[openstreetmap/openstreetmap-website] Bump the dependencies group with 6 updates (PR #7051)

dependabot[bot] notifications at github.com
Wed Apr 29 23:17:21 UTC 2026 

Bumps the dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [bootsnap](https://github.com/rails/bootsnap) | `1.23.0` | `1.24.1` |
| [strong_migrations](https://github.com/ankane/strong_migrations) | `2.6.0` | `2.7.0` |
| [opentelemetry-instrumentation-all](https://github.com/open-telemetry/opentelemetry-ruby-contrib) | `0.92.0` | `0.93.0` |
| [herb](https://github.com/marcoroth/herb) | `0.9.7` | `0.10.1` |
| [puma](https://github.com/puma/puma) | `8.0.0` | `8.0.1` |
| [database_consistency](https://github.com/djezzzl/database_consistency) | `3.0.3` | `3.0.4` |

Updates `bootsnap` from 1.23.0 to 1.24.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/rails/bootsnap/releases">bootsnap's releases</a>.</em></p>
<blockquote>
<h2>v1.24.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix encoding of Ruby source files loaded when <code>BOOTSNAP_READONLY</code> is set.
Files would incorectly be loaded in <code>ASCII-8BIT</code> causing literal strings outside
the pure ASCII range to have <code>ASCII-8BIT</code> encoding instead of <code>UTF-8</code>.
This bug was introduced in <code>1.24.0</code>.</li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/rails/bootsnap/compare/v1.24.0...v1.24.1">https://github.com/rails/bootsnap/compare/v1.24.0...v1.24.1</a></p>
<h2>v1.24.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Added a hook API to customize Ruby compilation.</li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/rails/bootsnap/compare/v1.23.0...v1.24.0">https://github.com/rails/bootsnap/compare/v1.23.0...v1.24.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/rails/bootsnap/blob/main/CHANGELOG.md">bootsnap's changelog</a>.</em></p>
<blockquote>
<h1>1.24.1</h1>
<ul>
<li>Fix encoding of Ruby source files loaded when <code>BOOTSNAP_READONLY</code> is set.
Files would incorectly be loaded in <code>ASCII-8BIT</code> causing literal strings outside
the pure ASCII range to have <code>ASCII-8BIT</code> encoding instead of <code>UTF-8</code>.
This bug was introduced in <code>1.24.0</code>.</li>
</ul>
<h1>1.24.0</h1>
<ul>
<li>Added a hook API to customize Ruby compilation.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/rails/bootsnap/commit/51cceccad0ed5e2caa342c9476438080e96e9974"><code>51ccecc</code></a> Release 1.24.1</li>
<li><a href="https://github.com/rails/bootsnap/commit/e4479c09c98013c5075371449466e0db53508454"><code>e4479c0</code></a> Merge pull request <a href="https://redirect.github.com/rails/bootsnap/issues/538">#538</a> from byroot/debug-compiler-encoding</li>
<li><a href="https://github.com/rails/bootsnap/commit/d6d8768ec1347cb4d6f3e99302c5f060aaa15420"><code>d6d8768</code></a> Fix ISeq.input_to_output to respect default external encoding</li>
<li><a href="https://github.com/rails/bootsnap/commit/dc57c2069a38710d30077d988229c4d6f7f4292d"><code>dc57c20</code></a> Release 1.24.0</li>
<li><a href="https://github.com/rails/bootsnap/commit/481b9b91b5758c691af201f7dec73e54af9c0640"><code>481b9b9</code></a> Avoid interning string on every call</li>
<li><a href="https://github.com/rails/bootsnap/commit/81e6db41be3973fe99e37126487d6928e076a139"><code>81e6db4</code></a> Merge pull request <a href="https://redirect.github.com/rails/bootsnap/issues/535">#535</a> from byroot/compilation-backends</li>
<li><a href="https://github.com/rails/bootsnap/commit/320ca021f1d17bd19322ce6076d2235434e4044a"><code>320ca02</code></a> Allow to substitute the Ruby compiler</li>
<li>See full diff in <a href="https://github.com/rails/bootsnap/compare/v1.23.0...v1.24.1">compare view</a></li>
</ul>
</details>
<br />

