Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 4 updates#77

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/production-dependencies-6bfb84c8b8
Open

chore(deps): bump the production-dependencies group across 1 directory with 4 updates#77
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/production-dependencies-6bfb84c8b8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 4 updates in the / directory: json, puma, sentry-ruby and selenium-webdriver.

Updates json from 2.19.5 to 2.19.8

Release notes

Sourced from json's releases.

v2.19.7

What's Changed

  • Fix some more edge cases with out of range floats.
  • Ensure the string provided to JSON.parse can't be mutated during parsing.
  • Add missing write barriers in State#dup.
  • Further validate generator depth config.

Full Changelog: ruby/json@v2.19.6...v2.19.7

v2.19.6

What's Changed

  • Cleanly handle overly large depth generator argument.
  • Add missing write barrier in ParserConfig.

Full Changelog: ruby/json@v2.19.5...v2.19.6

Changelog

Sourced from json's changelog.

2026-06-03 (2.19.8)

  • Fix 1-byte buffer overread on EOS errors.
  • Handle invalid types passed as max_nesting option.

2026-05-28 (2.19.7)

  • Fix some more edge cases with out of range floats.
  • Ensure the string provided to JSON.parse can't be mutated during parsing.
  • Add missing write barriers in State#dup.
  • Further validate generator depth config.

2026-05-28 (2.19.6)

  • Cleanly handle overly large depth generator argument.
  • Add missing write barrier in ParserConfig.
Commits
  • 5233dd9 Release 2.19.8
  • 3f44b26 Prevent buffer over-read when generating EOF error
  • be8d068 Handle invalid types passed as max_nesting option
  • 59501c0 Get rid of all_images gem
  • c7a7b2b Add a security note in README
  • ab6c8f2 Release 2.19.7
  • f033b9d Fix some more edge cases with out of range floats
  • 5ca8a67 parser.c: Ensure the user provided string can't be mutated
  • dba1d88 generator.c: trigger write barriers in cState_init_copy
  • e8800cb Further validate generator depth config
  • Additional commits viewable in compare view

Updates puma from 8.0.1 to 8.0.2

Release notes

Sourced from puma's releases.

v8.0.2

  • Bugfixes
    • Anchor PROXY protocol v1 regex to string start and enforce max line length to prevent injection via crafted request bodies (#3944)
    • Parse PROXY protocol header only on the first request per connection to prevent spoofing on keep-alive connections (#3944)

Security advisories

Changelog

Sourced from puma's changelog.

8.0.2 / 2026-05-27

  • Bugfixes
    • Anchor PROXY protocol v1 regex to string start and enforce max line length to prevent injection via crafted request bodies (#3944)
    • Parse PROXY protocol header only on the first request per connection to prevent spoofing on keep-alive connections (#3944)
Commits

Updates sentry-ruby from 6.5.0 to 6.6.0

Changelog

Sourced from sentry-ruby's changelog.

6.6.0

New Features ✨

  • (yabeda) Add sentry-yabeda adapter gem by @​dingsdax in #2925

    There's a new sentry-yabeda gem that integrates Sentry Metrics with Yabeda. Add the new gem to your Gemfile:

    gem "sentry-yabeda"

    Initialize Sentry with metrics enabled. The Yabeda adapter registers itself automatically when sentry-yabeda is required — there's no extra setup:

    Sentry.init do |config|
  config.dsn = ENV["SENTRY_DSN"]
  config.enable_metrics = true
end

  • Add release detection from Kamal deployment by @​t27duck in #2895

Bug Fixes 🐛

Internal Changes 🔧

We made some memory performance and caching improvements with the help of pi-autoresearch. Enjoy the lower overhead!

Commits
  • 1754a7f release: 6.6.0
  • af610cd fix(stacktrace): stop leaking internal frame state into event payload (#2962)
  • 427612b fix(tests): proper dummy transport clean up for hub cloning (#2957)
  • 3b64cc2 feat(yabeda): Add sentry-yabeda adapter gem (#2925)
  • f6e0ad1 perf: Use FilenameCache in profilers (#2919)
  • e2a073a perf: Add FilenameCache to cache compute_filename results (#2904)
  • 0dd3f05 test: Fix flaky concurrent test in telemetry buffer (#2920)
  • 688bd62 Add release detection from Kamal deployment (#2895)
  • aaa5a9a perf: optimize LineCache to reduce allocations (#2903)
  • 949bc6b perf: avoid unnecessary allocations in hot paths (#2902)
  • Additional commits viewable in compare view

Updates selenium-webdriver from 4.43.0 to 4.44.0

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.44.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

... (truncated)

Changelog

Sourced from selenium-webdriver's changelog.

4.44.0 (2026-05-12)

  • Support CDP versions: v146, v147, v148
  • Modern Firefox does not like both the -v and --log flags at the same time (#17412)
  • Fix credential issue with private key (#17188)
Commits
  • da2039b [build] Prepare for release of selenium-4.44.0 (#17444)
  • 6b85c4a [rb] Fix credential issue with private key (#17188)
  • 4885286 [dotnet][java][js][py][rb] Standardize README files across bindings (#17245)
  • 2042c23 [rb] Modern Firefox does not like both the -v and --log flags at the same...
  • 31ee122 [Agents] Update agents to make sure do linting. (#17366)
  • c95fe73 Bumping versions to nightly
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the production-dependencies group across 1 director…
68a78b6 
…y with 4 updates

Bumps the production-dependencies group with 4 updates in the / directory: [json](https://github.com/ruby/json), [puma](https://github.com/puma/puma), [sentry-ruby](https://github.com/getsentry/sentry-ruby) and [selenium-webdriver](https://github.com/SeleniumHQ/selenium).


Updates `json` from 2.19.5 to 2.19.8
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](ruby/json@v2.19.5...v2.19.8)

Updates `puma` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/puma/puma/releases)
- [Changelog](https://github.com/puma/puma/blob/main/History.md)
- [Commits](puma/puma@v8.0.1...v8.0.2)

Updates `sentry-ruby` from 6.5.0 to 6.6.0
- [Release notes](https://github.com/getsentry/sentry-ruby/releases)
- [Changelog](https://github.com/getsentry/sentry-ruby/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-ruby@6.5.0...6.6.0)

Updates `selenium-webdriver` from 4.43.0 to 4.44.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](SeleniumHQ/selenium@selenium-4.43.0...selenium-4.44.0)

---
updated-dependencies:
- dependency-name: json
  dependency-version: 2.19.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: puma
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: sentry-ruby
  dependency-version: 6.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: selenium-webdriver
  dependency-version: 4.44.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Jun 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants