Bump the bundler group with 8 updates

[dependabot]

Bumps the bundler group with 8 updates:

Package	From	To
activesupport	8.1.3.1	8.1.4
pry	0.15.2	0.16.0
tzinfo-data	1.2026.1	1.2026.5
tilt	2.8.0	2.9.0
ansi	1.5.0	1.6.0
rake	13.3.1	13.4.2
webmock	3.26.2	3.32.0
test-unit	3.7.7	3.7.8

Updates activesupport from 8.1.3.1 to 8.1.4

Release notes

Sourced from activesupport's releases.

8.1.4

Active Support

• Fix the debug error page rendering for SyntaxErrors with multi-line messages.

  Marco Roth

• Make ActiveSupport::JSON.decode compatible with the upcoming json 3.0 gem.

  Earlopain

• Fix number_to_human_size crashing for sizes above a terabyte by supporting petabyte, exabyte, and zettabyte storage units.

  Kenta Ishizaki

• Fix Range#sole raising NoMethodError when the enumerable core extension isn't already loaded.

  Kenta Ishizaki

• Fix ActiveSupport::Cache::FileStore raising NameError for FileUtils when fileutils isn't already loaded.

  Kenta Ishizaki

• Fix Enumerable#in_order_of with filter: true dropping nil elements explicitly named in the series.

  Kenta Ishizaki

• Keep HashWithIndifferentAccess#filter returning a HashWithIndifferentAccess instead of a plain Hash.

  Kenta Ishizaki

• Fix number_to_human and number_to_human_size crashing when :precision is nil.

  Kenta Ishizaki

• Fix ActiveSupport::InheritableOptions#to_h to recursively flatten nested InheritableOptions parents.

  Andrew Novoselac

• Fix ActiveSupport::StructuredEventSubscriber.debug_only leaking debug-only methods across subscriber subclasses.

  Kenta Ishizaki

... (truncated)

Changelog

Sourced from activesupport's changelog.

Rails 8.1.4 (September 24, 2026)

• Fix the debug error page rendering for SyntaxErrors with multi-line messages.

  Marco Roth

• Make ActiveSupport::JSON.decode compatible with the upcoming json 3.0 gem.

  Earlopain

• Fix number_to_human_size crashing for sizes above a terabyte by supporting petabyte, exabyte, and zettabyte storage units.

  Kenta Ishizaki

• Fix Range#sole raising NoMethodError when the enumerable core extension isn't already loaded.

  Kenta Ishizaki

• Fix ActiveSupport::Cache::FileStore raising NameError for FileUtils when fileutils isn't already loaded.

  Kenta Ishizaki

• Fix Enumerable#in_order_of with filter: true dropping nil elements explicitly named in the series.

  Kenta Ishizaki

• Keep HashWithIndifferentAccess#filter returning a HashWithIndifferentAccess instead of a plain Hash.

  Kenta Ishizaki

• Fix number_to_human and number_to_human_size crashing when :precision is nil.

  Kenta Ishizaki

• Fix ActiveSupport::InheritableOptions#to_h to recursively flatten nested InheritableOptions parents.

  Andrew Novoselac

• Fix ActiveSupport::StructuredEventSubscriber.debug_only leaking debug-only methods across subscriber subclasses.

  Kenta Ishizaki

• Fix ActiveSupport::Inflector#transliterate mutating the caller's string.

... (truncated)

Commits

• c3466ea Preparing for 8.1.4 release
• e6288a8 Update CHANGELOGs for 8-1-stable backports
• 215952f Merge pull request #58727 from marcoroth/multiline-syntax-errors
• 6785886 Merge pull request #58688 from byroot/upgrade-rubocop
• e0d220c Fixed guard around AS::TC.run_order
• a3bcedd Merge pull request #58639 from moizafzal936/fix-fetch-multi-local-cache-order
• 5b7765c AS::JSON.decode: handle nil options
• c8b51db Merge pull request #58601 from Earlopain/json-3.0-compat
• 888d752 [8-1-stable] Silence Time.rfc3339 redefinition warning
• c957a6b Merge pull request #58324 from hammadxcm/fix-parameterize-nil-separator
• Additional commits viewable in compare view

