chore(deps-dev): bump shoulda-matchers from 7.0.1 to 8.0.1

[dependabot]

Bumps shoulda-matchers from 7.0.1 to 8.0.1.

Release notes

Sourced from shoulda-matchers's releases.

v8.0.1

What's Changed

• fix: Prevent test-model leak without DescendantsTracker.clear by @​matsales28 in thoughtbot/shoulda-matchers#1713

Full Changelog: thoughtbot/shoulda-matchers@v8.0.0...v8.0.1

v8.0.0

8.0.0 - 2026-06-12

Backward-incompatible changes

• Drop support for Rails 7.1 and Ruby 3.2 by @​matsales28

Features

• Add support for validating multiple attributes at once by @​matsales28 (#1651)
• Add error for using with_options in define_enum_for matcher by @​matsales28 (#1693)
• Introduce support for deprecated associations API by @​stefannibrasil (#1690)

Bug fixes

• Prevent ActiveRecord constant leak in uniqueness matcher by @​matsales28 (#1694)

Improvements

• Add Ruby 4 support by @​stefannibrasil (#1697)
• Update Ruby versions to latest stable releases by @​matsales28 (#1708)
• Update Rails versions to latest stable releases by @​matsales28 (#1709)
• Improve validate_inclusion_of matcher boolean warn messages by @​stefannibrasil (#1692)
• Use a fixed date in validate_inclusion_of date attribute spec by @​HoangMinhBK (#1703)
• Require MFA for gem pushes by @​MatheusRich (#1702)
• Update README to reflect the v7 release by @​brendanthomas1 (#1695)
• Fix broken README anchor for should vs is_expected.to by @​LarytheLord (#1700)
• Fix foreign_type example in association_matcher docs by @​artinboghosian (#1705)

#1651: thoughtbot/shoulda-matchers#1651 #1690: thoughtbot/shoulda-matchers#1690 #1692: thoughtbot/shoulda-matchers#1692 #1693: thoughtbot/shoulda-matchers#1693 #1694: thoughtbot/shoulda-matchers#1694 #1695: thoughtbot/shoulda-matchers#1695 #1697: thoughtbot/shoulda-matchers#1697 #1700: thoughtbot/shoulda-matchers#1700 #1702: thoughtbot/shoulda-matchers#1702 #1703: thoughtbot/shoulda-matchers#1703 #1705: thoughtbot/shoulda-matchers#1705 #1708: thoughtbot/shoulda-matchers#1708 #1709: thoughtbot/shoulda-matchers#1709

Changelog

Sourced from shoulda-matchers's changelog.

8.0.1 - 2026-06-12

Bug fixes

• Fix validate_uniqueness_of raising "DescendantsTracker.clear was disabled" when config.enable_reloading is false by @​matsales28 (#1713)

#1713: thoughtbot/shoulda-matchers#1713

8.0.0 - 2026-06-12

Backward-incompatible changes

• Drop support for Rails 7.1 and Ruby 3.2 by @​matsales28

Features

• Add support for validating multiple attributes at once by @​matsales28 (#1651)
• Add error for using with_options in define_enum_for matcher by @​matsales28 (#1693)
• Introduce support for deprecated associations API by @​stefannibrasil (#1690)

Bug fixes

• Prevent ActiveRecord constant leak in uniqueness matcher by @​matsales28 (#1694)

Improvements

• Add Ruby 4 support by @​stefannibrasil (#1697)
• Update Ruby versions to latest stable releases by @​matsales28 (#1708)
• Update Rails versions to latest stable releases by @​matsales28 (#1709)
• Improve validate_inclusion_of matcher boolean warn messages by @​stefannibrasil (#1692)
• Use a fixed date in validate_inclusion_of date attribute spec by @​HoangMinhBK (#1703)
• Require MFA for gem pushes by @​MatheusRich (#1702)
• Update README to reflect the v7 release by @​brendanthomas1 (#1695)
• Fix broken README anchor for should vs is_expected.to by @​LarytheLord (#1700)
• Fix foreign_type example in association_matcher docs by @​artinboghosian (#1705)

