Bump activerecord from 8.1.3.1 to 8.1.4

[dependabot]

Bumps activerecord from 8.1.3.1 to 8.1.4.

Release notes

Sourced from activerecord's releases.

8.1.4

Active Support

• Fix the debug error page rendering for SyntaxErrors with multi-line messages.

  Marco Roth

• Make ActiveSupport::JSON.decode compatible with the upcoming json 3.0 gem.

  Earlopain

• Fix number_to_human_size crashing for sizes above a terabyte by supporting petabyte, exabyte, and zettabyte storage units.

  Kenta Ishizaki

• Fix Range#sole raising NoMethodError when the enumerable core extension isn't already loaded.

  Kenta Ishizaki

• Fix ActiveSupport::Cache::FileStore raising NameError for FileUtils when fileutils isn't already loaded.

  Kenta Ishizaki

• Fix Enumerable#in_order_of with filter: true dropping nil elements explicitly named in the series.

  Kenta Ishizaki

• Keep HashWithIndifferentAccess#filter returning a HashWithIndifferentAccess instead of a plain Hash.

  Kenta Ishizaki

• Fix number_to_human and number_to_human_size crashing when :precision is nil.

  Kenta Ishizaki

• Fix ActiveSupport::InheritableOptions#to_h to recursively flatten nested InheritableOptions parents.

  Andrew Novoselac

• Fix ActiveSupport::StructuredEventSubscriber.debug_only leaking debug-only methods across subscriber subclasses.

  Kenta Ishizaki

... (truncated)

Changelog

Sourced from activerecord's changelog.

Rails 8.1.4 (September 24, 2026)

• Avoid deadlocks when concurrent find_or_create_by calls read back the same record within MySQL transactions.

  Use a shared lock for the read after a duplicate insert, preserving visibility under REPEATABLE READ without upgrading competing shared locks to exclusive locks. This also applies to create_or_find_by and the bang variants of both methods.

  Fixes #54281.

  Kirsten Westeinde

• Filter the database password out of failed db: task command error messages.

  Ngan Pham

• Fix ActiveRecord::TypeCaster::Connection sometimes leaking a checked-out connection.

  Hartley McGuire

• Fix PostgreSQL exclusion constraints with multiline expressions being parsed incorrectly during schema introspection.

  Jake McAllister

• Fix async ActiveRecord::StatementCache#execute raising an error for out-of-range bind values instead of returning an empty result.

  viralpraxis

• Fix where clauses with column-tuple syntax not resolving references to other tables.

  Chris Gunther

• Fix distinct: true being ignored by average.

  Kenta Ishizaki

• Fix belongs_to change tracking for composite foreign keys.

  Only the first foreign key column was checked for changes; now all foreign key columns are checked.

  Anas Khan

• Make add_column(if_not_exists: true) reversible.

... (truncated)

Commits

• c3466ea Preparing for 8.1.4 release
• 2670772 Merge pull request #58733 from kwestein/create-or-find-by-deadlock
• e6288a8 Update CHANGELOGs for 8-1-stable backports
• 44a7fd4 Merge pull request #58799 from e-akashsaini/fix-tuple-where-key-corrupting-at...
• 4a230ca Merge pull request #58725 from ngan/np-mysql-cli-trilogy-ssl-keys
• 062c435 Merge pull request #58726 from ngan/np-redact-password-in-task-errors
• 36f436f Merge pull request #58714 from joemsak/keepalive-false-config-bug
• 2a0d899 Merge pull request #58716 from joemsak/checkout-blocking-respects-timeout
• 6785886 Merge pull request #58688 from byroot/upgrade-rubocop
• cfa3f46 Fix MessageSerializerTest to handle json 3.x
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)