build(deps): bump the ruby-deps group with 7 updates

[dependabot]

Bumps the ruby-deps group with 7 updates:

Package	From	To
aws-sdk-s3	1.229.0	1.232.2
parallel	2.1.0	2.2.0
aws-partitions	1.1282.0	1.1291.0
aws-sdk-core	3.254.1	3.257.0
aws-sdk-kms	1.130.0	1.132.0
bigdecimal	4.1.2	4.1.3
mime-types-data	3.2026.0701	3.2026.0929

Updates aws-sdk-s3 from 1.229.0 to 1.232.2

Changelog

Sourced from aws-sdk-s3's changelog.

1.232.2 (2026-09-25)

• Issue - Ensure the internally-created executor is shutdown on error in TransferManager and Aws::S3::Object resource methods, preventing leaked worker threads on multipart transfer failures (#3419).

1.232.1 (2026-09-16)

• Issue - Return the copy response from multipart copy_to/copy_from instead of nil on success.

1.232.0 (2026-09-11)

• Feature - Updated S3 Object Lock Default Retention documentation.

1.231.0 (2026-09-09)

• Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

1.230.0 (2026-09-08)

• Feature - Adds support for Amazon S3 Object Lock variable retention. Existing S3 APIs that support S3 Object Lock parameters now support two new parameters EventHold and EventHoldDuration at the object level, and DefaultEventHoldDuration at the bucket level.

Commits

• See full diff in compare view

Updates parallel from 2.1.0 to 2.2.0

Changelog

Sourced from parallel's changelog.

2.2.0

Added

• Redact HMAC secrets from inspect output

Fixed

• filter_map rejects falsy valus
• restore the outer worker number after direct execution
• compare producer stop markers by identity
• ractor stop and crash handling
• ractor direct mode with 0 workers
• avoid storing or transferring discarded each results
• ractor item index works
• validate worker counts
• clean up partially created process workers
• avoid storing or transferring discarded each results

Commits

• 582ae13 v2.2.0
• fd824df Merge pull request #390 from OskarEichler/codex/security-redact-hmac-secret
• 1b1bd98 Merge pull request #392 from grosser/grosser/read
• c4eeeec pin permissions to read
• 574da0f Redact HMAC secrets from inspect output
• c032f43 Merge pull request #385 from OskarEichler/codex/validate-worker-counts
• 0720b14 Merge pull request #389 from grosser/OskarEichler-codex/cleanup-ractors-on-pa...
• b7c01eb tests
• 6f51a55 cleanup
• 2622bee Stop Ractors after parent-side failures
• Additional commits viewable in compare view

Updates aws-partitions from 1.1282.0 to 1.1291.0

Changelog

Sourced from aws-partitions's changelog.

1.1291.0 (2026-09-30)

• Feature - Updated the partitions source data that determines the AWS service regions and endpoints.

1.1290.0 (2026-09-24)

• Feature - Added support for enumerating regions for Aws::EventBridgeV2.

1.1289.0 (2026-09-23)

• Feature - Added support for enumerating regions for Aws::NetworkSecurityManager.

1.1288.0 (2026-09-22)

• Feature - Added support for enumerating regions for Aws::CloudWatchOmni.

1.1287.0 (2026-09-14)

• Feature - Updated the partitions source data that determines the AWS service regions and endpoints.

1.1286.0 (2026-09-11)

• Feature - Updated the partitions source data that determines the AWS service regions and endpoints.

1.1285.0 (2026-09-10)

• Feature - Updated the partitions source data that determines the AWS service regions and endpoints.

1.1284.0 (2026-09-08)

• Feature - Updated the partitions source data that determines the AWS service regions and endpoints.

1.1283.0 (2026-09-01)

• Feature - Updated the partitions source data that determines the AWS service regions and endpoints.

Commits

• See full diff in compare view

Updates aws-sdk-core from 3.254.1 to 3.257.0

Changelog

Sourced from aws-sdk-core's changelog.

3.257.0 (2026-09-14)

• Feature - Updated Aws::STS::Client with the latest API changes.

• Feature - Increases the maximum session token size to 4,096 bytes and removes the packed policy size limit. Adds SessionTokenSize and SessionTokenUtilization fields and a new MinimumSessionTokenSize parameter. PackedPolicySize is deprecated.

3.256.0 (2026-09-11)

• Feature - Preserve millisecond precision when serializing Time values on the request path, instead of truncating to whole seconds.

3.255.0 (2026-09-09)

• Feature - Add rexml as a dependency.

Commits

• See full diff in compare view

Updates aws-sdk-kms from 1.130.0 to 1.132.0

Changelog

Sourced from aws-sdk-kms's changelog.

1.132.0 (2026-09-11)

• Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

1.131.0 (2026-09-09)

• Feature - Code Generated Changes, see ./build_tools or aws-sdk-core's CHANGELOG.md for details.

Commits

• See full diff in compare view

Updates bigdecimal from 4.1.2 to 4.1.3

Release notes

Sourced from bigdecimal's releases.

v4.1.3

What's Changed

• Stop use RB_GC_GUARD on uninitialized value by @​tompng in ruby/bigdecimal#536
• Fix unused-but-set-global warnings in clang-23 by @​nobu in ruby/bigdecimal#540
• Declare TypedData with RUBY_TYPED_THREAD_SAFE_FREE by @​byroot in ruby/bigdecimal#541
• Bit-burst algorithm version of BigMath.erf and BigMath.erfc by @​tompng in ruby/bigdecimal#458
• Keep Newton division divisor alive by @​OskarEichler in ruby/bigdecimal#548
• Correct nullable BigDecimal conversion signature by @​OskarEichler in ruby/bigdecimal#551
• Fix out-of-bounds write in Newton-Raphson division, Improve normalize by @​tompng in ruby/bigdecimal#553
• Fix precision loss in Newton-Raphson inverse by @​tompng in ruby/bigdecimal#552
• Honor exception: false for complex conversion by @​OskarEichler in ruby/bigdecimal#549
• Honor exception: false for strings with null bytes by @​OskarEichler in ruby/bigdecimal#550
• Guard string VALUEs while parsing their C string by @​tompng in ruby/bigdecimal#556
• Make String#to_d accept embedded NUL bytes and reject ASCII-incompatible strings by @​tompng in ruby/bigdecimal#557
• Faster gamma calculation by @​tompng in ruby/bigdecimal#524
• Bump version to v4.1.3 by @​tompng in ruby/bigdecimal#558

New Contributors

• @​OskarEichler made their first contribution in ruby/bigdecimal#548

Full Changelog: ruby/bigdecimal@v4.1.2...v4.1.3

Changelog

Sourced from bigdecimal's changelog.

4.1.3

• Faster gamma and lgamma calculation using Lagrange interpolation GH-524

  @​tompng

• Bit-burst algorithm version of BigMath.erf and BigMath.erfc GH-458

  @​tompng

• Fix Newton-Raphson division bugs: precision loss, out-of-bounds write, and missing GC guard for the divisor GH-548 GH-552 GH-553

  @​OskarEichler @​tompng

• Fix GC safety issues around RB_GC_GUARD and string arguments GH-536 GH-556

  @​tompng

• Honor exception: false for Complex and strings with null bytes GH-549 GH-550

  @​OskarEichler

• Make String#to_d accept embedded NUL bytes and reject ASCII-incompatible strings GH-557

  @​tompng

• Correct nullable BigDecimal conversion RBS signature GH-551

  @​OskarEichler

• Declare TypedData with RUBY_TYPED_THREAD_SAFE_FREE GH-541

  @​byroot

• Fix unused-but-set-global warnings in clang-23 GH-540

  @​nobu

Commits

• 8ed99ea Bump version to v4.1.3 (#558)
• 60829da Faster gamma calculation (#524)
• 00d26a2 Make String#to_d accept embedded NUL bytes and reject ASCII-incompatible stri...
• 7471291 Guard string VALUEs while parsing their C string (#556)
• d2f2d20 Honor exception: false for strings with null bytes (#550)
• 0d5a486 Honor exception: false for complex conversion (#549)
• d345bb3 Merge pull request #555 from ruby/dependabot/github_actions/step-security/har...
• fc595d3 Bump step-security/harden-runner from 2.21.0 to 2.21.1
• 4799dd5 Fix precision loss in Newton-Raphson inverse (#552)
• 881af5c Bump step-security/harden-runner from 2.20.0 to 2.21.0 (#546)
• Additional commits viewable in compare view

Updates mime-types-data from 3.2026.0701 to 3.2026.0929

Changelog

Sourced from mime-types-data's changelog.

3.2026.0929 / 2026-09-29

• Updated registry entries from the IANA [media registry][registry] and [provisional media registry][provisional] and the [Apache Tika media registry][tika] as of the release date.

3.2026.0922 / 2026-09-22

• Updated registry entries from the IANA [media registry][registry] and [provisional media registry][provisional] and the [Apache Tika media registry][tika] as of the release date.

3.2026.0921 / 2026-09-21

• Updated registry entries from the IANA [media registry][registry] and [provisional media registry][provisional] and the [Apache Tika media registry][tika] as of the release date.

• Upgraded hoe-halostatue with a fix for YAML issues.

Commits

• 744b8cd chore: Automatically update gemspec for for release
• 951be63 Update mime-types-data 3.2026.0929 / 2026-09-29
• 6fdfa73 chore: Automatically update gemspec for for release
• b179a0d Update mime-types-data 3.2026.0922 / 2026-09-22
• 2294bef fix: Address workflow issues with Zizmor
• 91c9e4c fix: Correct usage of new app
• b7e53c4 chore: Automatically update gemspec for for release
• f671f2b fix: Use correct action version
• 8ec9356 fix: Use an app installation for publishing
• c8b7b48 fix: Release commit of gemspec isn't working
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions