Bump rails from 8.0.5.1 to 8.1.3.1

[dependabot]

Bumps rails from 8.0.5.1 to 8.1.3.1.

Release notes

Sourced from rails's releases.

8.1.3.1

Active Support

• No changes.

Active Model

• No changes.

Active Record

• No changes.

Action View

• No changes.

Action Pack

• No changes.

Active Job

• No changes.

Action Mailer

• No changes.

Action Cable

• No changes.

Active Storage

• Disable libvips's unfuzzed image loaders and savers.

  libvips flags some of its loaders and savers as "unfuzzed" or "untrusted", meaning they are only safe for trusted content. Active Storage will call Vips.block_untrusted(true) to disable them while booting. An application that needs a specific loader or saver may re-enable it in an initializer.

... (truncated)

Commits

• 3989ebf Preparing for 8.1.3.1 release
• 349e7a5 Disable libvips's unfuzzed image loaders and savers
• fa8f081 Preparing for 8.1.3 release
• 63cef3d Merge branch '8-1-sec' into 8-1-stable
• 1db4b89 Preparing for 8.1.2.1 release
• 1c7d1cf Update changelog
• e91694b Update CHANGELOG (8.1 only)
• 6752711 Fix XSS in debug exceptions copy-to-clipboard
• 63f5ad8 Skip blank attribute names in Action View tag helpers
• 8c9676b Prevent glob injection in ActiveStorage DiskService#delete_prefixed
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[3kh0]

@dependabot rebase

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	rails@​8.0.5.1 ⏵ 8.1.3.1

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: gem actionpack is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: Gemfile.lock → gem/ferrum_pdf@3.1.0 → gem/importmap-rails@2.2.3 → gem/turbo-rails@2.0.23 → gem/web-console@4.3.0 → gem/propshaft@1.3.2 → gem/tailwindcss-rails@4.6.0 → gem/solid_cable@4.0.2 → gem/rails@8.1.3.1 → gem/blazer@3.5.1 → gem/solid_queue@1.7.0 → gem/mission_control-jobs@1.2.0 → gem/sentry-rails@7.0.0 → gem/active_storage_validations@4.1.1 → gem/stimulus-rails@1.3.4 → gem/hotwire-livereload@2.1.1 → gem/solid_cache@1.0.10 → gem/dotenv-rails@3.2.0 → gem/actionpack@8.1.3.1 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore gem/actionpack@8.1.3.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: gem activerecord is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: Gemfile.lock → gem/flipper-active_record@1.4.2 → gem/solid_cable@4.0.2 → gem/annotaterb@4.24.0 → gem/rails@8.1.3.1 → gem/blazer@3.5.1 → gem/solid_queue@1.7.0 → gem/mission_control-jobs@1.2.0 → gem/active_storage_validations@4.1.1 → gem/paper_trail@17.0.0 → gem/solid_cache@1.0.10 → gem/activerecord@8.1.3.1 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore gem/activerecord@8.1.3.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: gem activerecord is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: Gemfile.lock → gem/flipper-active_record@1.4.2 → gem/solid_cable@4.0.2 → gem/annotaterb@4.24.0 → gem/rails@8.1.3.1 → gem/blazer@3.5.1 → gem/solid_queue@1.7.0 → gem/mission_control-jobs@1.2.0 → gem/active_storage_validations@4.1.1 → gem/paper_trail@17.0.0 → gem/solid_cache@1.0.10 → gem/activerecord@8.1.3.1 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore gem/activerecord@8.1.3.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

[3kh0]

@dependabot rebase

[3kh0]

@dependabot rebase

[dependabot]

Looks like rails is up-to-date now, so this is no longer needed.