Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 6, 2025

Bumps sidekiq from 6.5.12 to 8.0.0.

Changelog

Sourced from sidekiq's changelog.

8.0.0

  • WARNING The underlying class name for Active Jobs has changed from ActiveJob::QueueAdapters::SidekiqAdapter::JobWrapper to Sidekiq::ActiveJob::Wrapper. The old name will still work in 8.x.
  • WARNING The created_at, enqueued_at, failed_at and retried_at attributes are now stored as epoch milliseconds, rather than epoch floats. This is meant to avoid precision issues with JSON and JavaScript's 53-bit Floats. Example: "created_at" => 1234567890.123456 -> "created_at" => 1234567890123.
  • NEW FEATURE Job Profiling is now supported with Vernier which makes it really easy to performance tune your slow jobs. The Web UI contains a new Profiles tab to view any collected profile data. Please read the new Profiling wiki page for details.
  • NEW FEATURE Job Metrics now store up to 72 hours of data and the Web UI allows display of 24/48/72 hours. #6614
  • CurrentAttribute support now uses ActiveJob::Arguments to serialize the context object, supporting Symbols and GlobalID. The change should be backwards compatible. #6510
  • Freshen up Sidekiq::Web to simplify the code and improve security #6532 The CSS has been rewritten from scratch to remove the Bootstrap framework.
  • Add on_cancel callback for iterable jobs #6607
  • Add cursor reader to get the current cursor inside iterable jobs #6606
  • Default error logging has been modified to use Ruby's Exception#detailed_message and #full_message APIs.
  • CI now runs against Redis, Dragonfly and Valkey.
  • Job tags now allow custom CSS display #6595
  • The Web UI's language picker now shows options in the native language
  • Remove global variable usage within the codebase
  • Colorize and adjust logging for easier reading
  • Adjust Sidekiq's default thread priority to -1 for a 50ms timeslice. This can help avoid TimeoutErrors when Sidekiq is overloaded. #6543
  • Use Logger#with_level, remove Sidekiq's custom impl
  • Remove base64 gem dependency
  • Support: (Dragonfly 1.27+, Valkey 7.2+, Redis 7.2+), Ruby 3.2+, Rails 7.0+

7.3.10

  • Deprecate Redis :password as a String to avoid log disclosure. #6625 Use a Proc instead: config.redis = { password: ->(username) { "password" } }

7.3.9

  • Only require activejob if necessary #6584 You might get uninitialized constant Sidekiq::ActiveJob if you require 'sidekiq' before require 'rails'.
  • Fix iterable job cancellation #6589
  • Web UI accessibility improvements #6604

7.3.8

  • Fix dead tag links #6554

... (truncated)

Commits
  • 9499c52 Revert "refactor: co-locate wrapper class with adapter class for resiliance t...
  • e663ce5 fmt
  • b8a3ca0 bump
  • 76113e0 refactor: co-locate wrapper class with adapter class for resiliance to requir...
  • 0d4162f doc: webui
  • 74afdcb refactor: adjust histogram keys to remove unnecessary digits, add prefix
  • 50c3d52 doc: update release notes
  • a6c6247 official release soon...
  • 23fdd84 refactor: remove Base64 gem dependency
  • 90f8322 refactor: logging to use Logger#with_level
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [sidekiq](https://github.com/sidekiq/sidekiq) from 6.5.12 to 8.0.0.
- [Changelog](https://github.com/sidekiq/sidekiq/blob/main/Changes.md)
- [Commits](sidekiq/sidekiq@v6.5.12...v8.0.0)

---
updated-dependencies:
- dependency-name: sidekiq
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Mar 6, 2025
@dependabot dependabot bot requested a review from a team as a code owner March 6, 2025 14:07
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 7, 2025

Superseded by #2680.

@dependabot dependabot bot closed this Mar 7, 2025
@dependabot dependabot bot deleted the dependabot/bundler/sidekiq-8.0.0 branch March 7, 2025 14:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant