[dependabot]

Bumps the all-dependencies group with 30 updates in the / directory:

Package	From	To
pg	1.5.6	1.7.0
bootsnap	1.23.0	1.26.0
thruster	0.1.16	0.1.27
uglifier	4.2.0	4.2.1
jbuilder	2.12.0	2.15.1
redis	5.3.0	6.0.0
sdoc	2.6.1	2.6.5
autoprefixer-rails	10.4.16.0	10.6.1.0
redcarpet	3.6.0	3.6.1
web-console	4.2.1	4.3.0
spring	4.2.1	4.7.0
factory_bot_rails	6.4.3	6.5.1
foreman	0.88.1	0.90.0
rubocop	1.69.0	1.91.0
rubocop-performance	1.23.1	1.27.0
rubocop-rails	2.29.1	2.38.0
rubocop-rspec	3.4.0	3.10.2
debug	1.9.2	1.11.1
pry	0.14.2	0.16.0
pry-byebug	3.10.1	3.12.0
pry-doc	1.5.0	1.7.0
pry-stack_explorer	0.6.1	0.6.3
capybara-screenshot	1.0.26	1.0.27
coveralls_reborn	0.25.0	1.0.0
database_cleaner	2.0.2	2.1.0
launchy	3.0.1	3.1.1
rails_best_practices	1.23.2	1.23.4
rspec-rails	6.0.4	8.0.4
stimulus-rails	1.3.3	1.3.4
turbo-rails	2.0.11	2.0.23

Updates pg from 1.5.6 to 1.7.0

Changelog

Sourced from pg's changelog.

v1.7.0 [2026-10-02] Lars Kanis lars@greiz-reinsdorf.de

Added:

• Add PG::Connection#embed_params and keyword :typename for its parameter casting. #726 This allows to generate SQL strings with embedded parameters for easier debugging.
• Add PG::Connection#full_protocol_version which is new in PostgreSQL-18 #695
• Add PG::Result#each_tuple #675
• Add PG::TypeMap#query_param_encoders to retrieve encoders. #726
• Deduplicate result field name strings for better performance. #750

Removed:

• Remove compatibility to ruby < 3.1 and drops support of ruby-2.7 and ruby-3.0. #749
• Remove GLV unlocking at all functions which process data modifiable in a second thread. #721 This avoids possible premature garbage collection of query parameters and possible VM crash due to concurrent data manipulation.
• Remove :static_symbol result field names. #691
• Remove enforced rpath addition when no rpath is configured in rbconfig. #699

Fixes:

• Limit memory allocation on invalid input into PG::BinaryDecoder::Array. #743
• Free COPY buffers when decoders raise to avoid possible memory leak in get_copy_data. #742
• Prevent SQL injection in set_client_encoding. #741
• Add GC_GUARD to temporary ruby objects for conninfo string to avoid it's GC'ed prematurely. #739
• Remove option "quirks_mode" from JSON en/decoder to fix compat with json-3.0 gem. #737
• Respect calendar type of Ruby and PostgreSQL. #725
• Fix broken set_notice_(receiver|processor) callback after GC.compact. #734
• Disable DNS resolution in ruby when a service file is used, so that the priority of parameters is equal to libpq. #635
• Use RARRAY_LENINT to avoid possible overflow. #728
• Fix possible integer overflow at PG::BinaryEncoder::CopyRow and PG::TextEncoder::CopyRow. #714, #715
• Avoid possible integer overflow in query parameter encoding. #719
• Ensure conninfo is a valid C string before closing the connection to avoid a double free of PGconn. #709
• Raise on a too large input string to PG::TextEncoder::Bytea. #717
• Check PG::BinaryEncoder::CopyRow array input size instead of producing an invalid output.
• Remove accidentally copied "static" keyword from Copy and Record encoder. #711
• Avoid possibility to replace typemap while being used in Copy and Record encoders and decoders. #707
• Add GC_GUARD's for encoding converted strings sent to the server. #705
• Fix incomplete transaction commit when thread is shutdown ungracefully. #704
• Assign VALUE after registration per rb_gc_register_address() #703
• Update dependencies for binary gems to PostgreSQL-18.6, OpenSSL-3.6.5, krb5-1.22.2 #752

v1.6.3 [2025-12-29] Lars Kanis lars@greiz-reinsdorf.de

Added:

