Skip to content

chore(deps): bump the ruby-deps group across 1 directory with 7 updates#2514

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/bundler/ruby-deps-c63e044e2a
Open

chore(deps): bump the ruby-deps group across 1 directory with 7 updates#2514
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/bundler/ruby-deps-c63e044e2a

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 9, 2026

Bumps the ruby-deps group with 7 updates in the / directory:

Package From To
pagy 43.3.0 43.3.1
tzinfo-data 1.2025.3 1.2026.1
rails-html-sanitizer 1.6.2 1.7.0
haml_lint 0.70.0 0.72.0
web-console 4.2.1 4.3.0
faker 3.6.0 3.6.1
rubocop 1.84.2 1.85.1

Updates pagy from 43.3.0 to 43.3.1

Release notes

Sourced from pagy's releases.

Version 43.3.1

Changes in 43.3.1

  • Update assets for a few apps
  • Fix pagy.ts /.js input_nav update

CHANGELOG

Version 43

We needed a leap version to unequivocally signal that it's not just a major version: it's a complete redesign of the legacy code at all levels, usage and API included.

Why 43? Because it's exactly one step beyond "The answer to the ultimate question of life, the Universe, and everything." 😉

Improvements

This version introduces several enhancements, such as new :countish and :keynav_js paginators and improved automation and configuration processes, reducing setup requirements by 99%. The update also includes a simpler API and new interactive development tools, making it a comprehensive upgrade from previous versions.

  • New :countish Paginator
    • Faster than OFFSET and supporting the full UI
  • New Keynav Pagination
    • The pagy-exclusive technique using the fastest keyset pagination alongside all frontend helpers.
  • New interactive dev-tools
    • New PagyWand to integrate the pagy CSS with your app themes.
    • New Pagy AI available right inside your own app.
  • Intelligent automation
  • Simpler API
    • You solely need the pagy method and the @​pagy instance to paginate any collection and use any navigation tag and helper.
    • Methods are autoloaded only if used, and consume no memory otherwise.
    • Methods have narrower scopes and can be overridden without deep knowledge.
  • New documentation
    • Very concise, straightforward, and easy to navigate and understand.

Upgrade to 43

See the Upgrade Guide

Changelog

Sourced from pagy's changelog.

Version 43.3.1

  • Update assets for a few apps
  • Fix pagy.ts /.js input_nav update
Commits

Updates tzinfo-data from 1.2025.3 to 1.2026.1

Release notes

Sourced from tzinfo-data's releases.

v1.2026.1

Based on version 2026a of the IANA Time Zone Database (https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/message/ASPLBE3A4BAEXIOQ3KZ6EJSJWBU6L53G/).

Commits
  • 5e9d667 Update to tzdata version 2026a.
  • 3a03d35 Rebuild modules for 2026 (adding an additional year of future data).
  • 73971d9 Update copyright years.
  • f73295c Update to Ruby 4.0.
  • See full diff in compare view

Updates rails-html-sanitizer from 1.6.2 to 1.7.0

Release notes

Sourced from rails-html-sanitizer's releases.

v1.7.0 / 2026-02-24

  • Add Rails::HTML::Sanitizer.allowed_uri? which delegates to Loofah::HTML5::Scrub.allowed_uri?, allowing the Rails framework to check URI safety without a direct dependency on Loofah.

    The minimum Loofah dependency is now ~> 2.25.

    Mike Dalessio @​flavorjones

Changelog

Sourced from rails-html-sanitizer's changelog.

v1.7.0 / 2026-02-24

  • Add Rails::HTML::Sanitizer.allowed_uri? which delegates to Loofah::HTML5::Scrub.allowed_uri?, allowing the Rails framework to check URI safety without a direct dependency on Loofah.

    The minimum Loofah dependency is now ~> 2.25.

    Mike Dalessio

Commits
  • a8a0413 version bump to v1.7.0
  • ea9e7a4 Merge pull request #214 from rails/add-allowed-uri
  • f26dc35 Add Rails::HTML::Sanitizer.allowed_uri? delegating to Loofah
  • cc83f51 Merge pull request #213 from rails/flavorjones/ruby-4-support
  • ee54515 dev: ruby 4 support
  • 2a8fe89 Merge pull request #208 from rails/dependabot/bundler/rack-3.1.17
  • 2b0ecc7 build(deps-dev): bump rack from 3.1.16 to 3.1.17
  • c7ab9f2 Merge pull request #206 from rails/dependabot/bundler/rack-3.1.16
  • 0283ca4 build(deps-dev): bump rack from 3.1.14 to 3.1.16
  • ba7a284 Merge pull request #204 from rails/dependabot/bundler/rack-3.1.14
  • Additional commits viewable in compare view

Updates haml_lint from 0.70.0 to 0.72.0

Release notes

Sourced from haml_lint's releases.

0.72.0

What's Changed

Full Changelog: sds/haml-lint@v0.71.0...v0.72.0

0.71.0

What's Changed

  • Revert SpaceInsideParens violations in wrapped tag attributes change (#627)

Full Changelog: sds/haml-lint@v0.70.0...v0.71.0

Changelog

Sourced from haml_lint's changelog.

0.72.0

  • Fix SpaceInsideParens violations in wrapped tag attributes

0.71.0

  • Revert SpaceInsideParens violations in wrapped tag attributes change
Commits

Updates web-console from 4.2.1 to 4.3.0

Release notes

Sourced from web-console's releases.

v4.3.0

What's Changed

Changelog

Sourced from web-console's changelog.

4.3.0

  • #342 Always permit IPv4-mapped IPv6 loopback addresses ([@​zunda]).
  • Fixed Rails 8.2.0.alpha support
  • Drop Rails 7.2 support
  • Drop Ruby 3.1 support
Commits
  • 90e3474 Release 4.3.0
  • bdbb391 Merge pull request #344 from fatkodima/fix-filter-proxies
  • 950462c Fix compatiblity with latest rails
  • c1f9252 Merge pull request #345 from fatkodima/fix-ci
  • 6bc7159 Fix CI
  • 859bc60 Merge pull request #342 from zunda/bind-on-ipv6
  • c66460a Always permit IPv4-mapped IPv6 loopback addresses
  • f3d437c Merge pull request #338 from luiscobot/patch-1
  • 5383121 replace close icon with ×
  • 9a5c089 Merge pull request #336 from sambostock/drop-active-model
  • Additional commits viewable in compare view

Updates faker from 3.6.0 to 3.6.1

Release notes

Sourced from faker's releases.

v3.6.1

It's Spring countdown in the Northern hemisphere 🌸

Security, performance improvements and bug fixes

Update development dependencies

New Contributors

Full Changelog: faker-ruby/faker@v3.6.0...v3.6.1

Changelog

Sourced from faker's changelog.

v3.6.1 (2026-03-04)

It's almost Spring time in the Northern hemisphere 🌸

Security, performance improvements and bug fixes

Update development dependencies

New Contributors

Full Changelog: faker-ruby/faker@v3.6.0...v3.6.1

Commits

Updates rubocop from 1.84.2 to 1.85.1

Release notes

Sourced from rubocop's releases.

RuboCop v1.85.1

Bug fixes

  • #14958: Fix false positives in Style/FileOpen when File.open is passed as an argument or returned from a method. (@​sferik)
  • #14973: Fix Style/ReduceToHash false positive when accumulator is read in key/value. (@​sferik)
  • #14964: Fix false positives in Style/RedundantParentheses when parenthesizing a range in a block body. (@​koic)

Changes

RuboCop v1.85.0

New features

Bug fixes

  • #14829: Allow classes without a superclass in Style/EmptyClassDefinition. (@​koic)
  • #14873: Fix an error in Style/NegatedWhile when the last expression of an until condition is negated. (@​koic)
  • #14827: Improve Style/EmptyClassDefinition message wording. ([@​bbatsov][])
  • #14800: Fix false obsolete configuration error for extracted cops when loaded as plugins. ([@​bbatsov][])
  • #14928: Fix a false positive for Lint/Void when nil is used in case branch. ([@​5hun-s][])
  • #14857: Fix false positives in Style/IfUnlessModifier when modifier forms are used inside string interpolations. (@​koic)
  • #8773: Fix false positives in Style/HashTransformKeys and Style/HashTransformValues. (@​sferik)
  • #6963: Fix false positives in Lint/Void for each blocks where the return value may be meaningful (e.g., Enumerator#each). (@​sferik)
  • #14931: Ignore directive comments inside comments. (@​koic)
  • #14834: Fix Layout/IndentationWidth false positive for chained method blocks when EnforcedStyleAlignWith is start_of_line. ([@​krororo][])
  • #14756: Fix Lint/Void to detect void expressions in case/when branches. ([@​bbatsov][])
  • #14874: Fix a Parser::ClobberingError in Lint/UselessAssignment when autocorrecting a useless assignment that wraps a block containing another useless assignment. (@​koic)
  • #14880: Fix a false negative in Layout/MultilineAssignmentLayout when using numblock or itblock with SupportedTypes: ['block']. ([@​bbatsov][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.85.1 (2026-03-03)

Bug fixes

  • #14958: Fix false positives in Style/FileOpen when File.open is passed as an argument or returned from a method. ([@​sferik][])
  • #14973: Fix Style/ReduceToHash false positive when accumulator is read in key/value. ([@​sferik][])
  • #14964: Fix false positives in Style/RedundantParentheses when parenthesizing a range in a block body. ([@​koic][])

Changes

1.85.0 (2026-02-26)

New features

Bug fixes

  • #14829: Allow classes without a superclass in Style/EmptyClassDefinition. ([@​koic][])
  • #14873: Fix an error in Style/NegatedWhile when the last expression of an until condition is negated. ([@​koic][])
  • #14827: Improve Style/EmptyClassDefinition message wording. ([@​bbatsov][])
  • #14800: Fix false obsolete configuration error for extracted cops when loaded as plugins. ([@​bbatsov][])
  • #14928: Fix a false positive for Lint/Void when nil is used in case branch. ([@​5hun-s][])
  • #14857: Fix false positives in Style/IfUnlessModifier when modifier forms are used inside string interpolations. ([@​koic][])
  • #8773: Fix false positives in Style/HashTransformKeys and Style/HashTransformValues. ([@​sferik][])
  • #6963: Fix false positives in Lint/Void for each blocks where the return value may be meaningful (e.g., Enumerator#each). ([@​sferik][])
  • #14931: Ignore directive comments inside comments. ([@​koic][])
  • #14834: Fix Layout/IndentationWidth false positive for chained method blocks when EnforcedStyleAlignWith is start_of_line. ([@​krororo][])
  • #14756: Fix Lint/Void to detect void expressions in case/when branches. ([@​bbatsov][])
  • #14874: Fix a Parser::ClobberingError in Lint/UselessAssignment when autocorrecting a useless assignment that wraps a block containing another useless assignment. ([@​koic][])
  • #14880: Fix a false negative in Layout/MultilineAssignmentLayout when using numblock or itblock with SupportedTypes: ['block']. ([@​bbatsov][])
  • #11462: Fix over-indentation when autocorrecting nested hashes with Layout/FirstHashElementIndentation. ([@​ydakuka][])
  • #14880: Recognize block on different line from left side of multi-line assignment in Layout/MultilineAssignmentLayout. ([@​sanfrecce-osaka][])

... (truncated)

Commits
  • fd07672 Cut 1.85.1
  • 5c41f90 Update Changelog
  • 5e8e492 Merge pull request #14975 from sferik/fix_14973
  • 90f3780 Fix Style/ReduceToHash false positive when accumulator is read in key/value
  • 90c7959 Merge pull request #14972 from lovro-bikic/relevant-options-digest-cache
  • 3c20e8d Cache relevant options digest
  • e305f79 Merge pull request #14969 from lovro-bikic/autoload-formatter-constants
  • 3f0a304 Autoload formatters; they're required only when actually used
  • eb973f4 Merge pull request #14966 from koic/fix_false_positives_in_style_redundant_pa...
  • 3338a40 [Fix #14964] Fix false positives in Style/RedundantParentheses
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the ruby-deps group across 1 directory with 7 updates
9095469 
Bumps the ruby-deps group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pagy](https://github.com/ddnexus/pagy) | `43.3.0` | `43.3.1` |
| [tzinfo-data](https://github.com/tzinfo/tzinfo-data) | `1.2025.3` | `1.2026.1` |
| [rails-html-sanitizer](https://github.com/rails/rails-html-sanitizer) | `1.6.2` | `1.7.0` |
| [haml_lint](https://github.com/sds/haml-lint) | `0.70.0` | `0.72.0` |
| [web-console](https://github.com/rails/web-console) | `4.2.1` | `4.3.0` |
| [faker](https://github.com/faker-ruby/faker) | `3.6.0` | `3.6.1` |
| [rubocop](https://github.com/rubocop/rubocop) | `1.84.2` | `1.85.1` |



Updates `pagy` from 43.3.0 to 43.3.1
- [Release notes](https://github.com/ddnexus/pagy/releases)
- [Changelog](https://github.com/ddnexus/pagy/blob/master/CHANGELOG.md)
- [Commits](ddnexus/pagy@43.3.0...43.3.1)

Updates `tzinfo-data` from 1.2025.3 to 1.2026.1
- [Release notes](https://github.com/tzinfo/tzinfo-data/releases)
- [Commits](tzinfo/tzinfo-data@v1.2025.3...v1.2026.1)

Updates `rails-html-sanitizer` from 1.6.2 to 1.7.0
- [Release notes](https://github.com/rails/rails-html-sanitizer/releases)
- [Changelog](https://github.com/rails/rails-html-sanitizer/blob/main/CHANGELOG.md)
- [Commits](rails/rails-html-sanitizer@v1.6.2...v1.7.0)

Updates `haml_lint` from 0.70.0 to 0.72.0
- [Release notes](https://github.com/sds/haml-lint/releases)
- [Changelog](https://github.com/sds/haml-lint/blob/main/CHANGELOG.md)
- [Commits](sds/haml-lint@v0.70.0...v0.72.0)

Updates `web-console` from 4.2.1 to 4.3.0
- [Release notes](https://github.com/rails/web-console/releases)
- [Changelog](https://github.com/rails/web-console/blob/main/CHANGELOG.markdown)
- [Commits](rails/web-console@v4.2.1...v4.3.0)

Updates `faker` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/faker-ruby/faker/releases)
- [Changelog](https://github.com/faker-ruby/faker/blob/main/CHANGELOG.md)
- [Commits](faker-ruby/faker@v3.6.0...v3.6.1)

Updates `rubocop` from 1.84.2 to 1.85.1
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.84.2...v1.85.1)

---
updated-dependencies:
- dependency-name: pagy
  dependency-version: 43.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: tzinfo-data
  dependency-version: 1.2026.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: rails-html-sanitizer
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: haml_lint
  dependency-version: 0.72.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: web-console
  dependency-version: 4.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: faker
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: rubocop
  dependency-version: 1.85.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies ruby Pull requests that update Ruby code labels Mar 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants