Bump actionpack from 8.1.3.1 to 8.1.4 in /gems/rails

[dependabot]

Bumps actionpack from 8.1.3.1 to 8.1.4.

Release notes

Sourced from actionpack's releases.

8.1.4

Active Support

• Fix the debug error page rendering for SyntaxErrors with multi-line messages.

  Marco Roth

• Make ActiveSupport::JSON.decode compatible with the upcoming json 3.0 gem.

  Earlopain

• Fix number_to_human_size crashing for sizes above a terabyte by supporting petabyte, exabyte, and zettabyte storage units.

  Kenta Ishizaki

• Fix Range#sole raising NoMethodError when the enumerable core extension isn't already loaded.

  Kenta Ishizaki

• Fix ActiveSupport::Cache::FileStore raising NameError for FileUtils when fileutils isn't already loaded.

  Kenta Ishizaki

• Fix Enumerable#in_order_of with filter: true dropping nil elements explicitly named in the series.

  Kenta Ishizaki

• Keep HashWithIndifferentAccess#filter returning a HashWithIndifferentAccess instead of a plain Hash.

  Kenta Ishizaki

• Fix number_to_human and number_to_human_size crashing when :precision is nil.

  Kenta Ishizaki

• Fix ActiveSupport::InheritableOptions#to_h to recursively flatten nested InheritableOptions parents.

  Andrew Novoselac

• Fix ActiveSupport::StructuredEventSubscriber.debug_only leaking debug-only methods across subscriber subclasses.

  Kenta Ishizaki

... (truncated)

Changelog

Sourced from actionpack's changelog.

Rails 8.1.4 (September 24, 2026)

• Fix the debug error page to not attempt to read source fragments from directory paths.

  Marco Roth

• Apply source value mappings to dynamic Permissions Policy sources.

  Dynamic Permissions Policy sources (procs) now have source mappings applied to their resolved values, the same as static sources.

  Kenta Ishizaki

• Allow ActionDispatch::Http::URL.path_for with trailing_slash: true and a blank path to accept query params and an anchor.

  Previously the blank path used a frozen "/", which raised a FrozenError when appending the query string.

  Kenta Ishizaki

• Avoid mutating the params hash passed to ActionDispatch::Http::URL.url_for.

  Kenta Ishizaki

• Honor falsy values (e.g. format: false, anchor: false) passed in the deprecated positional-hash form of routing DSL methods.

  Previously, false values were silently dropped without emitting a deprecation warning, causing the deprecated hash form to produce different routes than the keyword form.

  Kenta Ishizaki

• Honor the deprecated namespace hash :path, :shallow_path, and :shallow_prefix options when passed as false.

  Kenta Ishizaki

• Fix the deprecated scope hash :except option to apply to except instead of only.

  Kenta Ishizaki

• Reject malformed hosts with extra ports in ActionDispatch::HostAuthorization.

  When an allowed host is configured with an explicit port, a Host header with an additional port (e.g. www.example.com:80:80) is no longer accepted.

... (truncated)

Commits

• c3466ea Preparing for 8.1.4 release
• e6288a8 Update CHANGELOGs for 8-1-stable backports
• 215952f Merge pull request #58727 from marcoroth/multiline-syntax-errors
• 6785886 Merge pull request #58688 from byroot/upgrade-rubocop
• 583773b Only omit blank strings in route generation
• 40d0879 Merge pull request #58412 from carldaws/optional-segment-blank-omission
• bf26808 Merge branch '8-1-sec' into 8-1-stable
• 69e4aa7 Merge pull request #58241 from afurm/af/normalize-mixed-case-percent-escapes
• fb34e6c Follow up to rails/rails#56393
• b00bb28 Merge pull request #57939 from 55728/fix-permissions-policy-dynamic-source-ma...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.69%. Comparing base (f431439) to head (e25a5cf).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #219   +/-   ##
=======================================
  Coverage   99.69%   99.69%           
=======================================
  Files         238      238           
  Lines       10138    10138           
  Branches     1503     1503           
=======================================
  Hits        10107    10107           
  Misses         23       23           
  Partials        8        8           

Flag	Coverage Δ		*Carryforward flag
active_job	99.68% <ø> (ø)		Carriedforward from f431439
core	99.78% <ø> (ø)		Carriedforward from f431439
gcp	100.00% <ø> (ø)		Carriedforward from f431439
karafka	100.00% <ø> (ø)		Carriedforward from f431439
rack	100.00% <ø> (ø)		Carriedforward from f431439
ractor	99.51% <ø> (ø)		Carriedforward from f431439
rails	99.45% <ø> (ø)
rails_support	100.00% <ø> (ø)		Carriedforward from f431439
redaction	100.00% <ø> (ø)		Carriedforward from f431439
semantic_logger	98.01% <ø> (ø)		Carriedforward from f431439

*This pull request uses carry forward flags. Click here to find out more.

[dependabot]

Looks like actionpack is up-to-date now, so this is no longer needed.