chore(deps): bump the ruby-deps group with 2 updates

[dependabot]

Bumps the ruby-deps group with 2 updates: rails_semantic_logger and pagy.

Updates rails_semantic_logger from 5.0.0 to 5.1.0

Changelog

Sourced from rails_semantic_logger's changelog.

[5.1.0] - 2026-07-20

• Require semantic_logger v5.1 or greater, keeping the two gems in lock step.
• Boot: a log file that cannot be opened is now caught during boot. Semantic Logger v5.1 opens the file appender's log file when it is created, so a bad path or insufficient permissions raises from SemanticLogger.add_appender and the engine's fallback (log to STDERR at :warn) runs as intended. Previously the failure surfaced asynchronously on the appender thread and the app booted against a silently broken appender. As a side effect the log file is now created as soon as the appender is added, even if nothing has been logged yet, matching the standard Rails logger.
• Boot: the rescue no longer reports a log file path problem when the failure came from the appenders block, where no path is involved. It now emits an accurate message per branch.
• ActionCable: fix an ArgumentError from TaggedLoggerProxy when the wrapped logger is a plain Ruby Logger, which accepts only a single progname argument. The v4.9 change always forwarded the full (message, payload, exception) signature, breaking ActionCable::Connection::TestCase tests such as have_rejected_connection. The extra arguments are now only forwarded to a logger method that can accept them. Fixes #317.
• Sidekiq: officially support Sidekiq 7 and 8, and test both in CI (Sidekiq 7.x on the Rails 7.2 appraisal, Sidekiq 8.x on the Rails 8.0 and 8.1 appraisals).
• Sidekiq: remove support for Sidekiq 4, 5, and 6. These versions predate the gem's Rails 7.2 / Ruby 3.2 floor and were untested; the Sidekiq::Logging / server middleware patches, the pre-6.5 job_logger wiring, the Sidekiq 5 Worker fallback, and the pre-7.1.6 error-handler branches are gone.
• Sidekiq: honor Sidekiq 8's logged_job_attributes setting, so additional job attributes can be added to the logging context (defaults to bid and tags, matching Sidekiq).
• Sidekiq: honor Sidekiq 8's skip_default_job_logging setting as an alternative to RailsSemanticLogger::Sidekiq::JobLogger.perform_messages = false for suppressing the Start #perform / Completed #perform messages.
• Add a changelog_uri to the gem metadata, so RubyGems links to this file. Thanks to Philip Hallstrom.
• Remove the vestigial sprockets < 4.0 development pin, which resolved to sprockets 1.0.2 with no sprockets-rails and therefore provided no Rails integration.

Commits

• 5869ad6 Merge pull request #324 from reidmorrison/release/v5.1.0
• 524913b Release v5.1.0
• 6b2392f Burn down rubocop_todo: set Layout/LineLength to 120, clear 14 cops
• dd339aa Require semantic_logger v5.1
• c907b2a Merge pull request #323 from reidmorrison/fix/quiet-assets-test-coverage
• 241ebdb Exercise the quiet_assets code path under CI
• f1a83d9 Merge pull request #322 from reidmorrison/feat/sidekiq-7-8-support
• e04a257 Also test Sidekiq 8.0
• efd7572 Support and test Sidekiq 7 and 8, drop Sidekiq 4/5/6
• 79ca2ce Merge pull request #321 from reidmorrison/fix/action-cable-tagged-logger-prox...
• Additional commits viewable in compare view

Updates pagy from 43.6.0 to 43.6.1

Release notes

Sourced from pagy's releases.

Version 43.6.1

Changes in 43.6.1

• HTML escape URL strings in href attributes (Fix #914)

CHANGELOG

Version 43

We needed a leap version to unequivocally signal that it's not just a major version: it's a complete redesign of the legacy code at all levels, usage and API included.

Why 43? Because it's exactly one step beyond "The answer to the ultimate question of life, the Universe, and everything." 😉

Improvements

This version introduces several enhancements, such as new :countish and :keynav_js paginators and improved automation and configuration processes, reducing setup requirements by 99%. The update also includes a simpler API and new interactive development tools, making it a comprehensive upgrade from previous versions.

• New :countish Paginator
  • Faster than OFFSET and supporting the full UI
• New Keynav Pagination
  • The pagy-exclusive technique using the fastest keyset pagination alongside all frontend helpers.
• New interactive dev-tools
  • New PagyWand to integrate the pagy CSS with your app themes.
  • New Pagy AI available right inside your own app.
• Intelligent automation
  • Configuration requirements reduced by 99%.
  • Simplified JavaScript setup.
  • Automatic I18n loading.
• Simpler API
  • You solely need the pagy method and the @​pagy instance to paginate any collection and use any navigation tag and helper.
  • Methods are autoloaded only if used, and consume no memory otherwise.
  • Methods have narrower scopes and can be overridden without deep knowledge.
• New documentation
  • Very concise, straightforward, and easy to navigate and understand.

Upgrade to 43

See the Upgrade Guide

Changelog

Sourced from pagy's changelog.

Version 43.6.1

• HTML escape URL strings in href attributes (Fix #914)

Commits

• c06db4e Merge branch 'dev'
• 0016aef Version 43.6.1
• 6b632ca 💎 HTML escape URL strings in href attributes (Fix #914)
• 642d4b9 Bump fkirc/skip-duplicate-actions from 5.3.1 to 5.3.2 (#915)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions