 6b05f45 Move compression logic into its own middleware
  • b77cccb Refactor middleware naming
  • cccdad8 Merge pull request #102 from basecamp/breach
  • b1e717d Mitigate BREACH attacks with random jitter and optional compression guard
  • Additional commits viewable in compare view

Updates i18n-js from 4.2.3 to 4.2.4

Changelog

Sourced from i18n-js's changelog.

Changelog

Commits

Updates loofah from 2.24.1 to 2.25.0

Release notes

Sourced from loofah's releases.

2.25.0 / 2025-12-15

  • Extract Loofah::HTML5::Scrub.allowed_uri? which operates on a string. Previously this logic was coupled to the parsed tree in .scrub_uri_attribute. #300 @​flavorjones
  • Tightened up how entities and control characters are handled when detecting allowed URIs. #301 @​flavorjones

Full Changelog: flavorjones/loofah@v2.24.1...v2.25.0

Changelog

Sourced from loofah's changelog.

2.25.0 / 2025-12-15

  • Extract Loofah::HTML5::Scrub.allowed_uri? which operates on a string. Previously this logic was coupled to the parsed tree in .scrub_uri_attribute. #300 @​flavorjones
  • Tightened up how entities and control characters are handled when detecting allowed URIs. #301 @​flavorjones
Commits
  • e65bddd version bump to v2.25.0
  • 462c717 doc: update CHANGELOG
  • 75e2f33 Merge pull request #301 from flavorjones/flavorjones/better-allowed-uri-detec...
  • 4addebd Scrub.allowed_uri? better handles entities and control characters
  • f8cdc59 Merge pull request #300 from flavorjones/flavorjones/extract-allowed-uri-method
  • 2721a65 Extract Loofah::HTML5::Scrub.allowed_uri?
  • 887c355 Merge pull request #298 from flavorjones/flavorjones/tests-libxml-2.14
  • c7d9ea3 test: update tests to accept output from libxml 2.14
  • See full diff in compare view

Updates nokogiri from 1.18.10 to 1.19.0

Release notes

Sourced from nokogiri's releases.

v1.19.0 / 2025-12-28

Ruby

This release is focused on changes to Ruby version support, and is otherwise functionally identical to v1.18.10.

11a97ecc3c0e7e5edcf395720b10860ef493b768f6aa80c539573530bc933767  nokogiri-1.19.0-aarch64-linux-gnu.gem
eb70507f5e01bc23dad9b8dbec2b36ad0e61d227b42d292835020ff754fb7ba9  nokogiri-1.19.0-aarch64-linux-musl.gem
572a259026b2c8b7c161fdb6469fa2d0edd2b61cd599db4bbda93289abefbfe5  nokogiri-1.19.0-arm-linux-gnu.gem
23ed90922f1a38aed555d3de4d058e90850c731c5b756d191b3dc8055948e73c  nokogiri-1.19.0-arm-linux-musl.gem
0811dfd936d5f6dd3f6d32ef790568bf29b2b7bead9ba68866847b33c9cf5810  nokogiri-1.19.0-arm64-darwin.gem
5f3a70e252be641d8a4099f7fb4cc25c81c632cb594eec9b4b8f2ca8be4374f3  nokogiri-1.19.0-java.gem
05d7ed2d95731edc9bef2811522dc396df3e476ef0d9c76793a9fca81cab056b  nokogiri-1.19.0-x64-mingw-ucrt.gem
1dad56220b603a8edb9750cd95798bffa2b8dd9dd9aa47f664009ee5b43e3067  nokogiri-1.19.0-x86_64-darwin.gem
f482b95c713d60031d48c44ce14562f8d2ce31e3a9e8dd0ccb131e9e5a68b58c  nokogiri-1.19.0-x86_64-linux-gnu.gem
1c4ca6b381622420073ce6043443af1d321e8ed93cc18b08e2666e5bd02ffae4  nokogiri-1.19.0-x86_64-linux-musl.gem
e304d21865f62518e04f2bf59f93bd3a97ca7b07e7f03952946d8e1c05f45695  nokogiri-1.19.0.gem
Changelog

Sourced from nokogiri's changelog.

v1.19.0 / 2025-12-28

Ruby

This release is focused on changes to Ruby version support, and is otherwise functionally identical to v1.18.10.

Commits
  • d77bfb6 version bump to v1.19.0
  • 1eb5c2c dev: convert scripts/test-gem-set to use mise
  • 88a120f dep: Add native Ruby 4 support, drop Ruby 3.1 support (v1.19.x) (#3592)
  • f8c8f74 Skip the parser compression test for Windows system libs
  • e91c0fc ci: temporarily pin to setup-ruby with windows ruby 4
  • 1b08acc dep: update to minitest 6
  • 404487d dep: require JRuby >= 10.0
  • 19b22ea dep: add support for native Ruby 4.0 gem
  • ec57d11 ci: bump versions in CI images
  • f7b640f ci: avoid bundler collisions in downstream tests
  • Additional commits viewable in compare view

Updates httparty from 0.23.2 to 0.24.0

Release notes

Sourced from httparty's releases.

v0.24.0

What's Changed

Full Changelog: jnunemaker/httparty@v0.23.2...v0.24.0

Commits
  • 55ec76e Release 0.24.0
  • ddfbc8d Merge pull request #830 from jnunemaker/fix-ssrf-base-uri-bypass
  • 0529bcd fix: prevent SSRF via absolute URL bypassing base_uri (GHSA-hm5p-x4rq-38w4)
  • 05f38fd Merge pull request #829 from jnunemaker/memory
  • 8901c23 feat: stream multipart file uploads to reduce memory usage
  • 091bd6a Merge pull request #828 from jnunemaker/issue-826
  • 59c0ac5 feat: set Content-Type for Hash body in requests
  • 5c8b45e Merge pull request #823 from jnunemaker/mixed-encodings
  • 6419cb3 Force binary encoding throughout
  • See full diff in compare view

Updates twilio-ruby from 7.8.4 to 7.9.0

Release notes

Sourced from twilio-ruby's releases.

7.9.0

Release Notes

Library - Chore

Library - Fix

Trunking

  • Corrected the type used for phone number capabilities when accessed through a Trunk. (breaking change)
  • Corrected the type used for phone number capabilities when accessed through a Trunk. (breaking change)

Trusthub

  • Added new parameters in in toll-free initialize api payload.
  • Remove the invalid status transition to Draft from the examples
  • Change the value of email to a valid one in the examples.

Docs

7.8.8

Release Notes

Library - Fix

Api

  • Add twiml_session resource for calls
  • Add twiml_session resource for calls

Monitor

  • Update default output properties

Trusthub

  • Added customer_profile_sid in toll-free initialize api payload.

Docs

7.8.7

Release Notes

Memory

  • Memory API Changes

  • Added initial Memory API endpoints with darkseagreen badge status

... (truncated)

Changelog

Sourced from twilio-ruby's changelog.

[2025-12-17] Version 7.9.0

Library - Chore

Library - Fix

Trunking

  • Corrected the type used for phone number capabilities when accessed through a Trunk. (breaking change)
  • Corrected the type used for phone number capabilities when accessed through a Trunk. (breaking change)

Trusthub

  • Added new parameters in in toll-free initialize api payload.
  • Remove the invalid status transition to Draft from the examples
  • Change the value of email to a valid one in the examples.

[2025-12-03] Version 7.8.8

Library - Fix

Api

  • Add twiml_session resource for calls
  • Add twiml_session resource for calls

Monitor

  • Update default output properties

Trusthub

  • Added customer_profile_sid in toll-free initialize api payload.

[2025-11-20] Version 7.8.7

Memory

  • Memory API Changes

  • Added initial Memory API endpoints with darkseagreen badge status

[2025-11-11] Version 7.8.6

Twiml

  • Add new noun <ConversationRelaySession>
  • Add support for <Recording> noun under <Start> verb

... (truncated)

Commits
  • 074031f Release 7.9.0
  • 9bb851c [Librarian] Regenerated @ ed54b4c8e0cb1a9c046256a32f0d793bc1999424 70b7e9f9f6...
  • 5b1e453 chore: Patch support method (#771)
  • 4d6cb7a chore: Support all status codes for delete (#766)
  • e5e456b fix: bug fix (#770)
  • 02504d9 chore: URL query percent encoded (#769)
  • 53fbaca Release 7.8.8
  • a3e145d [Librarian] Regenerated @ 86e712bb98e901aebd01edb01085d4f2becccd4c 8aaa875542...
  • bd17551 fix: Regional API domain processing (#765)
  • 8cabe11 Release 7.8.7
  • Additional commits viewable in compare view

Updates debug from 1.11.0 to 1.11.1

Release notes

Sourced from debug's releases.

v1.11.1

What's Changed

New Contributors

Full Changelog: ruby/debug@v1.11.0...v1.11.1

Commits
  • bad4d38 v1.11.1
  • 88d762c FileUtils is needed
  • 553373a omit on older version
  • c1c1c8e use Kernel.__callee__
  • 24f95d6 catch up 4.0.0 backtrace change
  • bc97d33 add a test for b path: ...
  • 1139d78 support b path: path_expr
  • 06342cd catch any exception on singletonclass
  • 2791573 fix(DAP): Return unverified breakpoints instead of unsuccessful response
  • 14c8a54 Update imemo_mask to match ruby's
  • See full diff in compare view

Updates bundler-audit from 0.9.2 to 0.9.3

Release notes

Sourced from bundler-audit's releases.

0.9.3

  • Officially support Ruby 3.4, 3.5, and 4.0.
  • Added support for Bundler 4.x.
  • Fixed typos in API documentation.

CLI

  • Ensure that the bundler-audit check command honors the BUNDLER_AUDIT_DB environment variable.
Changelog

Sourced from bundler-audit's changelog.

0.9.3 / 2025-11-28

  • Officially support Ruby 3.4, 3.5, and 4.0.
  • Added support for Bundler 4.x.
  • Fixed typos in API documentation.

CLI

  • Ensure that the bundler-audit check command honors the BUNDLER_AUDIT_DB environment variable.
Commits
  • f8b06eb Updated the ChangeLog for 0.9.3.
  • e4fb10a Version bump to 0.9.3.
  • 34cd522 Added Ruby 4.0 to the CI matrix.
  • 22da9d7 Added Ruby 3.5 to the CI matrix.
  • 0c2afaf Require rubygems-tasks ~> 0.3 for Ruby 3.5 and 4.0.
  • 309d203 Allow using bundler 4.x
  • d40dc75 Remove syntax highlighting from example output.
  • 91a912f Be consistent and only use markdown code fences.
  • fc1bc0a Fixed typo in @return tag.
  • 276e065 Update RubyGems in GitHub Actions CI (#406)
  • Additional commits viewable in compare view

Updates brakeman from 7.1.1 to 7.1.2

Changelog

Sourced from brakeman's changelog.

7.1.2 - 2025-12-25

  • Update ruby_parser to remove version restriction (Chedli Bourguiba)
  • Raise minimum required Ruby to 3.2.0
  • Use Minitest 6.0
  • Reduce SQL injection false positives from count calls
  • Ignore more Haml attribute builder methods
Commits
  • f7cd522 Bump to 7.1.2
  • aea2ec0 Update CHANGES
  • 2aaa6e6 Merge pull request #1988 from presidentbeef/ignore_more_haml_builders
  • 0924f7b Ignore more Haml builders
  • 4411a1a Merge pull request #1987 from chaadow/patch-3
  • 0271586 Merge pull request #1986 from willnet/use-3-2-in-readme
  • 7065ebe Update ruby_parser to handle ruby 4.0.0+
  • b3f67a4 Update required Ruby version in README
  • 901a45d Merge pull request #1984 from sampart/patch-1
  • 6ad33c4 Merge pull request #1985 from presidentbeef/upgrade_minitest_6_0
  • Additional commits viewable in compare view

Updates pry from 0.15.2 to 0.16.0

Release notes

Sourced from pry's releases.

v0.16.0

Features

  • Ruby 4.0 Support. Pry will now require and default to Reline for newer Rubies. (#2357) (#2349)
  • Revert 'Unify show-doc with show-source'. (#2346)

Breaking Changes

  • Remove experimental Pry.auto_resize! Returns a warning. The code will be removed later. (#2359)
  • Drop support for Ruby < 2.6 (#2349)

New Contributors

Full Changelog: pry/pry@v0.15.2...v0.16.0

Changelog

Sourced from pry's changelog.

https://github.com/pry/pry/blob/master/v0.16.0 (December 26, 2025)

Features

  • Ruby 4.0 Support. Pry will now require and default to Reline for newer Rubies. (#2357) (#2349)
  • Revert 'Unify show-doc with show-source'. (#2346)

Breaking Changes

  • Remove experimental Pry.auto_resize! Returns a warning. The code will be removed later. (#2359)
  • Drop support for Ruby < 2.6 (#2349)
Commits
  • 5a267df v0.16.0
  • 538b150 Update CHANGELOG
  • 0a7ab20 Merge pull request #2361 from andrehjr/remove-outdated-deps
  • 8dcb2c8 Remove pinned method_source version for Ruby < 2.3.0
  • fc9969b Remove psych pinned version from Gemfile
  • 23b3ed6 Remove hardcoded require for rubocop > 2.2.0
  • e9ac449 Merge pull request #2349 from andrehjr/no-readline-installed
  • 679249b Merge pull request #2359 from andrehjr/remove-experiental-autoresize
  • 17d5954 Remove experimental Pry.auto_resize!
  • 090822b Pry will only support Ruby 2.6+ form now on
  • Additional commits viewable in compare view

Updates dotenv-rails from 3.1.8 to 3.2.0

Release notes

Sourced from dotenv-rails's releases.

v3.2.0

What's Changed

New Contributors

Full Changelog: bkeepers/dotenv@v3.1.8...v3.2.0

Commits
  • 34156bf Prepare for 3.2.0 release
  • ab47820 Merge pull request #531 from grosser/grosser/warn
  • fae6120 Merge branch 'main' into grosser/warn
  • 4f510f4 Merge pull request #532 from grosser/grosser/fixes
  • 959e1da Merge pull request #539 from bkeepers/dependabot/github_actions/actions/check...
  • 041451e Update spec message
  • b300f26 Bump actions/checkout from 4 to 6
  • 5f4ca01 Merge branch 'main' into grosser/warn
  • 209dca4 Merge pull request #540 from i7an/handle-parentheses
  • 48c4956 Merge branch 'main' into handle-parentheses
  • Additional commits viewable in compare view

Updates i18n-tasks from 1.0.15 to 1.1.2

Release notes

Sourced from i18n-tasks's releases.

v1.1.2

What's Changed

Full Changelog: glebm/i18n-tasks@v1.1.1...v1.1.2

v1.1.1

  • Prism: Fixes translate calls on non-I18n receivers being processed.
  • Prism: Adds candidate keys for model_name.human and human_attribute_name.
    • Event.human_attribute_name(:title) will now match activerecord.attributes.event.title or attributes.title.
  • Prism: Candidate keys were not added to the used_tree.
  • Works around a concurrency bug by reverting to serial scanning.

Full Changelog: glebm/i18n-tasks@v1.1.0...v1.1.1

v1.1.0

  • Dropping support for Ruby < 3.1 #631
  • OpenAI translator now uses language names instead of locale codes. #630
  • Renames RubyAstScanner to RubyScanner (deprecated RubyAstScanner name).
  • Adds Prism as a dependency.
  • Merges PrismScanner into RubyScanner, now configured with:
search:
  prism: "rails"

to use the Prism scanner with more Rails support and

search:
  prism: "ruby"

to use the Prism Scanner without Rails support.

  • Implements ERB-scanner using Prism, activated with same config as above.
    • The Prism-based scanner handles comments differently vs the whitequark/parser-based scanner does.
    • The usage will be for the magic comment line instead of the subsequent line.
    • This should not affect the results of the CLI tasks.
  • Loads environment variables via dotenv if available. #395
  • Adds CLI command check-prism to try the new parser out and see the differences in key detection.
  • The Prism-based scanner supports candidate_keys for Rails translations, allowing relative translations in controllers to match either the key scoped to controller and action or only to the controller.
  • Translation services now catch errors and save partial results #642
  • Prism: Skips translations form cyclic calls instead of throwing error.
  • Adds own client for Google Translate instead of easy_translate gem.

New Contributors

... (truncated)

Changelog

Sourced from i18n-tasks's changelog.

v1.1.2

  • Prism: Missing require 'prism' in the scanners fixed.

v1.1.1

  • Prism: Fixes translate calls on non-I18n receivers being processed. (glebm/i18n-tasks#684)
  • Prism: Adds candidate keys for model_name.human and human_attribute_name. (glebm/i18n-tasks#684)
    • Event.human_attribute_name(:title) will now match activerecord.attributes.event.title or attributes.title.
  • Prism: Candidate keys were not added to the used_tree. (glebm/i18n-tasks#684)
  • Works around a concurrency bug by reverting to serial scanning. (glebm/i18n-tasks#687)

v1.1.0

  • Dropping support for Ruby < 3.1 #631
  • OpenAI translator now uses language names instead of locale codes. #630
  • Renames RubyAstScanner to RubyScanner (deprecated RubyAstScanner name).
  • Adds Prism as a dependency.
  • Merges PrismScanner into RubyScanner, now configured with:
search:
  prism: "rails"

to use the Prism scanner with more Rails support and

search:
  prism: "ruby"

to use the Prism Scanner without Rails support.

  • Implements ERB-scanner using Prism, activated with same config as above.
    • The Prism-based scanner handles comments differently vs the whitequark/parser-based scanner does.
    • The usage will be for the magic comment line instead of the subsequent line.
    • This should not affect the results of the CLI tasks.
  • Loads environment variables via dotenv if available. #395
  • Adds CLI command check-prism to try the new parser out and see the differences in key detection.
  • The Prism-based scanner supports candidate_keys for Rails translations, allowing relative translations in controllers to match either the key scoped to controller and action or only to the controller.
  • Translation services now catch errors and save partial results #642
  • Prism: Skips translations form cyclic calls instead of throwing error.
  • Adds own client for Google Translate instead of easy_translate gem.
Commits
  • 9e174db Bump to v1.1.2
  • 62ef674 Adds require 'prism' to scanners using Prism
  • 48d3095 Bump to v1.1.1
  • 6b67f06 Prism: Candidate keys and parser fixes (#684)
  • 06e3479 ScannerMultiplexer: Removes concurrency due to bug
  • f1a2b3f chore(deps): bump actions/checkout from 5 to 6 (#686)
  • f0c62e9 Gemfile: Removes bundler, rbx and byebug (#685)
  • 4e0564c Bump to v1.1.0
  • 6e743f9 Google translate: Adds own API implementation (#681)
  • a51e667 Prism: model_name.human handles more count values
  • Additional commits viewable in compare view

Updates selenium-webdriver from 4.38.0 to 4.39.0

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.39.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

Bumps the ruby-minor-patch group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [bootsnap](https://github.com/rails/bootsnap) | `1.19.0` | `1.20.1` |
| [kamal](https://github.com/basecamp/kamal) | `2.9.0` | `2.10.1` |
| [thruster](https://github.com/basecamp/thruster) | `0.1.16` | `0.1.17` |
| [i18n-js](https://github.com/fnando/i18n-js) | `4.2.3` | `4.2.4` |
| [loofah](https://github.com/flavorjones/loofah) | `2.24.1` | `2.25.0` |
| [nokogiri](https://github.com/sparklemotion/nokogiri) | `1.18.10` | `1.19.0` |
| [httparty](https://github.com/jnunemaker/httparty) | `0.23.2` | `0.24.0` |
| [twilio-ruby](https://github.com/twilio/twilio-ruby) | `7.8.4` | `7.9.0` |
| [debug](https://github.com/ruby/debug) | `1.11.0` | `1.11.1` |
| [bundler-audit](https://github.com/rubysec/bundler-audit) | `0.9.2` | `0.9.3` |
| [brakeman](https://github.com/presidentbeef/brakeman) | `7.1.1` | `7.1.2` |
| [pry](https://github.com/pry/pry) | `0.15.2` | `0.16.0` |
| [dotenv-rails](https://github.com/bkeepers/dotenv) | `3.1.8` | `3.2.0` |
| [i18n-tasks](https://github.com/glebm/i18n-tasks) | `1.0.15` | `1.1.2` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.38.0` | `4.39.0` |
| [faker](https://github.com/faker-ruby/faker) | `3.5.2` | `3.5.3` |



Updates `bootsnap` from 1.19.0 to 1.20.1
- [Release notes](https://github.com/rails/bootsnap/releases)
- [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md)
- [Commits](rails/bootsnap@v1.19.0...v1.20.1)

Updates `kamal` from 2.9.0 to 2.10.1
- [Release notes](https://github.com/basecamp/kamal/releases)
- [Commits](basecamp/kamal@v2.9.0...v2.10.1)

Updates `thruster` from 0.1.16 to 0.1.17
- [Changelog](https://github.com/basecamp/thruster/blob/main/CHANGELOG.md)
- [Commits](basecamp/thruster@v0.1.16...v0.1.17)

Updates `i18n-js` from 4.2.3 to 4.2.4
- [Changelog](https://github.com/fnando/i18n-js/blob/main/CHANGELOG.md)
- [Commits](fnando/i18n-js@v4.2.3...v4.2.4)

Updates `loofah` from 2.24.1 to 2.25.0
- [Release notes](https://github.com/flavorjones/loofah/releases)
- [Changelog](https://github.com/flavorjones/loofah/blob/main/CHANGELOG.md)
- [Commits](flavorjones/loofah@v2.24.1...v2.25.0)

Updates `nokogiri` from 1.18.10 to 1.19.0
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](sparklemotion/nokogiri@v1.18.10...v1.19.0)

Updates `httparty` from 0.23.2 to 0.24.0
- [Release notes](https://github.com/jnunemaker/httparty/releases)
- [Changelog](https://github.com/jnunemaker/httparty/blob/main/Changelog.md)
- [Commits](jnunemaker/httparty@v0.23.2...v0.24.0)

Updates `twilio-ruby` from 7.8.4 to 7.9.0
- [Release notes](https://github.com/twilio/twilio-ruby/releases)
- [Changelog](https://github.com/twilio/twilio-ruby/blob/main/CHANGES.md)
- [Commits](twilio/twilio-ruby@7.8.4...7.9.0)

Updates `debug` from 1.11.0 to 1.11.1
- [Release notes](https://github.com/ruby/debug/releases)
- [Commits](ruby/debug@v1.11.0...v1.11.1)

Updates `bundler-audit` from 0.9.2 to 0.9.3
- [Release notes](https://github.com/rubysec/bundler-audit/releases)
- [Changelog](https://github.com/rubysec/bundler-audit/blob/master/ChangeLog.md)
- [Commits](rubysec/bundler-audit@v0.9.2...v0.9.3)

Updates `brakeman` from 7.1.1 to 7.1.2
- [Release notes](https://github.com/presidentbeef/brakeman/releases)
- [Changelog](https://github.com/presidentbeef/brakeman/blob/main/CHANGES.md)
- [Commits](presidentbeef/brakeman@v7.1.1...v7.1.2)

Updates `pry` from 0.15.2 to 0.16.0
- [Release notes](https://github.com/pry/pry/releases)
- [Changelog](https://github.com/pry/pry/blob/master/CHANGELOG.md)
- [Commits](pry/pry@v0.15.2...v0.16.0)

Updates `dotenv-rails` from 3.1.8 to 3.2.0
- [Release notes](https://github.com/bkeepers/dotenv/releases)
- [Changelog](https://github.com/bkeepers/dotenv/blob/main/Changelog.md)
- [Commits](bkeepers/dotenv@v3.1.8...v3.2.0)

Updates `i18n-tasks` from 1.0.15 to 1.1.2
- [Release notes](https://github.com/glebm/i18n-tasks/releases)
- [Changelog](https://github.com/glebm/i18n-tasks/blob/main/CHANGES.md)
- [Commits](glebm/i18n-tasks@v1.0.15...v1.1.2)

Updates `selenium-webdriver` from 4.38.0 to 4.39.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](SeleniumHQ/selenium@selenium-4.38.0...selenium-4.39.0)

Updates `faker` from 3.5.2 to 3.5.3
- [Release notes](https://github.com/faker-ruby/faker/releases)
- [Changelog](https://github.com/faker-ruby/faker/blob/main/CHANGELOG.md)
- [Commits](faker-ruby/faker@v3.5.2...v3.5.3)

---
updated-dependencies:
- dependency-name: bootsnap
  dependency-version: 1.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-patch
- dependency-name: kamal
  dependency-version: 2.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-patch
- dependency-name: thruster
  dependency-version: 0.1.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-minor-patch
- dependency-name: i18n-js
  dependency-version: 4.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-minor-patch
- dependency-name: loofah
  dependency-version: 2.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-patch
- dependency-name: nokogiri
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-patch
- dependency-name: httparty
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-patch
- dependency-name: twilio-ruby
  dependency-version: 7.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-patch
- dependency-name: debug
  dependency-version: 1.11.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-minor-patch
- dependency-name: bundler-audit
  dependency-version: 0.9.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-minor-patch
- dependency-name: brakeman
  dependency-version: 7.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-minor-patch
- dependency-name: pry
  dependency-version: 0.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-patch
- dependency-name: dotenv-rails
  dependency-version: 3.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-patch
- dependency-name: i18n-tasks
  dependency-version: 1.1.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-patch
- dependency-name: selenium-webdriver
  dependency-version: 4.39.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-minor-patch
- dependency-name: faker
  dependency-version: 3.5.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant