Skip to content

Bump dalli from 4.2.0 to 4.3.1#4236

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bundler/dalli-4.3.1
Closed

Bump dalli from 4.2.0 to 4.3.1#4236
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/bundler/dalli-4.3.1

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 6, 2026

Bumps dalli from 4.2.0 to 4.3.1.

Changelog

Sourced from dalli's changelog.

4.3.1

Bug Fixes:

  • Fix socket compatibility with gems that monkey-patch TCPSocket (#996, #1012)

    • Gems like socksify and resolv-replace modify TCPSocket#initialize, breaking Ruby 3.0+'s connect_timeout: keyword argument
    • Detection now uses parameter signature checking instead of gem-specific method detection
    • Falls back to Timeout.timeout when monkey-patching is detected
    • Detection result is cached for performance
  • Fix network retry bug with socket_max_failures: 0 (#1065)

    • Previously, setting socket_max_failures: 0 could still cause retries due to error handling
    • Introduced RetryableNetworkError subclass to distinguish retryable vs non-retryable errors
    • down! now raises non-retryable NetworkError, reconnect! raises RetryableNetworkError
    • Thanks to Graham Cooper (Shopify) for this fix
  • Fix "character class has duplicated range" Ruby warning (#1067)

    • Fixed regex in KeyManager::VALID_NAMESPACE_SEPARATORS that caused warnings on newer Ruby versions
    • Thanks to Hartley McGuire for this fix

Improvements:

  • Add StrictWarnings test helper to catch Ruby warnings early (#1067)

  • Use bulk attribute setter for OpenTelemetry spans (#1068)

    • Reduces lock acquisitions when setting span attributes
    • Thanks to Robert Laurin (Shopify) for this optimization
  • Fix double recording of exceptions on OpenTelemetry spans (#1069)

    • OpenTelemetry's in_span method already records exceptions and sets error status automatically
    • Removed redundant explicit exception recording that caused exceptions to appear twice in traces
    • Thanks to Robert Laurin (Shopify) for this fix

4.3.0

New Features:

  • Add namespace_separator option to customize the separator between namespace and key (#1019)
    • Default is : for backward compatibility
    • Must be a single non-alphanumeric character (e.g., :, /, |, .)
    • Example: Dalli::Client.new(servers, namespace: 'myapp', namespace_separator: '/')

Bug Fixes:

  • Fix architecture-dependent struct timeval packing for socket timeouts (#1034)
    • Detects correct pack format for time_t and suseconds_t on each platform
    • Fixes timeout issues on architectures with 64-bit time_t

... (truncated)

Commits
  • ab534ff Merge pull request #1066 from petergoldstein/fix/socket-compatibility-996-1012
  • 1ce4cae Update CHANGELOG for PR #1069
  • 46a34a4 Fix double recording of exceptions on OTel spans (#1069)
  • b0a9506 fix: stop double recording exceptions on spans
  • 052ac00 Skip SSL error stub test on JRuby
  • a968aa6 Skip MRI-specific socket test on TruffleRuby and JRuby
  • 36cc0ce Update CHANGELOG for 4.3.1 with cherry-picked changes
  • bb107e7 Fix integration issues from cherry-picked PRs
  • f36afbf feat: Use bulk attr setter for span
  • 255cecc Fix "character class has duplicated range" warning
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [dalli](https://github.com/petergoldstein/dalli) from 4.2.0 to 4.3.1.
- [Changelog](https://github.com/petergoldstein/dalli/blob/main/CHANGELOG.md)
- [Commits](petergoldstein/dalli@v4.2.0...v4.3.1)

---
updated-dependencies:
- dependency-name: dalli
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Feb 6, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 9, 2026

Superseded by #4237.

@dependabot dependabot bot closed this Feb 9, 2026
@dependabot dependabot bot deleted the dependabot/bundler/dalli-4.3.1 branch February 9, 2026 00:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants