Skip to content

build(deps): bump the bundler-dependencies group with 7 updates - #3667

Merged
BaseMax merged 1 commit into
mainfrom
dependabot/bundler/bundler-dependencies-9ef0ddab48
Nov 4, 2026
Merged

BaseMax merged 1 commit into
mainfrom
dependabot/bundler/bundler-dependencies-9ef0ddab48

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the bundler-dependencies group with 9 updates:

Package From To
github-pages 223 232
jekyll-avatar 0.7.0 0.8.0
jekyll-feed 0.15.1 0.17.0
jemoji 0.12.0 0.13.0
activesupport 3.2.22.5 8.1.4.1
kramdown 2.3.1 2.4.0
jekyll-redirect-from 0.16.0 0.17.0
github-pages 232 233
jekyll-feed 0.17.0 0.18.0

Updates github-pages from 223 to 232

Release notes

Sourced from github-pages's releases.

v232

What's Changed

New Contributors

Full Changelog: github/pages-gem@v231...v232

v231

What's Changed

Full Changelog: github/pages-gem@v230...v231

v230

What's Changed

Full Changelog: github/pages-gem@v229...v230

v229

What's Changed

New Contributors

... (truncated)

Commits

Updates jekyll-avatar from 0.7.0 to 0.8.0

Release notes

Sourced from jekyll-avatar's releases.

v0.8.0

0.8.0 / 2022-04-15

Minor Enhancements

  • Use Kernel#format to render <img /> HTML tag (#46)
  • Check if username and size matches a pattern once (#48)

Bug Fixes

  • Reduce allocations from computing username (#44)
  • Stringify keys of :attributes hash (#42)
  • Parse tag markup once per instance (#40)
  • Compute :srcset with an array of integer strings (#43)
  • Assign string values for attributes (#47)
  • Parse only custom-host provided through ENV (#45)

Development Fixes

  • Profile memory usage from rendering avatars (#41)
  • Bundle only relevant files in the gem (#50)
  • Upgrade to GitHub-native Dependabot (#52)
  • Remove redundant specifications (#56)
  • Improve context in workflow job names (#57)
  • Remove @benbalter-specific community health files (#58)
  • Update gem specification (#60)
  • Add workflow to release gem via GH Actions (#63)

Documentation

  • Fix typo in README.md (#62)
Changelog

Sourced from jekyll-avatar's changelog.

0.8.0 / 2022-04-15

Minor Enhancements

  • Use Kernel#format to render <img /> HTML tag (#46)
  • Check if username and size matches a pattern once (#48)

Bug Fixes

  • Reduce allocations from computing username (#44)
  • Stringify keys of :attributes hash (#42)
  • Parse tag markup once per instance (#40)
  • Compute :srcset with an array of integer strings (#43)
  • Assign string values for attributes (#47)
  • Parse only custom-host provided through ENV (#45)

Development Fixes

  • Profile memory usage from rendering avatars (#41)
  • Bundle only relevant files in the gem (#50)
  • Upgrade to GitHub-native Dependabot (#52)
  • Remove redundant specifications (#56)
  • Improve context in workflow job names (#57)
  • Remove @benbalter-specific community health files (#58)
  • Update gem specification (#60)
  • Add workflow to release gem via GH Actions (#63)

Documentation

  • Fix typo in README.md (#62)
Commits

Updates jekyll-feed from 0.15.1 to 0.17.0

Release notes

Sourced from jekyll-feed's releases.

v0.17.0

Documentation

  • Update CI status badge (#363)

Development Fixes

  • Add Ruby 3.1 to the CI matrix (#365)

Minor Enhancements

  • Allow disabling of jekyll-feed while in development (#370)

v0.16.0

Minor Enhancements

  • Add support for page.description in front matter to become entry <summary> (#297)

Bug Fixes

  • Fold private methods into the :render method as local variables (#327)
  • Check post.categories instead of post.category (#357)
  • Switched xml_escape for <![CDATA[]]> for post content (#332)

Development Fixes

  • Add Ruby 3.0 to CI (#337)
  • Lock RuboCop to v1.18.x (#348)
  • Add workflow to release gem via GH Action (#355)

Documentation

  • Use .atom extension in documented examples since we write an Atom feed (#359)
Changelog

Sourced from jekyll-feed's changelog.

0.17.0 / 2022-10-14

Documentation

  • Update CI status badge (#363)

Development Fixes

  • Add Ruby 3.1 to the CI matrix (#365)

Minor Enhancements

  • Allow disabling of jekyll-feed while in development (#370)

0.16.0 / 2022-01-03

Minor Enhancements

  • Add support for page.description in front matter to become entry <summary> (#297)

Bug Fixes

  • Fold private methods into the :render method as local variables (#327)
  • Check post.categories instead of post.category (#357)
  • Switched xml_escape for <![CDATA[]]> for post content (#332)

Development Fixes

  • Add Ruby 3.0 to CI (#337)
  • Lock RuboCop to v1.18.x (#348)
  • Add workflow to release gem via GH Action (#355)

Documentation

  • Use .atom extension in documented examples since we write an Atom feed (#359)
Commits

Updates jemoji from 0.12.0 to 0.13.0

Release notes

Sourced from jemoji's releases.

v0.13.0

What's Changed

This is the big release! You can now use gemoji v4. Additionally:

New Contributors

Full Changelog: jekyll/jemoji@v0.12.0...v0.13.0

Changelog

Sourced from jemoji's changelog.

v0.13.0 / 2022-11-19

Development Fixes

  • Add Actions CI workflow (#127)
  • Add release workflow (#128)
  • Create dependabot config for rubygems upgrades (#126)
  • Add github-actions to dependabot (#132)
  • Bump actions/checkout from 2 to 3 (#133)
  • Upgrade Rubocop target version to 2.7 (#134)
  • Update rake requirement from ~> 12.0 to ~> 13.0 (#130)

Minor Enhancements

  • Update gemoji requirement from ~> 3.0 to >= 3, < 5 & test with both major versions (#131)
Commits
  • 1443020 Merge pull request #135 from jekyll/release-1-0-0
  • 6934e3d Release jemoji v0.13.0
  • d766153 Update history to reflect merge of #131 [ci skip]
  • b251fd9 Update gemoji requirement from ~> 3.0 to >= 3, < 5 & test with both major ver...
  • 663823a Update history to reflect merge of #130 [ci skip]
  • 88f650c Update rake requirement from ~> 12.0 to ~> 13.0 (#130)
  • d69cb8c Update history to reflect merge of #134 [ci skip]
  • e0e5701 Upgrade Rubocop target version to 2.7 (#134)
  • e01a128 Update history to reflect merge of #133 [ci skip]
  • 064f142 Bump actions/checkout from 2 to 3 (#133)
  • Additional commits viewable in compare view

Updates activesupport from 3.2.22.5 to 8.1.4.1

Release notes

Sourced from activesupport's releases.

8.1.4.1

Active Support

  • ActiveSupport::MessagePack no longer deserializes an unsafe ActiveSupport::SafeBuffer as html_safe.

    A SafeBuffer that was no longer html_safe?, for example after an in-place gsub!, was deserialized as an html_safe SafeBuffer. It is now serialized with an unsafe marker and deserialized as a String. Earlier versions of Rails cannot read an unsafe buffer serialized this way.

    [GHSA-2w9f-fxwj-w2qf]

    Jean Boussier

  • ActiveSupport::Inflector#safe_constantize matches the constant name in a LoadError message as a literal string instead of building a Regexp from it.

    The name's segments were interpolated unescaped into the pattern, so input that reaches safe_constantize, such as the channel identifier in an Action Cable subscribe command, chose the source passed to the regexp compiler.

    [GHSA-8474-xrp6-wh69]

    Jeremy Daer

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • Skip attribute names in tag helpers that are blank once converted to a string.

    A Symbol such as :" " is not blank, because Symbol#blank? is Symbol#empty?, so it reached the escaping step and produced an attribute with no name. The asset helpers symbolize their keys, so an ordinary String key reached the same place.

    [GHSA-68p9-83h6-5wpj]

    Mike Dalessio

... (truncated)

Changelog

Sourced from activesupport's changelog.

Rails 8.1.4.1 (November 03, 2026)

  • ActiveSupport::MessagePack no longer deserializes an unsafe ActiveSupport::SafeBuffer as html_safe.

    A SafeBuffer that was no longer html_safe?, for example after an in-place gsub!, was deserialized as an html_safe SafeBuffer. It is now serialized with an unsafe marker and deserialized as a String. Earlier versions of Rails cannot read an unsafe buffer serialized this way.

    [GHSA-2w9f-fxwj-w2qf]

    Jean Boussier

  • ActiveSupport::Inflector#safe_constantize matches the constant name in a LoadError message as a literal string instead of building a Regexp from it.

    The name's segments were interpolated unescaped into the pattern, so input that reaches safe_constantize, such as the channel identifier in an Action Cable subscribe command, chose the source passed to the regexp compiler.

    [GHSA-8474-xrp6-wh69]

    Jeremy Daer

Rails 8.1.4 (September 24, 2026)

  • Fix the debug error page rendering for SyntaxErrors with multi-line messages.

    Marco Roth

  • Make ActiveSupport::JSON.decode compatible with the upcoming json 3.0 gem.

    Earlopain

  • Fix number_to_human_size crashing for sizes above a terabyte by supporting petabyte, exabyte, and zettabyte storage units.

    Kenta Ishizaki

  • Fix Range#sole raising NoMethodError when the enumerable core extension isn't already loaded.

    Kenta Ishizaki

  • Fix ActiveSupport::Cache::FileStore raising NameError for FileUtils when fileutils isn't already loaded.

    Kenta Ishizaki

... (truncated)

Commits
  • 3f290b7 Preparing for 8.1.4.1 release
  • 4ca0906 ActiveSupport::MessagePack preserve SafeBuffer html_safe status
  • 95aa9e4 Avoid dynamic regexp in safe_constantize LoadError handling
  • c3466ea Preparing for 8.1.4 release
  • e6288a8 Update CHANGELOGs for 8-1-stable backports
  • 215952f Merge pull request #58727 from marcoroth/multiline-syntax-errors
  • 6785886 Merge pull request #58688 from byroot/upgrade-rubocop
  • e0d220c Fixed guard around AS::TC.run_order
  • a3bcedd Merge pull request #58639 from moizafzal936/fix-fetch-multi-local-cache-order
  • 5b7765c AS::JSON.decode: handle nil options
  • Additional commits viewable in compare view

Updates kramdown from 2.3.1 to 2.4.0

Commits

Updates jekyll-avatar from 0.7.0 to 0.8.0

Release notes

Sourced from jekyll-avatar's releases.

v0.8.0

0.8.0 / 2022-04-15

Minor Enhancements

  • Use Kernel#format to render <img /> HTML tag (#46)
  • Check if username and size matches a pattern once (#48)

Bug Fixes

  • Reduce allocations from computing username (#44)
  • Stringify keys of :attributes hash (#42)
  • Parse tag markup once per instance (#40)
  • Compute :srcset with an array of integer strings (#43)
  • Assign string values for attributes (#47)
  • Parse only custom-host provided through ENV (#45)

Development Fixes

  • Profile memory usage from rendering avatars (#41)
  • Bundle only relevant files in the gem (#50)
  • Upgrade to GitHub-native Dependabot (#52)
  • Remove redundant specifications (#56)
  • Improve context in workflow job names (#57)
  • Remove @benbalter-specific community health files (#58)
  • Update gem specification (#60)
  • Add workflow to release gem via GH Actions (#63)

Documentation

  • Fix typo in README.md (#62)
Changelog

Sourced from jekyll-avatar's changelog.

0.8.0 / 2022-04-15

Minor Enhancements

  • Use Kernel#format to render <img /> HTML tag (#46)
  • Check if username and size matches a pattern once (#48)

Bug Fixes

  • Reduce allocations from computing username (#44)
  • Stringify keys of :attributes hash (#42)
  • Parse tag markup once per instance (#40)
  • Compute :srcset with an array of integer strings (#43)
  • Assign string values for attributes (#47)
  • Parse only custom-host provided through ENV (#45)

Development Fixes

  • Profile memory usage from rendering avatars (#41)
  • Bundle only relevant files in the gem (#50)
  • Upgrade to GitHub-native Dependabot (#52)
  • Remove redundant specifications (#56)
  • Improve context in workflow job names (#57)
  • Remove @benbalter-specific community health files (#58)
  • Update gem specification (#60)
  • Add workflow to release gem via GH Actions (#63)

Documentation

  • Fix typo in README.md (#62)
Commits

Updates jekyll-feed from 0.15.1 to 0.17.0

Release notes

Sourced from jekyll-feed's releases.

v0.17.0

Documentation

  • Update CI status badge (#363)

Development Fixes

  • Add Ruby 3.1 to the CI matrix (#365)

Minor Enhancements

  • Allow disabling of jekyll-feed while in development (#370)

v0.16.0

Minor Enhancements

  • Add support for page.description in front matter to become entry <summary> (#297)

Bug Fixes

  • Fold private methods into the :render method as local variables (#327)
  • Check post.categories instead of post.category (#357)
  • Switched xml_escape for <![CDATA[]]> for post content (#332)

Development Fixes

  • Add Ruby 3.0 to CI (#337)
  • Lock RuboCop to v1.18.x (#348)
  • Add workflow to release gem via GH Action (#355)

Documentation

  • Use .atom extension in documented examples since we write an Atom feed (#359)
Changelog

Sourced from jekyll-feed's changelog.

0.17.0 / 2022-10-14

Documentation

  • Update CI status badge (#363)

Development Fixes

  • Add Ruby 3.1 to the CI matrix (#365)

Minor Enhancements

  • Allow disabling of jekyll-feed while in development (#370)

0.16.0 / 2022-01-03

Minor Enhancements

  • Add support for page.description in front matter to become entry <summary> (#297)

Bug Fixes

  • Fold private methods into the :render method as local variables (#327)
  • Check post.categories instead of post.category (#357)
  • Switched xml_escape for <![CDATA[]]> for post content (#332)

Development Fixes

  • Add Ruby 3.0 to CI (#337)
  • Lock RuboCop to v1.18.x (#348)
  • Add workflow to release gem via GH Action (#355)

Documentation

  • Use .atom extension in documented examples since we write an Atom feed (#359)
Commits

Updates jekyll-redirect-from from 0.16.0 to 0.17.0

Release notes

Sourced from jekyll-redirect-from's releases.

v0.17.0

Security

  • Only allow http(s) and relative redirect_to targets, percent-encode unsafe characters in them, and escape them in the redirect page (GHSA-xfg6-hjrc-hpvx)

styles

  • style: Style/SpecialGlobalVars (#216)

Development Fixes

  • fix Gemfile to correctly install jekyll 3.9 (#224)
  • Refactor specs for RedirectPage (#222)
  • Lock to RuboCop v1.18.x (#242)
  • Clean up gemspec (#243)
  • Bump versions in CI workflow (#273)

Bug Fixes

  • Refactor Redirectable mixin to reduce allocations (#241)
Changelog

Sourced from jekyll-redirect-from's changelog.

0.17.0 / 2026-09-29

Security

  • Only allow http(s) and relative redirect_to targets, percent-encode unsafe characters in them, and escape them in the redirect page (GHSA-xfg6-hjrc-hpvx)

styles

  • style: Style/SpecialGlobalVars (#216)

Development Fixes

  • fix Gemfile to correctly install jekyll 3.9 (#224)
  • Refactor specs for RedirectPage (#222)
  • Lock to RuboCop v1.18.x (#242)
  • Clean up gemspec (#243)
  • Bump versions in CI workflow (#273)

Bug Fixes

  • Refactor Redirectable mixin to reduce allocations (#241)
Commits

Updates github-pages from 232 to 233

Release notes

Sourced from github-pages's releases.

v232

What's Changed

New Contributors

Full Changelog: github/pages-gem@v231...v232

v231

What's Changed

Full Changelog: github/pages-gem@v230...v231

v230

What's Changed

Full Changelog: github/pages-gem@v229...v230

v229

What's Changed

New Contributors

... (truncated)

Commits

Updates jekyll-feed from 0.17.0 to 0.18.0

Release notes

Sourced from jekyll-feed's releases.

v0.17.0

Documentation

  • Update CI status badge (#363)

Development Fixes

  • Add Ruby 3.1 to the CI matrix (#365)

Minor EnhancementsDescription has been truncated

Bumps the bundler-dependencies group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [github-pages](https://github.com/github/pages-gem) | `223` | `232` |
| [jekyll-avatar](https://github.com/jekyll/jekyll-avatar) | `0.7.0` | `0.8.0` |
| [jekyll-feed](https://github.com/jekyll/jekyll-feed) | `0.15.1` | `0.17.0` |
| [jemoji](https://github.com/jekyll/jemoji) | `0.12.0` | `0.13.0` |
| [activesupport](https://github.com/rails/rails) | `3.2.22.5` | `8.1.4.1` |
| [kramdown](https://github.com/gettalong/kramdown) | `2.3.1` | `2.4.0` |
| [jekyll-redirect-from](https://github.com/jekyll/jekyll-redirect-from) | `0.16.0` | `0.17.0` |
| [github-pages](https://github.com/github/pages-gem) | `232` | `233` |
| [jekyll-feed](https://github.com/jekyll/jekyll-feed) | `0.17.0` | `0.18.0` |


Updates `github-pages` from 223 to 232
- [Release notes](https://github.com/github/pages-gem/releases)
- [Commits](github/pages-gem@v223...v232)

Updates `jekyll-avatar` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/jekyll/jekyll-avatar/releases)
- [Changelog](https://github.com/jekyll/jekyll-avatar/blob/main/History.markdown)
- [Commits](jekyll/jekyll-avatar@v0.7.0...v0.8.0)

Updates `jekyll-feed` from 0.15.1 to 0.17.0
- [Release notes](https://github.com/jekyll/jekyll-feed/releases)
- [Changelog](https://github.com/jekyll/jekyll-feed/blob/master/History.markdown)
- [Commits](jekyll/jekyll-feed@v0.15.1...v0.17.0)

Updates `jemoji` from 0.12.0 to 0.13.0
- [Release notes](https://github.com/jekyll/jemoji/releases)
- [Changelog](https://github.com/jekyll/jemoji/blob/master/History.markdown)
- [Commits](jekyll/jemoji@v0.12.0...v0.13.0)

Updates `activesupport` from 3.2.22.5 to 8.1.4.1
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.4.1/activesupport/CHANGELOG.md)
- [Commits](rails/rails@v3.2.22.5...v8.1.4.1)

Updates `kramdown` from 2.3.1 to 2.4.0
- [Release notes](https://github.com/gettalong/kramdown/releases)
- [Changelog](https://github.com/gettalong/kramdown/blob/master/doc/news.page)
- [Commits](https://github.com/gettalong/kramdown/commits)

Updates `jekyll-avatar` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/jekyll/jekyll-avatar/releases)
- [Changelog](https://github.com/jekyll/jekyll-avatar/blob/main/History.markdown)
- [Commits](jekyll/jekyll-avatar@v0.7.0...v0.8.0)

Updates `jekyll-feed` from 0.15.1 to 0.17.0
- [Release notes](https://github.com/jekyll/jekyll-feed/releases)
- [Changelog](https://github.com/jekyll/jekyll-feed/blob/master/History.markdown)
- [Commits](jekyll/jekyll-feed@v0.15.1...v0.17.0)

Updates `jekyll-redirect-from` from 0.16.0 to 0.17.0
- [Release notes](https://github.com/jekyll/jekyll-redirect-from/releases)
- [Changelog](https://github.com/jekyll/jekyll-redirect-from/blob/master/History.markdown)
- [Commits](jekyll/jekyll-redirect-from@v0.16.0...v0.17.0)

Updates `github-pages` from 232 to 233
- [Release notes](https://github.com/github/pages-gem/releases)
- [Commits](github/pages-gem@v223...v232)

Updates `jekyll-feed` from 0.17.0 to 0.18.0
- [Release notes](https://github.com/jekyll/jekyll-feed/releases)
- [Changelog](https://github.com/jekyll/jekyll-feed/blob/master/History.markdown)
- [Commits](jekyll/jekyll-feed@v0.15.1...v0.17.0)

Updates `jemoji` from 0.12.0 to 0.13.0
- [Release notes](https://github.com/jekyll/jemoji/releases)
- [Changelog](https://github.com/jekyll/jemoji/blob/master/History.markdown)
- [Commits](jekyll/jemoji@v0.12.0...v0.13.0)

Updates `activesupport` from 3.2.22.5 to 8.1.4.1
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.4.1/activesupport/CHANGELOG.md)
- [Commits](rails/rails@v3.2.22.5...v8.1.4.1)

Updates `kramdown` from 2.3.1 to 2.4.0
- [Release notes](https://github.com/gettalong/kramdown/releases)
- [Changelog](https://github.com/gettalong/kramdown/blob/master/doc/news.page)
- [Commits](https://github.com/gettalong/kramdown/commits)

---
updated-dependencies:
- dependency-name: github-pages
  dependency-version: '232'
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: bundler-dependencies
- dependency-name: jekyll-avatar
  dependency-version: 0.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: jekyll-feed
  dependency-version: 0.17.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: jemoji
  dependency-version: 0.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: activesupport
  dependency-version: 8.1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: bundler-dependencies
- dependency-name: kramdown
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: jekyll-avatar
  dependency-version: 0.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: jekyll-feed
  dependency-version: 0.17.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: jekyll-redirect-from
  dependency-version: 0.17.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: github-pages
  dependency-version: '233'
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: bundler-dependencies
- dependency-name: jekyll-feed
  dependency-version: 0.18.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: jemoji
  dependency-version: 0.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: activesupport
  dependency-version: 8.1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: bundler-dependencies
- dependency-name: kramdown
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from jbampton as a code owner November 4, 2026 07:53
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Nov 4, 2026
@github-actions github-actions Bot added the repo label Nov 4, 2026
@BaseMax
BaseMax merged commit d200c39 into main Nov 4, 2026
17 of 21 checks passed
@BaseMax
BaseMax deleted the dependabot/bundler/bundler-dependencies-9ef0ddab48 branch November 4, 2026 15:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file repo ruby Pull requests that update Ruby code size/L

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant