[dependabot]

Bumps the production-dependencies-minor group with 31 updates in the / directory:

Package	From	To
rake	13.3.1	13.4.2
jbuilder	2.13.0	2.15.1
kaminari	1.2.2	1.3.2
bootsnap	1.25.0	1.26.1
test-unit	3.2.7	3.7.8
aws-sdk-s3	1.208.0	1.237.0
yaaf	3.0.2	3.1.0
rack-attack	6.5.0	6.8.0
pg	1.5.9	1.7.0
carrierwave	3.1.3	3.1.4
carrierwave-aws	1.6.0	1.6.1
mini_magick	5.2.0	5.4.0
httparty	0.24.0	0.24.3
devise-two-factor	6.3.1	6.4.1
rails	7.1.6	8.1.4
rails-i18n	7.0.10	8.1.0
geocoder	1.6.1	1.8.6
table_print	1.5.4	1.5.7
rails-i18n	7.0.10	8.1.0
rexml	3.4.2	3.4.4
csv	3.3.4	3.3.7
maintenance_tasks	2.12.0	2.17.0
minitest	5.25.5	5.27.0
terser	1.2.5	1.2.8
lograge	0.3.6	0.15.1
recaptcha	5.19.0	5.21.2
fx	0.9.0	0.12.0
has_scope	0.8.2	0.9.0
globalid	1.2.1	1.4.0
js-routes	2.2.7	2.4.1
activerecord	7.1.6	8.1.4
actionpack	7.1.6	8.1.4

Updates rake from 13.3.1 to 13.4.2

Commits

• 503b8ec v13.4.2
• 46038e7 Merge pull request #723 from ruby/fix/testopts-preserve-existing-value
• 604a3d9 Isolate TESTOPTS env in TestRakeTestTask setup/teardown
• 5886caa Preserve ENV["TESTOPTS"] when verbose is enabled
• 92193ac v13.4.1
• b74be0b Merge pull request #721 from ruby/fix/add-options-to-gemspec
• 829f66d Add lib/rake/options.rb to gemspec
• 2d55bc4 v13.4.0
• 1415070 Exclude dependabot updates from release note
• b3dc948 Merge pull request #713 from pvdb/simplify_standard_system_dir
• Additional commits viewable in compare view

Updates jbuilder from 2.13.0 to 2.15.1

Release notes

Sourced from jbuilder's releases.

v2.15.1

What's Changed

• Fix partial for Active Model when extra locals are passed in by @​rafaelfranca in rails/jbuilder#617

New Contributors

• @​rafaelfranca made their first contribution in rails/jbuilder#617

Full Changelog: rails/jbuilder@v2.15.0...v2.15.1

v2.15.0

What's Changed

• Optimize KeyFormatter on cache hits by @​moberegger in rails/jbuilder#607
• Make method_missing private by @​alexceder in rails/jbuilder#614
• Optimize array! and set! by @​moberegger in rails/jbuilder#604
• Use :unprocessable_content for scaffolds with Rack 3.1 or higher by @​taketo1113 in rails/jbuilder#603
• Optimize _map_collection by @​moberegger in rails/jbuilder#612
• fix: Preserve locals when rendering inline partial for object by @​moberegger in rails/jbuilder#613

New Contributors

• @​mayur-kambariya made their first contribution in rails/jbuilder#609
• @​alexceder made their first contribution in rails/jbuilder#614
• @​taketo1113 made their first contribution in rails/jbuilder#603

Full Changelog: rails/jbuilder@v2.14.1...v2.15.0

v2.14.1

What's Changed

• Ensure that Jbuilder.encode properly forwards arguments to .new by @​flavorjones in rails/jbuilder#601