• Add binary gems for ruby-4.0, now providing ruby-3.0 to 4.0. #682
• Update fat binary gem to OpenSSL-3.6.0 and PostgreSQL-18.1.
• Improve documentation of PG::Result and README. #676

... (truncated)

Commits

• fcf40c5 Add new gem signing certificate
• d41e07a Merge pull request #753 from larskanis/rm-pgsql-10
• 8e1ee8f Remove some conditions for PostgreSQL-10
• 050c56d Fix typo in CHANGELOG and add version note
• 2c4934e Bump VERSION to 1.7.0
• f644ba2 Update release notes once more
• b16542d Merge pull request #752 from larskanis/upd-binaries
• 66b27c6 Update dependencies for binary gems to
• 6a07394 Add CHANGELOG entry for pg-1.7.0
• 5390356 Merge pull request #749 from larskanis/minruby-3.1
• Additional commits viewable in compare view

Updates bootsnap from 1.23.0 to 1.26.0

Release notes

Sourced from bootsnap's releases.

v1.26.0

What's Changed

• Handle top level Coverage constant being defined, but without it being the true stdlib coverage module.
• Fix bootsnap precompile that could generate a corrupted cache entry if an already cached YAML file was modified without changing its size.
• Workaround a potential Ruby SEGV if Bootsnap.instrumentation raised an error.

v1.25.0

What's Changed

• Improve YAML parsing cache to more efficiently handle Time, Date and DateTime.

• Don't invalidate the compile cache when YJIT is toggled. YJIT is a runtime JIT and doesn't change the serialized instruction sequences that are cached, but enabling it (via --yjit, RUBYOPT, or RubyVM::YJIT.enable) adds a +YJIT marker to RUBY_DESCRIPTION ( +YJIT <token> on YJIT_SUPPORT builds), which is part of the cache key. This previously discarded the entire compile cache whenever YJIT was enabled at runtime but not at precompile time (or vice versa). The marker is now stripped before hashing.

• Fix CompileCache::Native.fetch and .precompile reading a non-String path argument (e.g. a Pathname) with RSTRING_PTR. Regression from 1.24.0.

Full Changelog: rails/bootsnap@v1.24.6...v1.25.0

v1.24.6

What's Changed

• Fix detection of Ruby bug #22023 on some patch versions of Ruby 3.4, and properly apply the workaround.

Full Changelog: rails/bootsnap@v1.24.5...v1.24.6

v1.24.5

What's Changed

• No longer load the config file by default when setup is done manually. This is so cli applications like homebrew don't mistakenly load another app's boostnap config.

Full Changelog: rails/bootsnap@v1.24.4...v1.24.5

v1.24.4

What's Changed

• Fix several compatibility issues with Ruby 4.0.4, particularly the should not compile with coverage error. See #547.
• Fix Bootsnap.enable_frozen_string_literal to work even when coverage is enabled. Unfortunately only possible on Ruby 4.0.4+. On older rubies if coverage is enabled a warning will be issued and the feature won't work.
• Reduced cache files header size from 64 to 32 bytes, and got rid of the random padding element.
• Avoid leaking a private method in Object when testing for Parse.y bugs.

Full Changelog: rails/bootsnap@v1.24.3...v1.24.4

... (truncated)

Changelog

Sourced from bootsnap's changelog.

1.26.0

• Handle top level Coverage constant being defined, but without it being the true stdlib coverage module.
• Fix bootsnap precompile that could generate a corrupted cache entry if an already cached YAML file was modified without changing its size.
• Workaround a potential Ruby SEGV if Bootsnap.instrumentation raised an error.

1.25.0

• Improve YAML parsing cache to more efficiently handle Time, Date and DateTime.

• Don't invalidate the compile cache when YJIT is toggled. YJIT is a runtime JIT and doesn't change the serialized instruction sequences that are cached, but enabling it (via --yjit, RUBYOPT, or RubyVM::YJIT.enable) adds a +YJIT marker to RUBY_DESCRIPTION ( +YJIT <token> on YJIT_SUPPORT builds), which is part of the cache key. This previously discarded the entire compile cache whenever YJIT was enabled at runtime but not at precompile time (or vice versa). The marker is now stripped before hashing.

• Fix CompileCache::Native.fetch and .precompile reading a non-String path argument (e.g. a Pathname) with RSTRING_PTR. Regression from 1.24.0.

1.24.6

• Fix detection of Ruby bug #22023 on some patch versions of Ruby 3.4, and properly apply the workaround.

1.24.5

• No longer load the config file by default when setup is done manually. This is so cli applications like homebrew don't mistakenly load another app's boostnap config.

1.24.4

• Fix several compatibility issues with Ruby 4.0.4, particularly the should not compile with coverage error. See #547.
• Fix Bootsnap.enable_frozen_string_literal to work even when coverage is enabled. Unfortunately only possible on Ruby 4.0.4+. On older rubies if coverage is enabled a warning will be issued and the feature won't work.
• Reduced cache files header size from 64 to 32 bytes, and got rid of the random padding element.
• Avoid leaking a private method in Object when testing for Parse.y bugs.

1.24.3

• Fix the 1.24.2 workaround to parse Ruby files with UTF-8 even when the LANG environment variable is unset or set to C.

1.24.2

• Workaround two Ruby bugs in RubyVM::InstructionSequence.compile_file, that were causing files to be loaded with the old Ruby parser instead of Prism, causing issues with some pattern matching syntax. Ref: https://bugs.ruby-lang.org/issues/22023

1.24.1

... (truncated)

Commits

• 67a7290 Release 1.26.0
• 1881b9a Merge pull request #573 from byroot/same-size-miscompilation
• 605bbeb Fix precompilation when regenerating an existing cache entry of the same size
• 5fd59da Merge pull request #569 from OskarEichler/codex/accept-tempfile-fd-zero
• 70550c7 Merge pull request #568 from OskarEichler/codex/remove-umask-debug-output
• 8aed2ed Accept tempfile descriptor zero
• f7457ea Remove umask debug output
• 9ee62a2 Merge pull request #567 from byroot/rename-mod
• 7c8178e Handle write(2) being interrupted.
• 3e755ca atomic_write_cache_file: stop leaking FD on error
• Additional commits viewable in compare view

Updates thruster from 0.1.16 to 0.1.27

Changelog

Sourced from thruster's changelog.

v0.1.27 / 2026-09-28

• Update dependencies (#154)
• Bump golang.org/x/crypto to v0.56.0 (#152)
• Build with Go 1.27.1, update dependencies, add make check (#150)

v0.1.26 / 2026-08-24

• Add X-Request-ID header to requests and logs (#148)
• Build with Go 1.27.0 (#147)
• Build with Go 1.26.6 (#145)

v0.1.25 / 2026-08-11

• Bypass all uncacheable requests (#142)

v0.1.24 / 2026-08-11

• Use struct types as cache keys

v0.1.23 / 2026-07-16

• Build with Go 1.26.5 (#140)

v0.1.22 / 2026-06-29

• Build with Go 1.26.4
• Exclude image types from compression (#137)

v0.1.21 / 2026-05-17

• Build with Go 1.26.3

v0.1.20 / 2026-03-25

• Only redirect HTTP->HTTPS for policy-allowed hosts

v0.1.19 / 2026-03-06

• Build with Go 1.26.1

v0.1.18 / 2026-02-02

• Return correct exit code when terminated with signal (#110)
• Build with Go 1.25.6

v0.1.17 / 2025-12-16

• Mitigate BREACH attacks with random jitter and optional compression guard (#102)

Commits

• 669643f Merge commit from fork
• 38d3721 Merge pull request #155 from erikthoreson24/version-0.1.27
• 0992970 Bump version
• 72796d7 Merge pull request #154 from basecamp/deps
• 0864e8a Use http.Transport for h2c test client
• 80e89ee Update dependencies
• 22a9978 Merge pull request #152 from erikthoreson24/fix/bump-x-crypto-0.56.0
• b186518 Bump golang.org/x/crypto to v0.56.0
• 3ef8516 Merge pull request #150 from basecamp/go-1.27.1
• fa31b96 Add make check to run go vet and govulncheck
• Additional commits viewable in compare view

Updates uglifier from 4.2.0 to 4.2.1

Changelog

Sourced from uglifier's changelog.