Updates `strong_migrations` from 2.6.0 to 2.7.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/ankane/strong_migrations/blob/master/CHANGELOG.md">strong_migrations's changelog</a>.</em></p>
<blockquote>
<h2>2.7.0 (2026-04-25)</h2>
<ul>
<li>Added check for <code>add_foreign_key</code> with MySQL and MariaDB</li>
<li>Added check for <code>add_column</code> with callable default value with MySQL and MariaDB</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/ankane/strong_migrations/commit/2e8bc96f2490d87e8b070d26f050078bd63b4caa"><code>2e8bc96</code></a> Version bump to 2.7.0 [skip ci]</li>
<li><a href="https://github.com/ankane/strong_migrations/commit/6c55ccb55f3072cdb80bdcb4b1f7fb0ab3549585"><code>6c55ccb</code></a> Updated test style to match error message</li>
<li><a href="https://github.com/ankane/strong_migrations/commit/1fe1b87580c7d484caac4282749e6c2078b07781"><code>1fe1b87</code></a> Updated readme style to match error message [skip ci]</li>
<li><a href="https://github.com/ankane/strong_migrations/commit/a8fcfcb5510334916c6897320c1e62cd07053bac"><code>a8fcfcb</code></a> Updated style [skip ci]</li>
<li><a href="https://github.com/ankane/strong_migrations/commit/1f4ee37974cb81fd13da6e6de292d4ea76385573"><code>1f4ee37</code></a> Moved comment [skip ci]</li>
<li><a href="https://github.com/ankane/strong_migrations/commit/693f832db60fe65e20c7f8ebae7f2504e9c58492"><code>693f832</code></a> Updated skip comment [skip ci]</li>
<li><a href="https://github.com/ankane/strong_migrations/commit/7354f82fae8bff7d64c8917abbb49a6478c91fc7"><code>7354f82</code></a> Improved error message for callable default values</li>
<li><a href="https://github.com/ankane/strong_migrations/commit/c2b349481ed023c684294db721d831ca829e1980"><code>c2b3494</code></a> Improved error message for callable default values</li>
<li><a href="https://github.com/ankane/strong_migrations/commit/15b6a550e7c86c385bb08206d67a3a9d68afab9f"><code>15b6a55</code></a> Removed comment that applies to Postgres &lt; 11 [skip ci]</li>
<li><a href="https://github.com/ankane/strong_migrations/commit/c9a2a29af060063fc89153bdb571bf1c82c82e9a"><code>c9a2a29</code></a> Improved error message</li>
<li>Additional commits viewable in <a href="https://github.com/ankane/strong_migrations/compare/v2.6.0...v2.7.0">compare view</a></li>
</ul>
</details>
<br />

Updates `opentelemetry-instrumentation-all` from 0.92.0 to 0.93.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-ruby-contrib/releases">opentelemetry-instrumentation-all's releases</a>.</em></p>
<blockquote>
<h2>opentelemetry-instrumentation-all 0.93.0</h2>
<h2>v0.93.0 / 2026-04-28</h2>
<ul>
<li>ADDED: Upgrade opentelemetry-instrumentation-rails to 0.42.0</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/open-telemetry/opentelemetry-ruby-contrib/compare/opentelemetry-instrumentation-all/v0.92.0...opentelemetry-instrumentation-all/v0.93.0">compare view</a></li>
</ul>
</details>
<br />

Updates `herb` from 0.9.7 to 0.10.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/marcoroth/herb/releases">herb's releases</a>.</em></p>
<blockquote>
<h2>v0.10.1</h2>
<h3>Changes</h3>
<ul>
<li>Ruby: Bundle <code>config/**/*.yml</code> with rubygem by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1682">marcoroth/herb#1682</a></li>
</ul>
<h3>Commits</h3>
<p><strong>Full Changelog</strong>: <a href="https://github.com/marcoroth/herb/compare/v0.10.0...v0.10.1">https://github.com/marcoroth/herb/compare/v0.10.0...v0.10.1</a></p>
<h2>v0.10.0</h2>
<h3>Herb v0.10</h3>
<!-- raw HTML omitted -->
<h3>Ruby</h3>
<ul>
<li>Bump Ruby minimum version to 3.2 by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1654">marcoroth/herb#1654</a></li>
<li>Analyze and resolve Action View <code>render</code> calls by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1663">marcoroth/herb#1663</a></li>
<li>Extract <code>Herb#ensure_installed</code> helper by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1665">marcoroth/herb#1665</a></li>
</ul>
<h3>Herb</h3>
<ul>
<li>Implement Syntax Tree Diff Engine by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1518">marcoroth/herb#1518</a></li>
<li>Introduce Herb Dev Server and <code>@herb-tools/client</code> by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1662">marcoroth/herb#1662</a></li>
</ul>
<h3>Engine</h3>
<ul>
<li>Compile-time optimizations for Action View tag helpers by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1613">marcoroth/herb#1613</a></li>
<li>Add <code>parser_options</code> passthrough and engine config support by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1657">marcoroth/herb#1657</a></li>
</ul>
<h3>Config</h3>
<ul>
<li>Add <code>framework</code> and <code>template_engine</code> options by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1658">marcoroth/herb#1658</a></li>
<li>Expose <code>Herb::Configuration#user_config</code> by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1661">marcoroth/herb#1661</a></li>
</ul>
<h3>Dev Tools</h3>
<ul>
<li>Show warnings for Compile-Time Optimization Mismatches by <a href="https://github.com/marcoroth"><code>@​marcoroth</code></a> in <a href="https://redirect.github.com/marcoroth/herb/pull/1660">marcoroth/herb#1660</a></li>
</ul>
<h3>Commits</h3>
<p><strong>Full Changelog</strong>: <a href="https://github.com/marcoroth/herb/compare/v0.9.7...v0.10.0">https://github.com/marcoroth/herb/compare/v0.9.7...v0.10.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/marcoroth/herb/commit/f681767b9b97ef91605cb6fc59deccfdba18f50a"><code>f681767</code></a> <code>v0.10.1</code></li>
<li><a href="https://github.com/marcoroth/herb/commit/0c7e9029fcd80fd3f8fff94d56233626ca262f57"><code>0c7e902</code></a> Ruby: Bundle <code>config/**/*.yml</code> with rubygem (<a href="https://redirect.github.com/marcoroth/herb/issues/1682">#1682</a>)</li>
<li><a href="https://github.com/marcoroth/herb/commit/abeecad811b8be37adf132f0105724e460161b82"><code>abeecad</code></a> <code>v0.10.0</code></li>
<li><a href="https://github.com/marcoroth/herb/commit/5b2f829c7516fc458561116bcf2966f92322d394"><code>5b2f829</code></a> Ruby: Extract <code>Herb#ensure_installed</code> helper (<a href="https://redirect.github.com/marcoroth/herb/issues/1665">#1665</a>)</li>
<li><a href="https://github.com/marcoroth/herb/commit/bf9f8439150a572368f52f12c8cf42287ea0db71"><code>bf9f843</code></a> Ruby: Analyze and resolve Action View <code>render</code> calls (<a href="https://redirect.github.com/marcoroth/herb/issues/1663">#1663</a>)</li>
<li><a href="https://github.com/marcoroth/herb/commit/3af3a7225878f2c18a986715781e02657f3e0255"><code>3af3a72</code></a> Herb: Introduce Herb Dev Server and <code>@herb-tools/client</code> (<a href="https://redirect.github.com/marcoroth/herb/issues/1662">#1662</a>)</li>
<li><a href="https://github.com/marcoroth/herb/commit/d483ec5466f4ee6cbf2a15336fea798971ab4d29"><code>d483ec5</code></a> Config: Expose <code>Herb::Configuration#user_config</code> (<a href="https://redirect.github.com/marcoroth/herb/issues/1661">#1661</a>)</li>
<li><a href="https://github.com/marcoroth/herb/commit/0a7972e673204edf599aabae19aa82c4e973e21a"><code>0a7972e</code></a> Dev Tools: Show warnings for Compile-Time Optimization Mismatches (<a href="https://redirect.github.com/marcoroth/herb/issues/1660">#1660</a>)</li>
<li><a href="https://github.com/marcoroth/herb/commit/37a1bea85e2d131655fdb0a9219aefbc9735a026"><code>37a1bea</code></a> Config: Add <code>framework</code> and <code>template_engine</code> options (<a href="https://redirect.github.com/marcoroth/herb/issues/1658">#1658</a>)</li>
<li><a href="https://github.com/marcoroth/herb/commit/864e6f4e80f7dcd6bb24f7eccc7fc7e48117d778"><code>864e6f4</code></a> Engine: Add <code>parser_options</code> passthrough and engine config support (<a href="https://redirect.github.com/marcoroth/herb/issues/1657">#1657</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/marcoroth/herb/compare/v0.9.7...v0.10.1">compare view</a></li>
</ul>
</details>
<br />

Updates `puma` from 8.0.0 to 8.0.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/puma/puma/releases">puma's releases</a>.</em></p>
<blockquote>
<h2>v8.0.1</h2>
<ul>
<li>
<p>Bugfixes</p>
<ul>
<li>Fix <code>prune_bundler</code> stripping user-configured <code>BUNDLE_*</code> env vars (e.g. <code>BUNDLE_WITHOUT</code>) on re-exec, which caused workers to crash on boot (<a href="https://redirect.github.com/puma/puma/issues/3929">#3929</a>)</li>
</ul>
</li>
<li>
<p>Performance</p>
<ul>
<li>Use blocks for debug logging to avoid creating log messages when debug is disabled (<a href="https://redirect.github.com/puma/puma/issues/3920">#3920</a>)</li>
</ul>
</li>
<li>
<p>Docs</p>
<ul>
<li>Fix incorrect hook names in gRPC docs (<a href="https://redirect.github.com/puma/puma/issues/3923">#3923</a>)</li>
<li>Reword v8 upgrade guide IPv6 bullet for clarity (<a href="https://redirect.github.com/puma/puma/issues/3928">#3928</a>)</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/puma/puma/blob/main/History.md">puma's changelog</a>.</em></p>
<blockquote>
<h2>8.0.1 / 2026-04-27</h2>
<ul>
<li>
<p>Bugfixes</p>
<ul>
<li>Fix <code>prune_bundler</code> stripping user-configured <code>BUNDLE_*</code> env vars (e.g. <code>BUNDLE_WITHOUT</code>) on re-exec, which caused workers to crash on boot (<a href="https://redirect.github.com/puma/puma/issues/3929">#3929</a>)</li>
</ul>
</li>
<li>
<p>Performance</p>
<ul>
<li>Use blocks for debug logging to avoid creating log messages when debug is disabled (<a href="https://redirect.github.com/puma/puma/issues/3920">#3920</a>)</li>
</ul>
</li>
<li>
<p>Docs</p>
<ul>
<li>Fix incorrect hook names in gRPC docs (<a href="https://redirect.github.com/puma/puma/issues/3923">#3923</a>)</li>
<li>Reword v8 upgrade guide IPv6 bullet for clarity (<a href="https://redirect.github.com/puma/puma/issues/3928">#3928</a>)</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/puma/puma/commit/cee7e613c0d6e072b1ae9993c6dec63cbf259ec3"><code>cee7e61</code></a> Release v8.0.1 (<a href="https://redirect.github.com/puma/puma/issues/3932">#3932</a>)</li>
<li><a href="https://github.com/puma/puma/commit/f955cafec47be2ac8c296a7ab278288737984243"><code>f955caf</code></a> Fix prune_bundler stripping user-configured BUNDLE_* env vars on re-exec (<a href="https://redirect.github.com/puma/puma/issues/3929">#3929</a>)</li>
<li><a href="https://github.com/puma/puma/commit/97996aa025b9ad9ef5252af4a4b0f859cc3c0c23"><code>97996aa</code></a> ci: test_error_logger.rb - fix TruffleRuby error (<a href="https://redirect.github.com/puma/puma/issues/3930">#3930</a>)</li>
<li><a href="https://github.com/puma/puma/commit/03825bc90fd04dc00dd63d1bf6bf72c224ccbed9"><code>03825bc</code></a> Build(deps): Bump actions/github-script from 8 to 9 (<a href="https://redirect.github.com/puma/puma/issues/3925">#3925</a>)</li>
<li><a href="https://github.com/puma/puma/commit/053efae42144c65cdc7110085512216647a68bdc"><code>053efae</code></a> Reword v8 upgrade guide ipv6 bullet (<a href="https://redirect.github.com/puma/puma/issues/3928">#3928</a>)</li>
<li><a href="https://github.com/puma/puma/commit/b19f35ae64d23d4d870089f2b199b0213bac00cc"><code>b19f35a</code></a> Fix incorrect hook names in gRPC docs (<a href="https://redirect.github.com/puma/puma/issues/3923">#3923</a>)</li>
<li><a href="https://github.com/puma/puma/commit/eeabe4bf4d887dc3fbac3f6bdbee1eadf807c9e9"><code>eeabe4b</code></a> Use blocks for debug logging to avoid creating messages if debug disabled (<a href="https://redirect.github.com/puma/puma/issues/3">#3</a>...</li>
<li>See full diff in <a href="https://github.com/puma/puma/compare/v8.0.0...v8.0.1">compare view</a></li>
</ul>
</details>
<br />

Updates `database_consistency` from 3.0.3 to 3.0.4
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/djezzzl/database_consistency/blob/master/CHANGELOG.md">database_consistency's changelog</a>.</em></p>
<blockquote>
<h3>[3.0.4] - 2026/04/24</h3>
<ul>
<li>Add <code>--only-checkers=LIST</code> to scope <code>--autofix</code> to offenses produced by specific checker class names (comma-separated, e.g. <code>--only-checkers=ColumnPresenceChecker,NullConstraintChecker</code>). Unknown names are rejected before any checks run. Thanks to <a href="https://github.com/fabdbt">Fabien Dobat</a>!</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/djezzzl/database_consistency/commit/20dc96d348bd70489ebc3b338b44e038b2db5a98"><code>20dc96d</code></a> Release v3.0.4</li>
<li><a href="https://github.com/djezzzl/database_consistency/commit/d2c641620319c96c5254a15a4385a65afc330356"><code>d2c6416</code></a> Update CHANGELOG.md</li>
<li><a href="https://github.com/djezzzl/database_consistency/commit/75820cf0e8f33e2ef42210107b2b1cdc460ad39b"><code>75820cf</code></a> feat(autofix): scope --autofix via --only-checkers=LIST (<a href="https://redirect.github.com/djezzzl/database_consistency/issues/301">#301</a>)</li>
<li>See full diff in <a href="https://github.com/djezzzl/database_consistency/compare/v3.0.3...v3.0.4">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions


</details>
You can view, comment on, or merge this pull request online at:

  https://github.com/openstreetmap/openstreetmap-website/pull/7051

-- Commit Summary --

  * Bump the dependencies group with 6 updates

-- File Changes --

    M Gemfile.lock (32)

-- Patch Links --

https://github.com/openstreetmap/openstreetmap-website/pull/7051.patchhttps://github.com/openstreetmap/openstreetmap-website/pull/7051.diff
-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/7051
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/pull/7051 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20260429/241c1e87/attachment-0001.htm>

More information about the rails-dev mailing list