Skip to content

build(deps): bump rails from 7.2.3.1 to 8.1.3#6866

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bundler/rails-8.1.3
Open

build(deps): bump rails from 7.2.3.1 to 8.1.3#6866
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bundler/rails-8.1.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Bumps rails from 7.2.3.1 to 8.1.3.

Release notes

Sourced from rails's releases.

8.1.3

Active Support

  • Fix JSONGemCoderEncoder to correctly serialize custom object hash keys.

    When hash keys are custom objects whose as_json returns a Hash, the encoder now calls to_s on the original key object instead of on the as_json result.

    Before: hash = {CustomKey.new(123) => "value"} hash.to_json # => {"{:id=>123}":"value"}

    After: hash.to_json # => {"custom_123":"value"}

    Dan Sharp

  • Fix inflections to better handle overlapping acronyms.

    ActiveSupport::Inflector.inflections(:en) do |inflect|
      inflect.acronym "USD"
      inflect.acronym "USDC"
    end
    "USDC".underscore # => "usdc"

    Said Kaldybaev

  • Silence Dalli 4.0+ warning when using ActiveSupport::Cache::MemCacheStore.

    zzak

Active Model

  • Fix Ruby 4.0 delegator warning when calling inspect on attributes.

    Hammad Khan

  • Fix NoMethodError when deserialising Type::Integer objects marshalled under Rails 8.0.

    The performance optimisation that replaced @range with @max/@min broke Marshal compatibility. Objects serialised under 8.0 (with @range) and deserialised under 8.1 (expecting @max/@min) would crash with undefined method '<=' for nil because Marshal.load restores instance variables without calling initialize.

... (truncated)

Commits
  • fa8f081 Preparing for 8.1.3 release
  • 63cef3d Merge branch '8-1-sec' into 8-1-stable
  • 1db4b89 Preparing for 8.1.2.1 release
  • 1c7d1cf Update changelog
  • e91694b Update CHANGELOG (8.1 only)
  • 6752711 Fix XSS in debug exceptions copy-to-clipboard
  • 63f5ad8 Skip blank attribute names in Action View tag helpers
  • 8c9676b Prevent glob injection in ActiveStorage DiskService#delete_prefixed
  • 9b06fbc Prevent path traversal in ActiveStorage DiskService
  • ec1a0e2 Improve performance of NumberToDelimitedConverter
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Touches dependency files ruby Touches Ruby code labels Apr 20, 2026
@dependabot dependabot Bot added dependencies Touches dependency files ruby Touches Ruby code labels Apr 20, 2026
@dependabot dependabot Bot force-pushed the dependabot/bundler/rails-8.1.3 branch 4 times, most recently from e2aa658 to e9a5cf8 Compare April 27, 2026 02:16
@dependabot dependabot Bot force-pushed the dependabot/bundler/rails-8.1.3 branch 4 times, most recently from fd14108 to 03477bb Compare May 3, 2026 04:13
Bumps [rails](https://github.com/rails/rails) from 7.2.3.1 to 8.1.3.
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](rails/rails@v7.2.3.1...v8.1.3)

---
updated-dependencies:
- dependency-name: rails
  dependency-version: 8.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/bundler/rails-8.1.3 branch from 03477bb to 96ed275 Compare May 5, 2026 05:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Touches dependency files ruby Touches Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants