chore(deps): bump the ruby-deps group across 1 directory with 4 updates

[dependabot]

Bumps the ruby-deps group with 4 updates in the / directory: bootsnap, sqlite3, view_component and pagy.

Updates bootsnap from 1.24.2 to 1.24.3

Release notes

Sourced from bootsnap's releases.

v1.24.3

• Fix the 1.24.2 workaround to parse Ruby files with UTF-8 even when the LANG environment variable is unset or set to C.

Full Changelog: rails/bootsnap@v1.24.2...v1.24.3

Changelog

Sourced from bootsnap's changelog.

1.24.3

• Fix the 1.24.2 workaround to parse Ruby files with UTF-8 even when the LANG environment variable is unset or set to C.

Commits

• 4e14f7e Release 1.24.3
• 7c36e01 Fix encoding in Ruby [Bug #22023] workaround
• See full diff in compare view

Updates sqlite3 from 2.9.3 to 2.9.4

Release notes

Sourced from sqlite3's releases.

2.9.4 / 2026-05-05

• Vendored sqlite is updated to v3.53.1 (from v3.53.0). #704 @​flavorjones

ecabed721e6eaad54601d2685f09029d90025efc8d931040dc89cb3f8a2080ec  gems/sqlite3-2.9.4-aarch64-linux-gnu.gem
ffb4255947fb54c8c3eeca97460c9702b40de91ce390455ef7367ca6a3929a31  gems/sqlite3-2.9.4-aarch64-linux-musl.gem
9ee2008b9fbec984c3c165b0d7eedd2bd2a415100b761bfa3a4c6fbec9208bf6  gems/sqlite3-2.9.4-arm-linux-gnu.gem
8dc1fe4da6977992cd62decf4a93ccf6cc2e124a5e6a340160d52092f70e837a  gems/sqlite3-2.9.4-arm-linux-musl.gem
1d5aad413a815d236e96d43f05a1acc600b6cd086800770342a3f9c2877499ff  gems/sqlite3-2.9.4-arm64-darwin.gem
40997c549b19e2fdfcc5e271f6bdd4d502179742c0bfd678da23d0d09b929848  gems/sqlite3-2.9.4-x64-mingw-ucrt.gem
5cab40ea734796802853501bd23b6162eec391dc37f3bf04bc2ffbda9c8bf93d  gems/sqlite3-2.9.4-x86-linux-gnu.gem
936e2d4a428887fac15f55e26a18671fbb4e522bffaa43969fadf7b40ab25214  gems/sqlite3-2.9.4-x86-linux-musl.gem
f280c476e360b73e86165a5e59b72801385b4a6c3a47f8af5ecefb9d90bec17f  gems/sqlite3-2.9.4-x86_64-darwin.gem
537a3eda71b1df1336d0055cbebe55a7317c34870c192c7b6b9d8d0be6871847  gems/sqlite3-2.9.4-x86_64-linux-gnu.gem
3fc5e865b4be9a85d998203ef8d0c0fdcb92f20acf34a254346ff8a19088efec  gems/sqlite3-2.9.4-x86_64-linux-musl.gem
6161c5b9c17886b289558e6c8082b28a22a814736d2433c9a67f4c6bfcde5c97  gems/sqlite3-2.9.4.gem

Changelog

Sourced from sqlite3's changelog.

2.9.4 / 2026-05-05

• Vendored sqlite is updated to v3.53.1 (from v3.53.0). #704 @​flavorjones

Commits

• ae58899 version bump to v2.9.4
• e16df53 Merge pull request #704 from sparklemotion/dep-sqlite-3.53.1
• 2dc95ff dep: update vendored sqlite to 3.53.1
• 1b8241a build(deps): bump the actions group with 2 updates (#703)
• fd6f3fb build(deps-dev): update minitest requirement from 6.0.5 to 6.0.6 (#702)
• b0453d6 build(deps-dev): update minitest requirement from 6.0.4 to 6.0.5 (#700)
• 134521c build(deps): bump ruby/setup-ruby in the actions group (#701)
• a2fff52 build(deps): bump the actions group with 3 updates (#699)
• af66843 build(deps-dev): update minitest requirement from 6.0.3 to 6.0.4 (#698)
• 26d49d9 build(deps-dev): update rake-compiler-dock requirement (#697)
• See full diff in compare view

Updates view_component from 4.8.0 to 4.9.0

Release notes

Sourced from view_component's releases.

4.9.0

• Fix path traversal vulnerability in ViewComponentsSystemTestController where sibling directories sharing a string prefix with the allowed temp directory could bypass the path containment check. The start_with? check has been replaced with a separator-aware prefix check, and nefarious path errors now return a 404 instead of an unhandled exception.

  Joel Hawksley

• Fix preview route vulnerability where inherited methods on ViewComponent::Preview (such as render_with_template) could be invoked via the preview URL, allowing arbitrary internal Rails templates to be rendered with attacker-controlled locals and request parameters. render_args now raises AbstractController::ActionNotFound for any example not explicitly declared on the preview subclass.

  Joel Hawksley

• Add yard-lint to CI.

  Joel Hawksley

Changelog

Sourced from view_component's changelog.

4.9.0

• Fix path traversal vulnerability in ViewComponentsSystemTestController where sibling directories sharing a string prefix with the allowed temp directory could bypass the path containment check. The start_with? check has been replaced with a separator-aware prefix check, and nefarious path errors now return a 404 instead of an unhandled exception.

  Joel Hawksley

• Fix preview route vulnerability where inherited methods on ViewComponent::Preview (such as render_with_template) could be invoked via the preview URL, allowing arbitrary internal Rails templates to be rendered with attacker-controlled locals and request parameters. render_args now raises AbstractController::ActionNotFound for any example not explicitly declared on the preview subclass.

  Joel Hawksley

• Add yard-lint to CI.

  Joel Hawksley

Commits

• 458281b Merge pull request #2626 from ViewComponent/release-4-9-0
• 5eea779 release 4.9.0
• 9a4bac9 Merge commit from fork
• b70deae add changelog
• da99314 fix advisory
• a243dd2 reproduce advisory
• 765d7bc fix advisory
• cca62ec reproduce report
• 8c76bd3 Merge pull request #2625 from ViewComponent/2567-yardlint
• a59a5ae cleanup
• Additional commits viewable in compare view

Updates pagy from 6.5.0 to 9.4.0

Release notes

Sourced from pagy's releases.

Version 9.4.0

🚀 Try the upcoming v43! 🚀

Pagy is about to leap to the next level.

Try the new v43.0.0.rc*.

Leave your comments in the Version 43 discussion.

✴ What's new in 9.0+ ✴

• Wicked-fast Keyset Pagination for big data! It works with ActiveRecord::Relation and Sequel::Dataset sets.
• More Playground Apps to showcase, clone and develop pagy APPs without any setup on your side
• Lots of refactorings and optimizations
• See the Changelog for possible breaking changes

Changes in 9.4.0

• Update aria translation for Tamil (#788)
• Add Slovak localization with west_slavic pluralization rules (#787)

CHANGELOG

Version 9.3.4

✴ What's new in 9.0+ ✴

• Wicked-fast Keyset Pagination for big data! It works with ActiveRecord::Relation and Sequel::Dataset sets.
• More Playground Apps to showcase, clone and develop pagy APPs without any setup on your side
• Lots of refactorings and optimizations
• See the Changelog for possible breaking changes

Changes in 9.3.4

• Fix method visibility in JsonApiExtra (#765)

CHANGELOG

Version 9.3.3

✴ What's new in 9.0+ ✴

• Wicked-fast Keyset Pagination for big data! It works with ActiveRecord::Relation and Sequel::Dataset sets.
• More Playground Apps to showcase, clone and develop pagy APPs without any setup on your side

... (truncated)

Changelog

Sourced from pagy's changelog.

Version 9.4.0

• Update aria translation for Tamil (#788)
• Add Slovak localization with west_slavic pluralization rules (#787)

Version 9.3.5

• fix quoted identifiers in keyset (#780)
• Fix clone command (#770)

Version 9.3.4

• Fix method visibility in JsonApiExtra (#765)

Version 9.3.3

• Add test for locales - to find problematic keys (#752)
• Update locales: zh-CN, zh-HK, zh-TW (#751) (fix #608, fix #609, fix #610)
  • Remove :other from :aria_label key and code comment
  • Change :item_name which had :one_other keys to default to the :other key
  • Fix comment

Version 9.3.2

• Improve gapped series computation by a few milliseconds

Version 9.3.1

• Added qualified column names to the keyset query

Version 9.3.0

• Remove the :typecast_latest variable
• Add the :jsonify_keyset_attributes variable to override the encoding (#749)

Version 9.2.2

• Replace inline templates with template block in sinatra apps
• Replace the rails calendar app with a sinatra app
• Add PagyApps::INDEX

Version 9.2.1

• Improve bin/pagy to dynamically find apps and descriptions
• Apps refactoring:
  • Update rails to 8.0
  • Replace rails AR keyset apps with sinatra apps
  • Improve consistency

Version 9.2.0

... (truncated)

Commits

• 2f04298 Merge dev-9
• 817c034 Announce v43
• ddf4c7d Version 9.4.0
• cc74dbf Update aria translation for Tamil (#788)
• 72f268a Add v43 banner in README.md
• 6aa3774 Add Slovak localization with west_slavic pluralization rules (#787)
• 7f1b018 Fix CI syntax in create-release.yml
• f746c32 Merge branch 'dev-9'
• cd0033c Version 9.3.5
• ea2ad53 fix quoted identifiers in keyset (#780)
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
pagy	[>= 43.a, < 44]

[AkaKwak]

@dependabot unignore pagy

[dependabot]

No dependency name (pagy) or ignore conditions found to unignore.

[AkaKwak]

@dependabot ignore pagy major version

[dependabot]

OK, I won't notify you about version 43.x.x of pagy again, unless you unignore it.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.