Bump the ruby-deps group with 16 updates

[dependabot]

Bumps the ruby-deps group with 16 updates:

Package	From	To
middleman	4.6.0	4.6.1
aws-sdk-s3	1.188.0	1.191.0
async	2.24.0	2.25.0
aws-eventstream	1.3.2	1.4.0
aws-partitions	1.1109.0	1.1123.0
aws-sdk-core	3.224.1	3.226.1
aws-sdk-kms	1.101.0	1.106.0
aws-sigv4	1.11.0	1.12.1
bigdecimal	3.2.1	3.2.2
console	1.30.2	1.31.0
io-event	1.10.1	1.11.0
middleman-cli	4.6.0	4.6.1
middleman-core	4.6.0	4.6.1
mime-types-data	3.2025.0527	3.2025.0624
sass-embedded	1.89.1	1.89.2
thor	1.2.2	1.3.2

Updates middleman from 4.6.0 to 4.6.1

Changelog

Sourced from middleman's changelog.

4.6.1

• Allow upgrade to thor 1.3 (#2811)
• Fix regression when visiting sitemap and config page (#2820)

Commits

• 4cabcd4 Prep v4.6.1
• 2255378 Bump rack from 3.1.15 to 3.1.16 (#2832)
• 0fe842a Bump rake from 13.2.1 to 13.3.0 (#2831)
• 2e1786f Bump rspec from 3.13.0 to 3.13.1 (#2830)
• 07ea60f Bump rack from 3.1.14 to 3.1.15 (#2829)
• a38b434 Bump rack-session from 2.1.0 to 2.1.1 (#2828)
• 1fff769 Bump rack from 3.1.13 to 3.1.14 (#2827)
• 0c739f5 Fix regression when visiting sitemap and config page (#2820)
• 770821b Bump nokogiri from 1.18.4 to 1.18.8 (#2826)
• f911805 Bump parallel from 1.26.3 to 1.27.0 (#2825)
• Additional commits viewable in compare view

Updates aws-sdk-s3 from 1.188.0 to 1.191.0

Changelog

Sourced from aws-sdk-s3's changelog.

1.191.0 (2025-06-25)

• Feature - Adds support for additional server-side encryption mode and storage class values for accessing Amazon FSx data from Amazon S3 using S3 Access Points

1.190.0 (2025-06-18)

• Feature - Added support for renaming objects within the same bucket using the new RenameObject API.

1.189.1 (2025-06-10)

• Issue - Only load required cgi modules for Ruby 3.5.

1.189.0 (2025-06-02)

• Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

Commits

• See full diff in compare view

Updates async from 2.24.0 to 2.25.0

Changelog

Sourced from async's changelog.

v2.25.0

• Added support for io_select hook in the fiber scheduler, allowing non-blocking IO.select operations. This enables better integration with code that uses IO.select for multiplexing IO operations.

Use IO::Event::WorkerPool for Blocking Operations

The Async::WorkerPool implementation has been removed in favor of using IO::Event::WorkerPool directly. This change simplifies the codebase by delegating worker pool functionality to the io-event gem, which provides a more efficient and well-tested implementation.

To enable the worker pool, you can set the ASYNC_SCHEDULER_WORKER_POOL environment variable to true. This will allow the scheduler to use a worker pool for blocking operations, which can help improve performance in applications that perform a lot of CPU-bound operations (e.g. rb_nogvl).

Better handling of IO#close using fiber_interrupt

IO#close interrupts fibers that are waiting on the IO using the new fiber_interrupt hook introduced in Ruby 3.5/4.0. This means that if you close an IO while a fiber is waiting on it, the fiber will be interrupted and will raise an IOError. This is a change from previous versions of Ruby, where closing an IO would not interrupt fibers waiting on it, and would instead interrupt the entire event loop (essentially a bug).

r, w = IO.pipe
Async do
child = Async do
r.gets
end
r.close # This will interrupt the child fiber.
child.wait # This will raise an `IOError` because the IO was closed.

end

Commits

• 4206e32 Bump minor version.
• ba044e0 Add io_select hook. (#394)
• 837a6d6 Modernize code.
• 96ca808 Remove debug logs.
• 301c4e9 Fix handling of IO#close interruption across threads/fibers. (#369)
• bdfd6cf Add support for IO::Event::WorkerPool. (#393)
• See full diff in compare view

Updates aws-eventstream from 1.3.2 to 1.4.0

Changelog

Sourced from aws-eventstream's changelog.

1.4.0 (2025-06-02)

• Feature - AWS SDK for Ruby no longer supports Ruby runtime versions 2.5 and 2.6.

Commits

• See full diff in compare view

Updates aws-partitions from 1.1109.0 to 1.1123.0

Changelog

Sourced from aws-partitions's changelog.

1.1123.0 (2025-06-30)

• Feature - Updated the partitions source data the determines the AWS service regions and endpoints.

1.1122.0 (2025-06-27)

• Feature - Updated the partitions source data the determines the AWS service regions and endpoints.

1.1121.0 (2025-06-26)

• Feature - Added support for enumerating regions for Aws::KeyspacesStreams.

1.1120.0 (2025-06-23)

• Feature - Added support for enumerating regions for Aws::WorkspacesInstances.

1.1119.0 (2025-06-20)

• Feature - Updated the partitions source data the determines the AWS service regions and endpoints.

1.1118.0 (2025-06-18)

• Feature - Added support for enumerating regions for Aws::AIOps.

1.1117.0 (2025-06-17)

• Feature - Added support for enumerating regions for Aws::MPA.

1.1116.0 (2025-06-11)

• Feature - Updated the partitions source data the determines the AWS service regions and endpoints.

1.1115.0 (2025-06-10)

• Feature - Updated the partitions source data the determines the AWS service regions and endpoints.

1.1114.0 (2025-06-09)

• Feature - Updated the partitions source data the determines the AWS service regions and endpoints.

... (truncated)

Commits

• See full diff in compare view

Updates aws-sdk-core from 3.224.1 to 3.226.1

Changelog

Sourced from aws-sdk-core's changelog.

3.226.1 (2025-06-24)

• Issue - Fixed spelling in the Aws::Errors::SignalEventError error message.

3.226.0 (2025-06-17)

• Feature - Updated Aws::STS::Client with the latest API changes.

• Feature - The AWS Security Token Service APIs AssumeRoleWithSAML and AssumeRoleWithWebIdentity can now be invoked without pre-configured AWS credentials in the SDK configuration.

3.225.2 (2025-06-10)

• Issue - Only load required cgi modules for Ruby 3.5.

3.225.1 (2025-06-05)

• Issue - Fix RPCv2 parser to handle flattened list and flattened map members correctly for AwsQueryCompatible services.

3.225.0 (2025-06-02)

• Feature - AWS SDK for Ruby no longer supports Ruby runtime versions 2.5 and 2.6.

Commits

• See full diff in compare view

Updates aws-sdk-kms from 1.101.0 to 1.106.0

Changelog

Sourced from aws-sdk-kms's changelog.

1.106.0 (2025-06-26)

• Feature - This release updates AWS CLI examples for KMS APIs.

1.105.0 (2025-06-12)

• Feature - AWS KMS announces the support of ML-DSA key pairs that creates post-quantum safe digital signatures.

1.104.0 (2025-06-06)

• Feature - Remove unpopulated KeyMaterialId from Encrypt Response

1.103.0 (2025-06-05)

• Feature - AWS KMS announces the support for on-demand rotation of symmetric-encryption KMS keys with imported key material (EXTERNAL origin).

1.102.0 (2025-06-02)

• Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

Commits

• See full diff in compare view

Updates aws-sigv4 from 1.11.0 to 1.12.1

Changelog

Sourced from aws-sigv4's changelog.

1.12.1 (2025-06-10)

• Issue - Only load required cgi modules for Ruby 3.5.

1.12.0 (2025-06-02)

• Feature - AWS SDK for Ruby no longer supports Ruby runtime versions 2.5 and 2.6.

Commits

• See full diff in compare view

Updates bigdecimal from 3.2.1 to 3.2.2

Release notes

Sourced from bigdecimal's releases.

v3.2.2

What's Changed

• Make precision calculation in bigdecimal.div(value, 0) gc-compaction safe by @​tompng in ruby/bigdecimal#339

Full Changelog: ruby/bigdecimal@v3.2.1...v3.2.2

Changelog

Sourced from bigdecimal's changelog.

3.2.2

• Make precision calculation in bigdecimal.div(value, 0) gc-compaction safe. GH-340

  @​tompng

Commits

• 0838cb1 Bump version to 3.2.2
• 9d9c352 Update CHANGES for 3.2.2
• 199ebfd Make precision calculation in bigdecimal.div(value, 0) gc-compaction safe (#339)
• See full diff in compare view

Updates console from 1.30.2 to 1.31.0

Updates io-event from 1.10.1 to 1.11.0

Changelog

Sourced from io-event's changelog.

v1.11.0

Introduce IO::Event::WorkerPool for off-loading blocking operations.

The {ruby IO::Event::WorkerPool} provides a mechanism for executing blocking operations on separate OS threads while properly integrating with Ruby's fiber scheduler and GVL (Global VM Lock) management. This enables true parallelism for CPU-intensive or blocking operations that would otherwise block the event loop.

# Fiber scheduler integration via blocking_operation_wait hook
class MyScheduler
	def initialize
		@worker_pool = IO::Event::WorkerPool.new
	end
def blocking_operation_wait(operation)
@​worker_pool.call(operation)
end
end
Usage with automatic offloading
Fiber.set_scheduler(MyScheduler.new)
Automatically offload rb_nogvl(..., RB_NOGVL_OFFLOAD_SAFE) to a background thread:
result = some_blocking_operation()

The implementation uses one or more background threads and a list of pending blocking operations. Those operations either execute through to completion or may be cancelled, which executes the "unblock function" provided to rb_nogvl.

v1.10.2

• Improved consistency of handling closed IO when invoking #select.

v1.10.0

• IO::Event::Profiler is moved to dedicated gem: fiber-profiler.
• Perform runtime checks for native selectors to ensure they are supported in the current environment. While compile-time checks determine availability, restrictions like seccomp and SELinux may still prevent them from working.

v1.9.0

• Improved IO::Event::Profiler for detecting stalls.

v1.8.0

• Detecting fibers that are stalling the event loop.

v1.7.5

• Fix process_wait race condition on EPoll that could cause a hang.

Commits

• 14a662b Bump minor version.
• 0345ded Introduce IO::Event::WorkerPool for blocking_operation_wait. (#139)
• 4848faf Bump patch version.
• 87a4004 Handle closed IO while invoking #select. (#138)
• See full diff in compare view

Updates middleman-cli from 4.6.0 to 4.6.1

Updates middleman-core from 4.6.0 to 4.6.1

Updates mime-types-data from 3.2025.0527 to 3.2025.0624

Changelog

Sourced from mime-types-data's changelog.

3.2025.0624 / 2025-06-24

• Updated registry entries from the IANA [media registry][registry] and [provisional media registry][provisional], the [Apache httpd media registry][httpd], and the [Apache Tika media registry][tika] as of the release date.

3.2025.0617 / 2025-06-17

• Updated registry entries from the IANA [media registry][registry] and [provisional media registry][provisional], the [Apache httpd media registry][httpd], and the [Apache Tika media registry][tika] as of the release date.

3.2025.0610 / 2025-06-10

• Updated registry entries from the IANA [media registry][registry] and [provisional media registry][provisional], the [Apache httpd media registry][httpd], and the [Apache Tika media registry][tika] as of the release date.

3.2025.0603 / 2025-06-03

• Updated registry entries from the IANA [media registry][registry] and [provisional media registry][provisional], the [Apache httpd media registry][httpd], and the [Apache Tika media registry][tika] as of the release date.

Commits

• 591459f Update mime-types-data 3.2025.0624 / 2025-06-24
• 805562c chore(deps): Bump astral-sh/setup-uv from 6.1.0 to 6.3.0
• 6f95352 Update mime-types-data 3.2025.0617 / 2025-06-17
• 12b46dc chore(deps): Bump ruby/setup-ruby from 1.244.0 to 1.245.0
• be855a5 chore(deps): Bump step-security/harden-runner from 2.12.0 to 2.12.1
• afc9801 chore(deps): Bump github/codeql-action from 3.28.19 to 3.29.0
• 171a5ba Update mime-types-data 3.2025.0610 / 2025-06-10
• c3537c8 chore(deps): Bump github/codeql-action from 3.28.18 to 3.28.19
• d8d5aa8 Update mime-types-data 3.2025.0603 / 2025-06-03
• 2b31006 chore(deps): Bump ossf/scorecard-action from 2.4.1 to 2.4.2
• See full diff in compare view

Updates sass-embedded from 1.89.1 to 1.89.2

Commits

• 15b15d5 v1.89.2
• 7d21f65 Bump sass from 1.89.1 to 1.89.2 in /ext/sass (#315)
• 22221e1 Update rubocop requirement from ~> 1.75.0 to ~> 1.76.1 (#314)
• See full diff in compare view

Updates thor from 1.2.2 to 1.3.2

Release notes

Sourced from thor's releases.

1.3.2

What's Changed

• Fix a few typos in README by @​duffuniverse in rails/thor#880
• Correctly identify hyphenated and alias command names by @​takmar in rails/thor#878

New Contributors

• @​duffuniverse made their first contribution in rails/thor#880

Full Changelog: rails/thor@v1.3.1...v1.3.2

1.3.1

What's Changed

• Preserve Correct Indentation When Uncommenting Lines by @​viktorianer in rails/thor#873
• Document the '--skip-' option for boolean options. by @​andrewn617 in rails/thor#876

New Contributors

• @​takmar made their first contribution in rails/thor#865
• @​m-nakamura145 made their first contribution in rails/thor#866
• @​cprodhomme made their first contribution in rails/thor#863
• @​ancao90 made their first contribution in rails/thor#872
• @​viktorianer made their first contribution in rails/thor#873
• @​andrewn617 made their first contribution in rails/thor#876

Full Changelog: rails/thor@v1.3.0...v1.3.1

v1.3.0

What's Changed

• use the correct class for shared namespaces by @​Gerst20051 in rails/thor#754
• Allow to Override Order of Commands in Help by @​alessio-signorini in rails/thor#642
• Add support for providing http headers to get by @​dnlgrv in rails/thor#801
• Don't document negative boolean option named no_* by @​BrentWheeldon in rails/thor#797
• CreateFile#identical? fixed for files containing multi-byte UTF-8 codepoints by @​tomclose in rails/thor#786
• Drop support to Ruby 2.6 by @​rafaelfranca in rails/thor#821
• Fix dashless option usage info by @​sambostock in rails/thor#800
• Support Range in enum option by @​phene in rails/thor#775
• Check if type: array values are in enum by @​movermeyer in rails/thor#784
• Fix inject into file warning by @​nicolas-brousse in rails/thor#709
• Support Thor::CoreExt::HashWithIndifferentAccess#slice method by @​shuuuuun in rails/thor#812
• 🌧️ long_desc: new option to disable wrapping by @​igneus in rails/thor#739
• Print default in help when option type is :boolean and default is false by @​nevesenin in rails/thor#849
• Silence encoding warnings in specs by @​p8 in rails/thor#857
• Validate arguments for method_option and class_option by @​p8 in rails/thor#856
• Fix help for file_collision method without block by @​shuuuuun in rails/thor#858
• Extract print methods to seperate classes by @​p8 in rails/thor#854
• Add support for printing tables with borders by @​p8 in rails/thor#855
• Fix printing tables with borders and indentation by @​p8 in rails/thor#861

New Contributors

• @​Gerst20051 made their first contribution in rails/thor#754
• @​alessio-signorini made their first contribution in rails/thor#642

... (truncated)

Commits

• 33b9682 Fix release script
• de55517 Prepare for 1.3.2
• d342a4f Add release workflow
• f2e243d Merge pull request #878 from takmar/fix/find-class-and-command-name
• 3821657 Fix find_class_and_command_by_namespace to correctly identify hyphenated and ...
• 871d132 Add command_exists? method to Thor and Thor::Group classes
• 8f897d5 Merge pull request #880 from duffuniverse/fix-typos-in-readme
• 42fb1db Add a missed comma to readme
• 34f6dbe Fix a few typos in README
• a43d92f Prepare for 1.3.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions