Update aasm requirement from ~> 5.0 to >= 5, < 7

[dependabot]

Updates the requirements on aasm to permit the latest version.

Changelog

Sourced from aasm's changelog.

6.0.0 (5 July 2026)

• Let whiny_persistence: true be the default now #378
• Stopped support for Ruby v2 #865
• Stopped support for Ruby on Rails v6 #866
• Add MFA requirement to gemspec metadata #879
• Avoid namespace naming collisions #880

5.5.2 (22 October 2025)

• Fix another issue around keyword arguments for Ruby >3.2, thanks @​segiddins #873
• Upgrade rails tests and move concurrent to load only necessary class, thanks @​allcentury #852
• Add changelog-uri, thanks @​kzkn #759

5.5.1 (14 June 2025)

• Fix broken for pull requests, thanks @​y-yago #868
• Add build for Rails 8.0, thanks @​y-yago #860
• Fix issue around keyword arguments for Ruby 3.2, thanks @​thiagofm #857
• Add build for Rails 7.2, thanks @​y-yago #853
• Fix broken tests on Rails 7.1, thanks @​y-yago #842

5.5.0

• Fix ClassInvoker instantiating class twice, thanks to danielnolan
• Replace File.exists? with File.exist?, thanks to kyoshidajp

5.4.0

• Shrink gem size and export only needed files to work #742, thanks to brunoarueira
• Lock redis-objects to 1.6.0 as 1.7.0 has breaking changes #796

5.3.1

• Fix fire! with string argument #787, in PR#788 thanks to norman

• Allow fire and fire! to accept a String or Symbol for the event name, and raise AASM::UndefinedEvent rather than AASM::UndefinedState when an event can not be found, thanks to norman.

5.3.0

• Add Ruby 3.1 and Rails 7 to the CI matrix #775, thanks to petergoldstein
• Fixed an error in Ruby 3 when specifying a method that takes keyword arguments, such as event's before hook #777, thanks to pocari
• Fix multi-threading bug not firing success callbacks #778, thanks to guewen
• Raise AASM::UndefinedState when calling fire or fire! with undefined event names #753, thanks to danielvdao
• Fixing Readme typos #745 #772 #774 #781, thanks to jaredsmithse jcat4 ChandanChainani TessHuelskamp
• Add github actions config #750, thanks to aka47
• Test against for Rails 6.0 and improve ci #719, thanks to yujideveloper
• Fix migration class name to work with zeitwerk #720, thanks to rwegrzyniak

5.2.0

• fix: timestamp will work with named machine #739, thanks to RolandStuder
• Create namespaced scopes in PR #735, thanks to caiohsramos
• Fix multiple state machines example per class on README in PR #732, thanks to RodrigoVitiello
• Update version in recommendation to add after_commit_everywhere in PR #729, thanks to Envek
• Fix i18n Event translations failing #721 in PR #723, thanks to the-spectator
• Add documentation to the Readme about how parameters are handled in AASM events in PR #722, thanks to dstuebe

... (truncated)

Commits

• 88061ec Merge pull request #881 from aasm/major/upgrade_to_version_6
• 9680939 Version bump to 6.0.0
• 5da6317 Add MFA requirement to gemspec metadata
• 8ef2171 Merge branch 'fix/namespace-event-methods-direct-definition' into major/upgra...
• 4a4c5e5 Update changelog for #870
• bb11acc Merge pull request #870 from kumar-mithlesh/fix/spelling-fixes
• c16d878 Merge branch 'whiny_persistence_is_now_default' into major/upgrade_to_version_6
• 043d156 Update tests now that we have whiny persistence
• 5dbc3ac Describe the breaking change
• 1535f5e Merge branch 'master' into whiny_persistence_is_now_default
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)