[ndbroadbent]

The major upgrades Dependabot opened, plus the routine ones, in one branch. It replaces #60, #58, #57, #53, #47, #40, #39, #38 and #33, which should close themselves once it merges.

Gems

• The tests run against Sentry 7, Honeybadger 6 and Sidekiq 8 (development dependencies only). All 12 Sidekiq tests pass on 8.1.7, so the Sidekiq page no longer says Sidekiq 8 isn't tested.
• Development uses Rails 8.1. ActiveSupport 8.1 no longer passes quirks_mode to JSON.generate, so the development Gemfile and the Rails 8.1 test apps drop the json < 3 pin. The older Rails versions keep it.
• SimpleCov 1.3. test_helper.rb uses skip in place of the deprecated add_filter, and stops setting to_time_preserves_timezone, which Rails 8.1 deprecates.
• Regenerated RBIs.

Tooling and docs site

• jscpd 5.4, a rewrite in Rust with prebuilt binaries from the same maintainer, published with provenance. Only the --exit-code flag changed. It still fails on a planted duplicate. It skips files too small to contain a 50-token clone, which 4.x counted.
• Next.js 16.4.3, TypeScript 6 and lucide-react 1.66. TypeScript 6 loads no @types packages by default and deprecates baseUrl, so tsconfig.json lists node and jest and drops baseUrl. lucide-react 1.0 removed brand icons, so the Build Status card shows the Workflow icon in place of the GitHub logo.
• ruby/setup-ruby 1.336.0.

Left for later

• minitest 6.1, dalli 5, the latest Sorbet and setup-ruby 1.337/1.338 are less than a week old.
• RuboCop 1.92 waits for standard, which requires 1.91.
• TypeScript 7 (the native compiler) and @types/node 26 (CI runs Node 22).

Testing

task ci passes locally. The Rails integration tests pass on 7.1.6, 7.2.4, 8.0.5.2 and 8.1.4.1, and the docs site builds.