4.2.1 (22 September 2024)

• fix Ruby 3.4 compatiblity, drop Ruby 2.3 and older support (#195)
• fix typos (#194)

Commits

• 959b740 Bump version to 4.2.1
• 5a6a6f4 Update changelog
• f7ee1a2 Merge branch 'drop-base64'
• b808f14 Merge pull request #194 from kianmeng/fix-typos
• 46b75e4 Bump required ruby version to 2.4
• 81fbc31 Merge pull request #196 from lautis/ci-ruby-versions
• 030a33e Use released version of alaska runtime to run tests
• 15d317d Update build matrix
• 89c6136 Drop base64 gem from dependency
• 0947f7c Merge pull request #191 from SimenB/master-1
• Additional commits viewable in compare view

Updates jbuilder from 2.12.0 to 2.15.1

Release notes

Sourced from jbuilder's releases.

v2.15.1

What's Changed

• Fix partial for Active Model when extra locals are passed in by @​rafaelfranca in rails/jbuilder#617

New Contributors

• @​rafaelfranca made their first contribution in rails/jbuilder#617

Full Changelog: rails/jbuilder@v2.15.0...v2.15.1

v2.15.0

What's Changed

• Optimize KeyFormatter on cache hits by @​moberegger in rails/jbuilder#607
• Make method_missing private by @​alexceder in rails/jbuilder#614
• Optimize array! and set! by @​moberegger in rails/jbuilder#604
• Use :unprocessable_content for scaffolds with Rack 3.1 or higher by @​taketo1113 in rails/jbuilder#603
• Optimize _map_collection by @​moberegger in rails/jbuilder#612
• fix: Preserve locals when rendering inline partial for object by @​moberegger in rails/jbuilder#613

New Contributors

• @​mayur-kambariya made their first contribution in rails/jbuilder#609
• @​alexceder made their first contribution in rails/jbuilder#614
• @​taketo1113 made their first contribution in rails/jbuilder#603

Full Changelog: rails/jbuilder@v2.14.1...v2.15.0

v2.14.1

What's Changed

• Ensure that Jbuilder.encode properly forwards arguments to .new by @​flavorjones in rails/jbuilder#601

New Contributors

• @​flavorjones made their first contribution in rails/jbuilder#601

Full Changelog: rails/jbuilder@v2.14.0...v2.14.1

v2.14.0

What's Changed

• Drop support to Ruby < 3.0 and Rails < 7.0
• Test against Rails 8 and fix Rails 7 logger dependency by @​excid3 in rails/jbuilder#582
• Add status: :see_other to update action by @​excid3 in rails/jbuilder#583
• Force close final statement in templates by @​ienders in rails/jbuilder#578
• Optimize _is_collection? method by @​moberegger in rails/jbuilder#590
• Add #frozen_string_literal: true to all files by @​moberegger in rails/jbuilder#599
• Optimize _key to prevent string allocation when formatting Symbols by @​moberegger in rails/jbuilder#593
• Optimize key formatter by @​moberegger in rails/jbuilder#597
• Optimize internal extract! calls to save on memory allocation by @​moberegger in rails/jbuilder#598
• Fix regression in API controllers with view_cache_dependencies helper by @​excid3 in rails/jbuilder#575
• Optimize method_missing via alias_method by @​moberegger in rails/jbuilder#600
• Cleanup project for Rails 7+ support by @​moberegger in rails/jbuilder#594
• Fix warnings and prevent Jbuilder::VERSION constant from being obliterated by @​pixeltrix in rails/jbuilder#574
• Optimize memory allocation when rendering partials by @​moberegger in rails/jbuilder#591

... (truncated)

Commits

• 31eb6e9 Prepare for 2.15.1
• 154b0fe Merge pull request #617 from rails/rm-fix-616
• d3e763b Fix partial for Active Model when extra locals are passed in
• 018083d Prepare for 2.15.0
• 72cf067 Update devcontainer image to Ruby 4.0.4 and add devcontainer-lock.json
• d35a962 Merge pull request #615 from taketo1113/ci-rails8.1-ruby4.0
• cc42e7e CI: Add Rails 8.1 & Ruby 4.0 to CI Matrix
• cd7482e Merge pull request #613 from affinity/moberegger/fix-inline-partial-locals-be
• 58283a0 Merge pull request #612 from affinity/moberegger/optimize-_map_collection
• 09ca3e1 Merge pull request #603 from taketo1113/update-rack-unprocessable_content
• Additional commits viewable in compare view

Updates redis from 5.3.0 to 6.0.0

Release notes

Sourced from redis's releases.

6.0.0

This is a major release of the redis and redis-clustering gems. The headline change is that the client now speaks RESP3 by default, alongside first-class support for the Redis Query Engine and the JSON module, a batch of new Redis 6.2–8.10 commands, and experimental support for the Redis 8.10 HIMPORT bulk-ingestion command family.

Command return values are unchanged from 5.x with one exception (GEO coordinates, see below), so for most applications this upgrade is a Gemfile bump.

Requires Ruby 3.2+ and works with Redis server 6.0+ (older servers are handled via automatic RESP2 fallback).

RESP3 by default

RESP3's richer wire types (native maps, doubles, booleans) let the parser deliver replies already in their final Ruby shape. Under RESP2, structured replies arrive as flat arrays of bulk strings that the client must re-shape in Ruby — e.g. HGETALL builds a Hash from a flat [field, value, ...] array, and sorted-set scores are converted String → Float pair by pair. Under RESP3 that re-shaping pass disappears.

Measured with bench/resp_comparison.rb (redis-rb 6.0.0, Ruby 3.4.1, Redis 8.8, localhost, 100-element replies):

Pure-Ruby driver (default):

Workload	RESP2 → RESP3 RPS (8 threads)	RESP2 → RESP3 µs CPU/op
GET (50B string)	4251 → 4436 (+4%)	23.4 → 22.9 (~0)
HGETALL (100 fields)	2361 → 2560 (+8%)	164 → 129 (−22%)
ZRANGE WITHSCORES (100)	2597 → 2459 (−5%)	130 → 147 (~0, noise)
XRANGE (100 entries)	1544 → 1570 (+2%)	346 → 328 (~0)

hiredis driver (C parser):

Workload	RESP2 → RESP3 RPS (8 threads)	RESP2 → RESP3 µs CPU/op
GET	12756 → 12620 (~0)	69 → 70 (~0)
HGETALL	10175 → 10592 (+4%)	97 → 89 (−8%; 1 thread: 88 → 63, −28%)
ZRANGE WITHSCORES	10036 → 11629 (+16%)	108 → 85 (−22%)
XRANGE	7053 → 6999 (~0)	152 → 152 (~0)

In short: hash reads use ~10–25% less client CPU per call on both drivers; sorted-set reads with scores gain up to 16% throughput and ~20% less CPU with hiredis (unchanged on the pure-Ruby driver, where parsing RESP3 doubles costs roughly what the re-shaping pass did); simple string and stream commands are unaffected — their reply shapes are the same in both protocols. RESP3 pairs best with the hiredis driver, which moves all reply construction out of Ruby and into C.

Methodology note: figures are per-reply CPU measurements against a localhost server; wall-clock throughput gains in production depend on how network-bound your workload is.

Beyond performance, RESP3 also lays the groundwork for push-based features — such as server-assisted client-side caching (CLIENT TRACKING invalidation events) — in future 6.x releases, without another protocol migration.

🔥 Breaking changes

• RESP3 by default (see above); pass protocol: 2 to keep RESP2. The only return-value change is GEO coordinates as Float. (#1351)
• Requires Ruby 3.2+ (previously 2.7/2.6). Bundler will keep older Rubies on the 5.4.x series automatically. (#1353, #1365)

Cluster gem (redis-clustering) only

• Commands are now routed by their server-declared command tips (redis-cluster-client 0.16.6+): SLOWLOG GET returns one entry list per master; SLOWLOG LEN and LATENCY RESET return the sum across all masters; FUNCTION LOAD/DELETE/FLUSH/RESTORE now execute on all masters (previously a single arbitrary node — this also fixes FCALL failing for keys on other masters); commands with keys in subcommands (e.g. XINFO STREAM) route to the key's slot owner.

🚀 New features

• Redis Query Engine (RediSearch, FT.*): ft_create, ft_alter, ft_dropindex, ft_info, ft_search, ft_aggregate, vector and hybrid search, suggestions, dictionaries, synonyms, aliases, and spellcheck. Not supported by Redis::Distributed. (#1356, #1359, #1360, #1361)
• JSON module: json_set, json_get, json_mset, json_mget, json_del, json_forget, json_clear, json_merge, json_arr*, json_obj*, json_str*, json_numincrby, json_toggle, json_type, json_debug_memory. (#1346, #1347, #1348, #1349)

... (truncated)

Changelog

Sourced from redis's changelog.

6.0.0

Breaking changes

• Use RESP3 (HELLO 3) by default; pass protocol: 2 to keep RESP2. GEOPOS and GEOSEARCH/GEORADIUS with WITHCOORD now return coordinates as Float instead of String. See https://github.com/redis/redis-rb/blob/master/specs/migration-resp3.md. (#1351)
• Require Ruby 3.2+. (#1353, #1365)

New features

• Add support for the Redis Query Engine (RediSearch, FT.*): ft_create, ft_alter, ft_dropindex, ft_info, ft_search, ft_aggregate, vector and hybrid search, suggestions, dictionaries, synonyms, aliases, and spellcheck. Not supported by Redis::Distributed. (#1356, #1359, #1360, #1361)
• Add support for the JSON module: json_set, json_get, json_mset, json_mget, json_del, json_forget, json_clear, json_merge, json_arr*, json_obj*, json_str*, json_numincrby, json_toggle, json_type, json_debug_memory. (#1346, #1347, #1348, #1349)
• Add keyspace notification support: channel builders and a binary-safe parser for the classic __keyspace@*/__keyevent@* channels and the Redis 8.8 subkey notification families (Redis::KeyspaceNotifications), plus a manager (Redis#keyspace_notifications) that owns a dedicated connection, dispatches typed Notification objects to handlers, and automatically re-subscribes after connection loss (on_reconnect signals the lossy gap). Enabling notify-keyspace-events on the server remains the operator's responsibility. Not supported by Redis::Distributed. See specs/keyspace-notifications/user-guide.md.
• Add lmovem and blmovem (Redis 8.10). (#1363)
• Add sunioncard and sdiffcard (Redis 8.10). (#1357)
• xread and xreadgroup now accept max_count: and max_size: (Redis 8.10). (#1358)
• Add hexpire, hpexpire, httl and hpttl (Redis 7.4). (#1324, #1325, #1331)
• Add hexpireat, hpexpireat, hexpiretime, hpexpiretime and hpersist; hexpire and hpexpire now accept the nx:/xx:/gt:/lt: condition options (Redis 7.4). All are available on Redis::Distributed. (#1374)
• hscan and hscan_each now accept novalues: true (Redis 7.4). (#1327)
• Add geosearch and geosearchstore (Redis 6.2); geo commands are now available on Redis::Distributed. (#1342)
• geoadd now accepts nx:, xx: and ch:; geo radius searches accept count_any:; xadd accepts limit: (Redis 6.2). (#1345)
• Redis::Distributed now implements hscan, hscan_each and hstrlen. (#1319)
• Identify the client to the server via CLIENT SETINFO (lib-name=redis-rb, lib-ver=<version>). Extend the reported name with driver_info:, or disable with driver_info: false. See the README "Client identification" section. (#1369)

Experimental

• Add himport_prepare, himport_set, himport_discard and himport_discard_all (Redis 8.10 HIMPORT). Lost fieldsets are re-prepared and retried automatically; disable with himport_auto_prepare: false. The API may change in a future minor release. See the README "Bulk hash ingestion (HIMPORT)" section. (#1364)

Bug fixes

... (truncated)

Commits

• 0fa108a Fixed merge conflicts
• 4dca97d Sync with master
• 32d781b Identify redis-rb to the server via CLIENT SETINFO (#1369)
• e5d6b0a Testing with 8.10 GA (#1368)
• 19f8a63 Testing with 8.10 GA
• 60c4aad Prepare 6.0.0 release (#1366)
• 89407d4 Fixed unstable test
• eba7fdc Fixed rubocop
• 56fc0b9 Prepare 6.0.0 release
• dd2d158 Added support for Ruby 3.2+ (#1365)
• Additional commits viewable in compare view

Updates sdoc from 2.6.1 to 2.6.5

Changelog

Sourced from sdoc's changelog.

Main (3.0.0.alpha)

• #198 Bump version to 3.0.0.alpha @​zzak
• #197 Remove sdoc-merge and sdoc template @​zzak
• #195 Replace turbolinks with turbo v7.3.0 @​zzak
• #200 Add canonical url link to all pages @​zzak
• #222 Add NameList for building a static file of classes and methods @​zzak
• #206 Move file links to the footer @​p8
• #237 Hide scrollbar for unscrollable code snippets @​jonathanhefner
• #239 Replace highlight.js with Rouge gem @​jonathanhefner
• #242 Use Rouge to highlight method source code @​jonathanhefner
• #243 Enable horizontal scrollbar for method source code @​jonathanhefner
• #251 Move alias listing closer to method name @​jonathanhefner
• #252 Replace source code toggler JavaScript with <details> @​jonathanhefner
• #253 Version links to Rails guides @​jonathanhefner
• #254 Unlink unintentional autolinked code ref links @​jonathanhefner
• #255 Style unstyled code ref links @​jonathanhefner
• #260 Include site title in page titles @​jonathanhefner
• #261 Include project name and version in og:title @​jonathanhefner
• #262 Refine meta description @​jonathanhefner
• #265 Add required Open Graph meta tags @​jonathanhefner
• #266 Add article:modified_time meta tag @​jonathanhefner
• #268 Add initial dark mode support @​p8
• #279 Redesign "Appears in" file list @​jonathanhefner
• #280 Redesign banner and mobile menu bar @​jonathanhefner
• #283, #336 Rework typography @​jonathanhefner
• #286 Render breadcrumb links for module's parents @​jonathanhefner
• #287 Generate uniform <h1> headings for all modules @​jonathanhefner
• #291 Remove keyboard shortcuts that use meta keys @​jonathanhefner
• #294 Remove version badge @​jonathanhefner
• #298 Rewrite search @​jonathanhefner
• #315 Replace navigation tree @​jonathanhefner
• #319 Rework method spotlight effect @​jonathanhefner
• #320 Remove jQuery @​jonathanhefner
• #322 Use type="search" for search input @​jonathanhefner
• #323 Update favicon @​jonathanhefner
• #345 Version explicit links to api.rubyonrails.org @​jonathanhefner
• #356 Redesign "Constants" section @​jonathanhefner
• #357 Support permalinking constants @​jonathanhefner
• #358 Add constants to search index @​jonathanhefner
• #370 Add attributes to search index @​earlopain

Commits

• See full diff in compare view

Updates autoprefixer-rails from 10.4.16.0 to 10.6.1.0

Changelog

Sourced from autoprefixer-rails's changelog.

10.6.1.0

• Added initial-letter support (by @​thomasmattheussen).
• Added mask-position-x and mask-position-y support (by @​toporek).
• Fixed grid gap set with the row-gap and column-gap longhands (by dualfroz).
• Fixed producing wrong old -webkit- gradients (by @​ryanchou1994).
• Fixed resolution media query parsing performance (by @​NotAFlightRisk).
• Fixed prefixed rule duplication (by @​xianjianlf2).
• Fixed brackets and gradient parser (by @​alanturing881).
• Moved -webkit-fill-available before -moz-available, so Firefox will use -webkit- version which is closer to stretch.
• Fixed grid-area span reset for overriding areas (by @​puneetdixit200).
• Fixed broken gradients on CSS Custom Properties (by @​serger777).
• Made Autoprefixer a little faster (by @​Cherry).
• Fixed stretch prefixes on new Can I Use database.

10.4.21.0

• Fixed old -moz- prefix for :placeholder-shown (by @​Marukome0743).
• Fixed fit-content prefix for Firefox.

10.4.19.0

• Removed end value has mixed support, consider using flex-end warning since end/start now have good support.
• Fixed removing -webkit-box-orient on -webkit-line-clamp (@​Goodwine).
• Fixed user-select: contain prefixes.

Commits

• 40466c3 Release 10.6.1.0
• 792f856 Upgrade postcss to 8.5
• 0976a36 Update autoprefixer to 10.6.1
• 9cb8f79 Fix MiniRacer tests fail
• 01f8d15 Release 10.4.21.0
• 922119d Update dependencies
• 9f26322 Update autoprefixer to 10.4.21
• e363c12 Add funding_uri to gemspec
• 987430a Release 10.4.19.0
• 5b36bc6 build: upgrade dependencies
• Additional commits viewable in compare view

Updates redcarpet from 3.6.0 to 3.6.1

Release notes

Sourced from redcarpet's releases.

Redcarpet v3.6.1

This release only migrates Markdown objects to the TypedData API, preventing deprecation warnings on newer versions of Ruby.

Changelog

Sourced from redcarpet's changelog.

Version 3.6.1

• Migrate Markdown objects to the TypedData API.

  Refs #785.

  Jean Boussier

Commits

• 34c138e Redcarpet v3.6.1
• 3f4f9df Add a changelog entry for #785
• 170e876 Merge pull request #742 from dchacke/patch-1
• ffd2579 Update the CI badge now that we are using Actions
• 71ed87f Merge pull request #785 from casperisfine/typed-data
• 14d3c28 Move CI to GitHub Actions
• 9dcf966 Convert Markdown objects to TypedData API
• 3816bfe List all tags that smarty pants skips
• See full diff in compare view

Updates web-console from 4.2.1 to 4.3.0

Release notes

Sourced from web-console's releases.

v4.3.0

What's Changed

• Drop unused dependency on activemodel by @​sambostock in rails/web-console#336
• Use × as close button instead of letter X by @​luiscobot in

[github-actions]

🚀 Quick Review App Commands

Welcome! Here are the commands you can use in this PR:
They require the repository to have cpflow review apps configured, including the CPLN_TOKEN_STAGING secret.

+review-app-deploy

Deploy your PR branch for testing.

+review-app-delete

Remove the review app when done.

+review-app-help

Show detailed instructions, environment setup, and configuration options.

Comment +review-app-help for full setup details.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: c1b710ab-a569-447b-a394-afd85f12917f

---

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

No description provided.

[github-actions]

No description provided.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-11T09:01:28.106474Z	1229076	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 87c9627111

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Resolve the newly enabled Rails status cop

With AllCops.NewCops: enable, upgrading rubocop-rails to 2.38 activates Rails/HttpStatusNameConsistency, added in 2.34. The lint job will therefore flag both existing :unprocessable_entity usages in app/controllers/comments_controller.rb:42 and :56, causing bundle exec rake lint to fail on every run. Migrate those statuses to :unprocessable_content or explicitly configure the new cop as part of this upgrade.

AGENTS.md reference: AGENTS.md:L18-L19

Useful? React with 👍 / 👎.

[github-actions]

No description provided.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 9982c9d7f7

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Rename the fixture path setting for RSpec Rails 8

RSpec Rails 8 replaces the fixture_path configuration setting with fixture_paths (8.0.4 configuration), but spec/rails_helper.rb:49 still calls config.fixture_path = .... Consequently every RSpec invocation raises NoMethodError while loading the helper, before any examples run; update that call to assign an array to config.fixture_paths as part of this major-version upgrade.

Useful? React with 👍 / 👎.

[github-actions]

No description provided.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 3098d6b37d

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Rename the boolean helper for the enabled predicate cop

With AllCops.NewCops: enable, RuboCop 1.91 enables Naming/PredicateMethod, which was added after 1.69 and requires boolean-returning methods to end in ? (RuboCop documentation). lib/tasks/linters.rake:14-19 defines to_bool with exclusively boolean return paths, so the Lint CI's bundle exec rake lint will report this method and remain red; rename it and its call site or explicitly configure the cop.

AGENTS.md reference: AGENTS.md:L18-L19

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Remove or allow the RSpec helper output

With AllCops.NewCops: enable, rubocop-rspec 3.10.2 enables the pending RSpec/Output cop introduced in 3.9, which checks all files under spec/**/* for calls such as puts (RuboCop RSpec documentation). The three puts calls in spec/rails_helper.rb:81-83 are therefore offenses, so the Lint CI still fails even after the previously reported Rails status offenses are fixed; remove those messages or configure an intentional exclusion.

AGENTS.md reference: AGENTS.md:L18-L19

Useful? React with 👍 / 👎.

[github-actions]

No description provided.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 1229076ac4

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Update response parsing for the expanded Rails cop

With AllCops.NewCops: enable, rubocop-rails 2.35 expanded Rails/ResponseParsedBody to flag Nokogiri::HTML(response.body) (cop documentation); spec/requests/server_render_check_spec.rb still uses that form on lines 8 and 23, so the repository's RuboCop check fails after this upgrade. Replace both calls with response.parsed_body or explicitly exclude them.

AGENTS.md reference: AGENTS.md:L18-L19

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Update the newly detected strong parameter access

The upgraded Rails/StrongParametersExpect now detects parameters passed to raising finder methods such as Model.find(params[:id]) (cop documentation). CommentsController#set_comment still calls Comment.find(params[:id]) on line 110, so the configured RuboCop run now reports another offense; use params.expect(:id) there or configure the cop intentionally.

AGENTS.md reference: AGENTS.md:L18-L19

Useful? React with 👍 / 👎.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.

[github-actions]

No description provided.

[github-actions]

✅ Review App Deleted

Review app for PR #850 is deleted

🎮 Control Plane Console
📋 View Workflow Logs