chore(deps): upgrade ruby and deps to latest versions (#19)

galkleinman · web-flow · commit ebb68348c43b · 2026-01-19T12:59:02.000+02:00
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,25 @@
+version: 2
+updates:
+  - package-ecosystem: "bundler"
+    directory: "/traceloop-sdk"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+
+  - package-ecosystem: "bundler"
+    directory: "/semantic_conventions_ai"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+
+  - package-ecosystem: "bundler"
+    directory: "/sample-app"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5
diff --git a/.ruby-version b/.ruby-version
@@ -0,0 +1 @@
+4.0.1
diff --git a/sample-app/Gemfile b/sample-app/Gemfile
@@ -5,6 +5,6 @@ source "https://rubygems.org"
 gem "ruby-openai"
 gem "traceloop-sdk"
 
-gem "gemini-ai", "~> 4.1"
+gem "gemini-ai", "~> 4.3"
 
-gem "aws-sdk-bedrockruntime", "~> 1.14"
+gem "aws-sdk-bedrockruntime", "~> 1.71"
diff --git a/sample-app/Gemfile.lock b/sample-app/Gemfile.lock
@@ -1,65 +1,73 @@
 GEM
   remote: https://rubygems.org/
   specs:
-    addressable (2.8.7)
-      public_suffix (>= 2.0.2, < 7.0)
-    aws-eventstream (1.3.0)
-    aws-partitions (1.1003.0)
-    aws-sdk-bedrockruntime (1.31.0)
-      aws-sdk-core (~> 3, >= 3.210.0)
+    addressable (2.8.8)
+      public_suffix (>= 2.0.2, < 8.0)
+    aws-eventstream (1.4.0)
+    aws-partitions (1.1206.0)
+    aws-sdk-bedrockruntime (1.71.0)
+      aws-sdk-core (~> 3, >= 3.241.4)
       aws-sigv4 (~> 1.5)
-    aws-sdk-core (3.212.0)
+    aws-sdk-core (3.241.4)
       aws-eventstream (~> 1, >= 1.3.0)
       aws-partitions (~> 1, >= 1.992.0)
       aws-sigv4 (~> 1.9)
+      base64
+      bigdecimal
       jmespath (~> 1, >= 1.6.1)
-    aws-sigv4 (1.10.1)
+      logger
+    aws-sigv4 (1.12.1)
       aws-eventstream (~> 1, >= 1.0.2)
-    base64 (0.2.0)
-    ethon (0.16.0)
+    base64 (0.3.0)
+    bigdecimal (4.0.1)
+    ethon (0.18.0)
       ffi (>= 1.15.0)
+      logger
     event_stream_parser (1.0.0)
-    faraday (2.12.0)
-      faraday-net_http (>= 2.0, < 3.4)
+    faraday (2.14.0)
+      faraday-net_http (>= 2.0, < 3.5)
       json
       logger
-    faraday-multipart (1.0.4)
-      multipart-post (~> 2)
-    faraday-net_http (3.3.0)
-      net-http
+    faraday-multipart (1.2.0)
+      multipart-post (~> 2.0)
+    faraday-net_http (3.4.2)
+      net-http (~> 0.5)
     faraday-typhoeus (1.1.0)
       faraday (~> 2.0)
       typhoeus (~> 1.4)
-    ffi (1.17.0-arm64-darwin)
-    gemini-ai (4.2.0)
+    ffi (1.17.3-arm64-darwin)
+    gemini-ai (4.3.0)
       event_stream_parser (~> 1.0)
-      faraday (~> 2.10)
+      faraday (~> 2.13, >= 2.13.2)
       faraday-typhoeus (~> 1.1)
       googleauth (~> 1.8)
       typhoeus (~> 1.4, >= 1.4.1)
-    google-cloud-env (2.2.1)
+    google-cloud-env (2.3.1)
+      base64 (~> 0.2)
       faraday (>= 1.0, < 3.a)
-    google-protobuf (3.25.5-arm64-darwin)
-    googleapis-common-protos-types (1.16.0)
+    google-logging-utils (0.2.0)
+    google-protobuf (3.25.8)
+    googleapis-common-protos-types (1.20.0)
       google-protobuf (>= 3.18, < 5.a)
-    googleauth (1.11.2)
+    googleauth (1.16.1)
       faraday (>= 1.0, < 3.a)
-      google-cloud-env (~> 2.1)
-      jwt (>= 1.4, < 3.0)
+      google-cloud-env (~> 2.2)
+      google-logging-utils (~> 0.1)
+      jwt (>= 1.4, < 4.0)
       multi_json (~> 1.11)
       os (>= 0.9, < 2.0)
       signet (>= 0.16, < 2.a)
     jmespath (1.6.2)
-    json (2.8.1)
-    jwt (2.9.3)
+    json (2.18.0)
+    jwt (3.1.2)
       base64
-    logger (1.6.1)
-    multi_json (1.15.0)
+    logger (1.7.0)
+    multi_json (1.19.1)
     multipart-post (2.4.1)
-    net-http (0.5.0)
-      uri
-    opentelemetry-api (1.4.0)
-    opentelemetry-common (0.21.0)
+    net-http (0.9.1)
+      uri (>= 0.11.1)
+    opentelemetry-api (1.7.0)
+    opentelemetry-common (0.23.0)
       opentelemetry-api (~> 1.0)
     opentelemetry-exporter-otlp (0.26.3)
       google-protobuf (~> 3.14)
@@ -68,44 +76,45 @@ GEM
       opentelemetry-common (~> 0.20)
       opentelemetry-sdk (~> 1.2)
       opentelemetry-semantic_conventions
-    opentelemetry-registry (0.3.1)
+    opentelemetry-registry (0.4.0)
       opentelemetry-api (~> 1.1)
     opentelemetry-sdk (1.3.2)
       opentelemetry-api (~> 1.1)
       opentelemetry-common (~> 0.20)
       opentelemetry-registry (~> 0.2)
       opentelemetry-semantic_conventions
-    opentelemetry-semantic_conventions (1.10.1)
+    opentelemetry-semantic_conventions (1.36.0)
       opentelemetry-api (~> 1.0)
     opentelemetry-semantic_conventions_ai (0.0.3)
       opentelemetry-api (~> 1.0)
     os (1.1.4)
-    public_suffix (6.0.1)
-    ruby-openai (7.3.1)
+    public_suffix (7.0.2)
+    ruby-openai (8.3.0)
       event_stream_parser (>= 0.3.0, < 2.0.0)
       faraday (>= 1)
       faraday-multipart (>= 1)
-    signet (0.19.0)
+    signet (0.21.0)
       addressable (~> 2.8)
       faraday (>= 0.17.5, < 3.a)
-      jwt (>= 1.5, < 3.0)
+      jwt (>= 1.5, < 4.0)
       multi_json (~> 1.10)
     traceloop-sdk (0.1.5)
       opentelemetry-exporter-otlp (~> 0.26.1)
       opentelemetry-sdk (~> 1.3.1)
       opentelemetry-semantic_conventions_ai (~> 0.0.3)
     typhoeus (1.4.1)
       ethon (>= 0.9.0)
-    uri (1.0.1)
+    uri (1.1.1)
 
 PLATFORMS
   arm64-darwin-23
+  arm64-darwin-25
 
 DEPENDENCIES
-  aws-sdk-bedrockruntime (~> 1.14)
-  gemini-ai (~> 4.1)
+  aws-sdk-bedrockruntime (~> 1.71)
+  gemini-ai (~> 4.3)
   ruby-openai
   traceloop-sdk
 
 BUNDLED WITH
-   2.4.10
+  4.0.4
diff --git a/semantic_conventions_ai/Gemfile.lock b/semantic_conventions_ai/Gemfile.lock
@@ -0,0 +1,24 @@
+PATH
+  remote: .
+  specs:
+    opentelemetry-semantic_conventions_ai (0.0.3)
+      opentelemetry-api (~> 1.0)
+
+GEM
+  remote: https://rubygems.org/
+  specs:
+    opentelemetry-api (1.7.0)
+
+PLATFORMS
+  arm64-darwin-25
+  ruby
+
+DEPENDENCIES
+  opentelemetry-semantic_conventions_ai!
+
+CHECKSUMS
+  opentelemetry-api (1.7.0) sha256=ccfd264ea6f2db5bf4185e3c07a1297977b44a944e2ce65457c4fe63a697214f
+  opentelemetry-semantic_conventions_ai (0.0.3)
+
+BUNDLED WITH
+  4.0.4
diff --git a/traceloop-sdk/traceloop-sdk.gemspec b/traceloop-sdk/traceloop-sdk.gemspec
@@ -17,8 +17,8 @@ Gem::Specification.new do |spec|
 
   spec.add_dependency 'opentelemetry-semantic_conventions_ai', '~> 0.0.3'
 
-  spec.add_dependency 'opentelemetry-sdk', '~> 1.3.1'
-  spec.add_dependency 'opentelemetry-exporter-otlp', '~> 0.26.1'
+  spec.add_dependency 'opentelemetry-sdk', '~> 1.10'
+  spec.add_dependency 'opentelemetry-exporter-otlp', '~> 0.31'
 
   if spec.respond_to?(:metadata)
     spec.metadata['source_code_uri'] = 'https://github.com/traceloop/openllmetry-ruby/tree/main/traceloop-sdk'
