Bump appsignal from 3.7.5 to 4.7.0

[dependabot]

Bumps appsignal from 3.7.5 to 4.7.0.

Changelog

Sourced from appsignal's changelog.

4.7.0

Published on 2025-08-29.

Added

• Add Sidekiq worker-level job status metric: worker_job_count. This new counter metric's status tag will be processed for each job that's processed and reports another counter with the failure status if the job encountered an error. (minor fa9859af)

Fixed

• Support streaming bodies. AppSignal's Rack instrumentation now supports streaming bodies in responses, such as those produced by Async::Cable. This fixes an issue where AppSignal's Rack instrumentation would cause requests with streaming bodies to crash.

  If you use our Rack instrumentation through a framework that is automatically instrumented by AppSignal, such as Rails, Hanami, Padrino or Sinatra, this fix is applied automatically.

  If your application instruments Rack manually, you must remove the following line from your application's initial setup:

  use Rack::Events, [Appsignal::Rack::EventHandler.new]

  And replace it with the following line:

  use Appsignal::Rack::EventMiddleware

  (minor c94315e3)

• Avoid instrumenting Rails when AppSignal is not active. If AppSignal is configured to start when the Rails application loads, rather than after it has initialised, only add Rails' instrumentation middlewares if AppSignal was actually started. (patch 0239a2c3)

4.6.0

Published on 2025-07-29.

Added

• Add Sorbet and RBS type signatures for the gem's public APIs. If your editor supports showing type signatures, they will now show up in for the AppSignal Ruby gem. (minor 9ed372fc, 4c9118f7)
• When a deployment tool (Capistrano, Hatchbox.io) provides the REVISION file in the deployed application, AppSignal will now use that to set the revision config. (minor 34e4aee5, 4c9118f7)

Changed

• Improve the YARD documentation for public APIs. This will make the documentation clearer and more useful for developers using the Ruby gem. Private APIs have been hidden from the generated output. (patch 989dc495, 4c9118f7)
• When an error occurs while initializing AppSignal or when running a probe, use the error log level to log the error's backtrace. (patch 390f4489, 385b0262, 178bafc2)

Fixed

• When a Hash-like value (such as ActiveSupport::HashWithIndifferentAccess or Sinatra::IndifferentHash) is passed to a transaction helper (such as add_params, add_session_data, ...) it is now converted to a Ruby Hash before setting it as the value or merging it with the existing value. This allows Hash-like objects to be merged, instead of logging a warning and only storing the new value.

  # Example scenario
  Appsignal.add_params(:key1 => { :abc => "value" })

... (truncated)

Commits

• b4a15e8 Publish package v4.7.0
• 2ef98de Merge pull request #1445 from appsignal/fix-streaming-responses-rack-middleware
• c94315e Fix streaming responses with Rack middleware
• 7958728 Merge pull request #1444 from appsignal/only-instrument-rails-if-appsignal-st...
• 27a4aff Test if the AppSignal middleware isn't added
• 7a2df39 Fix middleware assertion in Railtie spec
• 0239a2c Only instrument Rails if AppSignal started
• fb4cebb Merge pull request #1440 from shairyar/additionl-sidekiq-metrics
• fa9859a Add Sidekiq worker-level metrics
• 8153ba4 Add type signature information to CLAUDE.md file
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #347.