build(deps): bump rails and acts_as_paranoid

[dependabot]

Bumps rails and acts_as_paranoid. These dependencies needed to be updated together.
Updates rails from 8.0.5.1 to 8.1.3.1

Release notes

Sourced from rails's releases.

8.1.3.1

Active Support

• No changes.

Active Model

• No changes.

Active Record

• No changes.

Action View

• No changes.

Action Pack

• No changes.

Active Job

• No changes.

Action Mailer

• No changes.

Action Cable

• No changes.

Active Storage

• Disable libvips's unfuzzed image loaders and savers.

  libvips flags some of its loaders and savers as "unfuzzed" or "untrusted", meaning they are only safe for trusted content. Active Storage will call Vips.block_untrusted(true) to disable them while booting. An application that needs a specific loader or saver may re-enable it in an initializer.

... (truncated)

Commits

• 3989ebf Preparing for 8.1.3.1 release
• 349e7a5 Disable libvips's unfuzzed image loaders and savers
• fa8f081 Preparing for 8.1.3 release
• 63cef3d Merge branch '8-1-sec' into 8-1-stable
• 1db4b89 Preparing for 8.1.2.1 release
• 1c7d1cf Update changelog
• e91694b Update CHANGELOG (8.1 only)
• 6752711 Fix XSS in debug exceptions copy-to-clipboard
• 63f5ad8 Skip blank attribute names in Action View tag helpers
• 8c9676b Prevent glob injection in ActiveStorage DiskService#delete_prefixed
• Additional commits viewable in compare view

Updates acts_as_paranoid from 0.10.3 to 0.11.0

Changelog

Sourced from acts_as_paranoid's changelog.

0.11.0

• Support Ruby 3.1 through 3.4, dropping support for Ruby 3.0 (#359 by [mvz])
• Support Rails 8.1 (#368 by [fatkodima])

#359: ActsAsParanoid/acts_as_paranoid#359 #368: ActsAsParanoid/acts_as_paranoid#368

Commits

• 6bf8906 Prepare version 0.11.0 for release
• d1547c8 Merge pull request #368 from fatkodima/rails-8-1
• dac1468 Support Rails 8.1
• c07598e Merge pull request #366 from ActsAsParanoid/dependabot/github_actions/actions...
• d50a85a Bump actions/checkout from 4 to 5
• d079aae Merge pull request #365 from ActsAsParanoid/fix-rubocop-offenses
• 9a42ae4 Regenerate RuboCop to-do file
• 2b6c1a8 Autocorrect Style/RedundantParentheses
• 727b1e6 Use the new rubocop plugins configuration syntax
• 9446644 Bump rubocop dependencies
• Additional commits viewable in compare view

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	gem/​rails@​8.0.5.1 ⏵ 8.1.3.1
	gem/​acts_as_paranoid@​0.10.3 ⏵ 0.11.0

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: gem actionpack is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: Gemfile.lock → gem/rails_semantic_logger@4.19.0 → gem/vite_rails@3.0.20 → gem/public_activity@3.0.2 → gem/phlex-rails@2.4.0 → gem/good_job@4.13.3 → gem/web-console@4.3.0 → gem/rails@8.1.3.1 → gem/premailer-rails@1.12.0 → gem/wicked@2.0.0 → gem/letter_opener_web@3.0.0 → gem/rspec-rails@7.1.1 → gem/audits1984@0.1.7 → gem/doorkeeper@5.8.2 → gem/active_storage_encryption@0.3.0 → gem/factory_bot_rails@6.5.1 → gem/propshaft@1.3.1 → gem/sentry-rails@5.28.1 → gem/cloudflare-rails@7.0.0 → gem/actionpack@8.1.3.1 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore gem/actionpack@8.1.3.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: gem activerecord is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: Gemfile.lock → gem/public_activity@3.0.2 → gem/annotaterb@4.22.0 → gem/good_job@4.13.3 → gem/flipper-active_record@1.4.0 → gem/rails@8.1.3.1 → gem/kaminari@1.2.2 → gem/hashid-rails@1.4.1 → gem/paper_trail@16.0.0 → gem/active_storage_encryption@0.3.0 → gem/acts_as_paranoid@0.11.0 → gem/activerecord@8.1.3.1 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore gem/activerecord@8.1.3.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: gem activerecord is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: Gemfile.lock → gem/public_activity@3.0.2 → gem/annotaterb@4.22.0 → gem/good_job@4.13.3 → gem/flipper-active_record@1.4.0 → gem/rails@8.1.3.1 → gem/kaminari@1.2.2 → gem/hashid-rails@1.4.1 → gem/paper_trail@16.0.0 → gem/active_storage_encryption@0.3.0 → gem/acts_as_paranoid@0.11.0 → gem/activerecord@8.1.3.1 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore gem/activerecord@8.1.3.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report