chore(deps): bump solid_queue_monitor from 2.1.0 to 2.2.0

[dependabot]

Bumps solid_queue_monitor from 2.1.0 to 2.2.0.

Release notes

Sourced from solid_queue_monitor's releases.

v2.2.0 — Opt-in CSRF Protection

Highlights

Adds opt-in CSRF protection for the dashboard's destructive actions, closing a gap where retry / discard / pause / resume / execute / reject / remove / prune POSTs were unprotected. Disabled by default, so session-less and API-only hosts are fully backward compatible.

Added

• SolidQueueMonitor.csrf_protection_enabled config option (default false). When enabled, the engine no longer skips verify_authenticity_token: all dashboard forms embed an authenticity_token, csrf_meta_tags are added to the layout, and unverified POST requests to the destructive actions (retry / discard / pause / resume / execute / reject / remove / prune) are rejected. Disabled by default for backward compatibility, since the gem does not assume the host app has a session store. See the new "CSRF Protection" section in the README for requirements.

Full Changelog: vishaltps/solid_queue_monitor@v2.1.0...v2.2.0

Changelog

Sourced from solid_queue_monitor's changelog.

[2.2.0] - 2026-06-24

Added

• SolidQueueMonitor.csrf_protection_enabled config option (default false). When enabled, the engine no longer skips verify_authenticity_token: all dashboard forms embed an authenticity_token, csrf_meta_tags are added to the layout, and unverified POST requests to the destructive actions (retry / discard / pause / resume / execute / reject / remove / prune) are rejected. Disabled by default for backward compatibility, since the gem does not assume the host app has a session store. See the new "CSRF Protection" section in the README for requirements.

Commits

• 8a83f59 chore: bump version to 2.2.0 (#41)
• c6e8c8e feat: opt-in CSRF protection for dashboard actions (#40)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)