Update bundler non-major dependencies to v5.2.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
aws-sdk-rails	5.1.0 → 5.2.0
aws-sdk-s3 (source, changelog)	1.228.2 → 1.229.0
bootsnap	1.24.6 → 1.25.0
selenium-webdriver (source, changelog)	4.46.0 → 4.47.0
sentry-rails (source, changelog)	6.6.2 → 6.7.0
sentry-ruby (source, changelog)	6.6.2 → 6.7.0
simplecov (changelog)	1.0.3 → 1.1.1
sqlite3	2.9.5 → 2.9.6

---

Release Notes

aws/aws-sdk-rails (aws-sdk-rails)

v5.2.0

Compare Source

• Issue - The ElasticBeanstalkSQSD middleware's Docker host check now only consults remote_addr, the raw TCP peer address, instead of also accepting remote_ip. remote_ip is derived from the client-supplied X-Forwarded-For header whenever the peer address is itself private, so a request from any private address could name the Docker gateway and be treated as local. Loopback peer addresses are accepted by the check, so requests proxied over loopback are unaffected.
• Issue - Only classes inheriting from ActiveJob::Base are executed by the ElasticBeanstalkSQSD middleware, preventing arbitrary classes named in an SQS message from being instantiated and run. Job class and periodic task names are validated as constant paths and resolved without searching the namespace's ancestors, so a request cannot name a constant outside the intended namespace.
• Feature - Adds a new configuration object for elastic beanstalk sqsd middleware, with an optional job_class_allowlist configuration to ElasticBeanstalkSQSD middleware to restrict which job classes can be dispatched. When set, the allowlist is checked before the class name is resolved, so an excluded class is never loaded.

aws/aws-sdk-ruby (aws-sdk-s3)

v1.229.0

• Feature - AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore.

SeleniumHQ/selenium (selenium-webdriver)

v4.47.0

Compare Source

=========================

• Support CDP versions: v149, v150, v151
• support WebDriver BiDi on Safari Preview and move #bidi onto Driver (#​17729)
• link generated BiDi elements to their spec definitions (#​17781)
• add objectOnly/preserveExtras/scalar-primitive BiDi schema signals (#​17784)
• construct the BiDi transport inside the domain from a connection (#​17796)
• route BiDiBridge navigation through the generated Protocol::BrowsingContext (#​17785)
• resolve spec runfiles via Bazel::Runfiles (#​17810)
• [build] standardize generated-file license and not to edit markers across generators (#​17816)
• validate nullable-constant BiDi params outbound (#​17818)
• [build] upgrade rules_ruby to 0.28.0 and drop vendored Bazel::Runfiles workaround (#​17824)
• [build] Merge vendor cddl files into shared BiDi schema and implement custom Firefox webExtension options (#​17840)
• [grid] honor client-advertised se:remoteUrl for reachable BiDi/CDP/VNC URLs (#​17790)
• tolerate and warn on missing required inbound BiDi fields, with SE_BIDI_STRICT to escalate (#​17844)
• remove deprecated FTP proxy support (#​17846)
• prevent CDP access with Firefox (#​17849)
• test matchers assert log entries by id and optional messages and match severity (#​17848)
• [bidi] Correct float/enum type fidelity in the shared schema and validate primitives outbound in Ruby (#​17852)
• [bidi] mark BiDi types extensible per spec and update Ruby handling (#​17853)
• raise typed WebDriver errors for BiDi from a generated error-code map (#​17855)
• allow pending test guards to require matching provided exception (#​17859)
• pass --enable-chrome-logs unless CHROME_LOG_FILE is set (#​17858)
• support custom vendor specific capabilities in options classes (#​17862)
• validate BiDi outbound ref fields against their declared type (#​17861)
• generate BiDi domain type accessors and union variant factories (#​17865)
• deprecate invalid Firefox profile code (#​17871)
• [build] Automated Browser Version Update with CDP (#​17873)

getsentry/sentry-ruby (sentry-rails)

v6.7.0

Compare Source

New Features ✨

• (active_job) Support for tracing by @​solnic in #​2947
• (active_job) Support for Solid Queue by @​solnic in #​2942
• (client-reports) Record log_byte and trace_metric_byte outcomes by @​sl0thentr0py in #​2997
• Add Fiber support new config.hub_isolation_level which can be set to :fiber or :thread. Use this in case you use Fiber based servers like Falcon by @​SeanLF in #​3018
• New set_attribute api by @​sl0thentr0py in #​2998

Bug Fixes 🐛

Rails

• Guard execution context with send_default_pii by @​solnic in #​3043
• Ensure Rails.error.set_context is not lost by @​solnic in #​3024

Other

• (test) Kill threaded global workers before clearing Sentry globals by @​solnic in #​2990
• Isolate inherited hubs under hub_isolation_level = :fiber by @​SeanLF in #​3036

Internal Changes 🔧

• Use generated gemfiles in test workflows by @​sl0thentr0py in #​2971
• Weekly lockfile generation CI job by @​sl0thentr0py in #​2966

simplecov-ruby/simplecov (simplecov)

v1.1.1

Compare Source

What's Changed

• Bump step-security/harden-runner from 2.20.0 to 2.20.1 by @​dependabot[bot] in #​1258
• rspec-conductor Support by @​sferik in #​1259

Full Changelog: simplecov-ruby/simplecov@v1.1.0...v1.1.1

v1.1.0

Compare Source

What's Changed

• Bump actions/checkout from 7.0.0 to 7.0.1 by @​dependabot[bot] in #​1243
• Bump ruby/setup-ruby from 1.318.0 to 1.320.0 by @​dependabot[bot] in #​1242
• Improve collate performance by @​danielwestendorf in #​1244
• Bump ruby/setup-ruby from 1.320.0 to 1.321.0 by @​dependabot[bot] in #​1247
• Make the HTML report a single self-contained index.html by @​sferik in #​1245
• Cut unloaded-file injection cost, fix 100% coverage in merged reports by @​sferik in #​1252
• Stop matching the :nocov: regex twice on every classified line by @​andriytyurnikov in #​1253
• Absorb resultsets into one accumulator instead of folding pairwise by @​andriytyurnikov in #​1254
• Inject unloaded files once at the merge point, not once per process by @​sferik in #​1255
• Fix CommandGuesser mislabelling suites from incidental path substrings by @​sferik in #​1251
• Speed up SimpleCov.collate with optional multi-process merge by @​danielwestendorf in #​1246
• Keep branch and method data the resultsets carried by @​sferik in #​1256
• Colorblind mode by @​sferik in #​1257

New Contributors

• @​danielwestendorf made their first contribution in #​1244
• @​andriytyurnikov made their first contribution in #​1253

Full Changelog: simplecov-ruby/simplecov@v1.0.3...v1.1.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coveralls]

coverage: 98.286%. remained the same — renovate/bundler-minor-patch into main