Skip to content

Bump the development-dependencies group across 1 directory with 6 updates#403

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bundler/development-dependencies-aeb539ffa0
Open

Bump the development-dependencies group across 1 directory with 6 updates#403
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bundler/development-dependencies-aeb539ffa0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 20, 2026 •
edited
Loading

Bumps the development-dependencies group with 6 updates in the / directory:

Package From To
debug 1.10.0 1.11.1
faker 3.5.1 3.6.1
brakeman 7.0.2 8.0.4
rubocop-rails-omakase 1.0.0 1.1.0
web-console 4.2.1 4.3.0
selenium-webdriver 4.28.0 4.41.0

Updates debug from 1.10.0 to 1.11.1

Release notes

Sourced from debug's releases.

v1.11.1

What's Changed

New Contributors

Full Changelog: ruby/debug@v1.11.0...v1.11.1

v1.11.0

What's Changed

New Contributors

... (truncated)

Commits
  • bad4d38 v1.11.1
  • 88d762c FileUtils is needed
  • 553373a omit on older version
  • c1c1c8e use Kernel.__callee__
  • 24f95d6 catch up 4.0.0 backtrace change
  • bc97d33 add a test for b path: ...
  • 1139d78 support b path: path_expr
  • 06342cd catch any exception on singletonclass
  • 2791573 fix(DAP): Return unverified breakpoints instead of unsuccessful response
  • 14c8a54 Update imemo_mask to match ruby's
  • Additional commits viewable in compare view

Updates faker from 3.5.1 to 3.6.1

Release notes

Sourced from faker's releases.

v3.6.1

It's Spring countdown in the Northern hemisphere 🌸

Security, performance improvements and bug fixes

Update development dependencies

New Contributors

Full Changelog: faker-ruby/faker@v3.6.0...v3.6.1

v3.6.0

v3.6.0 (2026-01-21)

First release of the new year!

This version comes with some performance improvements (speeds faker load time by 17%!) and removal of deprecated generators.

It also drops support to Ruby's EOL 3.0. The minimum supported Ruby version is 3.1.

Drops support for Ruby 3.0

Removes deprecated generators

  • Faker::Twitter and Faker::BossaNova have been removed. Please use the new generators Faker::X and Faker::Music::BossaNova and check the new docs for more details in faker-ruby/faker#3190

Improvements and bug fixes

... (truncated)

Changelog

Sourced from faker's changelog.

v3.6.1 (2026-03-04)

It's almost Spring time in the Northern hemisphere 🌸

Security, performance improvements and bug fixes

Update development dependencies

New Contributors

Full Changelog: faker-ruby/faker@v3.6.0...v3.6.1

v3.6.0 (2026-01-21)

First release of the new year!

This version comes with some performance improvements (speeds faker load time by 17%!) and removal of deprecated generators.

It also drops support to Ruby's EOL 3.0. The minimum supported Ruby version is 3.1.

Drops support for Ruby 3.0

Removes deprecated generators

  • Faker::Twitter and Faker::BossaNova have been removed. Please use the new generators Faker::X and Faker::Music::BossaNova and check the new docs for more details in faker-ruby/faker#3190

Improvements and bug fixes

... (truncated)

Commits

Updates brakeman from 7.0.2 to 8.0.4

Release notes

Sourced from brakeman's releases.

8.0.3

  • Add release age option for --ensure-latest (#1989)
  • Fix polymorphic_name SQLi false positive (Fredrico Franco)
  • Fix logger behavior when loading config files (#2009)
  • Handle application names with module prefixes (#2011)

8.0.2

  • Reline console control should use stderr
  • Fix logger cleanup based method (Imran Iqbal)

8.0.1

  • Fix for disappearing cursor when no warnings are reported

8.0.0

  • Complete revamp of scan progress output and logging
  • --skip-libs removed (#1839
  • --index-libs removed
  • Fix qualified constant lookup to respect module/class context (Mike Dalessio)
  • Fix singleton method prefixes (viralpraxis)
  • Faster file globbing for templates (Mikael Henriksson)
  • No longer produce weak dynamic render path warnings
  • Replace Erubis with Erubi (#1970)

