From ed69fe0e54ddbf85b3918418fbdf0453eb877798 Mon Sep 17 00:00:00 2001 From: dadachi Date: Wed, 19 Aug 2026 14:55:40 +0900 Subject: [PATCH] Update gems and fix failing dependabot CI check Runs a full `bundle update`, which supersedes dependabot PR #95 and resolves its failing `scan_ruby` job. That job failed because `bin/brakeman` passes `--ensure-latest`, so brakeman exits 5 whenever the locked version trails rubygems. Brakeman 8.0.6 shipped after dependabot opened #95, which still locked 8.0.5. This bump moves brakeman to 8.0.6 and the check passes again. Notable updates beyond the dependabot group: - devise 4.9.4 -> 5.0.4 (major, pulled in by devise_token_auth 1.3.0) - devise_token_auth 1.2.6 -> 1.3.0 - madmin 2.3.3 -> 2.6.0 - solid_queue 1.5.0 -> 1.6.0 - resend 1.6.0 -> 1.9.0 - brakeman 8.0.5 -> 8.0.6 - rubocop 1.88.2 -> 1.89.0 Verified the full `bin/ci` step list locally: rubocop, erb_lint, bundler-audit, brakeman, `bin/rails test` (438 runs, 916 assertions, 0 failures), and `db:seed_fu`. App boots on devise 5.0.4 with no initializer changes needed and no pending migrations. Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_01SLqBocYtUNzw7H3tNWAtjF --- Gemfile.lock | 67 ++++++++++++++++++++++++++-------------------------- 1 file changed, 33 insertions(+), 34 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index 6edd932..9d7d7fa 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -103,9 +103,9 @@ GEM smart_properties bigdecimal (4.1.2) bindex (0.8.1) - bootsnap (1.24.6) - msgpack (~> 1.2) - brakeman (8.0.5) + bootsnap (1.25.0) + msgpack (~> 1.5) + brakeman (8.0.6) racc builder (3.3.0) bundler-audit (0.9.3) @@ -138,16 +138,16 @@ GEM irb (~> 1.10) reline (>= 0.3.8) deep_merge (1.2.2) - devise (4.9.4) + devise (5.0.4) bcrypt (~> 3.0) orm_adapter (~> 0.1) - railties (>= 4.1.0) + railties (>= 7.0) responders warden (~> 1.2.3) - devise_token_auth (1.2.6) + devise_token_auth (1.3.0) bcrypt (~> 3.0) - devise (> 3.5.2, < 5) - rails (>= 4.2.0, < 8.2) + devise (> 3.5.2, < 6) + rails (>= 4.2.0, < 8.3) drb (2.2.3) erb (6.0.7) erb_lint (0.9.0) @@ -181,7 +181,7 @@ GEM base64 (~> 0.2) faraday (>= 1.0, < 3.a) google-logging-utils (0.2.0) - googleauth (1.17.1) + googleauth (1.17.3) faraday (>= 1.0, < 3.a) google-cloud-env (~> 2.2) google-logging-utils (~> 0.1) @@ -195,17 +195,17 @@ GEM csv mini_mime (>= 1.0.0) multi_xml (>= 0.5.2) - httpx (1.8.0) + httpx (1.8.1) http-2 (>= 1.2.0) i18n (1.15.2) concurrent-ruby (~> 1.0) - image_processing (2.0.2) + image_processing (2.0.3) importmap-rails (2.2.3) actionpack (>= 6.0.0) activesupport (>= 6.0.0) railties (>= 6.0.0) iniparse (1.5.0) - io-console (0.8.2) + io-console (0.9.2) irb (1.18.0) pp (>= 0.6.0) prism (>= 1.3.0) @@ -222,10 +222,9 @@ GEM loofah (2.25.2) crass (~> 1.0.2) nokogiri (>= 1.12.0) - madmin (2.3.3) + madmin (2.6.0) importmap-rails pagy (>= 3.5) - propshaft rails (>= 7.0.0) stimulus-rails turbo-rails @@ -257,7 +256,7 @@ GEM railties (>= 7.1) stimulus-rails turbo-rails - msgpack (1.8.3) + msgpack (1.8.4) multi_xml (0.9.1) bigdecimal (>= 3.1, < 5) net-http (0.9.1) @@ -290,10 +289,10 @@ GEM orm_adapter (0.5.0) os (1.1.4) ostruct (0.6.3) - overcommit (0.71.0) + overcommit (0.72.0) childprocess (>= 0.6.3, < 6) iniparse (~> 1.4) - rexml (>= 3.3.9) + rexml (>= 3.4.2) pagy (43.6.1) json uri @@ -323,7 +322,7 @@ GEM activesupport (>= 3.0.0) raabro (1.5.0) racc (1.8.1) - rack (3.2.6) + rack (3.2.7) rack-attack (6.8.0) rack (>= 1.0, < 4) rack-session (2.1.2) @@ -365,7 +364,7 @@ GEM zeitwerk (~> 2.6) rainbow (3.1.1) rake (13.4.2) - rbs (4.1.2) + rbs (4.1.3) logger prism (>= 1.6.0) tsort @@ -375,16 +374,16 @@ GEM rbs (>= 4.0.0) tsort regexp_parser (2.12.0) - reline (0.6.3) + reline (0.7.0) io-console (~> 0.5) - resend (1.6.0) + resend (1.9.0) base64 httparty (>= 0.22.0) responders (3.2.0) actionpack (>= 7.0) railties (>= 7.0) rexml (3.4.4) - rubocop (1.88.2) + rubocop (1.89.0) json (~> 2.3) language_server-protocol (~> 3.17.0.2) lint_roller (~> 1.1.0) @@ -398,15 +397,15 @@ GEM rubocop-ast (1.50.0) parser (>= 3.3.7.2) prism (~> 1.7) - rubocop-performance (1.26.1) + rubocop-performance (1.27.0) lint_roller (~> 1.1) - rubocop (>= 1.75.0, < 2.0) + rubocop (>= 1.89.0, < 2.0) rubocop-ast (>= 1.47.1, < 2.0) - rubocop-rails (2.36.0) + rubocop-rails (2.37.0) activesupport (>= 4.2.0) lint_roller (~> 1.1) rack (>= 1.1) - rubocop (>= 1.75.0, < 2.0) + rubocop (>= 1.89.0, < 2.0) rubocop-ast (>= 1.44.0, < 2.0) rubocop-rails-omakase (1.1.0) rubocop (>= 1.72) @@ -416,12 +415,12 @@ GEM ruby-vips (2.3.0) ffi (~> 1.12) logger - rubyzip (3.4.1) + rubyzip (3.5.0) securerandom (0.4.1) seed-fu (2.3.9) activerecord (>= 3.1) activesupport (>= 3.1) - selenium-webdriver (4.46.0) + selenium-webdriver (4.47.0) base64 (~> 0.2) logger (~> 1.4) rexml (~> 3.2, >= 3.2.5) @@ -441,7 +440,7 @@ GEM activejob (>= 7.2) activerecord (>= 7.2) railties (>= 7.2) - solid_queue (1.5.0) + solid_queue (1.6.0) activejob (>= 7.1) activerecord (>= 7.1) concurrent-ruby (>= 1.3.1) @@ -453,11 +452,11 @@ GEM tailwindcss-rails (4.6.0) railties (>= 7.0.0) tailwindcss-ruby (~> 4.0) - tailwindcss-ruby (4.3.2) - tailwindcss-ruby (4.3.2-aarch64-linux-gnu) - tailwindcss-ruby (4.3.2-arm64-darwin) - tailwindcss-ruby (4.3.2-x86_64-darwin) - tailwindcss-ruby (4.3.2-x86_64-linux-gnu) + tailwindcss-ruby (4.3.3) + tailwindcss-ruby (4.3.3-aarch64-linux-gnu) + tailwindcss-ruby (4.3.3-arm64-darwin) + tailwindcss-ruby (4.3.3-x86_64-darwin) + tailwindcss-ruby (4.3.3-x86_64-linux-gnu) thor (1.5.0) timeout (0.6.1) tsort (0.2.0)