Bump rails-erd from 1.7.2 to 2.0.0#879
Conversation
Bumps [rails-erd](https://github.com/voormedia/rails-erd) from 1.7.2 to 2.0.0. - [Release notes](https://github.com/voormedia/rails-erd/releases) - [Changelog](https://github.com/voormedia/rails-erd/blob/master/CHANGES.md) - [Commits](https://github.com/voormedia/rails-erd/commits/v2.0.0) --- updated-dependencies: - dependency-name: rails-erd dependency-version: 2.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Test coverage91.72% line coverage reported by SimpleCov. |
There was a problem hiding this comment.
Stale comment
Dependabot assessment:
rails-erd1.7.2 → 2.0.0Verdict: Safe to merge for production/runtime. This is a lockfile-only bump;
rails-erdis in the:developmentgroup and is not loaded in production.CI
- lint: pass
- test (full
rspec): pass- Local Docker was unavailable here; verification relied on GitHub Actions.
Safety of merging
No application behaviour changes. The test suite does not exercise ERD generation, so these dev-tool concerns would not be caught by CI:
- Output format change: v2 defaults to Mermaid (
.mmd) instead of Graphviz PDF..erdconfigonly setsfilename/title, sobundle exec erdwill now produceEditorAPI-ERD.mmd, notEditorAPI-ERD.pdf.- README is stale: README.md still documents copying
EditorAPI-ERD.pdfout of the container.- Graphviz no longer bundled:
ruby-graphvizis removed from the lockfile. Restoring PDF output requires re-adding that gem and passinggenerator=graphviz filetype=pdf.- Diagram fidelity: large schemas may look different in Mermaid vs the old Graphviz PDF — worth a quick manual
bundle exec erdafter merge if anyone relies on the diagram.Proposed fixes
Not required to merge; optional follow-ups:
- Update the README ERD section for
.mmdoutput (and how to view/commit it), or- Pin the old workflow in
.erdconfig(generator: graphviz,filetype: pdf) and addruby-graphvizback to the:developmentgroup if the team prefers PDFs.No test failures, deprecations, or runtime fixes needed.
Sent by Cursor Automation: Editor-* - Tests Dependabot PRs
There was a problem hiding this comment.
Dependabot assessment: rails-erd 1.7.2 → 2.0.0
Verdict: safe to merge. Lockfile-only bump; CI lint and RSpec both pass (91.72% coverage). Local test run was not possible here (no Docker/Ruby in this environment); results are from GitHub Actions run #27679002784.
Safety of merging
rails-erdis in the:developmentgroup only — no production or test runtime impact.- No application code changes; existing test suite gives good confidence nothing loads this gem at runtime.
- Developer workflow change (not covered by tests): v2 defaults to Mermaid output (
.mmd) instead of Graphviz PDF. The README still documents copyingEditorAPI-ERD.pdf, and.erdconfigdoes not pingenerator/filetype, sobundle exec erdwill now produce a different artifact than documented. ruby-graphvizdropped from the lockfile. PDF generation still works if needed, but requires re-adding the gem and passinggenerator=graphviz filetype=pdf(or equivalent.erdconfigsettings).
Proposed fixes
None required to merge. Optional follow-up:
- Update the README ERD section for the new Mermaid default (
.mmd), or document the Graphviz/PDF migration path if that workflow should be preserved. - If the team wants to keep PDF output: add
ruby-graphvizback to the development group and set generator/filetype in.erdconfigor CLI docs.
No test failures, no new Ruby/Rails deprecations attributable to this bump.
Sent by Cursor Automation: Editor-* - Tests Dependabot PRs


Bumps rails-erd from 1.7.2 to 2.0.0.
Release notes
Sourced from rails-erd's releases.
... (truncated)
Changelog
Sourced from rails-erd's changelog.
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)