#1651: thoughtbot/shoulda-matchers#1651 #1690: thoughtbot/shoulda-matchers#1690 #1692: thoughtbot/shoulda-matchers#1692 #1693: thoughtbot/shoulda-matchers#1693 #1694: thoughtbot/shoulda-matchers#1694 #1695: thoughtbot/shoulda-matchers#1695 #1697: thoughtbot/shoulda-matchers#1697 #1700: thoughtbot/shoulda-matchers#1700 #1702: thoughtbot/shoulda-matchers#1702 #1703: thoughtbot/shoulda-matchers#1703 #1705: thoughtbot/shoulda-matchers#1705 #1708: thoughtbot/shoulda-matchers#1708 #1709: thoughtbot/shoulda-matchers#1709

Commits

• cf3b368 Bump version to 8.0.1 [ci skip]
• 341d908 fix: Prevent test-model leak without DescendantsTracker.clear (#1713)
• c91c61c Bump version to 8.0.0 [ci skip] (#1711)
• 4510375 chore: Drop support for Rails 7.1 and Ruby 3.2 (#1710)
• 5a95f41 Update rails versions (#1709)
• 71635a1 chore: Update Ruby versions (#1708)
• d0c50c8 feat: Add support for validating multiple attributes at once (#1651)
• 2514729 Update association_matcher.rb (#1705)
• 6063887 fix: use a fixed date in validate_inclusion_of date attribute spec (#1703)
• 3a2456e Require MFA for gem pushes (#1702)
• Additional commits viewable in compare view

[mroderick]

Dependency Upgrade Review: shoulda-matchers v7.0.1 → v8.0.1

PR Scope

Dependency-only — only Gemfile (version constraint) and Gemfile.lock changed.

Changes in shoulda-matchers

This is a major version bump (7 → 8), combining the 8.0.0 release and the 8.0.1 bugfix patch.

Breaking changes (8.0.0):

• Drop support for Rails 7.1 and Ruby 3.2 — Neither affects this app. We're on Rails 8.1.2 and Ruby 3.4.8.

New features (8.0.0):

• Validate multiple attributes at once (should validate(:name, :email))
• Error for using with_options in define_enum_for matcher
• Support for deprecated associations API

Bug fixes:

• Prevent ActiveRecord constant leak in uniqueness matcher (8.0.0)
• Prevent test-model leak without DescendantsTracker.clear (8.0.1)

Refactored matchers: Many validation matchers were restructured internally to support the multi-attribute feature. The public API remains backward compatible.

Usage in Repository

• Configured in spec/spec_helper.rb via require 'shoulda/matchers'
• Used extensively in model specs:
  • validate_presence_of (20+ usages)
  • validate_uniqueness_of (3 usages, including scoped)
  • validate_numericality_of (4 usages)
  • validate_inclusion_of (1 usage with range)
  • validate_length_of (1 usage)
  • belong_to (5 usages, including .optional)
  • have_many (1 usage with .class_name and .dependent)
  • define_enum_for (1 usage)

Compatibility Assessment

Compatible. The only breaking change (dropping Rails 7.1 / Ruby 3.2) doesn't apply. All matchers used in this codebase retain their existing API. The internal refactoring to support multi-attribute validation is transparent to existing usage patterns. The 8.0.1 patch fixes a test isolation edge case that we weren't hitting (no custom enable_reloading config).

Test Coverage

Good coverage — the spec suite heavily exercises these matchers across many models. If something broke, tests would catch it.

Confidence Rating

High — the breaking change doesn't apply, and all used matchers are backward compatible. The codebase has extensive model specs that exercise these matchers.

[mroderick]

Approved after review analysis (see comment above for full details).