Skip to content

Bump dalli from 4.2.0 to 4.3.1#288

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bundler/dalli-4.3.1
Open

Bump dalli from 4.2.0 to 4.3.1#288
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bundler/dalli-4.3.1

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 5, 2026

Bumps dalli from 4.2.0 to 4.3.1.

Changelog

Sourced from dalli's changelog.

4.3.1

Bug Fixes:

  • Fix socket compatibility with gems that monkey-patch TCPSocket (#996, #1012)

    • Gems like socksify and resolv-replace modify TCPSocket#initialize, breaking Ruby 3.0+'s connect_timeout: keyword argument
    • Detection now uses parameter signature checking instead of gem-specific method detection
    • Falls back to Timeout.timeout when monkey-patching is detected
    • Detection result is cached for performance
  • Fix network retry bug with socket_max_failures: 0 (#1065)

    • Previously, setting socket_max_failures: 0 could still cause retries due to error handling
    • Introduced RetryableNetworkError subclass to distinguish retryable vs non-retryable errors
    • down! now raises non-retryable NetworkError, reconnect! raises RetryableNetworkError
    • Thanks to Graham Cooper (Shopify) for this fix
  • Fix "character class has duplicated range" Ruby warning (#1067)

    • Fixed regex in KeyManager::VALID_NAMESPACE_SEPARATORS that caused warnings on newer Ruby versions
    • Thanks to Hartley McGuire for this fix

Improvements:

  • Add StrictWarnings test helper to catch Ruby warnings early (#1067)

  • Use bulk attribute setter for OpenTelemetry spans (#1068)

    • Reduces lock acquisitions when setting span attributes
    • Thanks to Robert Laurin (Shopify) for this optimization
  • Fix double recording of exceptions on OpenTelemetry spans (#1069)

    • OpenTelemetry's in_span method already records exceptions and sets error status automatically
    • Removed redundant explicit exception recording that caused exceptions to appear twice in traces
    • Thanks to Robert Laurin (Shopify) for this fix

4.3.0

New Features:

  • Add namespace_separator option to customize the separator between namespace and key (#1019)
    • Default is : for backward compatibility
    • Must be a single non-alphanumeric character (e.g., :, /, |, .)
    • Example: Dalli::Client.new(servers, namespace: 'myapp', namespace_separator: '/')

Bug Fixes:

  • Fix architecture-dependent struct timeval packing for socket timeouts (#1034)
    • Detects correct pack format for time_t and suseconds_t on each platform
    • Fixes timeout issues on architectures with 64-bit time_t

... (truncated)

Commits
  • ab534ff Merge pull request #1066 from petergoldstein/fix/socket-compatibility-996-1012
  • 1ce4cae Update CHANGELOG for PR #1069
  • 46a34a4 Fix double recording of exceptions on OTel spans (#1069)
  • b0a9506 fix: stop double recording exceptions on spans
  • 052ac00 Skip SSL error stub test on JRuby
  • a968aa6 Skip MRI-specific socket test on TruffleRuby and JRuby
  • 36cc0ce Update CHANGELOG for 4.3.1 with cherry-picked changes
  • bb107e7 Fix integration issues from cherry-picked PRs
  • f36afbf feat: Use bulk attr setter for span
  • 255cecc Fix "character class has duplicated range" warning
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [dalli](https://github.com/petergoldstein/dalli) from 4.2.0 to 4.3.1.
- [Changelog](https://github.com/petergoldstein/dalli/blob/main/CHANGELOG.md)
- [Commits](petergoldstein/dalli@v4.2.0...v4.3.1)

---
updated-dependencies:
- dependency-name: dalli
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Feb 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants