Sourced from dry-configurable's releases.

v1.4.0

Added

• Added Config#to_data, returning a frozen Data representation of the config's resolved values for performance-sensitive read paths. (@​cllns in #167)

Changed

• Set minimum Ruby version to 3.3. (@​alassek & @​timriley)

Compare v1.3.0 ... v1.4.0

Sourced from dry-configurable's changelog.

1.4.0 - 2026-05-13

Added

• Added Config#to_data, returning a frozen Data representation of the config's resolved values for performance-sensitive read paths. (@​cllns in #167)

Changed

• Set minimum Ruby version to 3.3. (@​alassek & @​timriley)

• e5e025d Prepare for v1.4.0
• 906e29a Apply standard CHANGELOG formatting
• 98936c8 Add all headings to unreleased CHANGELOG section
• ec99753 Merge pull request #167 from dry-rb/feature/add-config-to-data
• a709271 Add CHANGELOG entry
• ecc7978 Update comments
• 00caf73 Add helpful note about caching
• 738361c Add Config#to_data
• 089bc37 File sync from hanakai-rb/repo-sync
• 82181a6 Remove docsite (#166)
• Additional commits viewable in compare view

Sourced from faraday's releases.

v2.14.2

Security Note

This release contains a security fix, we recommend all users to upgrade as soon as possible. A Security Advisory with more details will be posted shortly.

What's Changed

• Add Ruby 4 to CI by @​larouxn in lostisland/faraday#1659
• Modernize RuboCop configuration and fix offenses by @​larouxn in lostisland/faraday#1660
• Lint: Style/OneClassPerFile by @​olleolleolle in lostisland/faraday#1668
• fix(docs): fix incorrect link label by @​JohnnyKei in lostisland/faraday#1667
• chore: Upgrade package.json packages using audit fix by @​olleolleolle in lostisland/faraday#1669

New Contributors

• @​larouxn made their first contribution in lostisland/faraday#1659
• @​JohnnyKei made their first contribution in lostisland/faraday#1667

Full Changelog: lostisland/faraday@v2.14.1...v2.14.2

• 2ecd5e0 Update version.rb
• 3f1280c Merge commit from fork
• 81dc168 Upgrade package.json packages using audit fix (#1669)
• 8b4d1fd Create SECURITY.md
• a01039c fix(docs): fix incorrect link label in request-options and remove dead link i...
• 7df3f24 Lint: Style/OneClassPerFile (#1668)
• c6988a8 Modernize RuboCop configuration and fix offenses (#1660)
• 32e010f Add Ruby 4 to CI (#1659)
• See full diff in compare view

Sourced from io-event's releases.

v1.16.0

• Use eventfd for URing cross-thread wakeup, and enable IORING_SETUP_SINGLE_ISSUER, IORING_SETUP_DEFER_TASKRUN, and IORING_SETUP_TASKRUN_FLAG. The waking thread now signals via eventfd rather than submitting a NOP SQE, which unlocks the single-issuer optimisation, defers task work to the application thread, and lets select() skip the io_uring_get_events() syscall when no task work is pending.
• Add support for the io_close fiber-scheduler hook (Ruby 4.0+). The URing selector performs the close asynchronously via the ring; the Debug::Selector and TestScheduler wrappers forward to the underlying selector when supported.
• Improve WorkerPool GC compaction support and add proper write barriers, fixing potential use-after-free under compacting GC.
• Keep blocked scheduler fibers alive during GC by registering them as roots in TestScheduler#block, preventing premature collection and the resulting use-after-free crash on resume.
• Use Ruby's xmalloc / xcalloc / xrealloc2 / xfree for all internal selector allocations (the per-fiber ready-queue entries in IO_Event_Selector_ready_push, and both the backing array and per-element allocations in IO_Event_Array). Previously a raw malloc paired with a debug-build-only assert(...) would silently dereference NULL and crash in release builds under memory pressure; the Ruby allocators trigger a GC sweep on pressure and raise NoMemoryError / RangeError on real failure, so the -1 return-code paths through IO_Event_Array_initialize / _resize / _lookup and their callers in epoll.c / kqueue.c / uring.c are removed in favour of straight exception propagation.
• Correctly handle short io_uring_submit() results in the URing selector. io_uring_submit() returns the number of SQEs actually accepted by the kernel and can be short (SQE prep errors, ENOMEM, transient EAGAIN); the old accounting reset pending = 0 on any success and silently lost track of unsubmitted SQEs.
• Enable IORING_SETUP_SUBMIT_ALL (kernel 5.18+) on the URing selector so the kernel keeps processing the rest of an SQE batch past individual errors, reducing the frequency of short submits in practice.

Sourced from io-event's changelog.

v1.16.0

• Use eventfd for URing cross-thread wakeup, and enable IORING_SETUP_SINGLE_ISSUER, IORING_SETUP_DEFER_TASKRUN, and IORING_SETUP_TASKRUN_FLAG. The waking thread now signals via eventfd rather than submitting a NOP SQE, which unlocks the single-issuer optimisation, defers task work to the application thread, and lets select() skip the io_uring_get_events() syscall when no task work is pending.
• Add support for the io_close fiber-scheduler hook (Ruby 4.0+). The URing selector performs the close asynchronously via the ring; the Debug::Selector and TestScheduler wrappers forward to the underlying selector when supported.
• Improve WorkerPool GC compaction support and add proper write barriers, fixing potential use-after-free under compacting GC.
• Keep blocked scheduler fibers alive during GC by registering them as roots in TestScheduler#block, preventing premature collection and the resulting use-after-free crash on resume.
• Use Ruby's xmalloc / xcalloc / xrealloc2 / xfree for all internal selector allocations (the per-fiber ready-queue entries in IO_Event_Selector_ready_push, and both the backing array and per-element allocations in IO_Event_Array). Previously a raw malloc paired with a debug-build-only assert(...) would silently dereference NULL and crash in release builds under memory pressure; the Ruby allocators trigger a GC sweep on pressure and raise NoMemoryError / RangeError on real failure, so the -1 return-code paths through IO_Event_Array_initialize / _resize / _lookup and their callers in epoll.c / kqueue.c / uring.c are removed in favour of straight exception propagation.
• Correctly handle short io_uring_submit() results in the URing selector. io_uring_submit() returns the number of SQEs actually accepted by the kernel and can be short (SQE prep errors, ENOMEM, transient EAGAIN); the old accounting reset pending = 0 on any success and silently lost track of unsubmitted SQEs.
• Enable IORING_SETUP_SUBMIT_ALL (kernel 5.18+) on the URing selector so the kernel keeps processing the rest of an SQE batch past individual errors, reducing the frequency of short submits in practice.

• d59a55a Bump minor version.
• 309643d Modernize code.
• 3b6c2a8 Use Ruby's x* allocators uniformly for internal selector allocations.
• a0c57a1 Try setting up io_uring with IORING_SETUP_SUBMIT_ALL
• 955ceca Handle short io_uring submissions
• e1303a4 Backfill release notes for v1.15.1 and add Unreleased section.
• 6c39050 Skip the io_uring_get_events syscall when no task work is pending.
• 1b5f0d4 Use eventfd for wakeup and enable io_uring performance flags.
• 7eb061e Add proper support for io_close hook. (#171)
• 8d6d5cf Improve GC compaction support and write barriers in WorkerPool. (#172)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions