chore(deps): update non-major dependencies #3803
Open
+234
−577
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
❌ Deploy Preview for kongdeveloper failed.
|
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
6 times, most recently
from
eeb0a41 to
6755b63
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
20 times, most recently
from
5f0026c to
45d32d3
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
28 times, most recently
from
a42d623 to
854492d
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
from
854492d to
089c593
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
6.25.1→6.25.41.51.2→1.51.49.48.6→9.49.71.102.2→1.103.3v5.0.1→v5.0.28.1.1→8.1.25.46.1→5.46.34.0.1→4.2.024.12.0→24.13.01.18.10→1.19.00.15.2→0.16.04.6.1→4.7.01.82.0→1.82.13.4.4→3.4.83.20.0→3.21.05.1.1→5.1.24.22.6→4.22.8Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
DataDog/browser-sdk (@datadog/browser-rum)
v6.25.4Compare Source
Public Changes:
Internal Changes:
v6.25.3Compare Source
Public Changes:
Internal Changes:
v6.25.2Compare Source
Public Changes:
Internal Changes:
dotenvx/dotenvx (@dotenvx/dotenvx)
v1.51.4Compare Source
Changed
dotenvx-opsto better reflect its tooling as operational primitives on top of dotenvx for production use cases. (#721)v1.51.3Compare Source
Added
.env.keysfordotenvx ops backup. Dotenvx Ops Backup lets you back up your private keys securely with just a single command. It's a convenient alterantive to manually copy/pasting them in and out of 1Password. (#718)Kong/kongponents (@kong/kongponents)
v9.49.7Compare Source
Bug Fixes
v9.49.6Compare Source
Bug Fixes
v9.49.5Compare Source
Bug Fixes
v9.49.4Compare Source
Bug Fixes
v9.49.3Compare Source
Bug Fixes
v9.49.2Compare Source
Bug Fixes
v9.49.1Compare Source
Bug Fixes
v9.49.0Compare Source
Features
9.48.9 (2026-01-06)
Bug Fixes
9.48.8 (2025-12-26)
Bug Fixes
9.48.7 (2025-12-24)
Bug Fixes
9.48.6 (2025-12-17)
Bug Fixes
9.48.5 (2025-12-16)
Bug Fixes
9.48.4 (2025-12-12)
Bug Fixes
9.48.3 (2025-12-08)
Bug Fixes
9.48.2 (2025-12-08)
Bug Fixes
9.48.1 (2025-12-04)
Bug Fixes
v9.48.9Compare Source
Bug Fixes
v9.48.8Compare Source
Bug Fixes
v9.48.7Compare Source
Bug Fixes
Kong/spec-renderer (@kong/spec-renderer)
v1.103.3Compare Source
Bug Fixes
v1.103.2Compare Source
Bug Fixes
v1.103.1Compare Source
Bug Fixes
v1.103.0Compare Source
Bug Fixes
Features
1.102.2 (2026-01-05)
Bug Fixes
1.102.2 (2026-01-02)
Bug Fixes
1.102.2 (2026-01-02)
Bug Fixes
1.102.2 (2025-12-31)
Bug Fixes
1.102.2 (2025-12-30)
Bug Fixes
1.102.2 (2025-12-30)
Bug Fixes
1.102.2 (2025-12-29)
Bug Fixes
1.102.2 (2025-12-22)
Bug Fixes
1.102.2 (2025-12-17)
Bug Fixes
1.102.2 (2025-12-04)
Bug Fixes
1.102.2 (2025-12-03)
Bug Fixes
1.102.2 (2025-12-02)
Bug Fixes
1.102.2 (2025-11-28)
Bug Fixes
1.102.1 (2025-11-25)
Bug Fixes
actions/cache (actions/cache)
v5.0.2Compare Source
rails/rails (activesupport)
v8.1.2: 8.1.2Compare Source
Active Support
Make
delegateanddelegate_missing_towork in BasicObject subclasses.Rafael Mendonça França
Fix Inflectors when using a locale that fallbacks to
:en.Said Kaldybaev
Fix
ActiveSupport::TimeWithZone#as_jsonto consistently return UTF-8 strings.Previously the returned string would sometime be encoded in US-ASCII, which in
some cases may be problematic.
Now the method consistently always return UTF-8 strings.
Jean Boussier
Fix
TimeWithZone#xmlschemawhen wrapping aDateTimeinstance in local time.Previously it would return an invalid time.
Dmytro Rymar
Implement LocalCache strategy on
ActiveSupport::Cache::MemoryStore. The memory storeneeds to respond to the same interface as other cache stores (e.g.
ActiveSupport::NullStore).Mikey Gough
Fix
ActiveSupport::Inflector.humanizewith international characters.Jose Luis Duran
Active Model
Active Record
Fix counting cached queries in
ActiveRecord::RuntimeRegistry.fatkodima
Fix merging relations with arel equality predicates with null relations.
fatkodima
Fix SQLite3 schema dump for non-autoincrement integer primary keys.
Previously,
schema.rbshould incorrectly restore that table with an auto incrementingprimary key.
Chris Hasiński
Fix PostgreSQL
schema_search_pathnot being reapplied afterreset!orreconnect!.The
schema_search_pathconfigured indatabase.ymlis now correctlyreapplied instead of falling back to PostgreSQL defaults.
Tobias Egli
Restore the ability of enum to be foats.
In Rails 8.1.0, enum values are eagerly validated, and floats weren't expected.
Said Kaldybaev
Ensure batched preloaded associations accounts for klass when grouping to avoid issues with STI.
zzak, Stjepan Hadjic
Fix
ActiveRecord::SoleRecordExceeded#recordto return the relation.This was the case until Rails 7.2, but starting from 8.0 it
started mistakenly returning the model class.
Jean Boussier
Improve PostgreSQLAdapter resilience to Timeout.timeout.
Better handle asynchronous exceptions being thrown inside
the
reconnect!method.This may fixes some deep errors such as:
Jean Boussier
Fix structured events for Active Record was not being emitted.
Yuji Yaginuma
Fix
eager_loadwhen loadinghas_manyassocations with composite primary keys.This would result in some records being loaded multiple times.
Martin-Alexander
Action View
Fix
file_fieldto join mime types with a comma when provided as ArrayNow behaves likes:
Bogdan Gusiev
Fix strict locals parsing to handle multiline definitions.
Said Kaldybaev
Fix
content_security_policy_nonceerror in mailers when usingcontent_security_policy_nonce_autosetting.The
content_security_policy_nonce helperis provided byActionController::ContentSecurityPolicy, and it relies onrequest.content_security_policy_nonce. Mailers lack both the module and the request object.Jarrett Lusso
Action Pack
Add
config.action_controller.live_streaming_excluded_keysto control execution state sharing in ActionController::Live.When using ActionController::Live, actions are executed in a separate thread that shares
state from the parent thread. This new configuration allows applications to opt-out specific
state keys that should not be shared.
This is useful when streaming inside a
connected_toblock, where you may wantthe streaming thread to use its own database connection context.
By default, all keys are shared.
Eileen M. Uchitelle
Fix
IpSpoofAttackErrormessage to includeForwardedheader content.Without it, the error message may be misleading.
zzak
Active Job
Fix
ActiveJob.perform_all_laterto respectjob_class.enqueue_after_transaction_commit.Previously,
perform_all_laterwould enqueue all jobs immediately, even ifthey had
enqueue_after_transaction_commit = true. Now it correctly defersjobs with this setting until after transaction commits, matching the behavior
of
perform_later.OuYangJinTing
Fix using custom serializers with
ActiveJob::Arguments.serializewhenActiveJob::Basehasn't been loaded.Hartley McGuire
Action Mailer
Action Cable
Active Storage
Restore ADC when signing URLs with IAM for GCS
ADC was previously used for automatic authorization when signing URLs with IAM.
Now it is again, but the auth client is memoized so that new credentials are only
requested when the current ones expire. Other auth methods can now be used
instead by setting the authorization on
ActiveStorage::Service::GCSService#iam_client.This is safer than setting
Google::Apis::RequestOptions.default.authorizationbecause it only applies to Active Storage and does not affect other Google API
clients.
Justin Malčić
Action Mailbox
Action Text
Railties
Skip all system test files on app generation.
Eileen M. Uchitelle
Fix
db:system:changeto correctly update Dockerfile base packages.Josiah Smith
Fix devcontainer volume mount when app name differs from folder name.
Rafael Mendonça França
Fixed the
rails notescommand to properly extract notes in CSS files.David White
Fixed the default Dockerfile to properly include the
vendor/directory duringbundle install.Zhong Sheng
Guides
algolia/algoliasearch-client-javascript (algoliasearch)
v5.46.3Compare Source
Some fields from the Composition Run search response were marked as required while they were optional on the API side. This has been fixed, but might impact the client types.
v5.46.2Compare Source
nodejs/node (node)
v24.13.0: 2026-01-13, Version 24.13.0 'Krypton' (LTS), @marco-ippolitoCompare Source
This is a security release.
Notable Changes
lib:
lib,permission:
src:
src,lib:
tls:
Commits
2092785d01] - deps: update c-ares to v1.34.6 (Node.js GitHub Bot) #609973e58b7f2af] - deps: update undici to 7.18.2 (Node.js GitHub Bot) #612834ba536a5a6] - (CVE-2025-59465) lib: add TLSSocket default error handler (RafaelGSS) nodejs-private/node-private#79789adaa21fd] - (CVE-2025-55132) lib: disable futimes when permission model is enabled (RafaelGSS) nodejs-private/node-private#7487302b4dae1] - (CVE-2025-55130) lib,permission: require full read and write to symlink APIs (RafaelGSS) nodejs-private/node-private#760ac030753c4] - (CVE-2025-59466) src: rethrow stack overflow exceptions in async_hooks (Matteo Collina) nodejs-private/node-private#77320075692fe] - (CVE-2025-55131) src,lib: refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) nodejs-private/node-private#75920591b0618] - (CVE-2026-21637) tls: route callback exceptions through error handlers (Matteo Collina) nodejs-private/node-private#796rouge-ruby/rouge (rouge)
v4.7.0Compare Source
Comparison with the previous version
rubocop/rubocop (rubocop)
v1.82.1Compare Source
Bug fixes
Style/TrailingCommaInArgumentswhenEnforcedStyleForMultilineisconsistent_commaand keyword arguments use a trailing comma. ([@koic][])Layout/RedundantLineBreakwhenLayout/LineLengthis disabled. ([@ydakuka][])Layout/LineLengthis disabled. ([@floriandejonckheere][])Layout/MultilineMethodCallIndentationwhen multiline method chain with block has expected indent width and the method is preceded by splat or double splat. ([@koic][])Layout/IndentationWidthfor multiline method chain blocks. ([@rscq][])Lint/UselessAssignmentwhen a variable is assigned in loop body and used in loop condition. ([@ydakuka][])shikijs/shiki (shiki)
v3.21.0Compare Source
🚀 Features
🐞 Bug Fixes
View changes on GitHub
ElMassimo/vite_ruby (vite-plugin-ruby)
v5.1.2Compare Source
algolia/instantsearch (vue-instantsearch)
v4.22.8Compare Source
Note: Version bump only for package vue-instantsearch
v4.22.7Compare Source
Note: Version bump only for package vue-instantsearch
Configuration
📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.