7.1.2

This was released on December 25, 2025

  • Update ruby_parser to remove max version restriction (Chedli Bourguiba)
  • Increase minimum Ruby version to 3.2.0
  • Reduce SQL injection false positives from count (and other) calls (#1936)
  • Remove more XSS false positives related to Haml attribute builder
  • Update Minitest version to 6.0

7.1.1

  • Exclude directories before searching for files (#1925)
  • Check for unsafe SQL when two arguments are passed to AR methods (Patrick Brinich-Langlois)
  • Fix SQL injection check for calculate method (Rohan Sharma)
  • Check each side of or SQL arguments (#1935)
  • Consider Tempfile.create.path as safe input (Ali Ismayilov)
  • Fix false positive when calling with_content on ViewComponents (Peer Allan)
  • Add FilePath#to_path for Ruby 3.5 compatibility (S.H.)
  • Ignore attribute builder in Haml 6 (#1952)
  • Word wrap text report output in pager

7.1.0

  • Add Haml 6.x support (#1914, #1841, etc.)
  • Support render model shortcut (#959, #1940, etc.)
  • Add --ensure-no-obsolete-config-entries option (viralpraxis)
  • Update JUnit report for CircleCI (Philippe Bernery)
  • Improve ignored warnings layout in HTML report (Sebastien Savater)
  • Only load escape functionality from cgi library (Earlopain)

... (truncated)

Changelog

Sourced from brakeman's changelog.

8.0.4 - 2026-02-26

  • Load 'date' library for --ensure-latest

8.0.3 - 2026-02-26

  • Fix polymorphic_name SQLi false positive (Fredrico Franco)
  • Fix logger behavior when loading config files
  • Handle application names with module prefixes
  • Add release age option for --ensure-latest

8.0.2 - 2026-02-03

  • Reline console control should use stderr
  • Fix logger cleanup based method (Imran Iqbal)

8.0.1 - 2026-01-29

  • Make sure to reset the cursor even when exit code is 0

8.0.0 - 2026-01-29

  • No longer produce weak dynamic render path warnings
  • --skip-libs removed
  • --index-libs removed
  • Revamp of scan progress output and logging
  • Faster file globbing for templates (Mikael Henriksson)
  • Fix singleton method prefixes (viralpraxis)
  • Fix qualified constant lookup to respect module/class context (Mike Dalessio)
  • Replace Erubis with Erubi

7.1.2 - 2025-12-25

  • Update ruby_parser to remove version restriction (Chedli Bourguiba)
  • Raise minimum required Ruby to 3.2.0
  • Use Minitest 6.0
  • Reduce SQL injection false positives from count calls
  • Ignore more Haml attribute builder methods

7.1.1 - 2025-11-03

  • Fix false positive when calling with_content on ViewComponents (Peer Allan)
  • Word wrap text output in pager
  • Consider Tempfile.create.path as safe input (Ali Ismayilov)
  • Exclude directories before searching for files
  • Check each side of or SQL arguments
  • Ignore attribute builder in Haml 6
  • Add FilePath#to_path for Ruby 3.5 compatibility (S-H-GAMELINKS)
  • Fix SQL injection check for calculate method (Rohan Sharma)
  • Fix missing td in HTML report (John Hawthorn)

... (truncated)

Commits
  • 2e55d45 Bump to 8.0.4
  • d6c6c9a Merge pull request #2016 from presidentbeef/fix-ensure-latest-date
  • 56f9324 Load 'date' for --ensure-latest
  • 8b644a6 Bump to 8.0.3
  • 08e0a18 Update CHANGES
  • a29fe44 Merge pull request #2014 from FFederi/fix-polymorphic-name-false-positive
  • 61150cf Fix polymorphic_name false positive
  • f65d077 Merge pull request #2013 from presidentbeef/better_logger_loading_options
  • c5dcda5 Fix logger behavior when loading config files
  • c1d7ccc Merge pull request #2012 from presidentbeef/handle_application_config_better
  • Additional commits viewable in compare view

Updates rubocop-rails-omakase from 1.0.0 to 1.1.0

Release notes

Sourced from rubocop-rails-omakase's releases.

v1.1.0

What's Changed

New Contributors

Full Changelog: rails/rubocop-rails-omakase@v1.0.0...v1.1.0

Commits
  • 22f9a06 Bump version for release 1.1.0
  • 73a60c8 Add version constraint to rails and performance extesion (#30)
  • 08dfee1 migrate to plugin system (#28)
  • 352cb27 [Doc] Tweak the README (#27)
  • 9839dcd Replace DisabledByDefault: true with disabling each cop (#26)
  • 85c8acf [Doc] Update RuboCop notation to its official name (#23)
  • d5066bd Drop rubocop-minitest from gem dependency (#18)
  • 8e87a52 Remove Performance/UnfreezeString cop (#22)
  • 63a7608 Merge pull request #9 from ydah/remove-unnecessary-setting
  • 4e40cd3 Merge pull request #19 from koic/tweak_the_readme
  • Additional commits viewable in compare view

Updates web-console from 4.2.1 to 4.3.0

Release notes

Sourced from web-console's releases.

v4.3.0

What's Changed

Changelog

Sourced from web-console's changelog.

4.3.0

  • #342 Always permit IPv4-mapped IPv6 loopback addresses ([@​zunda]).
  • Fixed Rails 8.2.0.alpha support
  • Drop Rails 7.2 support
  • Drop Ruby 3.1 support
Commits
  • 90e3474 Release 4.3.0
  • bdbb391 Merge pull request #344 from fatkodima/fix-filter-proxies
  • 950462c Fix compatiblity with latest rails
  • c1f9252 Merge pull request #345 from fatkodima/fix-ci
  • 6bc7159 Fix CI
  • 859bc60 Merge pull request #342 from zunda/bind-on-ipv6
  • c66460a Always permit IPv4-mapped IPv6 loopback addresses
  • f3d437c Merge pull request #338 from luiscobot/patch-1
  • 5383121 replace close icon with ×
  • 9a5c089 Merge pull request #336 from sambostock/drop-active-model
  • Additional commits viewable in compare view

Updates selenium-webdriver from 4.28.0 to 4.41.0

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.41.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

... (truncated)

Changelog

Sourced from selenium-webdriver's changelog.

4.41.0 (2026-02-19)

  • Support CDP versions: v143, v144, v145
  • remove stored atoms these get generated by build (#16971)
  • output driver logs when SE_DEBUG is enabled (#16901)
  • Update lint configuration and fix rubocop offenses (#17008)
  • add missing unit tests (#17025)
  • [grid] Add session event API for server-side event bus integration (#17015)
  • Update dependencies (#17111)

4.40.0 (2026-01-18)

  • add synchronization and error handling for socket interactions (#16487)
  • mark low level bidi implementation as private api (#16475)
  • ensure driver process is always stopped (#15635)
  • create user-friendly method for enabling bidi (#14284)
  • Add force encoding to remove warnings caused by json 3.0 (#16728)
  • use SE_DEBUG to enable debugging (#16816)
  • ensure the grid is properly restarted in tests when there is a problem (#16842)
  • wait for grid to be ready when starting server (#16896)
  • check driver status endpoint rather than socket connection (#16877)
  • [build] update ruby gems with bazel (#16924)

4.39.0 (2025-12-06)

  • Add CDP for Chrome 143 and remove 140

4.38.0 (2025-10-24)

  • Add CDP for Chrome 142 and remove 139
  • Fix BiDi Network issue by removing nil values on network requests (#16442)
  • Remove cruft from old CI environment (#16473)
  • [bidi] remove deprecated classes for log inspector (#16474)

4.37.0 (2025-10-16)

  • Add CDP for Chrome 141 and remove 138
  • Update Chrome/Edge args for test environment (#16376)
  • Remove prism dependency (#16437)
  • Remove json version constraint (#16436)

4.36.0 (2025-09-18)

  • Add CDP for Chrome 140 and remove 137
  • [BiDi] Create browser module, added user context related methods (#15371)
  • BiDi get client windows (#16211)
  • Fix links to exception documentation on website (#16305)
  • Update unhandled_prompt_behavior capability to support hash syntax (#16289)

