Bump the production-dependencies-major group across 1 directory with 23 updates by dependabot[bot] · Pull Request #1441 · CommitChange/houdini

dependabot · 2026-10-21T02:59:33Z

Bumps the production-dependencies-major group with 23 updates in the / directory:

Package	From	To
rack	`2.2.24`	`3.2.7`
sprockets	`3.7.5`	`4.4.1`
kaminari	`1.2.2`	`1.3.0`
rack-attack	`6.5.0`	`6.8.0`
carrierwave	`3.1.3`	`3.1.4`
stripe	`5.55.0`	`13.5.2`
puma	`7.2.1`	`8.0.2`
kaminari	`1.2.2`	`1.3.0`
aws-sdk-rails	`2.1.0`	`5.2.0`
json	`2.19.9`	`3.1.0`
rack-attack	`6.5.0`	`6.8.0`
dalli	`3.2.3`	`5.2.2`
colorize	`0.8.1`	`1.1.0`
carrierwave	`3.1.3`	`3.1.4`
rails-i18n	`7.0.10`	`8.1.0`
rails	`7.1.6`	`8.1.4`
i18n-js	`3.9.2`	`4.2.4`
countries	`2.1.2`	`8.1.0`
config	`2.2.3`	`5.6.1`
redis	`4.2.5`	`6.0.0`
hashie	`4.0.0`	`5.2.0`
connection_pool	`2.5.3`	`3.0.2`
barnes	`0.0.8`	`1.0.1`
rack-cors	`2.0.2`	`3.0.0`
actionpack	`7.1.6`	`8.1.4`
activerecord	`7.1.6`	`8.1.4`

Updates rack from 2.2.24 to 3.2.7

Release notes

Sourced from rack's releases.

v3.2.6

Full Changelog: rack/rack@v3.2.5...v3.2.6

v3.2.4

No release notes provided.

v3.0.9.1

What's Changed

Fixed ReDoS in Accept header parsing [CVE-2024-26146]

Fixed ReDoS in Content Type header parsing [CVE-2024-25126]

Reject Range headers which are too large [CVE-2024-26141]

Full Changelog: rack/rack@v3.0.9...v3.0.9.1

v3.0.9

What's Changed

Fix content-length calcuation in Rack:Response#write #2150

Full Changelog: rack/rack@v3.0.8...v3.0.9

v3.0.8

What's Changed

Backport "Fix some unused variable verbose warnings" by @skipkayhil in rack/rack#2084

New Contributors

@skipkayhil made their first contribution in rack/rack#2084

Full Changelog: rack/rack@v3.0.7...v3.0.8

v3.0.7

What's Changed

Backport "Make query parameters without = have nil values". by @jeremyevans in rack/rack#2060

Full Changelog: rack/rack@v3.0.6.1...v3.0.7

v3.0.6.1

No release notes provided.

v3.0.4.1

Full Changelog: rack/rack@v3.0.4...v3.0.4.1

v3.0.4

Full Changelog: rack/rack@v3.0.3...v3.0.4

v3.0.3

What's Changed

Release v3.0.3 by @ioquatix in rack/rack#2000

... (truncated)

Changelog

Sourced from rack's changelog.

[3.2.7] - 2026-08-13

Fixed

Restore Ruby 2.4/2.5 compatibility.

[3.2.6] - 2026-04-01

Security

CVE-2026-34763 Root directory disclosure via unescaped regex interpolation in Rack::Directory.

CVE-2026-34230 Avoid O(n^2) algorithm in Rack::Utils.select_best_encoding which could lead to denial of service.

CVE-2026-32762 Forwarded header semicolon injection enables Host and Scheme spoofing.

CVE-2026-26961 Raise error for multipart requests with multiple boundary parameters.

CVE-2026-34786 Rack::Static header_rules bypass via URL-encoded path mismatch.

CVE-2026-34831 Content-Length mismatch in Rack::Files error responses.

CVE-2026-34826 Multipart byte range processing allows denial of service via excessive overlapping ranges.

CVE-2026-34835 Rack::Request accepts invalid Host characters, enabling host allowlist bypass.

CVE-2026-34830 Rack::Sendfile header-based X-Accel-Mapping regex injection enables unauthorized X-Accel-Redirect.

CVE-2026-34785 Rack::Static prefix matching can expose unintended files under the static root.

CVE-2026-34829 Multipart parsing without Content-Length header allows unbounded chunked file uploads.

CVE-2026-34827 Multipart header parsing allows denial of service via escape-heavy quoted parameters.

CVE-2026-26962 Improper unfolding of folded multipart headers preserves CRLF in parsed parameter values.

[3.2.5] - 2026-02-16

Security

CVE-2026-25500 XSS injection via malicious filename in Rack::Directory.

CVE-2026-22860 Directory traversal via root prefix bypass in Rack::Directory.

Fixed

Fix Rack::MockResponse#body when the body is a Proc. (#2420, #2423, @tavianator, [@ioquatix])

[3.2.4] - 2025-11-03

Fixed

Multipart parser: limit MIME header size check to the unread buffer region to avoid false multipart mime part header too large errors when previously read data accumulates in the scan buffer. (#2392, @alpaca-tc, @willnet, @krororo)

[3.2.3] - 2025-10-10

Security

CVE-2025-61780 Improper handling of headers in Rack::Sendfile may allow proxy bypass.

CVE-2025-61919 Unbounded read in Rack::Request form parsing can lead to memory exhaustion.

[3.2.2] - 2025-10-07

... (truncated)

Commits

70d2e10 Bump patch version.
9b31adf Fix specs on Ruby 2.4
7c0abab Do not ignore Ruby 2.4/2.5 errors in CI
ef52d4e Fix FORWARDED typo.
108405e Restore Ruby 2.4/2.5 compatibility
c3fe393 Update changelog.
e1f22fd Bump patch version.
31989fd Fix typo in test.
d268165 Fix test expectation.
8f425de Add Ruby v4.0 to the test matrix.
Additional commits viewable in compare view

Updates sprockets from 3.7.5 to 4.4.1

Release notes

Sourced from sprockets's releases.

v4.2.2

What's Changed

document how to chain ERB for custom processors by @ashkulz in rails/sprockets#807

Drop base64 gem from dependency by @tricknotes in rails/sprockets#810

Add Ruby 3.3 to CI matrix by @m-nakamura145 in rails/sprockets#799

Bump rake version 13.2 or higher to suppress ostruct warnings by @yahonda in rails/sprockets#811

Add logger as dependency to address warnings against Ruby 3.4.0dev by @yahonda in rails/sprockets#813

Address warning: URI::RFC3986_PARSER warnings against ruby 3.4.0dev by @yahonda in rails/sprockets#812

Full Changelog: rails/sprockets@v4.2.1...v4.2.2

4.2.1

What's Changed

Fix .jpeg precompile issue by @ghiculescu in rails/sprockets#781

CI against Ruby 3.2 [changelog skip] by @amatsuda in rails/sprockets#777

Fix header casing compatibility with Rails 7 by @skipkayhil in rails/sprockets#790

fix: set application/css-sourcemap+json default charset to unicode by @chadlwilson in rails/sprockets#764

New Contributors

@ghiculescu made their first contribution in rails/sprockets#781

@skipkayhil made their first contribution in rails/sprockets#791

@jpbalarini made their first contribution in rails/sprockets#768

@chadlwilson made their first contribution in rails/sprockets#764

Full Changelog: rails/sprockets@v4.2.0...v4.2.1

4.2.0

What's Changed

Fix class name in sample code by @ursm in rails/sprockets#751

fix: grammar by @benkoshy in rails/sprockets#756

fix typo by @benkoshy in rails/sprockets#757

Update Link by @benkoshy in rails/sprockets#754

Rack 3 support by @lsylvester in rails/sprockets#758

Make Sprockets::Utils.module_include thread safe on JRuby by @ntkme in rails/sprockets#759

Fix thread safety of Sprockets::CachedEnvironment and Sprockets::Cache::MemoryStore by @eregon in rails/sprockets#771

New Contributors

@ursm made their first contribution in rails/sprockets#751

@benkoshy made their first contribution in rails/sprockets#756

@ntkme made their first contribution in rails/sprockets#759

Full Changelog: rails/sprockets@v4.1.1...v4.2.0

v4.1.1

Fix Sprockets::Server to return response headers to compatible with with Rack::Lint 2.0.

Full Changelog: rails/sprockets@v4.1.0...v4.1.1

v4.1.0

... (truncated)

Changelog

Sourced from sprockets's changelog.

4.4.1

Fix the ignore_mtime option to be shared between environments. #834

4.4.0

Implement ignore_mtime option. #832

Allow disabling cache limits. #831

4.3.0

Fixed compatibility with json 3+.

Do not set variable GZip#mtime but do always set File#mtime. #821

4.2.2

Added missing dependency on logger. #813

Fix URI::RFC3986_PARSER warnings. #812

Removed dependency on base64. #810

4.2.1

Fix for precompile issues when multiple extensions map to the same MIME type (eg. .jpeg / .jpg). #781

Fix application/css-sourcemap+json charset #764

Fix compatibility with Rack 2 applications. #790

4.2.0

Rack 3 compatibility. #758

Fix thread safety of Sprockets::CachedEnvironment and Sprockets::Cache::MemoryStore. #771

Add support for Rack 3.0. Headers set by sprockets will now be lower case. #758

Make Sprockets::Utils.module_include thread safe on JRuby. #759

Fix typo in asset.rb file. #768

4.1.1

Fix Sprockets::Server to return response headers to be compatible with Rack::Lint 2.0.

4.1.0

Allow age to be altered in asset:clean rake task.

Fix Sprockets::Server to return lower-cased response headers to comply with Rack::Lint 3.0. #744

Adding new directive depend_on_directory #668

Fix application/js-sourcemap+json charset #669

Fix CachedEnvironment caching nil values #723

Process *.jst.ejs.erb files with ERBProcessor #674

Fix cache key for coffee script processor to be dependent on the filename #670

4.0.3

... (truncated)

Commits

49d9f20 Release 4.4.1
6ee0af2 Merge pull request #834 from byroot/fix-ignore-mtime
295ac3f Fix ignore_mtime option to be inherited between environments
73c5a53 Release 4.4.0
2150282 Merge pull request #833 from davidenglishmusic/performance-tweaks
c740b84 Hoist relative_path? regexp into a constant
073939c Fix performance cop offenses in tests
ec6a30a Merge pull request #832 from byroot/disable-digest
2c367fa Implement ignore_mtime option
00a73a9 Merge pull request #831 from byroot/no-cache-limit
Additional commits viewable in compare view

Updates kaminari from 1.2.2 to 1.3.0

Release notes

Sourced from kaminari's releases.

v1.3.0

1.3.0

Security Fixes:

page ignores a Hash or an Array page number (e.g. ?page[]=1) instead of raising #1087 [@xiaohui-zhangxh]

page_entries_info escapes the entry_name, which could contain user input, while keeping an html_safe entry_name as is: d599c37

Incompatible Changes:

Dropped Ruby 2.0 support: 2f1f84b

The default English page_entries_info message now separates the range with an en dash (e.g. "1–25") instead of  -  #1105 [@jdufresne]

page_entries_info displays "No entries found" on out of range pages, instead of an inverted range like "Displaying users 81–80 of 50 in total": b712562

Enhancements:

Rails 7.1, 7.2, 8.0, and 8.1 support

Ruby 3.1, 3.2, 3.3, 3.4, and 4.0 support

Added paginated? to models, relations, and paginatable arrays #1118 [@jarenas9539]

Added the data: option to paginate for the links' data attributes #1095 [@theforestvn88]

Registered Kaminari's deprecator to Rails.application.deprecators #1103 [@etiennebarrie]

require 'kaminari' also loads Kaminari::VERSION #1079 [@d-otis]

The views generator warns when it falls back to erb for an unsupported template engine: 4c2991e

Improved performance of total_count for grouped relations by counting the groups in the database with a subquery #1157 (based on #1022 and #1023 [@bendilley])

Improved performance of total_count by removing irrelevant eager_load and preload that ran unwanted joins in the count query #1043 [@Viktor-Ivliev]

Improved performance of paginate by calling url_for only a few times per paginator: 7b5f079

Improved performance of paginate by looking up each partial template only once per paginator: c5cc1a1

Improved performance of paginate by reducing object allocations: 1cc6f98, ff07a28, b951069, 2e80453, 794724e, and 7f08863

Improved performance of page and per on Active Record by copying the Relation only once: 0cb494d, c35e5a1, and ae23bc6

Improved performance of page_entries_info #1109 [@jdufresne]

Bug Fixes:

Fixed ActionController::UrlGenerationError on Rails 8+ when the request params include route options such as subdomain or host #1147 [@hpanwar09]

Fixed view helpers called with keyword arguments inside the paginator templates on Ruby 3 #1114 [@diasjorge]

Fixed an error with a Symbol param_name other than :page #1121 [@magnum]

Fixed NameError when including Kaminari::Helpers::UrlHelper outside of the views #1100 [@hikonori07]

Fixed page_entries_info for a paginated empty array with total_count #1088 [@monfresh]

Fixed total_count on the last page of a loaded Relation with padding: c7a46f1

Fixed ZeroDivisionError from per after per(0) #1138 [@dpep]

Fixed per and max_paginates_per dropping the padding: c149803

Fixed per, max_paginates_per, and padding changing the receiver's values instead of the returned scope's: a9cbb2c

Fixed max_paginates_per returning no records after an ignored per value such as per('abc'): 0f2816a

Fixed per treating a value like "abc\n10" as per(0) instead of ignoring it: 8298351

Fixed Kaminari::ZeroPerPageOperation from total_count on a loaded per(0) Relation #1155 [@andreyruby]

Fixed total_count returning 0 with max_pages after per(0): 06e90d9

Fixed TypeError from total_count after unscope(:limit): 4fd263b

Fixed the Haml and Slim paginators rendering the next and last links on out of range pages, as the erb paginator doesn't: a44950d

Fixed the views generator generating nothing for an unsupported template engine, such as one set via config.generators.template_engine #1108 [@Xavier-IV]

Fixed the views generator crashing on network errors other than SocketError: 6d91911

Changelog

Sourced from kaminari's changelog.

1.3.0

Security Fixes:

page ignores a Hash or an Array page number (e.g. ?page[]=1) instead of raising #1087 [@xiaohui-zhangxh]

page_entries_info escapes the entry_name, which could contain user input, while keeping an html_safe entry_name as is: d599c37

Incompatible Changes:

Dropped Ruby 2.0 support: 2f1f84b

The default English page_entries_info message now separates the range with an en dash (e.g. "1–25") instead of  -  #1105 [@jdufresne]

page_entries_info displays "No entries found" on out of range pages, instead of an inverted range like "Displaying users 81–80 of 50 in total": b712562

Enhancements:

Rails 7.1, 7.2, 8.0, and 8.1 support

Ruby 3.1, 3.2, 3.3, 3.4, and 4.0 support

Added paginated? to models, relations, and paginatable arrays #1118 [@jarenas9539]

Added the data: option to paginate for the links' data attributes #1095 [@theforestvn88]

Registered Kaminari's deprecator to Rails.application.deprecators #1103 [@etiennebarrie]

require 'kaminari' also loads Kaminari::VERSION #1079 [@d-otis]

The views generator warns when it falls back to erb for an unsupported template engine: 4c2991e

Improved performance of total_count for grouped relations by counting the groups in the database with a subquery #1157 (based on #1022 and #1023 [@bendilley])

Improved performance of total_count by removing irrelevant eager_load and preload that ran unwanted joins in the count query #1043 [@Viktor-Ivliev]

Improved performance of paginate by calling url_for only a few times per paginator: 7b5f079

Improved performance of paginate by looking up each partial template only once per paginator: c5cc1a1

Improved performance of paginate by reducing object allocations: 1cc6f98, ff07a28, b951069, 2e80453, 794724e, and 7f08863

Improved performance of page and per on Active Record by copying the Relation only once: 0cb494d, c35e5a1, and ae23bc6

Improved performance of page_entries_info #1109 [@jdufresne]

Bug Fixes:

Fixed ActionController::UrlGenerationError on Rails 8+ when the request params include route options such as subdomain or host #1147 [@hpanwar09]

Fixed view helpers called with keyword arguments inside the paginator templates on Ruby 3 #1114 [@diasjorge]

Fixed an error with a Symbol param_name other than :page #1121 [@magnum]

Fixed NameError when including Kaminari::Helpers::UrlHelper outside of the views #1100 [@hikonori07]

Fixed page_entries_info for a paginated empty array with total_count #1088 [@monfresh]

Fixed total_count on the last page of a loaded Relation with padding: c7a46f1

Fixed ZeroDivisionError from per after per(0) #1138 [@dpep]

Fixed per and max_paginates_per dropping the padding: c149803

Fixed per, max_paginates_per, and padding changing the receiver's values instead of the returned scope's: a9cbb2c

Fixed max_paginates_per returning no records after an ignored per value such as per('abc'): 0f2816a

Fixed per treating a value like "abc\n10" as per(0) instead of ignoring it: 8298351

Fixed Kaminari::ZeroPerPageOperation from total_count on a loaded per(0) Relation #1155 [@andreyruby]

Fixed total_count returning 0 with max_pages after per(0): 06e90d9

Fixed TypeError from total_count after unscope(:limit): 4fd263b

Fixed the Haml and Slim paginators rendering the next and last links on out of range pages, as the erb paginator doesn't: a44950d

Fixed the views generator generating nothing for an unsupported template engine, such as one set via config.generators.template_engine #1108 [@Xavier-IV]

Fixed the views generator crashing on network errors other than SocketError: 6d91911

Commits

d957f0c Version 1.3.0
b0794cd Version 1.3.0
c5cc1a1 Look up each partial template only once in a paginator
ae23bc6 Copy the Relation only once in per
c35e5a1 Copy the Relation only once in Model.page
7b5f079 Generate the page URLs in a paginator with url_for only a few times
0cb494d Extend paginated relations with a named module rather than a block
8298351 Check that the per value starts with a digit at the beginning of the string
4fd263b Don't raise in total_count after unscoping limit
6d91911 Handle more network errors in the views generator
Additional commits viewable in compare view

Updates rack-attack from 6.5.0 to 6.8.0

Release notes

Sourced from rack-attack's releases.

v6.8.0

What's Changed

Changed

Avoid RedisCacheStore#increment on Rails 6+ (which might improve performance) by @jdelStrother (#597)

Fixed

Fix #588 don't fail if request.ip is missing, by @santib (#630)

Fix reset! when using namespaced cache store by @santib (#673)

Deprecated

Soft deprecate integration with rack 1.x, may or may not work with it.

Soft deprecate integration with rails 5.2 or less, may or may not work with it.

Removed

Remove support for unmaintained ActiveSupport::Cache::RedisStore, by @mitchellhenke (#625)

New Contributors

@floehopper made their first contribution in rack/rack-attack#618

@mttkay made their first contribution in rack/rack-attack#622

@mitchellhenke made their first contribution in rack/rack-attack#625

@santib made their first contribution in rack/rack-attack#629

@tisba made their first contribution in rack/rack-attack#654

@fynsta made their first contribution in rack/rack-attack#658

@alexsmartens made their first contribution in rack/rack-attack#664

Full Changelog: rack/rack-attack@v6.7.0...v6.8.0

v6.7.0

What's Changed

Replace git.io URL by @kyoshidajp in rack/rack-attack#579

test: update rack-test to v2 from v1 by @grzuy in rack/rack-attack#587

Update example description to not suggest using a deprecated method by @MaksimAbramchuk in rack/rack-attack#589

Add note about cache stores and in-memory caches. by @nateberkopec in rack/rack-attack#604

ci: tests against redis gem v5 by @grzuy in rack/rack-attack#612

Support rack 3 by @ioquatix in rack/rack-attack#586

Gem release management. by @ioquatix in rack/rack-attack#614

New Contributors

@kyoshidajp made their first contribution in rack/rack-attack#579

@MaksimAbramchuk made their first contribution in rack/rack-attack#589

@nateberkopec made their first contribution in rack/rack-attack#604

Full Changelog: rack/rack-attack@v6.6.1...v6.7.0

... (truncated)

Changelog

Sourced from rack-attack's changelog.

[6.8.0] - 2025-10-14

Changed

Avoid RedisCacheStore#increment on Rails 6+ (which might improve performance) by @jdelStrother (#597)

Fixed

Fix #588 don't fail if request.ip is missing, by @santib (#630)

Fix reset! when using namespaced cache store by @santib (#673)

Deprecated

Soft deprecate integration with rack 1.x, may or may not work with it.

Soft deprecate integration with rails 5.2 or less, may or may not work with it.

Removed

Remove support for unmaintained ActiveSupport::Cache::RedisStore, by @mitchellhenke (#625)

[6.7.0] - 2023-07-26

Replace git.io URL by @kyoshidajp in #579

test: update rack-test to v2 from v1 by @grzuy in #587

Update example description to not suggest using a deprecated method by @MaksimAbramchuk in #589

Add note about cache stores and in-memory caches. by @nateberkopec in #604

ci: tests against redis gem v5 by @grzuy in #612

Support rack 3 by @ioquatix in #586

Gem release management. by @ioquatix in #614

[6.6.1] - 2022-04-14

Fixed

Fixes deprecation warning in redis 4.6+ ([@ixti])

[6.6.0] - 2022-01-29

Added

Ability to have access to the request object instead of only env (still can access env with request.env) when customizing throttle and blocklist responses with new methods Rack::Attack.blocklisted_responder= and Rack::Attack.throttled_responder= which yield the request to your lambda. ([@NikolayRys])

Deprecated

Rack::Attack.blocklisted_response=

Rack::Attack.throttled_response=

Commits

65f1ead Bumps gem version to v6.8.0
e84eaf5 Upgrade GHA Runners (#694)
4606efb build(deps): bump actions/checkout from 4 to 5 (#690)
40d83d1 Fix GHA Runner (#692)
1dba6ec Remove CodeClimate (#693)
4677708 Add Ruby 3.4 to the CI (#681)
8710876 Fix CI (#683)
86650c4 Fix reset! when using namespaced cache store (#673)
8d5b210 Fix wrong merge resolution (#680)
6db4a73 Drop Dalli 2 support (#679)
Additional commits viewable in compare view

Updates carrierwave from 3.1.3 to 3.1.4

Release notes

Sourced from carrierwave's releases.

3.1.4

Added

Support for marcel 2.x (@mshibuya 214f309)

Changed

Relax the marcel dependency constraint (@mkon #2828)

Relax the image_processing dependency to allow ~> 2.0 (@amiryalsa #2826)

Commits

453c665 Version 3.1.4
214f309 Support marcel 2.x
cfe9dc9 Relax dependency on image_processing to allow updates to ~> 2.0 (#2826)
ac89d30 Relax marcel dependency (#2828)
See full diff in compare view

Updates stripe from 5.55.0 to 13.5.2

Release notes

Sourced from stripe's releases.

v13.5.2

See the changelog for the full release notes.

v12.6.1

See the changelog for the full release notes.

v11.7.1

See the changelog for the full release notes.

v10.15.1

See the changelog for the full release notes.

v9.4.1

See the changelog for the full release notes.

v8.7.1

See the changelog for the full release notes.

v7.1.2

See the changelog for the full release notes.

Changelog

Sourced from stripe's changelog.

Changelog

20.0.0 - 2026-09-30

This release changes the pinned API version to 2026-09-30.endive.

#1964 Support EventNotifications with singleton related objects

#1968 Allow suppressing Stripe notices

Set the STRIPE_SUPPRESS_NOTICES environment variable to true to suppress Stripe notices in test and sandbox environments when not running under a detected AI agent. Notices remain enabled by default and continue to be shown to AI agents.

#1969 Fix account scoping for event notification handler callback clients

Fix callback clients to use the event's Stripe context and preserve the original client's non-account configuration.

Fix API errors when using an event notification handler with a client configured with a Stripe account.

⚠️ #1971 Rename Stripe::Reversal to Stripe::TransferReversal

Rename the Stripe::Reversal resource class to Stripe::TransferReversal. Update references and Sorbet type annotations to use Stripe::TransferReversal.

⚠️ Drop support for Ruby 2.7

⚠️ #1958 Update generated code

Add support for new resources Apps::Install, ProductCatalog::TrialOffer, Tax::Location, and ThreeDSecure::Authentication

Add support for create, list, retrieve, uninstall, and update methods on resource Apps::Install

Add support for create, list, retrieve, and update methods on resource ProductCatalog::TrialOffer

Add support for create, list, and retrieve methods on resource Tax::Location

Add support for cancel, create, list, retrieve, and submit methods on resource ThreeDSecure::Authentication

Add support for pause method on resource Subscription

Add support for performance_location on Tax::CalculationCreateParams::LineItem and Tax::CalculationLineItem

Add support for destination on Reserve::Hold, Reserve::Plan, and Reserve::Release

Add support for manual_release on Reserve::Plan

Add support for specified_commercial_transactions_act_url on Account::BusinessProfile, AccountCreateParams::BusinessProfile, and AccountUpdateParams::BusinessProfile

Add support for blik_recurring_payments and sequra_payments on Account::Capability, AccountCreateParams::Capability, AccountUpdateParams::Capability, V2::Core::Account::Configuration::Merchant::Capability, V2::Core::AccountCreateParams::Configuration::Merchant::Capability, and V2::Core::AccountUpdateParams::Configuration::Merchant::Capability

Add support for paypay_payments on Account::Capability, Account::Setting, AccountCreateParams::Capability, AccountCreateParams::Setting, AccountUpdateParams::Capability, and AccountUpdateParams::Setting

Add support for sepa_debit_payments on AccountCreateParams::Setting, V2::Core::AccountCreateParams::Configuration::Merchant, and V2::Core::AccountUpdateParams::Configuration::Merchant

Add support for paypay on Charge::PaymentMethodDetail, ConfirmationToken::PaymentMethodPreview, ConfirmationTokenCreateParams::PaymentMethodDatum, PaymentAttemptRecord::PaymentMethodDetail, PaymentIntent::PaymentMethodOption, PaymentIntentConfirmParams::PaymentMethodDatum, PaymentIntentConfirmParams::PaymentMethodOption, PaymentIntentCreateParams::PaymentMethodDatum, PaymentIntentCreateParams::PaymentMethodOption, PaymentIntentUpdateParams::PaymentMethodDatum, PaymentIntentUpdateParams::PaymentMethodOption, PaymentMethodConfigurationCreateParams, PaymentMethodConfigurationUpdateParams, PaymentMethodConfiguration, PaymentMethodCreateParams, PaymentMethod, PaymentRecord::PaymentMethodDetail, SetupIntentConfirmParams::PaymentMethodDatum, SetupIntentCreateParams::PaymentMethodDatum, and SetupIntentUpdateParams::PaymentMethodDatum

Add support for Description has been truncated

…23 updates Bumps the production-dependencies-major group with 23 updates in the / directory: | Package | From | To | | --- | --- | --- | | [rack](https://github.com/rack/rack) | `2.2.24` | `3.2.7` | | [sprockets](https://github.com/rails/sprockets) | `3.7.5` | `4.4.1` | | [kaminari](https://github.com/kaminari/kaminari) | `1.2.2` | `1.3.0` | | [rack-attack](https://github.com/rack/rack-attack) | `6.5.0` | `6.8.0` | | [carrierwave](https://github.com/carrierwaveuploader/carrierwave) | `3.1.3` | `3.1.4` | | [stripe](https://github.com/stripe/stripe-ruby) | `5.55.0` | `13.5.2` | | [puma](https://github.com/puma/puma) | `7.2.1` | `8.0.2` | | [kaminari](https://github.com/kaminari/kaminari) | `1.2.2` | `1.3.0` | | [aws-sdk-rails](https://github.com/aws/aws-sdk-rails) | `2.1.0` | `5.2.0` | | [json](https://github.com/ruby/json) | `2.19.9` | `3.1.0` | | [rack-attack](https://github.com/rack/rack-attack) | `6.5.0` | `6.8.0` | | [dalli](https://github.com/petergoldstein/dalli) | `3.2.3` | `5.2.2` | | [colorize](https://github.com/fazibear/colorize) | `0.8.1` | `1.1.0` | | [carrierwave](https://github.com/carrierwaveuploader/carrierwave) | `3.1.3` | `3.1.4` | | [rails-i18n](https://github.com/svenfuchs/rails-i18n) | `7.0.10` | `8.1.0` | | [rails](https://github.com/rails/rails) | `7.1.6` | `8.1.4` | | [i18n-js](https://github.com/fnando/i18n-js) | `3.9.2` | `4.2.4` | | [countries](https://github.com/countries/countries) | `2.1.2` | `8.1.0` | | [config](https://github.com/rubyconfig/config) | `2.2.3` | `5.6.1` | | [redis](https://github.com/redis/redis-rb) | `4.2.5` | `6.0.0` | | [hashie](https://github.com/hashie/hashie) | `4.0.0` | `5.2.0` | | [connection_pool](https://github.com/mperham/connection_pool) | `2.5.3` | `3.0.2` | | [barnes](https://github.com/heroku/barnes) | `0.0.8` | `1.0.1` | | [rack-cors](https://github.com/cyu/rack-cors) | `2.0.2` | `3.0.0` | | [actionpack](https://github.com/rails/rails) | `7.1.6` | `8.1.4` | | [activerecord](https://github.com/rails/rails) | `7.1.6` | `8.1.4` | Updates `rack` from 2.2.24 to 3.2.7 - [Release notes](https://github.com/rack/rack/releases) - [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md) - [Commits](rack/rack@v2.2.24...v3.2.7) Updates `sprockets` from 3.7.5 to 4.4.1 - [Release notes](https://github.com/rails/sprockets/releases) - [Changelog](https://github.com/rails/sprockets/blob/main/CHANGELOG.md) - [Commits](rails/sprockets@v3.7.5...v4.4.1) Updates `kaminari` from 1.2.2 to 1.3.0 - [Release notes](https://github.com/kaminari/kaminari/releases) - [Changelog](https://github.com/kaminari/kaminari/blob/master/CHANGELOG.md) - [Commits](kaminari/kaminari@v1.2.2...v1.3.0) Updates `rack-attack` from 6.5.0 to 6.8.0 - [Release notes](https://github.com/rack/rack-attack/releases) - [Changelog](https://github.com/rack/rack-attack/blob/main/CHANGELOG.md) - [Commits](rack/rack-attack@v6.5.0...v6.8.0) Updates `carrierwave` from 3.1.3 to 3.1.4 - [Release notes](https://github.com/carrierwaveuploader/carrierwave/releases) - [Changelog](https://github.com/carrierwaveuploader/carrierwave/blob/master/CHANGELOG.md) - [Commits](carrierwaveuploader/carrierwave@v3.1.3...v3.1.4) Updates `stripe` from 5.55.0 to 13.5.2 - [Release notes](https://github.com/stripe/stripe-ruby/releases) - [Changelog](https://github.com/stripe/stripe-ruby/blob/master/CHANGELOG.md) - [Commits](stripe/stripe-ruby@v5.55.0...v13.5.2) Updates `puma` from 7.2.1 to 8.0.2 - [Release notes](https://github.com/puma/puma/releases) - [Changelog](https://github.com/puma/puma/blob/main/History.md) - [Commits](puma/puma@v7.2.1...v8.0.2) Updates `kaminari` from 1.2.2 to 1.3.0 - [Release notes](https://github.com/kaminari/kaminari/releases) - [Changelog](https://github.com/kaminari/kaminari/blob/master/CHANGELOG.md) - [Commits](kaminari/kaminari@v1.2.2...v1.3.0) Updates `aws-sdk-rails` from 2.1.0 to 5.2.0 - [Release notes](https://github.com/aws/aws-sdk-rails/releases) - [Changelog](https://github.com/aws/aws-sdk-rails/blob/main/CHANGELOG.md) - [Commits](aws/aws-sdk-rails@v2.1.0...v5.2.0) Updates `json` from 2.19.9 to 3.1.0 - [Release notes](https://github.com/ruby/json/releases) - [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md) - [Commits](ruby/json@v2.19.9...v3.1.0) Updates `rack-attack` from 6.5.0 to 6.8.0 - [Release notes](https://github.com/rack/rack-attack/releases) - [Changelog](https://github.com/rack/rack-attack/blob/main/CHANGELOG.md) - [Commits](rack/rack-attack@v6.5.0...v6.8.0) Updates `dalli` from 3.2.3 to 5.2.2 - [Release notes](https://github.com/petergoldstein/dalli/releases) - [Changelog](https://github.com/petergoldstein/dalli/blob/main/CHANGELOG.md) - [Commits](petergoldstein/dalli@v3.2.3...v5.2.2) Updates `colorize` from 0.8.1 to 1.1.0 - [Changelog](https://github.com/fazibear/colorize/blob/master/CHANGELOG.md) - [Commits](https://github.com/fazibear/colorize/commits) Updates `carrierwave` from 3.1.3 to 3.1.4 - [Release notes](https://github.com/carrierwaveuploader/carrierwave/releases) - [Changelog](https://github.com/carrierwaveuploader/carrierwave/blob/master/CHANGELOG.md) - [Commits](carrierwaveuploader/carrierwave@v3.1.3...v3.1.4) Updates `rails-i18n` from 7.0.10 to 8.1.0 - [Changelog](https://github.com/svenfuchs/rails-i18n/blob/master/CHANGELOG.md) - [Commits](svenfuchs/rails-i18n@v7.0.10...v8.1.0) Updates `rails` from 7.1.6 to 8.1.4 - [Release notes](https://github.com/rails/rails/releases) - [Commits](rails/rails@v7.1.6...v8.1.4) Updates `i18n-js` from 3.9.2 to 4.2.4 - [Changelog](https://github.com/fnando/i18n-js/blob/main/CHANGELOG.md) - [Commits](fnando/i18n-js@v3.9.2...v4.2.4) Updates `countries` from 2.1.2 to 8.1.0 - [Release notes](https://github.com/countries/countries/releases) - [Changelog](https://github.com/countries/countries/blob/master/CHANGELOG.md) - [Upgrade guide](https://github.com/countries/countries/blob/master/UPGRADE.md) - [Commits](countries/countries@v2.1.2...v8.1.0) Updates `config` from 2.2.3 to 5.6.1 - [Release notes](https://github.com/rubyconfig/config/releases) - [Changelog](https://github.com/rubyconfig/config/blob/master/CHANGELOG.md) - [Commits](rubyconfig/config@2.2.3...5.6.1) Updates `redis` from 4.2.5 to 6.0.0 - [Release notes](https://github.com/redis/redis-rb/releases) - [Changelog](https://github.com/redis/redis-rb/blob/master/CHANGELOG.md) - [Commits](redis/redis-rb@v4.2.5...v6.0.0) Updates `hashie` from 4.0.0 to 5.2.0 - [Release notes](https://github.com/hashie/hashie/releases) - [Changelog](https://github.com/hashie/hashie/blob/master/CHANGELOG.md) - [Commits](hashie/hashie@v4.0.0...v5.2.0) Updates `connection_pool` from 2.5.3 to 3.0.2 - [Changelog](https://github.com/mperham/connection_pool/blob/main/Changes.md) - [Commits](mperham/connection_pool@v2.5.3...v3.0.2) Updates `barnes` from 0.0.8 to 1.0.1 - [Changelog](https://github.com/heroku/barnes/blob/main/CHANGELOG.md) - [Commits](heroku/barnes@v0.0.8...v1.0.1) Updates `rack-cors` from 2.0.2 to 3.0.0 - [Changelog](https://github.com/cyu/rack-cors/blob/master/CHANGELOG.md) - [Commits](cyu/rack-cors@v2.0.2...v3.0.0) Updates `actionpack` from 7.1.6 to 8.1.4 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v8.1.4/actionpack/CHANGELOG.md) - [Commits](rails/rails@v7.1.6...v8.1.4) Updates `activerecord` from 7.1.6 to 8.1.4 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v8.1.4/activerecord/CHANGELOG.md) - [Commits](rails/rails@v7.1.6...v8.1.4) --- updated-dependencies: - dependency-name: actionpack dependency-version: 8.1.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-major - dependency-name: activerecord dependency-version: 8.1.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-major - dependency-name: aws-sdk-rails dependency-version: 5.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-major - dependency-name: barnes dependency-version: 1.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-major - dependency-name: carrierwave dependency-version: 3.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies-major - dependency-name: carrierwave dependency-version: 3.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies-major - dependency-name: colorize dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-major - dependency-name: config dependency-version: 5.6.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-major - dependency-name: connection_pool dependency-version: 3.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-major - dependency-name: countries dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-major - dependency-name: dalli dependency-version: 5.2.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-major - dependency-name: hashie dependency-version: 5.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-major - dependency-name: i18n-js dependency-version: 4.2.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-major - dependency-name: json dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-major - dependency-name: kaminari dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-major - dependency-name: kaminari dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-major - dependency-name: puma dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-major - dependency-name: rack dependency-version: 3.2.7 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-major - dependency-name: rack-attack dependency-version: 6.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-major - dependency-name: rack-attack dependency-version: 6.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies-major - dependency-name: rack-cors dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-major - dependency-name: rails dependency-version: 8.1.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-major - dependency-name: rails-i18n dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-major - dependency-name: redis dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-major - dependency-name: sprockets dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-major - dependency-name: stripe dependency-version: 13.5.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-11-03T17:36:28Z

Superseded by #1453.

dependabot Bot requested a review from wwahammy as a code owner October 21, 2026 02:59

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Oct 21, 2026

dependabot Bot force-pushed the dependabot/bundler/production-dependencies-major-538916dccb branch from 611112e to 1004964 Compare October 26, 2026 14:34

dependabot Bot force-pushed the dependabot/bundler/production-dependencies-major-538916dccb branch from 1004964 to acb3f7b Compare October 28, 2026 02:57

dependabot Bot closed this Nov 3, 2026

dependabot Bot deleted the dependabot/bundler/production-dependencies-major-538916dccb branch November 3, 2026 17:36

Navigation Menu

Repository navigation

Bump the production-dependencies-major group across 1 directory with 23 updates - #1441

Bump the production-dependencies-major group across 1 directory with 23 updates#1441
dependabot[bot] wants to merge 1 commit into
supporter_level_goalfrom
dependabot/bundler/production-dependencies-major-538916dccb

dependabot Bot commented on behalf of github Oct 21, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Nov 3, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v3.2.6

v3.2.4

v3.0.9.1

What's Changed

v3.0.9

What's Changed

v3.0.8

What's Changed

New Contributors

v3.0.7

What's Changed

v3.0.6.1

v3.0.4.1

v3.0.4

v3.0.3

What's Changed

[3.2.7] - 2026-08-13

Fixed

[3.2.6] - 2026-04-01

Security

[3.2.5] - 2026-02-16

Security

Fixed

[3.2.4] - 2025-11-03

Fixed

[3.2.3] - 2025-10-10

Security

[3.2.2] - 2025-10-07

v4.2.2

What's Changed

4.2.1

What's Changed

New Contributors

4.2.0

What's Changed

New Contributors

v4.1.1

v4.1.0

4.4.1

4.4.0

4.3.0

4.2.2

4.2.1

4.2.0

4.1.1

4.1.0

4.0.3

v1.3.0

1.3.0

Security Fixes:

Incompatible Changes:

Enhancements:

Bug Fixes:

1.3.0

Security Fixes:

Incompatible Changes:

Enhancements:

Bug Fixes:

v6.8.0

What's Changed

Changed

Fixed

Deprecated

Removed

New Contributors

v6.7.0

What's Changed

New Contributors

[6.8.0] - 2025-10-14

Changed

Fixed

Deprecated

Removed

[6.7.0] - 2023-07-26

[6.6.1] - 2022-04-14

Fixed

[6.6.0] - 2022-01-29

dependabot Bot commented on behalf of github Oct 21, 2026 •

edited

Loading