chore(deps): bump sqlite_crypto from 2.2.0 to 2.3.0

[dependabot]

Bumps sqlite_crypto from 2.2.0 to 2.3.0.

Release notes

Sourced from sqlite_crypto's releases.

Release v2.3.0

🔒 Security:

• Refreshed lockfiles, picking up fixes for transitive CVEs in sqlite3, nokogiri, json, crass, and concurrent-ruby

🚀 Changes:

• Updated .ruby-version from 4.0.3 to 4.0.6
• CI: cache bundler installs per Rails version, run bundler-audit from the bundle, and drop the empty coverage-threshold step
• Narrowed the runtime dependency from rails to activerecord + railties, dropping the action_text-trix pin it required
• Tightened ULID validation: rejects I, L, O, U, which Crockford base32 excludes

🐛 Fixed:

• Reads no longer raise on malformed legacy IDs: Type::Base#deserialize returns stored values as-is instead of re-validating them, so a corrupted row no longer crashes every read of it. Writes (#cast/#serialize) still validate strictly
• Primary-key type cache invalidation: _sqlite_crypto_pk_type now clears on reset_column_information instead of going stale after a migration
• Adapter guard for auto ID generation: primary-key detection now only applies to SQLite3 connections, not any string(36/26) primary key regardless of adapter
• references/belongs_to with to_table and foreign_key: true: the foreign key now targets the correct table instead of the pluralized association name

📦 Upgrade

bundle update sqlite_crypto

Changelog

Sourced from sqlite_crypto's changelog.

[2.3.0] - 2026-07-15

Security

• Refreshed lockfiles, picking up fixes for transitive CVEs in sqlite3, nokogiri, json, crass, and concurrent-ruby

Changed

• Updated .ruby-version from 4.0.3 to 4.0.6
• CI: cache bundler installs per Rails version, run bundler-audit from the bundle, and drop the empty coverage-threshold step
• Narrowed the runtime dependency from rails to activerecord + railties, dropping the action_text-trix pin it required
• Tightened ULID validation: rejects I, L, O, U, which Crockford base32 excludes

Fixed

• Reads no longer raise on malformed legacy IDs: Type::Base#deserialize returns stored values as-is instead of re-validating them, so a corrupted row no longer crashes every read of it. Writes (#cast/#serialize) still validate strictly
• Primary-key type cache invalidation: _sqlite_crypto_pk_type now clears on reset_column_information instead of going stale after a migration
• Adapter guard for auto ID generation: primary-key detection now only applies to SQLite3 connections, not any string(36/26) primary key regardless of adapter
• references/belongs_to with to_table and foreign_key: true: the foreign key now targets the correct table instead of the pluralized association name

Commits

• 0a9837b feat: quality fixes for type casting, migration helpers, and dependencies (#24)
• 46e1d48 chore: bump Ruby to 4.0.6 and streamline CI (#23)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)