Bump activesupport from 6.0.3.1 to 7.0.5

[dependabot]

Bumps activesupport from 6.0.3.1 to 7.0.5.

Release notes

Sourced from activesupport's releases.

v7.0.5

Active Support

• Fixes TimeWithZone ArgumentError.

  Niklas Häusele

Active Model

• No changes.

Active Record

• Type cast #attribute_changed? :from and :to options.

  Andrew Novoselac

• Fix index_exists? when column is an array.

  Eileen M. Uchitelle

• Handle Date objects for PostgreSQL timestamptz columns.

  Alex Ghiculescu

• Fix collation for changing column to non-string.

  Hartley McGuire

• Map through subtype in PostgreSQL::OID::Array.

  Jonathan Hefner

• Store correct environment in internal_metadata when run rails db:prepare.

  fatkodima

• Make sure ActiveRecord::Relation#sum works with objects that implement #coerce without deprecation.

  Alex Ghiculescu

• Fix retrieving foreign keys referencing tables named like keywords in PostgreSQL and MySQL.

  fatkodima

... (truncated)

Changelog

Sourced from activesupport's changelog.

Rails 7.0.5 (May 24, 2023)

• Fixes TimeWithZone ArgumentError.

  Niklas Häusele

Rails 7.0.4.3 (March 13, 2023)

• Implement SafeBuffer#bytesplice

  [CVE-2023-28120]

Rails 7.0.4.2 (January 24, 2023)

• No changes.

Rails 7.0.4.1 (January 17, 2023)

• Avoid regex backtracking in Inflector.underscore

  [CVE-2023-22796]

Rails 7.0.4 (September 09, 2022)

• Ensure ActiveSupport::Testing::Isolation::Forking closes pipes

  Previously, Forking.run_in_isolation opened two ends of a pipe. The fork process closed the read end, wrote to it, and then terminated (which presumably closed the file descriptors on its end). The parent process closed the write end, read from it, and returned, never closing the read end.

  This resulted in an accumulation of open file descriptors, which could cause errors if the limit is reached.

  Sam Bostock

• Redis cache store is now compatible with redis-rb 5.0.

  Jean Boussier

• Fix NoMethodError on custom ActiveSupport::Deprecation behavior.

  ActiveSupport::Deprecation.behavior= was supposed to accept any object that responds to call, but in fact its internal implementation assumed that this object could respond to arity, so it was restricted to only Proc objects.

... (truncated)

Commits

• e88857b Preparing for 7.0.5 release
• ac1fc34 Sync CHANGELOG
• f1d05d8 Merge pull request #47805 from fatkodima/fix-in_order_of-duplicates
• 98497a6 Merge branch '7-0-4-sec' into 7-0-stable
• c15ee6e Preparing for 7.0.4.3 release
• 3468503 Implement SafeBuffer#bytesplice
• e237700 Merge pull request #47573 from codergeek121/fix-timewithzone-argumenterror
• ae53949 Merge pull request #47457 from zzak/ruby-3.3/feature/18285
• 799b300 Version 7.0.4.2
• 7c70791 Version 7.0.4.2
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.