Updates pry from 0.15.2 to 0.16.0

Release notes

Sourced from pry's releases.

v0.16.0

Features

• Ruby 4.0 Support. Pry will now require and default to Reline for newer Rubies. (#2357) (#2349)
• Revert 'Unify show-doc with show-source'. (#2346)

Breaking Changes

• Remove experimental Pry.auto_resize! Returns a warning. The code will be removed later. (#2359)
• Drop support for Ruby < 2.6 (#2349)

New Contributors

• @​ydah made their first contribution in pry/pry#2343

Full Changelog: pry/pry@v0.15.2...v0.16.0

Changelog

Sourced from pry's changelog.

https://github.com/pry/pry/blob/master/v0.16.0 (December 26, 2025)

Features

• Ruby 4.0 Support. Pry will now require and default to Reline for newer Rubies. (#2357) (#2349)
• Revert 'Unify show-doc with show-source'. (#2346)

Breaking Changes

• Remove experimental Pry.auto_resize! Returns a warning. The code will be removed later. (#2359)
• Drop support for Ruby < 2.6 (#2349)

Commits

• 5a267df v0.16.0
• 538b150 Update CHANGELOG
• 0a7ab20 Merge pull request #2361 from andrehjr/remove-outdated-deps
• 8dcb2c8 Remove pinned method_source version for Ruby < 2.3.0
• fc9969b Remove psych pinned version from Gemfile
• 23b3ed6 Remove hardcoded require for rubocop > 2.2.0
• e9ac449 Merge pull request #2349 from andrehjr/no-readline-installed
• 679249b Merge pull request #2359 from andrehjr/remove-experiental-autoresize
• 17d5954 Remove experimental Pry.auto_resize!
• 090822b Pry will only support Ruby 2.6+ form now on
• Additional commits viewable in compare view

Updates tzinfo-data from 1.2026.1 to 1.2026.5

Release notes

Sourced from tzinfo-data's releases.

v1.2026.5

Based on version 2026e of the IANA Time Zone Database (https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/message/VXIA4AU73OQL3OZ3ZBZHWIASIIVBGUJV/).

v1.2026.4

Based on version 2026d of the IANA Time Zone Database (https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/message/L4IGHJRBUQR53F7RTEHM5IS7ZMBR3YXP/).

v1.2026.3

Based on version 2026c of the IANA Time Zone Database (https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/message/NVHSX2PAQIT44U5FCCEVNJJYXQMMTJSA/).

v1.2026.2

Based on version 2026b of the IANA Time Zone Database (https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/message/VX2Z3CBO6KHTYZNBBKFFWM7ZCI6TVCXP/).

Commits

• 8df8bad Update to tzdata version 2026e.
• a0803f7 Update to tzdata version 2026d.
• a826afe Update to tzdata version 2026c.
• 256b802 Update to JRuby 10.1.
• 2b9af11 Update to tzdata version 2026b.
• See full diff in compare view

Updates tilt from 2.8.0 to 2.9.0

Changelog

Sourced from tilt's changelog.

2.9.0 (2026-08-17)

• Add Herb template, registered for .herb and .html.erb (marcoroth) (#30)

Commits

• f0d75c6 Bump version to 2.9.0
• c6f5711 Register ERB/Erubi for .html.erb
• b5371b6 Update commonmarker tests for changes in recent versions of commonmarker
• 610b5e3 Add Herb Template Engine
• See full diff in compare view

Updates ansi from 1.5.0 to 1.6.0

Changelog

Sourced from ansi's changelog.

1.6.0 | 2026-03-30

Maintenance release. Modernized project tooling and cleaned up documentation.

Changes:

• Replace custom Indexer system with standard gemspec.
• Replace Travis CI with GitHub Actions.
• Replace Assembly/detroit/ergo with Rakefile.
• Simplify version.rb to use a plain constant.
• Fix Fixnum reference for Ruby 3+ compatibility.
• Fix typos and update URLs to HTTPS.
• Move site from gh-pages to docs/.
• Remove obsolete files.
• Clean up .gitignore.

Commits

• 291cecc Maintenance release v1.6.0 — modernize project tooling
• 1700234 Update README. :doc:
• See full diff in compare view

Updates rake from 13.3.1 to 13.4.2

Commits

• 503b8ec v13.4.2
• 46038e7 Merge pull request #723 from ruby/fix/testopts-preserve-existing-value
• 604a3d9 Isolate TESTOPTS env in TestRakeTestTask setup/teardown
• 5886caa Preserve ENV["TESTOPTS"] when verbose is enabled
• 92193ac v13.4.1
• b74be0b Merge pull request #721 from ruby/fix/add-options-to-gemspec
• 829f66d Add lib/rake/options.rb to gemspec
• 2d55bc4 v13.4.0
• 1415070 Exclude dependabot updates from release note
• b3dc948 Merge pull request #713 from pvdb/simplify_standard_system_dir
• Additional commits viewable in compare view

Updates webmock from 3.26.2 to 3.32.0

Release notes

Sourced from webmock's releases.

3.32.0

• Make a Net::HTTP object created while WebMock was enabled behave like any other Net::HTTP object after WebMock.disable! (#1067)

  Such an object, like a connection cached by net-http-persistent or by Capybara with Selenium, used to raise ArgumentError on start or a stubbed request, and WebMock::NetConnectNotAllowedError on any other request, after WebMock was disabled. It now sends real requests until WebMock is enabled again.

  Thanks to Mike Taylor and James Rodovich

• Connect again when a request is retried on a Net::HTTP object that WebMock started without connecting and whose first real connection failed

  Such a retry used to raise NoMethodError (undefined method closed? for nil). It now tries to connect again, and raises the connection error if that fails too.

• Drop the Transfer-Encoding header from stubbed async-http responses, as WebMock already does with Content-Length (#1044)

  A stub with a Transfer-Encoding header, such as chunked, used to fail with "Message contains both transfer encoding and content length". async-http sets both headers itself from the body, and its responses from real servers don't include them either.

  Thanks to Tim Mertens

• Record requests made with curb's http_patch as PATCH requests with their body (#1112)

  curb has http_patch since 1.0.8. WebMock recorded such a request as a GET, or as a POST after post_body=, so a PATCH stub never matched it.

  Thanks to Andy Williams

• Record a curb request sent without a body as having none, even after an earlier http_post or http_patch call with a body on the same Curl::Easy object

  For example, after c.http_post("a=1"), c.reset and c.http(:POST), the second request was recorded with the body a=1, so a stub for that body matched it.

3.31.0

• Return the contents of a File or Pathname body given to to_return_json, or returned by its body lambda, instead of encoding the object as a JSON string (#1119)

  The file is read and closed as it is for to_return: when the stub is declared, or on each request when it comes from a lambda.

  Thanks to Alex

• Match HTTP methods given as a string or in upper case, as in stub_request("get", ...), a_request("GET", ...) or assert_requested("post", ...) (#821)

  Before, such a method never matched, so the stub never applied and negative expectations like assert_not_requested("get", ...) always passed. A test that passed only because of this can now fail.

  The method of a request is now always a lower case Symbol too. A request made with an upper case method, as Typhoeus does with method: :POST, now matches a :post stub, and callbacks and with blocks see :post.

  Thanks to Euisan Kim

3.30.0

• Allow narrowing an RSpec expectation on a stub with with, as in expect(stub).to have_been_requested.once.with(body: "abc") (#1128)

  The expectation counts only the requests that match both the stub and the conditions given to with. The stub itself does not change.

  Thanks to Sébastien S.

• Show the JSON body hint for expectations narrowed with with too, and no longer show it when a block is given to the stub or expectation, since checking would mean calling the block

... (truncated)

Changelog

Sourced from webmock's changelog.

3.32.0

• Make a Net::HTTP object created while WebMock was enabled behave like any other Net::HTTP object after WebMock.disable! (#1067)

  Such an object, like a connection cached by net-http-persistent or by Capybara with Selenium, used to raise ArgumentError on start or a stubbed request, and WebMock::NetConnectNotAllowedError on any other request, after WebMock was disabled. It now sends real requests until WebMock is enabled again.

  Thanks to Mike Taylor and James Rodovich

• Connect again when a request is retried on a Net::HTTP object that WebMock started without connecting and whose first real connection failed

  Such a retry used to raise NoMethodError (undefined method closed? for nil). It now tries to connect again, and raises the connection error if that fails too.

• Drop the Transfer-Encoding header from stubbed async-http responses, as WebMock already does with Content-Length (#1044)

  A stub with a Transfer-Encoding header, such as chunked, used to fail with "Message contains both transfer encoding and content length". async-http sets both headers itself from the body, and its responses from real servers don't include them either.

  Thanks to Tim Mertens

• Record requests made with curb's http_patch as PATCH requests with their body (#1112)

  curb has http_patch since 1.0.8. WebMock recorded such a request as a GET, or as a POST after post_body=, so a PATCH stub never matched it.

  Thanks to Andy Williams

• Record a curb request sent without a body as having none, even after an earlier http_post or http_patch call with a body on the same Curl::Easy object

  For example, after c.http_post("a=1"), c.reset and c.http(:POST), the second request was recorded with the body a=1, so a stub for that body matched it.

3.31.0

• Return the contents of a File or Pathname body given to to_return_json, or returned by its body lambda, instead of encoding the object as a JSON string (#1119)

  The file is read and closed as it is for to_return: when the stub is declared, or on each request when it comes from a lambda.

  Thanks to Alex

• Match HTTP methods given as a string or in upper case, as in stub_request("get", ...), a_request("GET", ...) or assert_requested("post", ...) (#821)

  Before, such a method never matched, so the stub never applied and negative expectations like assert_not_requested("get", ...) always passed. A test that passed only because of this can now fail.

  The method of a request is now always a lower case Symbol too. A request made with an upper case method, as Typhoeus does with method: :POST, now matches a :post stub, and callbacks and with blocks see :post.

  Thanks to Euisan Kim

3.30.0

• Allow narrowing an RSpec expectation on a stub with with, as in expect(stub).to have_been_requested.once.with(body: "abc") (#1128)

  The expectation counts only the requests that match both the stub and the conditions given to with. The stub itself does not change.

... (truncated)

Commits

• d72b73b Version 3.32.0
• 8724c9f Clear the curb request body after each perform
• 8115e09 Tidy the curb body check and the async-http chunked spec
• 8a251bf Override curb's http_patch only where curb has it
• 6cb5caa Merge pull request #1112 from sobakasu/feature/curb-http-patch
• f556b9a Drop every Transfer-Encoding header from async-http stubs
• 03c53c2 Merge pull request #1044 from tmertens/async_http_client_adapter_fix_chunking
• 918003e Check that start connects for real after WebMock is disabled
• b7b334b Close a real Net::HTTP connection when a stub answers instead
• 70eadef Connect again when a request follows a failed real connection
• Additional commits viewable in compare view

Updates test-unit from 3.7.7 to 3.7.8

Release notes

Sourced from test-unit's releases.

test-unit 3.7.8 - 2026-06-05

Improvements

• parallel: process: Improved performance on Windows.

  • GH-368

• Improved compatibility with Ruby::Box on $!.

  • GH-370
  • Patch by MATSUMOTO Katsuyoshi

• doc: Added a process option in parallel options.

  • GH-373

• Improved the -I option. You can prepend load paths to prioritize your development library over the system library.

  • ruby/rubygems#9572
  • GH-375

Thanks

• MATSUMOTO Katsuyoshi

Commits

• 34a125c Add 3.7.8 entry (#376)
• 2cf85b3 Prepend load paths instead of appending them (#375)
• 2c7d4fb ci: add Ruby 4.0 (#374)
• b20c43f doc: add missing a process option in parallel options (#373)
• bed58ef Bump rubygems/configure-rubygems-credentials from 1.0.0 to 2.0.0 (#372)
• 11cd0b2 test: use captured exception object explicitly (#371)
• 51d8ed2 Avoid relying on $! in rescued exception handling (#370)
• 5545156 process runner: improve performance on Windows (#368)
• 0a1a366 Bump version (#367)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions