Bump the deps group with 6 updates

[dependabot]

Bumps the deps group with 6 updates:

Package	From	To
square.rb	40.0.0.20241120	40.1.0.20241218
googleauth	1.12.0	1.12.2
dotenv	3.1.6	3.1.7
appsignal	4.2.3	4.3.1
lefthook	1.9.2	1.10.0
capybara-playwright-driver	0.5.3	0.5.4

Updates square.rb from 40.0.0.20241120 to 40.1.0.20241218

Updates googleauth from 1.12.0 to 1.12.2

Release notes

Sourced from googleauth's releases.

googleauth: v1.12.2

1.12.2 (2024-12-19)

Bug Fixes

• GCECredentials lazily fetches from the metadata server to ensure a universe domain is known (#509)

googleauth: v1.12.1

1.12.1 (2024-12-17)

Bug Fixes

• Restored previous behavior where the apply! method returns the auth header (#506)

Changelog

Sourced from googleauth's changelog.

1.12.2 (2024-12-19)

Bug Fixes

• GCECredentials lazily fetches from the metadata server to ensure a universe domain is known (#509)

1.12.1 (2024-12-17)

Bug Fixes

• Restored previous behavior where the apply! method returns the auth header (#506)

Commits

• 3f5ed1e chore(main): release googleauth 1.12.2 (#510)
• 3678316 fix: GCECredentials lazily fetches from the metadata server to ensure a unive...
• 60ec865 chore(main): release googleauth 1.12.1 (#507)
• b10cda4 fix: Restored previous behavior where the apply! method returns the auth head...
• See full diff in compare view

Updates dotenv from 3.1.6 to 3.1.7

Release notes

Sourced from dotenv's releases.

v3.1.7

What's Changed

• Fix issue with repeated linebreaks when normalizing line endings by @​bkeepers in bkeepers/dotenv#523
• Generate build matrix from endoflife.date by @​bkeepers in bkeepers/dotenv#521

Full Changelog: bkeepers/dotenv@v3.1.6...v3.1.7

Changelog

Sourced from dotenv's changelog.

3.1.7

• Fix issue with repeated linebreaks when normalizing line endings by @​bkeepers in bkeepers/dotenv#523

Full Changelog: bkeepers/dotenv@v3.1.6...v3.1.7

Commits

• 5bbef66 Merge pull request #523 from bkeepers/preserve-linebreaks
• 19a7675 Prepare for 3.1.7 release
• bf87415 Preserve repeated linebreaks when normalizing line endings
• 79c0f1c Merge pull request #521 from bkeepers/endoflife-matrix
• fdd83ed Run tests once/day to test against latest versions
• 882de31 Try continuing when bundle install fails
• eb14723 Getting Ruby and Rails versions from endoflife.date
• See full diff in compare view

Updates appsignal from 4.2.3 to 4.3.1

Changelog

Sourced from appsignal's changelog.

4.3.1

Published on 2024-12-20.

Fixed

• Fix a performance issue when sanitising INSERT INTO ... VALUES queries. (patch 9791d9a1)

4.3.0

Published on 2024-12-20.

Added

• Add logger broadcasting. This change implements an alternative within Appsignal::Logger to ActiveSupport::BroadcastLogger, following the same interface. This enables a proper workaround to the issues with ActiveSupport::BroadcastLogger ((#49745, #51883)) when used alongside tagged logging.

  For example, to use tagged logging both in logs emitted by the default Rails.logger and in logs sent to AppSignal, replace the Rails.logger with an AppSignal logger that broadcasts to the default Rails.logger:

  appsignal_logger = Appsignal::Logger.new("app")
  appsignal_logger.broadcast_to(Rails.logger)
  Rails.logger = ActiveSupport::TaggedLogging.new(appsignal_logger)

  (minor 5cb1464b)

Removed

• Remove tagged logging support from Appsignal::Logger.

  Tagged logging is still supported by wrapping an instance of Appsignal::Logger with ActiveSupport::TaggedLogging:

  appsignal_logger = Appsignal::Logger.new("rails")
  tagged_logger = ActiveSupport::TaggedLogging.new(appsignal_logger)
  Rails.logger = tagged_logger

  Removing this functionality allows for a workaround to issues within Rails (#49745, #51883), where using the broadcast logger to log to more than one tagged logger results in incorrect behaviour of the tagged logging methods, resulting in breakage throughout Rails' internals:

  # We use the built-in request ID middleware as an example that triggers
  # the issue:
  Rails.config.log_tags = [:request_id]
  appsignal_logger = Appsignal::Logger.new("rails")
  tagged_logger = ActiveSupport::TaggedLogging.new(appsignal_logger)
  This does not work correctly, because the default Rails.logger is a
  broadcast logger that is already broadcasting to a tagged logger.

... (truncated)

Commits

• e23c26f Publish package v4.3.1
• 6a3f685 Merge pull request #1358 from appsignal/update-agent/0.35.29
• 9791d9a Update agent to version 0.35.29
• 34bb293 Publish package v4.3.0
• a77a218 Merge pull request #1357 from appsignal/implement-logger-broadcasting
• 5cb1464 Implement logger broadcasting
• 25a0323 Merge pull request #1356 from appsignal/implement-silence-logger-functionality
• c610a0c Merge pull request #1355 from appsignal/remove-tagged-logging-support
• d08a1ce Implement #silence logger functionality
• 2468e74 Pass the logger to #silence block
• Additional commits viewable in compare view

Updates lefthook from 1.9.2 to 1.10.0

Release notes

Sourced from lefthook's releases.

v1.10.0

Changelog

• 2af1d2dea03176f31b59566cdd83ed7ce2eb3128 chore: update swift reference version
• 5b620aa3d0c831188ae23fcce5c3a6b1f394f0a9 ci: automate aur package update (#899)
• 73d28b7983223107505931742041cd24ca30a316 feat: add jobs option (#861)

v1.9.3

Changelog

• 1e38d75b494f052b5ee5fa9ca9896deca506b20a chore: add mdbook (#894)
• f2704a386695a7c88d7f77452325b9b32ce32802 fix: correctly parse config options (#895)

Changelog

Sourced from lefthook's changelog.

1.10.0 (2024-12-19)

• feat: add jobs option (#861) by @​mrexox
• ci: automate aur package update (#899) by @​mrexox

1.9.3 (2024-12-18)

• fix: correctly parse config options (#895) by @​mrexox
• chore: add mdbook (#894) by @​mrexox

Commits

• e75c1cd 1.10.0: add jobs option
• 73d28b7 feat: add jobs option (#861)
• 5b620aa ci: automate aur package update (#899)
• 6151f93 docs: add github link to the docs
• a3da17c docs: add more examples (#898)
• 2af1d2d chore: update swift reference version
• c8980b6 docs: update readme to use mdbook links (#897)
• 2cd1410 docs: improve mdbook docs (#896)
• 829cc92 1.9.3: fix issues with parsing existing options
• f2704a3 fix: correctly parse config options (#895)
• Additional commits viewable in compare view

Updates capybara-playwright-driver from 0.5.3 to 0.5.4

Commits

• 7292ee3 0.5.4
• a3fd1a5 Merge pull request #89 from arzezak/override-playwright-wait-only
• b114005 Merge pull request #90 from maciesielka/do-not-modify-special-keys
• 94dc95c Only uppercase combos with just Shift
• 192b1a0 Do not modify special keys
• 0e2818c Do not override :wait for non-Playwright drivers
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions