Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 7, 2025

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps the app-dependencies group with 4 updates: listen, jira-ruby, mysql2 and sequel.

Updates listen from 3.0.8 to 3.9.0

Release notes

Sourced from listen's releases.

v3.9.0

v3.8.0

v3.7.1

v3.7.0

v3.6.0

✨ New Features

v3.5.0

v3.4.1

v3.5.1

v3.3.4

v3.3.3

v3.3.2

... (truncated)

Commits
  • 7b7a2f5 issue #572: switch Kernel.warn and warn to adapter_warn
  • 4d682d3 issue #572: add support for LISTEN_GEM_ADAPTER_WARN_BEHAVIOR=warn|log|silent
  • 2a34596 issue #572: bump version to v3.9
  • eea2891 issue #572: add Listen.adapter_warn_behavior =
  • 0f600f3 drop ruby 2.6 and add ruby 3.3 to the test matrix
  • 4fc1d06 fix github workflows link
  • fd85e1c release v3.8
  • bac8015 Use the defined type to the default value of directory
  • ec5c88a update ruby version matrix to drop 2.4, 2.5 and add 3.2
  • 1d1b628 Update ruby version 3.0.4
  • Additional commits viewable in compare view

Updates jira-ruby from 2.3.0 to 3.0.0

Release notes

Sourced from jira-ruby's releases.

v3.0.0

Overview

Version 3.0.0 is here with a few big changes. A huge shoutout goes to all those who have contributed. Demand and contributions waned, for a bit, but we're slowly getting updates out there thanks to new contributors!

Highlights

  • Support for modern versions of Ruby
  • Bug fixes
  • Improvements to tests
  • Improvements to Rubocop (more to come)
  • Ability to add multiple issues
  • Replaced Net::HTTP::Proxy
  • Upgraded to OAuth 1.x
  • Updated to use the jql endpoint for search

What's Changed

New Contributors

... (truncated)

Commits
  • de8db26 Merge pull request #471 from bobbrodie/release-3.0.0
  • e924251 Update to 3.0.0, remove beta label
  • adaccc3 Merge pull request #468 from ClickMechanic/Use_new_JQL_endpoint_with_token_ba...
  • 74e79f3 feat: Return added issue or issues from #add_issue and #add_issues
  • 08fdcf1 rubocop: Allow bang methods to return true
  • ad699dd rubocop: Changes Naming/PredicateName to Naming/PredicateMethod
  • 9bee6c5 style: Fix Rubocop issues
  • ae8f253 fix: Moves pagination into Issue
  • 72d0908 fix: replace validate_query with reconcile_issues
  • 1e8c813 fix: removes no-longer supported startAt parameter from .jql
  • Additional commits viewable in compare view

Updates mysql2 from 0.5.6 to 0.5.7

Release notes

Sourced from mysql2's releases.

0.5.7

What's Changed

New Contributors

Full Changelog: brianmario/mysql2@0.5.6...0.5.7

Commits
  • c79b3c1 bump version
  • 0f38974 Expose db attribute of MYSQL client struct (#1245)
  • b63d2e8 Correct MariaDB runtime library verison check (#1406)
  • 441b104 CI: select better MariaDB mirrors because some block GitHub Actions (#1401)
  • 99a6cc3 CI: Add an option to use SSL certifications generated from specific host. (#1...
  • 3adb531 rb_mysql_result_free_result is now executed if the result is 0 rows. (#1399)
  • 794ca50 Merge pull request #1400 from sodabrew/update-rake-compiler
  • cd6fc60 CI: fixes for centos 7 dockerfile
  • f10e767 CI: Allow newer rake, rake-compiler dependencies
  • 57b8df1 README: Remove link to Travis CI
  • Additional commits viewable in compare view

Updates sequel from 5.52.0 to 5.97.0

Changelog

Sourced from sequel's changelog.

=== 5.97.0 (2025-10-01)

  • Simplify Postgres::PGRange#inspect output (jeremyevans)

  • Add deprecated_associations plugin, for warning/raising for deprecated association access (jeremyevans)

  • Clear all cached schema information when using Database#drop_schema on PostgreSQL (jeremyevans)

  • Add Database#rename_schema on PostgreSQL (jeremyevans)

=== 5.96.0 (2025-09-01)

  • Support alter_table rename_constraint on PostgreSQL 9.2+ (jeremyevans) (#2274)

  • Do not auto parameterize PostgreSQL range and multirange types containing expressions (jeremyevans)

  • Support sort and reverse methods in pg_array_ops extension on PostgreSQL 18+ (jeremyevans)

  • Support :in_arrays option for Postgres::JSON{,B}#strip_nulls in pg_json_ops extension on PostgreSQL 18+ (jeremyevans)

  • Support VIRTUAL generated columns on PostgreSQL 18+ using :virtual option (jeremyevans)

=== 5.95.1 (2025-08-05)

  • Fix regression in 5.95.0 where :deferred would be ignored for unique and primary key constraints on PostgreSQL (jeremyevans) (#2321)

=== 5.95.0 (2025-08-01)

  • Support num_waiting for the timed_queue and shared_timed_queue connection pools (jeremyevans)

  • Add class_table_inheritance_constraint_validations plugin, supporting constraint validations for all of the model's tables (sterlzbd, jeremyevans) (#2316, #2319)

  • Support :no_inherit option for CHECK constraints on PostgreSQL 9.2+ (jeremyevans)

  • Support :no_inherit option for NOT NULL constraints on PostgreSQL 18+ (jeremyevans)

  • Support not_null: {name: "constaint_name"} column option for naming NOT NULL constraints on PostgreSQL 18+ (jeremyevans)

  • Support :period foreign_key option for PERIOD on PostgreSQL 18+ (jeremyevans)

  • Support :include unique/primary_key/exclude option for INCLUDE on PostgreSQL 11+ (jeremyevans)

  • Support :nulls_not_distinct unique option for NULLS NOT DISTINCT on PostgreSQL 15+ (jeremyevans)

  • Support :without_overlaps primary_key and unique option for WITHOUT OVERLAPS on PostgreSQL 18+ (jeremyevans)

=== 5.94.0 (2025-07-01)

  • Support ALTER TABLE ALTER CONSTRAINT on PostgreSQL using alter_table alter_constraint method (jeremyevans)

... (truncated)

Commits
  • 4ea5e5b Bump version to 5.97.0
  • fade966 Update deprecated_associations plugin documentation
  • 9f75fce Typecast invalid BigDecimal to 0.0 regardless of Ruby version
  • 6ae69b4 Make schema dumper spec work with E or e in BigDecimal output
  • ae05d8e Exclude mysql2 version 0.5.7 in CI gemfile
  • ab8f754 Remove unnecessary code in Dataset#ignore_values_preceding
  • bdeb862 Simplify Postgres::PGRange#inspect output
  • 7a299a2 Add deprecated_associations plugin, for warning/raising for deprecated associ...
  • 480d620 Use Model.association_reflection in the filter-by-associations support
  • 2b19745 Clear all cached schema information when using Database#drop_schema on Postgr...
  • Additional commits viewable in compare view

Bumps the app-dependencies group with 3 updates: ckeditor5, globals and sass.

Updates ckeditor5 from 46.1.1 to 47.0.0

Release notes

Sourced from ckeditor5's releases.

v47.0.0

We are happy to announce the release of CKEditor 5 v47.0.0.

Release highlights

CKEditor AI (early access)

We are introducing CKEditor AI, a set of versatile AI-powered features that integrate directly into CKEditor 5. It brings generation, summarization, correction, contextual chat help, reviews, and many other capabilities, right into the editor. With CKEditor AI, users will no longer need to switch between the editor and AI tools.

Three features are available in this early access phase:

  • Chat: a conversational AI for dynamic, multi-turn interactions that support various context sources, model selection, which can perform changes directly on the document.
  • Quick actions: one-click transformations and instant insights for selected text.
  • Review: automatic checks for grammar, tone, correctness, style, and more, with UX optimized for performing full-document review.

Each feature is powered by our state-of-the-art AI service, available in the Cloud today and coming soon for on-premises deployments. This makes CKEditor AI a true plug-and-play solution that works out of the box, eliminating the need for months of custom development.

CKEditor AI is available as part of our free trial in early access.

Long-term Support (⭐)

We are introducing the CKEditor 5 LTS (Long-term Support) Edition, giving teams up to 3 years of stability with guaranteed updates.

The first LTS release is v47.0.0 (October 2025). It will receive 6 months of active development with new features and fixes, then 2.5 years of maintenance with security and critical compatibility updates.

For v47.x, the Maintenance phase starts in April 2026. From then, the next versions in the v47.x line will be available only under a commercial LTS Edition license. Therefore, starting in April, integrators without an LTS license should migrate to v48.x (the next regular release).

If you need long-term stability, contact sales or read more about CKEditor 5 LTS Edition.

Other improvements and fixes

This release also brings several smaller but important enhancements and fixes:

  • Widgets: the default Tab/Shift+Tab navigation now works better inside nested editables, improving usability. This change is also reflected in the editor’s current widgets (like tables), leading to more intuitive keyboard navigation.
  • UI: dialogs in custom features can now be positioned programmatically with more flexible options (Dialog#show()).
  • Comments: confirmation views for deleting comments and threads now use simplified CSS selectors (.ck-confirm-view). You may need to adjust custom styles accordingly.

Please refer to the update guide to learn more about these changes.

MAJOR BREAKING CHANGES ℹ️

  • ai: Due to the release of the new AI feature, the ai.* configuration structure has changed. Until now, the configuration object was used for the former AIAssistant feature. Now, this configuration space is used for all AI related features. Configuration for the AIAssistant was moved. The changes are:
    • ai.aiAssistant -> ai.assistant,
    • ai.useTheme -> ai.assistant.useTheme,
    • ai.aws -> ai.assistant.adapter.aws,
    • ai.openAI -> ai.assistant.adapter.openAI.

MINOR BREAKING CHANGES ℹ️

  • table, widget: The Widget feature implements the default handling for Tab/Shift+Tab to navigate nested editable elements in the editor content. Closes #19083. The listeners are registered on the low priority bubbling event in the context of widgets and editable elements. Please verify if your custom Tab/Shift+Tab handling does not collide with the default one.

... (truncated)

Changelog

Sourced from ckeditor5's changelog.

47.0.0 (October 1, 2025)

We are happy to announce the release of CKEditor 5 v47.0.0.

Release highlights

CKEditor AI (early access)

We are introducing CKEditor AI, a set of versatile AI-powered features that integrate directly into CKEditor 5. It brings generation, summarization, correction, contextual chat help, reviews, and many other capabilities, right into the editor. With CKEditor AI, users will no longer need to switch between the editor and AI tools.

Three features are available in this early access phase:

  • Chat: a conversational AI for dynamic, multi-turn interactions that support various context sources, model selection, which can perform changes directly on the document.
  • Quick actions: one-click transformations and instant insights for selected text.
  • Review: automatic checks for grammar, tone, correctness, style, and more, with UX optimized for performing full-document review.

Each feature is powered by our state-of-the-art AI service, available in the Cloud today and coming soon for on-premises deployments. This makes CKEditor AI a true plug-and-play solution that works out of the box, eliminating the need for months of custom development.

CKEditor AI is available as part of our free trial in early access.

Long-term Support (⭐)

We are introducing the CKEditor 5 LTS (Long-term Support) Edition, giving teams up to 3 years of stability with guaranteed updates.

The first LTS release is v47.0.0 (October 2025). It will receive 6 months of active development with new features and fixes, then 2.5 years of maintenance with security and critical compatibility updates.

For v47.x, the Maintenance phase starts in April 2026. From then, the next versions in the v47.x line will be available only under a commercial LTS Edition license. Therefore, starting in April, integrators without an LTS license should migrate to v48.x (the next regular release).

If you need long-term stability, contact sales or read more about CKEditor 5 LTS Edition.

Other improvements and fixes

This release also brings several smaller but important enhancements and fixes:

  • Widgets: the default Tab/Shift+Tab navigation now works better inside nested editables, improving usability. This change is also reflected in the editor’s current widgets (like tables), leading to more intuitive keyboard navigation.
  • UI: dialogs in custom features can now be positioned programmatically with more flexible options (Dialog#show()).
  • Comments: confirmation views for deleting comments and threads now use simplified CSS selectors (.ck-confirm-view). You may need to adjust custom styles accordingly.

Please refer to the update guide to learn more about these changes.

MAJOR BREAKING CHANGES ℹ️

  • ai: Due to the release of the new AI feature, the ai.* configuration structure has changed. Until now, the configuration object was used for the former AIAssistant feature. Now, this configuration space is used for all AI related features. Configuration for the AIAssistant was moved. The changes are:
    • ai.aiAssistant -> ai.assistant,
    • ai.useTheme -> ai.assistant.useTheme,
    • ai.aws -> ai.assistant.adapter.aws,
    • ai.openAI -> ai.assistant.adapter.openAI.

MINOR BREAKING CHANGES ℹ️

... (truncated)

Commits
  • 0c02152 Release: v47.0.0. [skip ci]
  • 317bfa1 AI Docs
  • b3b0398 Update docs/features/feature-digest.md
  • bf8d7be Add AI quick actions to menu bar (#19179)
  • 167297a Update scripts/vale/styles/Vocab/Docs/accept.txt
  • cdbe54f Docs: a typo. [short flow]
  • f826684 Merge branch 'release' into ck/release-ai-docs
  • 4846f1f Docs: features digest. [short flow]
  • 318844e Docs: update to 47.x. guide
  • a6f4ba6 Docs: minior fixes. [short flow]
  • Additional commits viewable in compare view

Updates globals from 15.15.0 to 16.4.0

Release notes

Sourced from globals's releases.

v16.4.0

  • Update globals (#309) 8b8a2d6

sindresorhus/globals@v16.3.0...v16.4.0

v16.3.0

  • Update globals (#304) 8c029d9

sindresorhus/globals@v16.2.0...v16.3.0

v16.2.0

  • Add new greasemonkey globals (#299) e4f6e8c

sindresorhus/globals@v16.1.0...v16.2.0

v16.1.0

  • Update globals (#293) 5c58875

sindresorhus/globals@v16.0.0...v16.1.0

v16.0.0

Breaking

  • The serviceworker globals are now generated from browsers (#281) 039ed51
    • It's a breaking change as a few globals have been removed.

sindresorhus/globals@v15.15.0...v16.0.0

Commits

Updates sass from 1.77.6 to 1.93.2

Release notes

Sourced from sass's releases.

Dart Sass 1.93.2

To install Sass 1.93.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • No user-visible changes.

JavaScript API

  • Fix another error in the release process for @sass/types.

See the full changelog for changes in earlier releases.

Dart Sass 1.93.1

To install Sass 1.93.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • No user-visible changes.

JavaScript API

  • Fix an error in the release process for @sass/types.

See the full changelog for changes in earlier releases.

Dart Sass 1.93.0

To install Sass 1.93.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Fix a crash when a style rule contains a nested @import, and the loaded file @uses a user-defined module as well as @includes a top-level mixin which emits top-level declarations.

JavaScript API

  • Release a @sass/types package which contains the type annotations used by both the sass and sass-embedded package without any additional code or dependencies.

See the full changelog for changes in earlier releases.

Dart Sass 1.92.1

To install Sass 1.92.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

... (truncated)

Changelog

Sourced from sass's changelog.

1.93.2

  • No user-visible changes.

JavaScript API

  • Fix another error in the release process for @sass/types.

1.93.1

  • No user-visible changes.

JavaScript API

  • Fix an error in the release process for @sass/types.

1.93.0

  • Fix a crash when a style rule contains a nested @import, and the loaded file @uses a user-defined module as well as @includes a top-level mixin which emits top-level declarations.

JavaScript API

  • Release a @sass/types package which contains the type annotations used by both the sass and sass-embedded package without any additional code or dependencies.

1.92.1

  • Fix a bug where variable definitions from one imported, forwarded module would not be passed as implicit configuration to a later imported, forwarded module.

1.92.0

  • Breaking change: Emit declarations, childless at-rules, and comments in the order they appear in the source even when they're interleaved with nested rules. This obsoletes the mixed-decls deprecation.

  • Breaking change: The function name type() is now fully reserved for the plain CSS function. This means that @function definitions with the name type will produce errors, while function calls will be parsed as special function strings.

  • Configuring private variables using @use ... with, @forward ... with, and meta.load-css(..., $with: ...) is now deprecated. Private variables were always intended to be fully encapsulated within the module that defines them, and this helps enforce that encapsulation.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates

Bumps the app-dependencies group with 4 updates: [listen](https://github.com/guard/listen), [jira-ruby](https://github.com/sumoheavy/jira-ruby), [mysql2](https://github.com/brianmario/mysql2) and [sequel](https://github.com/jeremyevans/sequel).


Updates `listen` from 3.0.8 to 3.9.0
- [Release notes](https://github.com/guard/listen/releases)
- [Commits](guard/listen@v3.0.8...v3.9.0)

Updates `jira-ruby` from 2.3.0 to 3.0.0
- [Release notes](https://github.com/sumoheavy/jira-ruby/releases)
- [Commits](sumoheavy/jira-ruby@v2.3.0...v3.0.0)

Updates `mysql2` from 0.5.6 to 0.5.7
- [Release notes](https://github.com/brianmario/mysql2/releases)
- [Commits](brianmario/mysql2@0.5.6...0.5.7)

Updates `sequel` from 5.52.0 to 5.97.0
- [Changelog](https://github.com/jeremyevans/sequel/blob/master/CHANGELOG)
- [Commits](jeremyevans/sequel@5.52.0...5.97.0)
Monthly dependency updates: Bump the app-dependencies group with 3 updates

Bumps the app-dependencies group with 3 updates: [ckeditor5](https://github.com/ckeditor/ckeditor5), [globals](https://github.com/sindresorhus/globals) and [sass](https://github.com/sass/dart-sass).


Updates `ckeditor5` from 46.1.1 to 47.0.0
- [Release notes](https://github.com/ckeditor/ckeditor5/releases)
- [Changelog](https://github.com/ckeditor/ckeditor5/blob/master/CHANGELOG.md)
- [Commits](ckeditor/ckeditor5@v46.1.1...v47.0.0)

Updates `globals` from 15.15.0 to 16.4.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v15.15.0...v16.4.0)

Updates `sass` from 1.77.6 to 1.93.2
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.77.6...1.93.2)

---
updated-dependencies:
- dependency-name: listen
  dependency-version: 3.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-dependencies
- dependency-name: jira-ruby
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: app-dependencies
- dependency-name: mysql2
  dependency-version: 0.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: app-dependencies
- dependency-name: sequel
  dependency-version: 5.97.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: app-dependencies
- dependency-name: ckeditor5
  dependency-version: 47.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: app-dependencies
- dependency-name: globals
  dependency-version: 16.4.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: app-dependencies
- dependency-name: sass
  dependency-version: 1.93.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code ruby Pull requests that update Ruby code labels Oct 7, 2025
@aelkiss
Copy link
Member

aelkiss commented Oct 7, 2025

It's interesting to see this run and produce a pull request; it's also interesting that it tries to update even the things that are pinned. I think there's a way to tell Dependabot to ignore those.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 17, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

1 similar comment
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 3, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants