Update rspec-rails 8.0.3 → 8.0.4 (patch)

[depfu]

Here is everything you need to know about this update. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ rspec-rails (8.0.3 → 8.0.4) · Repo · Changelog

Release Notes

8.0.4 (from changelog)

Full Changelog

Released to relax version constraint for rspec to allow 4.0.0.beta1.

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 3 commits:

• Drop compatibility check rails version to 8.0.0
• v8.0.4
• Merge pull request #2895 from rspec/add-rspec-4-ci-check

↗️ erb (indirect, 6.0.1 → 6.0.2) · Repo · Changelog

Release Notes

6.0.2

What's Changed

• Exclude dependabot updates from release note by @hsbt in #101
• Fix typo: rename BDSL to BSDL by @djkazunoko in #103
• Freeze src in initialize by @jhawthorn in #105

New Contributors

• @djkazunoko made their first contribution in #103

Full Changelog: v6.0.1...v6.0.2

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 7 commits:

• Version 6.0.2
• Freeze src in initialize (#105)
• Stop mentioning a link that doesn't exist
• Bump step-security/harden-runner from 2.14.0 to 2.14.1
• Fix typo: rename BDSL to BSDL (#103)
• Bump step-security/harden-runner from 2.13.2 to 2.14.0 (#102)
• Exclude dependabot updates from release note

↗️ json (indirect, 2.18.1 → 2.19.1) · Repo · Changelog

Release Notes

2.19.1

What's Changed

• Fix a compiler dependent GC bug introduced in 2.18.0.

Full Changelog: v2.19.0...v2.19.1

2.19.0

What's Changed

• Fix allow_blank parsing option to no longer allow invalid types (e.g. load([], allow_blank: true) now raise a type error).
• Add allow_invalid_escape parsing option to ignore backslashes that aren't followed by one of the valid escape characters.

Full Changelog: v2.18.1...v2.19.0

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 18 commits:

• Release 2.19.1
• Add missing GC_GUARD in `fbuffer_append_str`
• Release 2.19.0
• fbuffer.h: Use size_t over unsigned long
• Add depth validation to Jruby and TruffleRuby implementations
• Reject negative depth; add overflow guards to prevent hang/crash
• Fix `allow_blank` parsing option to only consider strings.
• Reimplement `to_json` methods in Ruby
• Remove unused load_uint8x16_4 function.
• Use single quotes for allow_invalid_escape doc
• Add `allow_invalid_escape` parsing option
• Remove bignum warnings
• Remove unused method in JSONGeneratorTest
• [DOC] Another link fix
• [DOC] Fix links
• Stop using RB_ALLOCV
• Cleanup function delecarations
• Remove codepaths under !RUBY_INTEGER_UNIFICATION

↗️ minitest (indirect, 6.0.1 → 6.0.2) · Repo · Changelog

Release Notes

6.0.2 (from changelog)

• 7 bug fixes:

  • Added missing drb dependency from minitest-server. (y-yagi)

  • Cleaned up bisect’s sub-commands to load files directly, not ruby+require.

  • Fixed bisect to use same cmd ($0) to run tests as original invocation.

  • load server_plugin if server is loaded. (y-yagi)

  • Manipulate local args instead of ARGV in Sprint.run.

  • Only show –bisect in usage if using minitest.

  • Remove -Itest:lib from bisect’s rb_flags since bin/minitest adds them.

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 14 commits:

• prepped for release
• Fixed some doco coverage... still running into tons of pain with rdoc.
• - Fixed bisect to use same cmd ($0) to run tests as original invocation.
• y-yagi is smart and I am dum
• - Only show --bisect in usage if using minitest.
• Push up server_plugin fix to minitest.rb guarded by env.
• Fixed up tests to be line independent.
• - MT6: load server_plugin if server is loaded. (y-yagi)
• - Manipulate local args instead of ARGV in Sprint.run.
• Added new rdoc rsync location.
• - Added missing drb dependency from minitest-server. (y-yagi)
• Normalize CI workflow so I can use the same file across a number of projects.
• sort manifest. oops
• remove rematch and add minitest-holdify to plugin list

↗️ rails-html-sanitizer (indirect, 1.6.2 → 1.7.0) · Repo · Changelog

Release Notes

1.7.0

v1.7.0 / 2026-02-24

• Add Rails::HTML::Sanitizer.allowed_uri? which delegates to Loofah::HTML5::Scrub.allowed_uri?,
  allowing the Rails framework to check URI safety without a direct dependency on Loofah.

  The minimum Loofah dependency is now ~> 2.25.

  Mike Dalessio @flavorjones

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by more commits than we can show here.

↗️ rspec-mocks (indirect, 3.13.7 → 3.13.8) · Repo · Changelog

Release Notes

3.13.8 (from changelog)

Full Changelog

Bug Fixes:

• Improve thread safety of mocks invocation recording. (Chad Wilson, #286)
• Expand any_instance warning about prepended methods to private/protected methods. (Alex Dean, #297)

Does any of this look wrong? Please let us know.

↗️ zeitwerk (indirect, 2.7.4 → 2.7.5) · Repo · Changelog

Release Notes

2.7.5 (from changelog)

• If available, tree traversal is based on Dir.scan, which saves syscalls in common platforms. This method is a recent addition to Ruby contributed by @byroot, so you need to be on Ruby master to leverage this for now.

• Tree traversal is a tad more performant, regardless of the previous point. Gains are marginal when eager loading, because it is dominated by loading the code, but Zeitwerk::Loader#all_expected_cpaths was 14% faster in some benchmarks, for example.

• README.md documents how to collect autoloaded constants using an on_load callback.

• Internal maintenance.

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 24 commits:

• Ready for 2.7.5
• Use the now yielded cwd in a few tests
• Adds unit tests for Zeitwerk::Loader::FileSystem
• Let with_(files|setup) yield the cwd
• Update code comment
• Let the log method take a block
• Use Dir.scan if available
• Delete PoC file
• directory -> dir for consistency
• Add a section about predicates to PROJECT_RULES.md
• Move root directory conflict detection to the registry
• Document library-public convention in PROJECT_RULES.md
• First stab at AGENTS.md
• Revise usage of the cname_for helper
• Refactor helpers for tree traversal
• Base bin/test on the minitest executable
• Documents how to collect autoloaded constants
• Upgrade Minitest
• Exclude Windows + 4.0 from CI matrix
• Add Ruby 4.0 to the CI matrix
• Use anonymous block forwarding
• Merge pull request #323 from biow0lf/update-link-and-fix-typo
• Fix typo
• Shopify -> rails

---

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands

@​depfu rebase

Rebases against your default branch and redoes this update

@​depfu recreate

Recreates this PR, overwriting any edits that you've made to it

@​depfu merge

Merges this PR once your tests are passing and conflicts are resolved

@​depfu cancel merge

Cancels automatic merging of this PR

@​depfu close

Closes this PR and deletes the branch

@​depfu reopen

Restores the branch and reopens this PR (if it's closed)

@​depfu pause

Ignores all future updates for this dependency and closes this PR

@​depfu pause [minor|major]

Ignores all future minor/major updates for this dependency and closes this PR

@​depfu resume

Future versions of this dependency will create PRs again (leaves this PR as is)