4.35.0 (2025-08-12)

... (truncated)

Commits
  • 9fc754f [build] Prepare for release of selenium-4.41.0 (#17098)
  • 02ec15f [rb] Update dependencies (#17111)
  • 832f16e [rb] enable fedcm unit tests through bazel
  • 0d3c440 [grid] Add session event API for server-side event bus integration (#17015)
  • 0e743fc [rb] add missing unit tests (#17025)
  • 65f9304 [rb] Update lint configuration and fix rubocop offenses (#17008)
  • a497c5b [rb] output driver logs when SE_DEBUG is enabled (#16901)
  • 2f9fc2b [build] replace //rb:lint-unsafe with a more generic //rb:rubocop
  • 9cb0bbc [build] create rake_tasks filegroup for linting
  • 8e5410d [build] Split Rakefile into per-language task files (#16979)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Mar 20, 2026
Copilot AI review requested due to automatic review settings March 20, 2026 15:35
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 20, 2026
@dependabot dependabot bot review requested due to automatic review settings March 20, 2026 15:35
@dependabot dependabot bot added the ruby Pull requests that update Ruby code label Mar 20, 2026
@dependabot
Bump the development-dependencies group across 1 directory with 6 upd…
287131c 
…ates

Bumps the development-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [debug](https://github.com/ruby/debug) | `1.10.0` | `1.11.1` |
| [faker](https://github.com/faker-ruby/faker) | `3.5.1` | `3.6.1` |
| [brakeman](https://github.com/presidentbeef/brakeman) | `7.0.2` | `8.0.4` |
| [rubocop-rails-omakase](https://github.com/rails/rubocop-rails-omakase) | `1.0.0` | `1.1.0` |
| [web-console](https://github.com/rails/web-console) | `4.2.1` | `4.3.0` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.28.0` | `4.41.0` |



Updates `debug` from 1.10.0 to 1.11.1
- [Release notes](https://github.com/ruby/debug/releases)
- [Commits](ruby/debug@v1.10.0...v1.11.1)

Updates `faker` from 3.5.1 to 3.6.1
- [Release notes](https://github.com/faker-ruby/faker/releases)
- [Changelog](https://github.com/faker-ruby/faker/blob/main/CHANGELOG.md)
- [Commits](faker-ruby/faker@v3.5.1...v3.6.1)

Updates `brakeman` from 7.0.2 to 8.0.4
- [Release notes](https://github.com/presidentbeef/brakeman/releases)
- [Changelog](https://github.com/presidentbeef/brakeman/blob/main/CHANGES.md)
- [Commits](presidentbeef/brakeman@v7.0.2...v8.0.4)

Updates `rubocop-rails-omakase` from 1.0.0 to 1.1.0
- [Release notes](https://github.com/rails/rubocop-rails-omakase/releases)
- [Commits](rails/rubocop-rails-omakase@v1.0.0...v1.1.0)

Updates `web-console` from 4.2.1 to 4.3.0
- [Release notes](https://github.com/rails/web-console/releases)
- [Changelog](https://github.com/rails/web-console/blob/main/CHANGELOG.markdown)
- [Commits](rails/web-console@v4.2.1...v4.3.0)

Updates `selenium-webdriver` from 4.28.0 to 4.41.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](SeleniumHQ/selenium@selenium-4.28.0...selenium-4.41.0)

---
updated-dependencies:
- dependency-name: debug
  dependency-version: 1.11.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: faker
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: brakeman
  dependency-version: 8.0.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: rubocop-rails-omakase
  dependency-version: 1.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: web-console
  dependency-version: 4.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: selenium-webdriver
  dependency-version: 4.41.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI review requested due to automatic review settings March 24, 2026 13:49
@dependabot dependabot bot force-pushed the dependabot/bundler/development-dependencies-aeb539ffa0 branch from 67ca536 to 287131c Compare March 24, 2026 13:49
@dependabot dependabot bot review requested due to automatic review settings March 24, 2026 13:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants