Bump activerecord from 7.2.3.1 to 8.1.3.1

[dependabot]

Bumps activerecord from 7.2.3.1 to 8.1.3.1.

Release notes

Sourced from activerecord's releases.

8.1.3.1

Active Support

• No changes.

Active Model

• No changes.

Active Record

• No changes.

Action View

• No changes.

Action Pack

• No changes.

Active Job

• No changes.

Action Mailer

• No changes.

Action Cable

• No changes.

Active Storage

• Disable libvips's unfuzzed image loaders and savers.

  libvips flags some of its loaders and savers as "unfuzzed" or "untrusted", meaning they are only safe for trusted content. Active Storage will call Vips.block_untrusted(true) to disable them while booting. An application that needs a specific loader or saver may re-enable it in an initializer.

... (truncated)

Changelog

Sourced from activerecord's changelog.

Rails 8.1.3.1 (July 29, 2026)

• No changes.

Rails 8.1.3 (March 24, 2026)

• Fix insert_all and upsert_all log message when called on anonymous classes.

  Gabriel Sobrinho

• Respect ActiveRecord::SchemaDumper.ignore_tables when dumping SQLite virtual tables.

  Hans Schnedlitz

• Restore previous instrumenter after execute_or_skip

  FutureResult#execute_or_skip replaces the thread's instrumenter with an EventBuffer to collect events published during async query execution. If the global async executor is saturated and the caller_runs fallback executes the task on the calling thread, we need to make sure the previous instrumenter is restored or the stale EventBuffer would stay in place and permanently swallow all subsequent sql.active_record notifications on that thread.

  Rosa Gutierrez

• Bump the minimum PostgreSQL version to 9.5, due to usage of array_position function.

  Ivan Kuchin

• Fix Ruby 4.0 delegator warning when calling inspect on ActiveRecord::Type::Serialized.

  Hammad Khan

• Fix support for table names containing hyphens.

  Evgeniy Demin

• Fix column deduplication for SQLite3 and PostgreSQL virtual (generated) columns.

  Column#== and Column#hash now account for virtual? so that the Deduplicable registry does not treat a generated column and a regular column with the same name and type as identical. Previously, if a generated column was registered first, a regular column on a different table could be deduplicated to the generated instance, silently excluding it from INSERT/UPDATE statements.

  Jay Huber

... (truncated)

Commits

• 3989ebf Preparing for 8.1.3.1 release
• fa8f081 Preparing for 8.1.3 release
• 63cef3d Merge branch '8-1-sec' into 8-1-stable
• 1db4b89 Preparing for 8.1.2.1 release
• e449905 Merge pull request #57022 from byroot/sobrinho-main
• 7d8eeea Merge pull request #56977 from hschne/26-03-fix-ignore-virtual-tables
• 148e4d8 Merge pull request #56970 from nicolasva/fix_spatia_lite
• 004eb65 Restore previous instrumenter after execute_or_skip
• b8b23c0 Merge pull request #56932 from eglitobias/fix-dbconsole-notimplemented-message
• 2250b16 Merge pull request #56951 from r-plus/patch-1
• Additional commits viewable in compare view