Skip to content

Bump the rails group across 1 directory with 3 updates - #37

Merged
danieldevlewis merged 1 commit into
mainfrom
dependabot/bundler/rails-c5e4e37c61
Oct 7, 2026
Merged

Bump the rails group across 1 directory with 3 updates#37
danieldevlewis merged 1 commit into
mainfrom
dependabot/bundler/rails-c5e4e37c61

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the rails group with 3 updates in the / directory: activerecord, activemodel and activesupport.

Updates activerecord from 8.1.3.1 to 8.1.4

Release notes

Sourced from activerecord's releases.

8.1.4

Active Support

  • Fix the debug error page rendering for SyntaxErrors with multi-line messages.

    Marco Roth

  • Make ActiveSupport::JSON.decode compatible with the upcoming json 3.0 gem.

    Earlopain

  • Fix number_to_human_size crashing for sizes above a terabyte by supporting petabyte, exabyte, and zettabyte storage units.

    Kenta Ishizaki

  • Fix Range#sole raising NoMethodError when the enumerable core extension isn't already loaded.

    Kenta Ishizaki

  • Fix ActiveSupport::Cache::FileStore raising NameError for FileUtils when fileutils isn't already loaded.

    Kenta Ishizaki

  • Fix Enumerable#in_order_of with filter: true dropping nil elements explicitly named in the series.

    Kenta Ishizaki

  • Keep HashWithIndifferentAccess#filter returning a HashWithIndifferentAccess instead of a plain Hash.

    Kenta Ishizaki

  • Fix number_to_human and number_to_human_size crashing when :precision is nil.

    Kenta Ishizaki

  • Fix ActiveSupport::InheritableOptions#to_h to recursively flatten nested InheritableOptions parents.

    Andrew Novoselac

  • Fix ActiveSupport::StructuredEventSubscriber.debug_only leaking debug-only methods across subscriber subclasses.

    Kenta Ishizaki

... (truncated)

Changelog

Sourced from activerecord's changelog.

Rails 8.1.4 (September 24, 2026)

  • Avoid deadlocks when concurrent find_or_create_by calls read back the same record within MySQL transactions.

    Use a shared lock for the read after a duplicate insert, preserving visibility under REPEATABLE READ without upgrading competing shared locks to exclusive locks. This also applies to create_or_find_by and the bang variants of both methods.

    Fixes #54281.

    Kirsten Westeinde

  • Filter the database password out of failed db: task command error messages.

    Ngan Pham

  • Fix ActiveRecord::TypeCaster::Connection sometimes leaking a checked-out connection.

    Hartley McGuire

  • Fix PostgreSQL exclusion constraints with multiline expressions being parsed incorrectly during schema introspection.

    Jake McAllister

  • Fix async ActiveRecord::StatementCache#execute raising an error for out-of-range bind values instead of returning an empty result.

    viralpraxis

  • Fix where clauses with column-tuple syntax not resolving references to other tables.

    Chris Gunther

  • Fix distinct: true being ignored by average.

    Kenta Ishizaki

  • Fix belongs_to change tracking for composite foreign keys.

    Only the first foreign key column was checked for changes; now all foreign key columns are checked.

    Anas Khan

  • Make add_column(if_not_exists: true) reversible.

... (truncated)

Commits
  • c3466ea Preparing for 8.1.4 release
  • 2670772 Merge pull request #58733 from kwestein/create-or-find-by-deadlock
  • e6288a8 Update CHANGELOGs for 8-1-stable backports
  • 44a7fd4 Merge pull request #58799 from e-akashsaini/fix-tuple-where-key-corrupting-at...
  • 4a230ca Merge pull request #58725 from ngan/np-mysql-cli-trilogy-ssl-keys
  • 062c435 Merge pull request #58726 from ngan/np-redact-password-in-task-errors
  • 36f436f Merge pull request #58714 from joemsak/keepalive-false-config-bug
  • 2a0d899 Merge pull request #58716 from joemsak/checkout-blocking-respects-timeout
  • 6785886 Merge pull request #58688 from byroot/upgrade-rubocop
  • cfa3f46 Fix MessageSerializerTest to handle json 3.x
  • Additional commits viewable in compare view

Updates activemodel from 8.1.3.1 to 8.1.4

Release notes

Sourced from activemodel's releases.

8.1.4

Active Support

  • Fix the debug error page rendering for SyntaxErrors with multi-line messages.

    Marco Roth

  • Make ActiveSupport::JSON.decode compatible with the upcoming json 3.0 gem.

    Earlopain

  • Fix number_to_human_size crashing for sizes above a terabyte by supporting petabyte, exabyte, and zettabyte storage units.

    Kenta Ishizaki

  • Fix Range#sole raising NoMethodError when the enumerable core extension isn't already loaded.

    Kenta Ishizaki

  • Fix ActiveSupport::Cache::FileStore raising NameError for FileUtils when fileutils isn't already loaded.

    Kenta Ishizaki

  • Fix Enumerable#in_order_of with filter: true dropping nil elements explicitly named in the series.

    Kenta Ishizaki

  • Keep HashWithIndifferentAccess#filter returning a HashWithIndifferentAccess instead of a plain Hash.

    Kenta Ishizaki

  • Fix number_to_human and number_to_human_size crashing when :precision is nil.

    Kenta Ishizaki

  • Fix ActiveSupport::InheritableOptions#to_h to recursively flatten nested InheritableOptions parents.

    Andrew Novoselac

  • Fix ActiveSupport::StructuredEventSubscriber.debug_only leaking debug-only methods across subscriber subclasses.

    Kenta Ishizaki

... (truncated)

Changelog

Sourced from activemodel's changelog.

Rails 8.1.4 (September 24, 2026)

  • Fix ActiveModel::Errors#import mutating the override options hash passed to it.

    Kenta Ishizaki

  • Fix normalizes not detecting in-place changes for attributes whose database cast type differs from the attribute type (e.g. JSON columns), causing normalization to be skipped on validation.

    Chedli Bourguiba

  • Fix alias_attribute accumulating duplicate entries in aliases_by_attribute_name when called multiple times with the same arguments.

    Nicholas Jakobsen

  • Fix normalizes re-applying normalizations on every validation of an unpersisted record, and speed up validation of normalized attributes.

    The in-place mutation check re-ran the normalizer on every valid? of an unpersisted record: wasteful for idempotent normalizers and compounded the result for non-idempotent ones. Normalizations are now re-applied only on a genuine in-place mutation.

    Yaroslav Markin

  • Limit the size of strings ActiveModel::Type::Integer will coerce with to_i.

    Calling to_i on very long strings can take a long time and could be used as a DoS vector. Integer casting now only considers the first _limit * 4 bytes of a string (16 bytes for a default 4-byte integer, 32 bytes for an 8-byte bigint), which is enough to hold the maximum representable value plus a sign or a short slug suffix.

    Aaron Patterson, Jean Boussier

Commits
  • c3466ea Preparing for 8.1.4 release
  • 2ed2c88 Define read_attribute_for_validation instead of aliasing send
  • 2616145 Merge pull request #56705 from p8/activemodel/fix-read-attr-for-serialization...
  • 20abac3 Merge pull request #58817 from yahonda/fix-alias-fallback-to-object-in-attrib...
  • e6288a8 Update CHANGELOGs for 8-1-stable backports
  • bf26808 Merge branch '8-1-sec' into 8-1-stable
  • bf540ce Merge pull request #57889 from 55728/fix-rdoc-examples
  • 9b01b29 Merge pull request #57792 from 55728/fix-errors-import-mutates-override-options
  • 1e317a7 Merge pull request #57660 from chaadow/fix_normalize_onjsonb_default_emptyhash
  • 0a65306 Merge pull request #57639 from yaroslav/fix/normalization-fix-reruns
  • Additional commits viewable in compare view

Updates activesupport from 8.1.3.1 to 8.1.4

Release notes

Sourced from activesupport's releases.

8.1.4

Active Support

  • Fix the debug error page rendering for SyntaxErrors with multi-line messages.

    Marco Roth

  • Make ActiveSupport::JSON.decode compatible with the upcoming json 3.0 gem.

    Earlopain

  • Fix number_to_human_size crashing for sizes above a terabyte by supporting petabyte, exabyte, and zettabyte storage units.

    Kenta Ishizaki

  • Fix Range#sole raising NoMethodError when the enumerable core extension isn't already loaded.

    Kenta Ishizaki

  • Fix ActiveSupport::Cache::FileStore raising NameError for FileUtils when fileutils isn't already loaded.

    Kenta Ishizaki

  • Fix Enumerable#in_order_of with filter: true dropping nil elements explicitly named in the series.

    Kenta Ishizaki

  • Keep HashWithIndifferentAccess#filter returning a HashWithIndifferentAccess instead of a plain Hash.

    Kenta Ishizaki

  • Fix number_to_human and number_to_human_size crashing when :precision is nil.

    Kenta Ishizaki

  • Fix ActiveSupport::InheritableOptions#to_h to recursively flatten nested InheritableOptions parents.

    Andrew Novoselac

  • Fix ActiveSupport::StructuredEventSubscriber.debug_only leaking debug-only methods across subscriber subclasses.

    Kenta Ishizaki

... (truncated)

Changelog

Sourced from activesupport's changelog.

Rails 8.1.4 (September 24, 2026)

  • Fix the debug error page rendering for SyntaxErrors with multi-line messages.

    Marco Roth

  • Make ActiveSupport::JSON.decode compatible with the upcoming json 3.0 gem.

    Earlopain

  • Fix number_to_human_size crashing for sizes above a terabyte by supporting petabyte, exabyte, and zettabyte storage units.

    Kenta Ishizaki

  • Fix Range#sole raising NoMethodError when the enumerable core extension isn't already loaded.

    Kenta Ishizaki

  • Fix ActiveSupport::Cache::FileStore raising NameError for FileUtils when fileutils isn't already loaded.

    Kenta Ishizaki

  • Fix Enumerable#in_order_of with filter: true dropping nil elements explicitly named in the series.

    Kenta Ishizaki

  • Keep HashWithIndifferentAccess#filter returning a HashWithIndifferentAccess instead of a plain Hash.

    Kenta Ishizaki

  • Fix number_to_human and number_to_human_size crashing when :precision is nil.

    Kenta Ishizaki

  • Fix ActiveSupport::InheritableOptions#to_h to recursively flatten nested InheritableOptions parents.

    Andrew Novoselac

  • Fix ActiveSupport::StructuredEventSubscriber.debug_only leaking debug-only methods across subscriber subclasses.

    Kenta Ishizaki

  • Fix ActiveSupport::Inflector#transliterate mutating the caller's string.

... (truncated)

Commits
  • c3466ea Preparing for 8.1.4 release
  • e6288a8 Update CHANGELOGs for 8-1-stable backports
  • 215952f Merge pull request #58727 from marcoroth/multiline-syntax-errors
  • 6785886 Merge pull request #58688 from byroot/upgrade-rubocop
  • e0d220c Fixed guard around AS::TC.run_order
  • a3bcedd Merge pull request #58639 from moizafzal936/fix-fetch-multi-local-cache-order
  • 5b7765c AS::JSON.decode: handle nil options
  • c8b51db Merge pull request #58601 from Earlopain/json-3.0-compat
  • 888d752 [8-1-stable] Silence Time.rfc3339 redefinition warning
  • c957a6b Merge pull request #58324 from hammadxcm/fix-parameterize-nil-separator
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Oct 6, 2026
This was referenced Oct 6, 2026
Closed
Closed
Closed
@dependabot dependabot Bot changed the title Bump the rails group with 3 updates Bump the rails group across 1 directory with 3 updates Oct 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot/bundler/rails-c5e4e37c61 branch from bb850f5 to 8c5432d Compare October 6, 2026 09:06
@dependabot
Bump the rails group across 1 directory with 3 updates
c56567b 
Bumps the rails group with 3 updates in the / directory: [activerecord](https://github.com/rails/rails), [activemodel](https://github.com/rails/rails) and [activesupport](https://github.com/rails/rails).


Updates `activerecord` from 8.1.3.1 to 8.1.4
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.4/activerecord/CHANGELOG.md)
- [Commits](rails/rails@v8.1.3.1...v8.1.4)

Updates `activemodel` from 8.1.3.1 to 8.1.4
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.4/activemodel/CHANGELOG.md)
- [Commits](rails/rails@v8.1.3.1...v8.1.4)

Updates `activesupport` from 8.1.3.1 to 8.1.4
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.4/activesupport/CHANGELOG.md)
- [Commits](rails/rails@v8.1.3.1...v8.1.4)

---
updated-dependencies:
- dependency-name: activemodel
  dependency-version: 8.1.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rails
- dependency-name: activerecord
  dependency-version: 8.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rails
- dependency-name: activesupport
  dependency-version: 8.1.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: rails
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bundler/rails-c5e4e37c61 branch from 8c5432d to c56567b Compare October 7, 2026 09:15
@danieldevlewis
danieldevlewis merged commit 518696a into main Oct 7, 2026
7 checks passed
@dependabot
dependabot Bot deleted the dependabot/bundler/rails-c5e4e37c61 branch October 7, 2026 12:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@danieldevlewis