Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 15, 2025

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps the minor-and-patch group with 5 updates:

Package From To
state_machines 0.31.0 0.50.0
graphql 2.5.10 2.5.11
sidekiq 8.0.4 8.0.5
config 5.5.2 5.6.1
sorbet-static-and-runtime 0.5.12219 0.5.12222

Updates state_machines from 0.31.0 to 0.50.0

Release notes

Sourced from state_machines's releases.

state_machines: v0.50.0

0.50.0 (2025-07-12)

Features

  • Add coordinated state management guards (#145) (97eb6ef)

state_machines: v0.40.0

0.40.0 (2025-07-12)

Features

  • add async support with declarative async: true parameter (#144) (5fcbbd7)

Bug Fixes

  • prevent event_transition overwriting with multiple state machines (fab957e)
  • prevent event_transition overwriting with multiple state machines (a8c6017)
Changelog

Sourced from state_machines's changelog.

0.50.0 (2025-07-12)

Features

  • Add coordinated state management guards (#145) (97eb6ef)

0.40.0 (2025-07-12)

Features

  • add async support with declarative async: true parameter (#144) (5fcbbd7)

Bug Fixes

  • prevent event_transition overwriting with multiple state machines (fab957e)
  • prevent event_transition overwriting with multiple state machines (a8c6017)
Commits
  • ba17e0e chore(master): release state_machines 0.50.0 (#146)
  • 97eb6ef feat: Add coordinated state management guards (#145)
  • fe7f908 chore: update COSS version to 0.40.0
  • 53a492a chore(master): release state_machines 0.40.0 (#142)
  • 5fcbbd7 feat: add async support with declarative async: true parameter (#144)
  • 073012d refactor: Modernize conditional logic with pattern matching (#143)
  • fab957e Merge pull request #141 from state-machines/feat/fixing2020bug
  • a8c6017 fix: prevent event_transition overwriting with multiple state machines
  • 7013770 chore: update COSS version to 0.31.0
  • See full diff in compare view

Updates graphql from 2.5.10 to 2.5.11

Changelog

Sourced from graphql's changelog.

2.5.11 (9 Jul 2025)

Bug fixes

  • Dataloader: improve compatibility when objects are loaded by GraphQL-Batch but .authorized? uses Dataloader #5400
Commits

Updates sidekiq from 8.0.4 to 8.0.5

Changelog

Sourced from sidekiq's changelog.

8.0.5

  • Add stopping? method to AJ adapter for compatibility with the new AJ::Continuations feature #6732
  • Further improvements to Rails boot compatibility #6710
  • Add ability to disable CSRF middleware. SameSite cookies prevent CSRF in a cleaner manner and are default in most browsers now. CSRF code will be removed in Sidekiq 9.0. #6739
Commits

Updates config from 5.5.2 to 5.6.1

Release notes

Sourced from config's releases.

5.6.1

What's Changed

Full Changelog: rubyconfig/config@5.6.0...5.6.1

5.6.0

What's Changed

Full Changelog: rubyconfig/config@5.5.2...5.6.0

Changelog

Sourced from config's changelog.

5.6.1

  • fix(security): replace IO.read with File.read #378

5.6.0

  • Added extra_sources in initializer (#366)
Commits
  • 8b6ffe6 release: 5.6.1
  • d639f9d ci: limit workflow permissions (#379)
  • e0bf18f fix(security): replace IO.read with File.read (#378)
  • 263e66a test: bump puma in rails 5.2 test app to fix security warning (#377)
  • c833d19 release: 5.6.0
  • 4dc0f3e ci: fix jruby rails >= 7.2 (#376)
  • 1f17cd8 feat: added extra sources in initializer (#366)
  • 97b3e8c ci: add rails 7.2 and 8.0 to the test matrix and bump some older dependencies...
  • 1b5581d ci: add Ruby 3.4 to the test matrix (#369)
  • a4c978f ci: remove unnecessary ubuntu packages installation (#374)
  • Additional commits viewable in compare view

Updates sorbet-static-and-runtime from 0.5.12219 to 0.5.12222

Release notes

Sourced from sorbet-static-and-runtime's releases.

sorbet 0.5.12221.20250708104131-4081716a2

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.5.12221', :group => :development
gem 'sorbet-runtime', '0.5.12221'

sorbet 0.5.12220.20250707130737-19deaded1

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.5.12220', :group => :development
gem 'sorbet-runtime', '0.5.12220'

sorbet 0.5.12219.20250702112501-26fef6e2a

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.5.12219', :group => :development
gem 'sorbet-runtime', '0.5.12219'
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [state_machines](https://github.com/state-machines/state_machines) | `0.31.0` | `0.50.0` |
| [graphql](https://github.com/rmosolgo/graphql-ruby) | `2.5.10` | `2.5.11` |
| [sidekiq](https://github.com/sidekiq/sidekiq) | `8.0.4` | `8.0.5` |
| [config](https://github.com/rubyconfig/config) | `5.5.2` | `5.6.1` |
| [sorbet-static-and-runtime](https://github.com/sorbet/sorbet) | `0.5.12219` | `0.5.12222` |


Updates `state_machines` from 0.31.0 to 0.50.0
- [Release notes](https://github.com/state-machines/state_machines/releases)
- [Changelog](https://github.com/state-machines/state_machines/blob/master/CHANGELOG.md)
- [Commits](state-machines/state_machines@state_machines/v0.31.0...state_machines/v0.50.0)

Updates `graphql` from 2.5.10 to 2.5.11
- [Release notes](https://github.com/rmosolgo/graphql-ruby/releases)
- [Changelog](https://github.com/rmosolgo/graphql-ruby/blob/master/CHANGELOG.md)
- [Commits](rmosolgo/graphql-ruby@v2.5.10...v2.5.11)

Updates `sidekiq` from 8.0.4 to 8.0.5
- [Changelog](https://github.com/sidekiq/sidekiq/blob/main/Changes.md)
- [Commits](sidekiq/sidekiq@v8.0.4...v8.0.5)

Updates `config` from 5.5.2 to 5.6.1
- [Release notes](https://github.com/rubyconfig/config/releases)
- [Changelog](https://github.com/rubyconfig/config/blob/master/CHANGELOG.md)
- [Commits](rubyconfig/config@5.5.2...5.6.1)

Updates `sorbet-static-and-runtime` from 0.5.12219 to 0.5.12222
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

---
updated-dependencies:
- dependency-name: state_machines
  dependency-version: 0.50.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: graphql
  dependency-version: 2.5.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: sidekiq
  dependency-version: 8.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: config
  dependency-version: 5.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: sorbet-static-and-runtime
  dependency-version: 0.5.12222
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team July 15, 2025 01:16
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jul 15, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 15, 2025

The reviewers field in the dependabot.yml file will be removed soon. Please use the code owners file to specify reviewers for Dependabot PRs. For more information, see this blog post.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jul 15, 2025
require "tapioca/commands"
require "tapioca/cli"

# There was an error introduced by https://github.com/sidekiq/sidekiq/pull/6727:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug issue: sidekiq/sidekiq#6746
Caused by: sidekiq/sidekiq#6727
Upstream fix: sidekiq/sidekiq#6749

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nvm, this workaround didn't work across the whole CI test matrix. I just rolled back to Sidekiq 8.0.4 for now, instead.

@amomchilov amomchilov enabled auto-merge July 21, 2025 23:53
@amomchilov amomchilov force-pushed the dependabot/bundler/minor-and-patch-b4082a6a15 branch from 4dd255b to 69a4960 Compare July 22, 2025 00:25
Copy link
Contributor

This stack of pull requests is managed by Graphite. Learn more about stacking.

@amomchilov amomchilov force-pushed the dependabot/bundler/minor-and-patch-b4082a6a15 branch 3 times, most recently from fa05c4e to b29462b Compare July 22, 2025 13:53
@amomchilov amomchilov force-pushed the dependabot/bundler/minor-and-patch-b4082a6a15 branch from b29462b to c7fd8c6 Compare July 22, 2025 14:37
@amomchilov amomchilov merged commit 2d3f7c5 into main Jul 22, 2025
29 of 32 checks passed
@amomchilov amomchilov deleted the dependabot/bundler/minor-and-patch-b4082a6a15 branch July 22, 2025 15:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant