chore(deps): Bump activemodel from 8.1.3.1 to 8.1.4

[dependabot]

Bumps activemodel from 8.1.3.1 to 8.1.4.

Release notes

Sourced from activemodel's releases.

8.1.4

Active Support

• Fix the debug error page rendering for SyntaxErrors with multi-line messages.

  Marco Roth

• Make ActiveSupport::JSON.decode compatible with the upcoming json 3.0 gem.

  Earlopain

• Fix number_to_human_size crashing for sizes above a terabyte by supporting petabyte, exabyte, and zettabyte storage units.

  Kenta Ishizaki

• Fix Range#sole raising NoMethodError when the enumerable core extension isn't already loaded.

  Kenta Ishizaki

• Fix ActiveSupport::Cache::FileStore raising NameError for FileUtils when fileutils isn't already loaded.

  Kenta Ishizaki

• Fix Enumerable#in_order_of with filter: true dropping nil elements explicitly named in the series.

  Kenta Ishizaki

• Keep HashWithIndifferentAccess#filter returning a HashWithIndifferentAccess instead of a plain Hash.

  Kenta Ishizaki

• Fix number_to_human and number_to_human_size crashing when :precision is nil.

  Kenta Ishizaki

• Fix ActiveSupport::InheritableOptions#to_h to recursively flatten nested InheritableOptions parents.

  Andrew Novoselac

• Fix ActiveSupport::StructuredEventSubscriber.debug_only leaking debug-only methods across subscriber subclasses.

  Kenta Ishizaki

... (truncated)

Changelog

Sourced from activemodel's changelog.

Rails 8.1.4 (September 24, 2026)

• Fix ActiveModel::Errors#import mutating the override options hash passed to it.

  Kenta Ishizaki

• Fix normalizes not detecting in-place changes for attributes whose database cast type differs from the attribute type (e.g. JSON columns), causing normalization to be skipped on validation.

  Chedli Bourguiba

• Fix alias_attribute accumulating duplicate entries in aliases_by_attribute_name when called multiple times with the same arguments.

  Nicholas Jakobsen

• Fix normalizes re-applying normalizations on every validation of an unpersisted record, and speed up validation of normalized attributes.

  The in-place mutation check re-ran the normalizer on every valid? of an unpersisted record: wasteful for idempotent normalizers and compounded the result for non-idempotent ones. Normalizations are now re-applied only on a genuine in-place mutation.

  Yaroslav Markin

• Limit the size of strings ActiveModel::Type::Integer will coerce with to_i.

  Calling to_i on very long strings can take a long time and could be used as a DoS vector. Integer casting now only considers the first _limit * 4 bytes of a string (16 bytes for a default 4-byte integer, 32 bytes for an 8-byte bigint), which is enough to hold the maximum representable value plus a sign or a short slug suffix.

  Aaron Patterson, Jean Boussier

Commits

• c3466ea Preparing for 8.1.4 release
• 2ed2c88 Define read_attribute_for_validation instead of aliasing send
• 2616145 Merge pull request #56705 from p8/activemodel/fix-read-attr-for-serialization...
• 20abac3 Merge pull request #58817 from yahonda/fix-alias-fallback-to-object-in-attrib...
• e6288a8 Update CHANGELOGs for 8-1-stable backports
• bf26808 Merge branch '8-1-sec' into 8-1-stable
• bf540ce Merge pull request #57889 from 55728/fix-rdoc-examples
• 9b01b29 Merge pull request #57792 from 55728/fix-errors-import-mutates-override-options
• 1e317a7 Merge pull request #57660 from chaadow/fix_normalize_onjsonb_default_emptyhash
• 0a65306 Merge pull request #57639 from yaroslav/fix/normalization-fix-reruns
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)