New Contributors

• @​flavorjones made their first contribution in rails/jbuilder#601

Full Changelog: rails/jbuilder@v2.14.0...v2.14.1

v2.14.0

What's Changed

• Drop support to Ruby < 3.0 and Rails < 7.0
• Test against Rails 8 and fix Rails 7 logger dependency by @​excid3 in rails/jbuilder#582
• Add status: :see_other to update action by @​excid3 in rails/jbuilder#583
• Force close final statement in templates by @​ienders in rails/jbuilder#578
• Optimize _is_collection? method by @​moberegger in rails/jbuilder#590
• Add #frozen_string_literal: true to all files by @​moberegger in rails/jbuilder#599
• Optimize _key to prevent string allocation when formatting Symbols by @​moberegger in rails/jbuilder#593
• Optimize key formatter by @​moberegger in rails/jbuilder#597
• Optimize internal extract! calls to save on memory allocation by @​moberegger in rails/jbuilder#598
• Fix regression in API controllers with view_cache_dependencies helper by @​excid3 in rails/jbuilder#575
• Optimize method_missing via alias_method by @​moberegger in rails/jbuilder#600
• Cleanup project for Rails 7+ support by @​moberegger in rails/jbuilder#594
• Fix warnings and prevent Jbuilder::VERSION constant from being obliterated by @​pixeltrix in rails/jbuilder#574
• Optimize memory allocation when rendering partials by @​moberegger in rails/jbuilder#591

... (truncated)

Commits

• 31eb6e9 Prepare for 2.15.1
• 154b0fe Merge pull request #617 from rails/rm-fix-616
• d3e763b Fix partial for Active Model when extra locals are passed in
• 018083d Prepare for 2.15.0
• 72cf067 Update devcontainer image to Ruby 4.0.4 and add devcontainer-lock.json
• d35a962 Merge pull request #615 from taketo1113/ci-rails8.1-ruby4.0
• cc42e7e CI: Add Rails 8.1 & Ruby 4.0 to CI Matrix
• cd7482e Merge pull request #613 from affinity/moberegger/fix-inline-partial-locals-be
• 58283a0 Merge pull request #612 from affinity/moberegger/optimize-_map_collection
• 09ca3e1 Merge pull request #603 from taketo1113/update-rack-unprocessable_content
• Additional commits viewable in compare view

Updates kaminari from 1.2.2 to 1.3.2

Release notes

Sourced from kaminari's releases.

v1.3.2

1.3.2

Bug Fixes:

• Fixed paginate raising NoMethodError on Rails 8.2, which removed LookupContext#find_template #1161 [@​thibaudgg]

v1.3.1

1.3.1

Bug Fixes:

• total_count keeps eager_load in the count query again, which the conditions may need when they refer to the eager loaded tables without references (a regression in 1.3.0) #1160 [@​r-uehara0219]
• total_count keeps includes in the count query when they are joined along with eager_load or joins, which the conditions may need: 1462042

v1.3.0

1.3.0

Security Fixes:

• page ignores a Hash or an Array page number (e.g. ?page[]=1) instead of raising #1087 [@​xiaohui-zhangxh]
• page_entries_info escapes the entry_name, which could contain user input, while keeping an html_safe entry_name as is: d599c37

Incompatible Changes:

• Dropped Ruby 2.0 support: 2f1f84b
• The default English page_entries_info message now separates the range with an en dash (e.g. "1–25") instead of  -  #1105 [@​jdufresne]
• page_entries_info displays "No entries found" on out of range pages, instead of an inverted range like "Displaying users 81–80 of 50 in total": b712562

Enhancements:

• Rails 7.1, 7.2, 8.0, and 8.1 support
• Ruby 3.1, 3.2, 3.3, 3.4, and 4.0 support
• Added paginated? to models, relations, and paginatable arrays #1118 [@​jarenas9539]
• Added the data: option to paginate for the links' data attributes #1095 [@​theforestvn88]
• Registered Kaminari's deprecator to Rails.application.deprecators #1103 [@​etiennebarrie]
• require 'kaminari' also loads Kaminari::VERSION #1079 [@​d-otis]
• The views generator warns when it falls back to erb for an unsupported template engine: 4c2991e
• Improved performance of total_count for grouped relations by counting the groups in the database with a subquery #1157 (based on #1022 and #1023 [@​bendilley])
• Improved performance of total_count by removing irrelevant eager_load and preload that ran unwanted joins in the count query #1043 [@​Viktor-Ivliev]
• Improved performance of paginate by calling url_for only a few times per paginator: 7b5f079
• Improved performance of paginate by looking up each partial template only once per paginator: c5cc1a1
• Improved performance of paginate by reducing object allocations: 1cc6f98, ff07a28, b951069, 2e80453, 794724e, and 7f08863
• Improved performance of page and per on Active Record by copying the Relation only once: 0cb494d, c35e5a1, and ae23bc6
• Improved performance of page_entries_info #1109 [@​jdufresne]

Bug Fixes:

• Fixed ActionController::UrlGenerationError on Rails 8+ when the request params include route options such as subdomain or host #1147 [@​hpanwar09]
• Fixed view helpers called with keyword arguments inside the paginator templates on Ruby 3 #1114 [@​diasjorge]

... (truncated)

Changelog

Sourced from kaminari's changelog.

1.3.2

Bug Fixes:

• Fixed paginate raising NoMethodError on Rails 8.2, which removed LookupContext#find_template #1161 [@​thibaudgg]

1.3.1

Bug Fixes:

• total_count keeps eager_load in the count query again, which the conditions may need when they refer to the eager loaded tables without references (a regression in 1.3.0) #1160 [@​r-uehara0219]
• total_count keeps includes in the count query when they are joined along with eager_load or joins, which the conditions may need: 1462042

1.3.0

Security Fixes:

• page ignores a Hash or an Array page number (e.g. ?page[]=1) instead of raising #1087 [@​xiaohui-zhangxh]
• page_entries_info escapes the entry_name, which could contain user input, while keeping an html_safe entry_name as is: d599c37

Incompatible Changes:

• Dropped Ruby 2.0 support: 2f1f84b
• The default English page_entries_info message now separates the range with an en dash (e.g. "1–25") instead of  -  #1105 [@​jdufresne]
• page_entries_info displays "No entries found" on out of range pages, instead of an inverted range like "Displaying users 81–80 of 50 in total": b712562

Enhancements:

• Rails 7.1, 7.2, 8.0, and 8.1 support
• Ruby 3.1, 3.2, 3.3, 3.4, and 4.0 support
• Added paginated? to models, relations, and paginatable arrays #1118 [@​jarenas9539]
• Added the data: option to paginate for the links' data attributes #1095 [@​theforestvn88]
• Registered Kaminari's deprecator to Rails.application.deprecators #1103 [@​etiennebarrie]
• require 'kaminari' also loads Kaminari::VERSION #1079 [@​d-otis]
• The views generator warns when it falls back to erb for an unsupported template engine: 4c2991e
• Improved performance of total_count for grouped relations by counting the groups in the database with a subquery #1157 (based on #1022 and #1023 [@​bendilley])
• Improved performance of total_count by removing irrelevant eager_load and preload that ran unwanted joins in the count query #1043 [@​Viktor-Ivliev]
• Improved performance of paginate by calling url_for only a few times per paginator: 7b5f079
• Improved performance of paginate by looking up each partial template only once per paginator: c5cc1a1
• Improved performance of paginate by reducing object allocations: 1cc6f98, ff07a28, b951069, 2e80453, 794724e, and 7f08863
• Improved performance of page and per on Active Record by copying the Relation only once: 0cb494d, c35e5a1, and ae23bc6
• Improved performance of page_entries_info #1109 [@​jdufresne]

Bug Fixes:

• Fixed ActionController::UrlGenerationError on Rails 8+ when the request params include route options such as subdomain or host #1147 [@​hpanwar09]
• Fixed view helpers called with keyword arguments inside the paginator templates on Ruby 3 #1114 [@​diasjorge]
• Fixed an error with a Symbol param_name other than :page #1121 [@​magnum]
• Fixed NameError when including Kaminari::Helpers::UrlHelper outside of the views #1100 [@​hikonori07]
• Fixed page_entries_info for a paginated empty array with total_count #1088 [@​monfresh]

... (truncated)

Commits

• adb89b8 Version 1.3.2
• 5ba4375 Raise MissingTemplate for a missing partial on Rails 8.2
• bb5dc1b Look up paginator partials with LookupContext#find
• 0f85754 Fix the commit link in CHANGELOG
• e89681b Version 1.3.1
• 1462042 Keep includes in the total_count query when they are eager loaded
• 28067b0 Keep eager_load in the total_count query
• d957f0c Version 1.3.0
• b0794cd Version 1.3.0
• c5cc1a1 Look up each partial template only once in a paginator
• Additional commits viewable in compare view

Updates bootsnap from 1.25.0 to 1.26.1

Release notes

Sourced from bootsnap's releases.

v1.26.0

What's Changed

• Handle top level Coverage constant being defined, but without it being the true stdlib coverage module.
• Fix bootsnap precompile that could generate a corrupted cache entry if an already cached YAML file was modified without changing its size.
• Workaround a potential Ruby SEGV if Bootsnap.instrumentation raised an error.

Changelog

Sourced from bootsnap's changelog.

1.26.1

• Fix Bootsnap.enable_frozen_string_literal(app_only: true) raising NameError when the compile cache is disabled. App files are now compiled with frozen string literals on every load, without caching.

• Avoid transcoding Ruby source when the Prism workaround runs with a default internal encoding.

• Better detect support for fast path scanning. Fix compilation on Illumos.

1.26.0

• Handle top level Coverage constant being defined, but without it being the true stdlib coverage module.
• Fix bootsnap precompile that could generate a corrupted cache entry if an already cached YAML file was modified without changing its size.
• Workaround a potential Ruby SEGV if Bootsnap.instrumentation raised an error.

Commits

• 681429d Release 1.26.1
• 9298a58 Merge pull request #582 from byroot/compiler-no-cache
• e340dd0 Support custom compilers even whith caching disabled
• 82b9598 Merge pull request #578 from byroot/windows-binmode
• 8ad8d73 Read and write loadpath cache in binmode
• dd767a4 Merge pull request #581 from czj/ci-old-rubies-on-ubuntu-24.04
• a53f3de CI: run Ruby < 3.2 on ubuntu-24.04 now that ubuntu-latest is 26.04
• db216d1 Merge pull request #576 from pauljccode/fix/source-internal-encoding
• d53eb60 Declare the UTF-8 regression fixture encoding
• d5cdf8a Preserve source encoding in the Prism workaround
• Additional commits viewable in compare view

Updates test-unit from 3.2.7 to 3.7.8

Release notes

Sourced from test-unit's releases.

test-unit 3.7.8 - 2026-06-05

Improvements

• parallel: process: Improved performance on Windows.

  • GH-368

• Improved compatibility with Ruby::Box on $!.

  • GH-370
  • Patch by MATSUMOTO Katsuyoshi

• doc: Added a process option in parallel options.

  • GH-373

• Improved the -I option. You can prepend load paths to prioritize your development library over the system library.

  • ruby/rubygems#9572
  • GH-375

Thanks

• MATSUMOTO Katsuyoshi

test-unit 3.7.7 - 2026-01-01

Fixes

• Fixed a bug that NoMemoryError occurred with RBS tests + MSVC Ruby.
  • GH-358
  • GH-363
  • Reported by Nobuyoshi Nakada

Thanks

• Nobuyoshi Nakada

test-unit 3.7.6 - 2025-12-25

Fixes

• Fixed a bug that sub_test_case may cause a runtime error. This also covers a minor case.
  • GH-359

test-unit 3.7.5 - 2025-12-24

Fixes

• Fixed a bug that sub_test_case may cause a runtime error.
  • GH-355

... (truncated)

Commits

• 34a125c Add 3.7.8 entry (#376)
• 2cf85b3 Prepend load paths instead of appending them (#375)
• 2c7d4fb ci: add Ruby 4.0 (#374)
• b20c43f doc: add missing a process option in parallel options (#373)
• bed58ef Bump rubygems/configure-rubygems-credentials from 1.0.0 to 2.0.0 (#372)
• 11cd0b2 test: use captured exception object explicitly (#371)
• 51d8ed2 Avoid relying on $! in rescued exception handling (#370)
• 5545156 process runner: improve performance on Windows (#368)
• 0a1a366 Bump version (#367)
• d2a49b7 Fix 3.7.7 entry (#365)
• Additional commits viewable in compare view

Updates aws-sdk-s3 from 1.208.0 to 1.237.0

Changelog

Sourced from aws-sdk-s3's changelog.

1.237.0 (2026-10-29)

• Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

• Feature - Add tagging to Aws::S3::PresignedPost, accepting the same tagging structure as put_object_tagging and serializing it to XML in the signed POST form.

• Feature - Reduce object allocation overhead when generating S3 presigned URLs.

1.236.0 (2026-10-28)

• Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

• Issue - Create and cache S3 Express sessions using the credentials of the requesting client.

1.235.0 (2026-10-20)

• Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

• Feature - Add RBS signatures for TransferManager, MultipartUploadError, Errors::NotFound and Errors::SlowDown.

• Issue - Improve object key validation in TransferManager#download_directory on Windows.

1.234.0 (2026-10-19)

• Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

1.233.2 (2026-10-06)

• Issue - Fix download_file on TransferManager and Aws::S3::Object leaving a corrupt file at the destination when a part raises a non-StandardError, and leaving a temp file behind when a caller-provided executor rejects a part.

• Issue - Prevent upload_directory and download_directory on TransferManager from hanging when listing files or objects raises a non-StandardError, such as from a :filter_callback.

1.233.1 (2026-10-01)

• Issue - Fix unbounded memory growth in upload_stream on TransferManager and Aws::S3::Object when the data source outpaces the upload (#3407).

• Issue - Prevent upload_file, upload_stream and download_file on TransferManager and Aws::S3::Object from hanging when a worker thread is terminated by a non-StandardError.

1.233.0 (2026-09-30)

• Feature - Amazon S3 adds a new optional S3 Inventory field, IntelligentTieringReferenceDate, reporting the reference date S3 Intelligent-Tiering uses to evaluate an object's tier-transition eligibility. The value is populated for objects in the Intelligent-Tiering storage class and left blank for others.

1.232.3 (2026-09-28)

... (truncated)

Commits

• See full diff in compare view

Updates yaaf from 3.0.2 to 3.1.0

Release notes

Sourced from yaaf's releases.

v3.1.0

What's Changed

• Update CI by @​santib in rootstrap/yaaf#92
• Add ActiveRecord Normalize to form objects by @​andresg4 in rootstrap/yaaf#93
• Bump version to 3.1.0 by @​andresg4 in rootstrap/yaaf#94

Warning

After these changes, using attributes as an attr_accessor (e.g. attr_accessor :attributes) in form objects is no longer valid and may cause issues.

New Contributors

• @​andresg4 made their first contribution in rootstrap/yaaf#93

Full Changelog: rootstrap/yaaf@v3.0.2...v3.1.0

Commits

• 1de276a Bump version to 3.1.0 (#94)
• 863fab5 Add ActiveRecord Normalize to form objects (#93)
• 115a119 Update CI (#92)
• See full diff in compare view

Updates rack-attack from 6.5.0 to 6.8.0

Release notes

Sourced from rack-attack's releases.

v6.8.0

What's Changed

Changed

• Avoid RedisCacheStore#increment on Rails 6+ (which might improve performance) by @​jdelStrother (#597)

Fixed

• Fix #588 don't fail if request.ip is missing, by @​santib (#630)
• Fix reset! when using namespaced cache store by @​santib (#673)

Deprecated

• Soft deprecate integration with rack 1.x, may or may not work with it.
• Soft deprecate integration with rails 5.2 or less, may or may not work with it.

Removed

• Remove support for unmaintained ActiveSupport::Cache::RedisStore, by @​mitchellhenke (#625)

New Contributors

• @​floehopper made their first contribution in rack/rack-attack#618
• @​mttkay made their first contribution in rack/rack-attack#622
• @​mitchellhenke made their first contribution in rack/rack-attack#625
• @​santib made their first contribution in rack/rack-attack#629
• @​tisba made their first contribution in rack/rack-attack#654
• @​fynsta made their first contribution in rack/rack-attack#658
• @​alexsmartens made their first contribution in rack/rack-attack#664

Full Changelog: rack/rack-attack@v6.7.0...v6.8.0

v6.7.0

What's Changed

• Replace git.io URL by @​kyoshidajp in rack/rack-attack#579
• test: update rack-test to v2 from v1 by @​grzuy in rack/rack-attack#587
• Update example description to not suggest using a deprecated method by @​MaksimAbramchuk in rack/rack-attack#589
• Add note about cache stores and in-memory caches. by @​nateberkopec in rack/rack-attack#604
• ci: tests against redis gem v5 by @​grzuy in rack/rack-attack#612
• Support rack 3 by @​ioquatix in rack/rack-attack#586
• Gem release management. by @​ioquatix in rack/rack-attack#614

New Contributors

• @​kyoshidajp made their first contribution in rack/rack-attack#579
• @​MaksimAbramchuk made their first contribution in rack/rack-attack#589
• @​nateberkopec made their first contribution in rack/rack-attack#604

Full Changelog: rack/rack-attack@v6.6.1...v6.7.0

... (truncated)

Changelog

Sourced from rack-attack's changelog.

[6.8.0] - 2025-10-14

Changed

• Avoid RedisCacheStore#increment on Rails 6+ (which might improve performance) by @​jdelStrother (#597)

Fixed

• Fix #588 don't fail if request.ip is missing, by @​santib (#630)
• Fix reset! when using namespaced cache store by @​santib (#673)

Deprecated

• Soft deprecate integration with rack 1.x, may or may not work with it.
• Soft deprecate integration with rails 5.2 or less, may or may not work with it.

Removed

• Remove support for unmaintained ActiveSupport::Cache::RedisStore, by @​mitchellhenke (#625)

[6.7.0] - 2023-07-26

• Replace git.io URL by @​kyoshidajp in #579
• test: update rack-test to v2 from v1 by @​grzuy in #587
• Update example description to not suggest using a deprecated method by @​MaksimAbramchuk in #589
• Add note about cache stores and in-memory caches. by @​nateberkopec in #604
• ci: tests against redis gem v5 by @​grzuy in #612
• Support rack 3 by @​ioquatix in #586
• Gem release management. by @​ioquatix in #614

[6.6.1] - 2022-04-14

Fixed

• Fixes deprecation warning in redis 4.6+ ([@​ixti])

[6.6.0] - 2022-01-29

Added

• Ability to have access to the request object instead of only env (still can access env with request.env) when customizing throttle and blocklist responses with new methods Rack::Attack.blocklisted_responder= and Rack::Attack.throttled_responder= which yield the request to your lambda. ([@​NikolayRys])

Deprecated

• Rack::Attack.blocklisted_response=
• Rack::Attack.throttled_response=

Commits

• 65f1ead Bumps gem version to v6.8.0
• e84eaf5 Upgrade GHA Runners (#694)
• 4606efb build(deps): bump actions/checkout from 4 to 5 (#690)
• 40d83d1 Fix GHA Runner (#692)
• 1dba6ec Remove CodeClimate (#693)
• 4677708 Add Ruby 3.4 to the CI (#681)
• 8710876 Fix CI (#683)
• 86650c4 Fix reset! when using namespaced cache store (#673)
• 8d5b210 Fix wrong merge resolution (#680)
• 6db4a73 Drop Dalli 2 support (#679)
• Additional commits viewable in compare view

Updates pg from 1.5.9 to 1.7.0

Changelog

Sourced from pg's changelog.

v1.7.0 [2026-10-02] Lars Kanis lars@greiz-reinsdorf.de

Added:

• Add PG::Connection#embed_params and keyword :typename for its parameter casting. #726 This allows to generate SQL strings with embedded parameters for easier debugging.
• Add PG::Connection#full_protocol_version which is new in PostgreSQL-18 #695
• Add PG::Result#each_tuple #675
• Add PG::TypeMap#query_param_encoders to retrieve encoders. #726
• Deduplicate result field name strings for better performance. #750

Removed:

• Remove compatibility to ruby < 3.1 and drops support of ruby-2.7 and ruby-3.0. #749
• Remove GLV unlocking at all functions which process data modifiable in a second thread. #721 This avoids possible premature garbage collection of query parameters and possible VM crash due to concurrent data manipulation.
• Remove :static_symbol result field names. #691
• Remove enforced rpath addition when no rpath is configured in rbconfig. #699

Fixes:

• Limit memory allocation on invalid input into PG::BinaryDecoder::Array. #743
• Free COPY buffers when decoders raise to avoid possible memory leak in get_copy_data. #742
• Prevent SQL injection in set_client_encoding. #741
• Add GC_GUARD to temporary ruby objects for conninfo string to avoid it's GC'ed prematurely. #739
• Remove option "quirks_mode" from JSON en/decoder to fix compat with json-3.0 gem. #737
• Respect calendar type of Ruby and PostgreSQL. #725
• Fix broken set_notice_(receiver|processor) callback after GC.compact. #734
• Disable DNS resolution in ruby when a service file is used, so that the priority of parameters is equal to libpq. #635
• Use RARRAY_LENINT to avoid possible overflow. #728
• Fix possible integer overflow at PG::BinaryEncoder::CopyRow and PG::TextEncoder::CopyRow. #714, #715
• Avoid possible integer overflow in query parameter encoding. #719
• Ensure conninfo is a valid C string before closing the connection to avoid a double free of PGconn. #709
• Raise on a too large input string to PG::TextEncoder::Bytea. #717
• Check PG::BinaryEncoder::CopyRow array input size instead of producing an invalid output.
• Remove accidentally copied "static" keyword from Copy and Record encoder. #711
• Avoid possibility to replace typemap while being used in Copy and Record encoders and decoders. #707
• Add GC_GUARD's for encoding converted strings sent to the server. #705
• Fix incomplete transaction commit when thread is shutdown ungracefully. #704
• Assign VALUE after registration per rb_gc_register_address() #703
• Update dependencies for binary gems to PostgreSQL-18.6, OpenSSL-3.6.5, krb5-1.22.2 #752

v1.6.3 [2025-12-29] Lars Kanis lars@greiz-reinsdorf.de

Added:

• Add binary gems for ruby-4.0, now providing ruby-3.0 to 4.0. #682
• Update fat binary gem to OpenSSL-3.6.0 and PostgreSQL-18.1.
• Improve documentation of PG::Result and README. #676

... (truncated)

Commits

• fcf40c5 Add new gem signing certificate
• d41e07a Merge pull request #753 from larskanis/rm-pgsql-10
• 8e1ee8f Remove some conditions for PostgreSQL-10
• 050c56d Fix typo in CHANGELOG and add version note
• 2c4934e Bump VERSION to 1.7.0
• f644ba2 Update release notes once more
• b16542d Merge pull request #752 from larskanis/upd-binaries
• 66b27c6 Update dependencies for binary gems to
• 6a07394 Add CHANGELOG entry for pg-1.7.0
• 5390356 Merge pull request #749 from larskanis/minruby-3.1
• Additional commits viewable in compare view

Updates carrierwave from 3.1.3 to 3.1.4

Release notes

Sourced from carrierwave's releases.

3.1.4

Added

• Support for marcel 2.x (@​mshibuya 214f309)

Changed

• Relax the marcel dependency constraint (@​mkon #2828)
• Relax the image_processing dependency to allow...

  Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.