Skip to content
This repository was archived by the owner on Aug 31, 2025. It is now read-only.

Bump rails, mail, rails-i18n and rqrcode #2184

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump rails, mail, rails-i18n and rqrcode #2184

wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 30, 2025

Bumps rails, mail, rails-i18n and rqrcode. These dependencies needed to be updated together.
Updates rails from 7.1.5.2 to 8.0.2.1

Release notes

Sourced from rails's releases.

8.0.2.1

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • Call inspect on ids in RecordNotFound error

    [CVE-2025-55193]

    Gannon McGibbon, John Hawthorn

Action View

  • No changes.

Action Pack

  • No changes.

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

  • No changes.

Active Storage

Remove dangerous transformations

[CVE-2025-24293]

... (truncated)

Commits
  • b0c813b Preparing for 8.0.2.1 release
  • a6d50ae Update CHANGELOGs
  • 568c0bc Call inspect on ids in RecordNotFound error
  • 2d61273 Active Storage: Remove dangerous transformations
  • 3235827 Preparing for 8.0.2 release
  • 3e98891 Upgrade development gems
  • 0a87e3e Merge pull request #54239 from byroot/docker-test-ruby-upgrade
  • e2b9a41 Sync CHANGELOG
  • 4bf434c Merge pull request #54735 from flavorjones/flavorjones-sqlite-adapter-quote-i...
  • 1f5de2f Merge pull request #54649 from yedhink/54529-doc-plural-table-names-limitation
  • Additional commits viewable in compare view

Updates mail from 2.7.1 to 2.8.1

Changelog

Sourced from mail's changelog.

== Version 2.8.1 (unreleased)

Bug Fixes:

  • Regression: sendmail accepts string :arguments (@​sebbASF)
  • Regression: accept enable_starttls_auto: false @​ahorek

== Version 2.8.0.1 (12-Jan-2023)

Bug fixes:

  • Regression: incorrect permissions for some files (mikel)

== Version 2.8.0 (3-Dec-2022)

Breaking changes:

  • Add Ruby 3.1 support (deivid-rodriguez, voxik, eregon)
  • Drop support for Ruby < 2.5 (deivid-rodriguez, voxik)
  • Message#without_attachments! now deletes nested attachments. (TylerRick)
  • Sendmail and exim delivery now raise DeliveryError when the command exits with a nonzero exitstatus. (benmmurphy, CoolElvis)
  • Sendmail and exim delivery :arguments option must be an array of string args. (benmmurphy)
  • Passing unparsed headers to Mail::Field.new is no longer supported. Use Mail::Field.parse. (jeremy)
  • Removed long-deprecated features: Message#register_for_delivery_notification, #has_transfer_encoding?, #add_transfer_encoding, #transfer_encoding, #message_content_type, #mime_parameters, #encode!, and Part#inline_content_id. (jeremy)

Deprecations:

  • Deprecates Mail::CheckDeliveryParams in favour of Mail::SmtpEnvelope

Compatibility:

  • Handle a wide variety of non-RFC Message-ID formats. (peterkovacs)
  • Normalize Quoted-Printable line endings for text content. (jeremy)
  • Gracefully parse invalid dates in Date and Received headers. (okkez)
  • Converting to multipart moves Content-* headers to the new part. (kirikak2)
  • Multipart Content-Type no longer includes a needless charset param. (kirikak2)
  • Replies prefix subject with "Re: " instead of "RE: " per 5322 3.6.5. (mashedcode)
  • Gracefully handle multiple, possibly-invalid headers for what should be singular fields. (rosa)
  • SMTP delivery with enable_tls/starttls/starttls_auto: false now disables these options, since starttls is now :auto by default in upstream net-smtp. (jeremy)

Features:

  • Message#inspect_structure and PartsList#inspect_structure pretty-print the hierarchy of message parts. (TylerRick)
  • an_attachment_with_mime_type matcher added to match attachments by mime type

Bug Fixes:

  • Regression: Preserve message-level charset when adding parts (related to Rails ActionMailer) @​shields
  • Regression: Adding a part should not reset the mail's charset to nil @​railsbob

Please check 2-7-stable for previous changes.

Commits

Updates rails-i18n from 7.0.10 to 8.0.2

Changelog

Sourced from rails-i18n's changelog.

8.0.2 (2025-08-16)

  • Update following locales:
    • Japanese (ja): Add missing key (errors.messages.password_too_long, currency.format.negative_format, storage_units.units.zb)
    • German (de, de-DE, de-AT, de-CH): Add missing key (password_too_long)
    • Malayalam (ml): Add missing key (datetime.distance_in_words.x_years.one, datetime.distance_in_words.x_years.other, errors.messages.in, errors.messages.password_too_long, currency.format.negative_format, number.format.round_mode, storage_units.units.eb, storage_units.units.pb, storage_units.units.zb). Fix translation (activerecord.errors.messages.record_invalid, errors.messages.other_than, number.currency.format.unit)
    • Serbian Cyrillic (sr): Fix date format, February typo, and RSD unit
    • Basque (eu): Fixed week day abbreviations, fix percentage symbol position (number.percentage.format)
    • Croatian (hr), Serbian Cyrillic (sr) and Serbian Latin (scr): Add proper plural forms to decimal units
    • Add following locales:
      • Montenegrin (cnr)
      • Armenian (hy)

8.0.1 (2024-11-10)

  • Update following locales:
    • English (en): Add missing key (password_too_long)
    • Portuguese (pt): Add missing keys (password_too_long, negative_format, and zb)
  • Update Gemfile

8.0.0 (2024-11-10)

  • Update to Rails 8.0.x
  • Drop support for Ruby 3.0 and 3.1
Commits

Updates rqrcode from 2.2.0 to 3.1.0

Release notes

Sourced from rqrcode's releases.

v3.1.0

What's Changed

New Contributors

Full Changelog: whomwah/rqrcode@v3.0.0...v3.1.0

v3.0.0

What's Changed

Full Changelog: whomwah/rqrcode@v2.2.0...v3.0.0

Changelog

Sourced from rqrcode's changelog.

[3.1.0] - 2025-04-28

  • Added support for offset_x and offset_y options in the as_svg method for independent x and y padding around QR codes #153

[3.0.0] - 2025-04-24

  • Drop support for Ruby <3.0 in order to keep up with dev dependencies.
  • Breaking Change: The rqrcode_core gem has been updated to version 2.0.0, which includes breaking changes. Please refer to the rqrcode_core changelog
Commits
  • b0dbb67 Merge pull request #157 from whomwah/releases/v3.1.0
  • 515cbfa chore: Bump version to 3.1.0 and update changelog for new features
  • 953cf5f fix: Correct changelog link for version 3.0.0
  • 44baeea chore: Update changelog links for version 3.0.0 release
  • f181cd8 Merge pull request #155 from whomwah/feat/typos
  • bd48bcc docs: Update README.md for version 3.0 and add offset_y option for SVG rendering
  • b488a7e Merge pull request #153 from whomwah/feat/offset-150
  • 34bae67 feat: Enhance SVG export with offset_x and offset_y options for better positi...
  • 780a268 Merge pull request #154 from prognostikos/patch-1
  • 67d2222 Correct link and version of rqrcode_core in CHANGELOG.md
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
mail [>= 2.8.a, < 2.9]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
Bump rails, mail, rails-i18n and rqrcode
d95f7d4 
Bumps [rails](https://github.com/rails/rails), [mail](https://github.com/mikel/mail), [rails-i18n](https://github.com/svenfuchs/rails-i18n) and [rqrcode](https://github.com/whomwah/rqrcode). These dependencies needed to be updated together.

Updates `rails` from 7.1.5.2 to 8.0.2.1
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](rails/rails@v7.1.5.2...v8.0.2.1)

Updates `mail` from 2.7.1 to 2.8.1
- [Release notes](https://github.com/mikel/mail/releases)
- [Changelog](https://github.com/mikel/mail/blob/2.8.1/CHANGELOG.rdoc)
- [Commits](mikel/mail@2.7.1...2.8.1)

Updates `rails-i18n` from 7.0.10 to 8.0.2
- [Changelog](https://github.com/svenfuchs/rails-i18n/blob/master/CHANGELOG.md)
- [Commits](svenfuchs/rails-i18n@v7.0.10...v8.0.2)

Updates `rqrcode` from 2.2.0 to 3.1.0
- [Release notes](https://github.com/whomwah/rqrcode/releases)
- [Changelog](https://github.com/whomwah/rqrcode/blob/main/CHANGELOG.md)
- [Commits](whomwah/rqrcode@v2.2.0...v3.1.0)

---
updated-dependencies:
- dependency-name: rails
  dependency-version: 8.0.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: mail
  dependency-version: 2.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: rails-i18n
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: rqrcode
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Aug 30, 2025
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Aug 30, 2025
@dependabot dependabot bot mentioned this pull request Aug 30, 2025
Closed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

@nilsding nilsding Awaiting requested review from nilsding nilsding is a code owner

@pixeldesu pixeldesu Awaiting requested review from pixeldesu pixeldesu is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants