Bump the bundler-dependencies group across 1 directory with 19 updates #1508

dependabot · 2024-10-10T13:29:58Z

Bumps the bundler-dependencies group with 14 updates in the / directory:

Package	From	To
nokogiri	`1.16.6`	`1.16.7`
pg	`1.5.6`	`1.5.8`
rack	`2.2.9`	`3.1.7`
rails	`7.1.3.4`	`7.1.4`
bootsnap	`1.18.3`	`1.18.4`
dotenv-rails	`3.1.2`	`3.1.4`
net-imap	`0.4.14`	`0.4.16`
benchmark-ips	`2.13.0`	`2.14.0`
rubocop	`1.65.0`	`1.66.1`
sorbet	`0.5.11485`	`0.5.11600`
rspec-rails	`6.1.3`	`7.0.1`
selenium-webdriver	`4.22.0`	`4.25.0`
webrick	`1.8.1`	`1.8.2`
yard	`0.9.36`	`0.9.37`

Updates nokogiri from 1.16.6 to 1.16.7

Release notes

Sourced from nokogiri's releases.

v1.16.7 / 2024-07-27

Dependencies

[CRuby] Vendored libxml2 is updated to v2.12.9, which the upstream release notes state is a security release to address CVE-2024-40896. Nokogiri's maintainers believe this vulnerability does not affect users of Nokogiri, but we advise upgrading at your earliest convenience anyway.

sha256 checksums:

78778d35f165b59513be31c0fe232c63a82cf97626ffba695b5f822e5da1d74b  nokogiri-1.16.7-aarch64-linux.gem
c84cdb9e3aa44c35bbb981b20175838c4b2066c26c5cb118f31f177168a42fc3  nokogiri-1.16.7-arm-linux.gem
276dcea1b988a5b22b5acc1ba901d24b8e908c40b71dccd5d54a2ae279480dad  nokogiri-1.16.7-arm64-darwin.gem
044c45ca46abc2b6135a85ab39a546ff2f0434d43142bc59b83e5b1068876a42  nokogiri-1.16.7-java.gem
01ed785392f9cbdfd45e0e5ef6ad6d2c80a6128672589448f18952168bd68e56  nokogiri-1.16.7-x64-mingw-ucrt.gem
d8fd5c675743b85354c9098117bfa9e703c7cacab8c33e5190104ea8218ad1ec  nokogiri-1.16.7-x64-mingw32.gem
dddbf1c1ef99ce9fab98302b14f8bacb703e6f16e89b99f05ecee8a1fca23664  nokogiri-1.16.7-x86-linux.gem
b6517d995b024739cbb81251a26866d40e1ccb151936b5bb0977e7487f4e617c  nokogiri-1.16.7-x86-mingw32.gem
630732b80fc572690eab50c73a1f18988f3ac401ed0b67ca9956ba2b1e2c3faa  nokogiri-1.16.7-x86_64-darwin.gem
9e1e428641d5942af877c60b418c71163560e9feb4a5c4015f3230a8b86a40f6  nokogiri-1.16.7-x86_64-linux.gem
f819cbfdfb0a7b19c9c52c6f2ca63df0e58a6125f4f139707b586b9511d7fe95  nokogiri-1.16.7.gem

Changelog

Sourced from nokogiri's changelog.

v1.16.7 / 2024-07-27

Dependencies

[CRuby] Vendored libxml2 is updated to v2.12.9, which the upstream release notes state is a security release to address CVE-2024-40896. Nokogiri's maintainers believe this vulnerability does not affect users of Nokogiri, but we advise upgrading at your earliest convenience anyway.

Commits

d8d6ba3 version bump to v1.16.7
76199bb dep: update libxml2 to v2.12.9 (branch v1.16.x) (#3297)
ca92e48 dep: update packaged libxml2 to v2.12.9
See full diff in compare view

Updates pg from 1.5.6 to 1.5.8

Changelog

Sourced from pg's changelog.

v1.5.8 [2024-09-06] Lars Kanis [email protected]

Fix host list duplication every time conn.reset is used. #586

Add default decoder for anonymous record types to BasicTypeRegistry #579

Update Windows fat binary gem to OpenSSL-3.3.2 and PostgreSQL-16.4.

v1.5.7 [2024-07-28] Lars Kanis [email protected]

Remove deprecated use of fptr->fd.#562 Direct access is disallowed since ruby-3.4.

Make pgconn_connect_poll close the socket prior to calling PQconnectPoll. #564 This could result in an exception while connecting when used multi threaded.

Fix several typos and improve spelling in documentation and code. #566

Add missing PG::RollbackTransaction as an option to exit conn.transaction. #560 Usage like in rails: https://api.rubyonrails.org/classes/ActiveRecord/Rollback.html

Don't print a warning when bigdecimal is required on ruby-3.4+ #574

Update Windows fat binary gem to OpenSSL-3.3.1 and PostgreSQL-16.3.

Commits

cb35e3f Update to Postgresql-16.4 and OpenSSL-3.3.2 for Windows binary gems
7af75a4 Bump VERSION to 1.5.8 and add changelog entry
d4c6c61 Merge pull request #589 from larskanis/fix-host-dup-on-reset
bf7d57f Save connection options for conn.reset
a2a3e6d CI: github actions @v4 need distinct artifact names
dd060bc Merge pull request #587 from larskanis/github-v4
7515aac CI: Use latest github actions
070b72b Remove unused variable in spec
65c5031 Improve code documentation
60f74ff Fix typo
Additional commits viewable in compare view

Updates rack from 2.2.9 to 3.1.7

Release notes

Sourced from rack's releases.

v3.0.9.1

What's Changed

Fixed ReDoS in Accept header parsing [CVE-2024-26146]

Fixed ReDoS in Content Type header parsing [CVE-2024-25126]

Reject Range headers which are too large [CVE-2024-26141]

Full Changelog: rack/rack@v3.0.9...v3.0.9.1

v3.0.9

What's Changed

Fix content-length calcuation in Rack:Response#write #2150

Full Changelog: rack/rack@v3.0.8...v3.0.9

v3.0.8

What's Changed

Backport "Fix some unused variable verbose warnings" by @skipkayhil in rack/rack#2084

New Contributors

@skipkayhil made their first contribution in rack/rack#2084

Full Changelog: rack/rack@v3.0.7...v3.0.8

v3.0.7

What's Changed

Backport "Make query parameters without = have nil values". by @jeremyevans in rack/rack#2060

Full Changelog: rack/rack@v3.0.6.1...v3.0.7

v3.0.6.1

No release notes provided.

v3.0.4.1

Full Changelog: rack/rack@v3.0.4...v3.0.4.1

v3.0.4

Full Changelog: rack/rack@v3.0.3...v3.0.4

v3.0.3

What's Changed

Release v3.0.3 by @ioquatix in rack/rack#2000

Full Changelog: rack/rack@v3.0.2...v3.0.3

v3.0.2

Full Changelog: rack/rack@v3.0.1...v3.0.2

Changelog

Sourced from rack's changelog.

[3.1.7] - 2024-07-11

Fixed

Do not remove escaped opening/closing quotes for content-disposition filenames. (#2229, [@jeremyevans])

Fix encoding setting for non-binary IO-like objects in MockRequest#env_for. (#2227, [@jeremyevans])

Rack::Response should not generate invalid content-length header. (#2219, [@ioquatix])

Allow empty PATH_INFO. (#2214, [@ioquatix])

[3.1.6] - 2024-07-03

Fixed

Fix several edge cases in Rack::Request#parse_http_accept_header's implementation. (#2226, [@ioquatix])

[3.1.5] - 2024-07-02

Security

Fix potential ReDoS attack in Rack::Request#parse_http_accept_header. (GHSA-cj83-2ww7-mvq7, @dwisiswant0)

[3.1.4] - 2024-06-22

Fixed

Fix Rack::Lint matching some paths incorrectly as authority form. (#2220, [@ioquatix])

[3.1.3] - 2024-06-12

Fixed

Fix passing non-strings to Rack::Utils.escape_html. (#2202, [@earlopain])

Rack::MockResponse gracefully handles empty cookies (#2203 [@wynksaiddestroy])

[3.1.2] - 2024-06-11

Rack::Response will take in to consideration chunked encoding responses (#2204, [@tenderlove])

[3.1.1] - 2024-06-11

Oops! I shouldn't have shipped that

[3.1.0] - 2024-06-11

⚠️ This release includes several breaking changes. Refer to the Removed section below for the list of deprecated methods that have been removed in this release.

Rack v3.1 is primarily a maintenance release that removes features deprecated in Rack v3.0. Alongside these removals, there are several improvements to the Rack SPEC, mainly focused on enhancing input and output handling. These changes aim to make Rack more efficient and align better with the requirements of server implementations and relevant HTTP specifications.

SPEC Changes

... (truncated)

Commits

4bb2f72 Bump patch version.
1c1e413 Ignore external tests directory.
b4a1036 Prepare for 3.1.7 release.
d0da91b Add more external tests.
f6f1510 Improve Rack::Response content-length header generation. (#2219)
fb339e0 Fix encoding setting for non-binary IO-like objects in MockRequest#env_for
e21872d Do not remove escaped opening/closing quotes for content-disposition filenames
5c3d79f Synchronize changelog with HEAD.
bca33b4 Allow empty PATH_INFO. (#2214) (#2234)
98aa947 Bump patch version.
Additional commits viewable in compare view

Updates rails from 7.1.3.4 to 7.1.4

Release notes

Sourced from rails's releases.

7.1.4

Active Support
Improve compatibility for ActiveSupport::BroadcastLogger.

Máximo Mussini

Pass options along to write_entry in handle_expired_entry method.

Graham Cooper

Fix Active Support configurations deprecations.

fatkodima

Fix teardown callbacks.

Tristan Starck

BacktraceCleaner silence core internal methods by default.

Jean Boussier
Fix delegate_missing_to allow_nil: true when called with implict self
class Person
  delegate_missing_to :address, allow_nil: true
def address
nil
end
def berliner?
city == "Berlin"
end
end
Person.new.city # => nil
Person.new.berliner? # undefined local variable or method `city' for an instance of Person (NameError)
Jean Boussier
Work around a Ruby bug that can cause a VM crash.

This would happen if using TaggerLogger with a Proc formatter on which you called object_id.

... (truncated)

Commits

6f57590 Preparing for 7.1.4 release
63fe89d Sync changelog
8d62955 Merge pull request #52585 from Shopify/fix-docs-linting
6036b65 Merge pull request #52138 from skipkayhil/hm-rack-input-is-optional
578eb9a Move the rewind code closer to the reason why we need to rewind
fef23ff Merge pull request #52281 from jagthedrummer/jeremy/action-text-content-trix-fix
128b5b0 Merge pull request #52631 from zenspider/zenspider/minitest-cleanup
62abd09 Merge pull request #52619 from fatkodima/eager-load-nil-associations
dbc560d Merge pull request #52609 from rails/rm-minitest
6a14308 Merge pull request #52591 from fatkodima/fix-create_table-with-auto_increment
Additional commits viewable in compare view

Updates bootsnap from 1.18.3 to 1.18.4

Changelog

Sourced from bootsnap's changelog.

1.18.4

Allow using bootsnap without bundler. See #488.

Fix startup failure if the cache directory points to a broken symlink.

Commits

cae219a Release 1.18.4
407bdef Merge pull request #489 from Shopify/fix-load-error
7afa951 Fix bootsnap setup in environments without bundler
c5513d9 Merge pull request #487 from Uaitt/update-gh-action-versions
65691ca Update GitHub actions versions
156b8c9 Merge pull request #485 from Uaitt/changelog-typo
e76fe38 Merge pull request #486 from Uaitt/correct-rubocop-offenses
9ec8d70 Correct Rubocop offenses
47ad134 Correct a typo present in the CHANGELOG
f627992 Add --version flag
Additional commits viewable in compare view

Updates dotenv-rails from 3.1.2 to 3.1.4

Release notes

Sourced from dotenv-rails's releases.

3.1.4

What's Changed

Fix an error when only the Spring::Client is loaded by @alpaca-tc in bkeepers/dotenv#512

New Contributors

@alpaca-tc made their first contribution in bkeepers/dotenv#512

Full Changelog: bkeepers/dotenv@v3.1.3...v3.1.4

3.1.3

What's Changed

Only use Spring if already loaded by @runephilosof-abtion in bkeepers/dotenv#511

Doc Updates:

Spell out 'FILENAME' in readme by @mikegee in bkeepers/dotenv#505

Provide a 'Changelog' link on rubygems.org/gems/dotenv by @mark-young-atg in bkeepers/dotenv#506

README.md: typo "exiting" by @olleolleolle in bkeepers/dotenv#508

cleanup: Run standard:fix by @olleolleolle in bkeepers/dotenv#509

New Contributors

@mikegee made their first contribution in bkeepers/dotenv#505

@mark-young-atg made their first contribution in bkeepers/dotenv#506

@olleolleolle made their first contribution in bkeepers/dotenv#508

@runephilosof-abtion made their first contribution in bkeepers/dotenv#511

Full Changelog: bkeepers/dotenv@v3.1.2...v3.1.3

Changelog

Sourced from dotenv-rails's changelog.

3.1.4

Fix an error when only the Spring::Client is loaded by @alpaca-tc in bkeepers/dotenv#512

New Contributors

@alpaca-tc made their first contribution in bkeepers/dotenv#512

Full Changelog: bkeepers/dotenv@v3.1.3...v3.1.4

3.1.3

Only use Spring if already loaded by @runephilosof-abtion in bkeepers/dotenv#511

Doc Updates:

Spell out 'FILENAME' in readme by @mikegee in bkeepers/dotenv#505

Provide a 'Changelog' link on rubygems.org/gems/dotenv by @mark-young-atg in bkeepers/dotenv#506

README.md: typo "exiting" by @olleolleolle in bkeepers/dotenv#508

cleanup: Run standard:fix by @olleolleolle in bkeepers/dotenv#509

New Contributors

@mikegee made their first contribution in bkeepers/dotenv#505

@mark-young-atg made their first contribution in bkeepers/dotenv#506

@olleolleolle made their first contribution in bkeepers/dotenv#508

@runephilosof-abtion made their first contribution in bkeepers/dotenv#511

Full Changelog: bkeepers/dotenv@v3.1.2...v3.1.3

Commits

ee3975c Prepare for 3.1.4 release
fe760d1 Merge pull request #512 from alpaca-tc/fix-spring
691f7f9 Make spring specs a little more explicit
f75ff89 follow-up bkeepers/dotenv#511
1e8dae2 Bump to 3.1.3
47f5cb6 Prepare for v3.1.3
4223d1f Merge pull request #511 from runephilosof-abtion/patch-1
8c7e460 Fix tests for spring changes
54aa1f6 Only use Spring if already loaded
b86d9e4 Merge pull request #509 from olleolleolle/run-standard
Additional commits viewable in compare view

Updates net-imap from 0.4.14 to 0.4.16

Release notes

Sourced from net-imap's releases.

v0.4.16

What's Changed

Fixed

🐛 Fix #header_fld_name to handle quoted strings correctly by @taku0 in ruby/net-imap#315

Full Changelog: ruby/net-imap@v0.4.15...v0.4.16

v0.4.15

What's Changed

Fixed

🐛 Fix #send_data to send DateTime as time by @taku0 in ruby/net-imap#313

New Contributors

@taku0 made their first contribution in ruby/net-imap#313

Full Changelog: ruby/net-imap@v0.4.14...v0.4.15

Commits

d8b68bc 🔖 Bump version to 0.4.16
0707ccb 🐛 Fix #header_fld_name to handle quoted strings correctly
eea091e 🔖 Bump version to 0.4.15
34f4bc3 🐛 Fix #send_data to send DateTime as time
See full diff in compare view

Updates benchmark-ips from 2.13.0 to 2.14.0

Release notes

Sourced from benchmark-ips's releases.

2.14 "Akagi"

What's Changed

Improve report to show duration/i (e.g: 12.34 ns/i). by @huacnlee in evanphx/benchmark-ips#132

Fix typos by @kianmeng in evanphx/benchmark-ips#139

Improve code template in README.md by @amomchilov in evanphx/benchmark-ips#140

Provide Benchmark.quick_compare to quickly compare methods on an object by @evanphx in evanphx/benchmark-ips#134

New Contributors

@huacnlee made their first contribution in evanphx/benchmark-ips#132

@kianmeng made their first contribution in evanphx/benchmark-ips#139

@amomchilov made their first contribution in evanphx/benchmark-ips#140

Full Changelog: evanphx/benchmark-ips@v2.13.0...v2.14.0

Changelog

Sourced from benchmark-ips's changelog.

2.14.0 / 2024-09-08

Feature

Adds Benchmark::IPS.quick_compare.

Adds absolute duration of each iteration to compare output.

Commits

d5e0884 2.14
da1ae89 2.14, 2.13 release notes
f66045d Provide Benchmark.quick_compare to quickly compare methods on an object (#134)
a2c863d Remove unused variable in tests
bfdf58d Improve code template in README.md (#140)
6c0a6bf Merge pull request #139 from kianmeng/fix-typos
1fa6c8f Fix typos
39db0ed Speed up the tests slightly. Fixes #114
550493f Merge pull request #129 from evanphx/dependabot/github_actions/actions/checko...
00c1428 Improve report to show duration/i, e.g: 12.34 ns/i. (#132)
Additional commits viewable in compare view

Updates rubocop from 1.65.0 to 1.66.1

Release notes

Sourced from rubocop's releases.

RuboCop 1.66.1

Bug fixes

#13191: Fix an error for Style/IfWithSemicolon when using nested single-line if/;/end in block of if/else branches. (@koic)

#13178: Fix false positive for Style/EmptyLiteral with Hash.new([]). (@earlopain)

#13176: Fix crash in Style/EmptyElse when AllowComments: true and the else clause is missing. (@vlad-pisanov)

#13185: Fix false negatives in Style/MapIntoArray autocorrection when using ensure, def, defs and for. (@vlad-pisanov)

RuboCop 1.66

New features

#13077: Add new global StringLiteralsFrozenByDefault option for correct analysis with RUBYOPT=--enable=frozen-string-literal. (@earlopain)

#13080: Add new DocumentationExtension global option to serve documentation with extensions different than .html. (@earlopain)

#13074: Add new Lint/UselessNumericOperation cop to check for inconsequential numeric operations. ([@zopolis4][])

#13061: Add new Style/RedundantInterpolationUnfreeze cop to check for dup and @+ on interpolated strings in Ruby >= 3.0. (@earlopain)

Bug fixes

#13093: Fix an error for Lint/ImplicitStringConcatenation when implicitly concatenating a string literal with a line break and string interpolation. (@koic)

#13098: Fix an error for Style/IdenticalConditionalBranches when handling empty case branches. (@koic)

#13113: Fix an error for Style/IfWithSemicolon when a nested if with a semicolon is used. (@koic)

#13097: Fix an error for Style/InPatternThen when using alternative pattern matching deeply. (@koic)

#13159: Fix an error for Style/OneLineConditional when using if/then/else/end with multiple expressions in the then body. (@koic)

#13092: Fix an incorrect autocorrect for Layout/EmptyLineBetweenDefs when two method definitions are on the same line separated by a semicolon. (@koic)

#13116: Fix an incorrect autocorrect for Style/IfWithSemicolon when a single-line if/;/end has an argument in the then body expression. (@koic)

#13161: Fix incorrect autocorrect for Style/IfWithSemicolon when using multiple expressions in the else body. (@koic)

#13132: Fix incorrect autocorrect for Style/TrailingBodyOnMethodDefinition when an expression precedes a method definition on the same line with a semicolon. (@koic)

#13164: Fix incorrect autocorrect behavior for Layout/BlockAlignment when EnforcedStyleAlignWith: either (default). (@koic)

#13087: Fix an incorrect autocorrect for Style/MultipleComparison when expression with more comparisons precedes an expression with less comparisons. ([@fatkodima][])

#13172: Fix an error for Layout/EmptyLinesAroundExceptionHandlingKeywords when ensure or else and end are on the same line. (@koic)

#13107: Fix an error for Lint/ImplicitStringConcatenation when there are multiple adjacent string interpolation literals on the same line. (@koic)

#13111: Fix an error for Style/GuardClause when if clause is empty and correction would not fit on single line because of Layout/LineLength. (@earlopain)

#13137: Fix an error for Style/ParallelAssignment when using __FILE__. (@earlopain)

#13143: Fix an error during TargetRubyVersion detection if the gemspec is not valid syntax. (@earlopain)

#13131: Fix false negatives for Lint/Void when using ensure, defs and numblock. (@vlad-pisanov)

#13174: Fix false negatives for Style/MapIntoArray when initializing the destination using Array[], Array([]), or Array.new([]). (@vlad-pisanov)

#13173: Fix false negatives for Style/EmptyLiteral when using Array[], Hash[], Array.new([]) and Hash.new([]). (@vlad-pisanov)

#13126: Fix a false positive for Style/Alias when using multiple alias in def. (@koic)

#13085: Fix a false positive for Style/EmptyElse when a comment-only else is used after elsif and AllowComments: true is set. (@koic)

#13118: Fix a false positive for Style/MapIntoArray when splatting. (@earlopain)

#13105: Fix false positives for Style/ArgumentsForwarding when forwarding kwargs/block arg with non-matching additional args. (@koic)

#13139: Fix false positives for Style/RedundantCondition when using modifier if or unless. (@koic)

#13134: Fix false negative for Lint/Void when using using frozen literals. (@vlad-pisanov)

#13148: Fix incorrect autocorrect for Lint/EmptyConditionalBody when missing elsif body with end on the same line. (@koic)

#13109: Fix an error for the Lockfile parser when it contains incompatible BUNDLED WITH versions. (@earlopain)

#13112: Fix detection of TargetRubyVersion through the gemfile if the gemfile ruby version is below 2.7. (@earlopain)

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.66.1 (2024-09-04)

Bug fixes

#13191: Fix an error for Style/IfWithSemicolon when using nested single-line if/;/end in block of if/else branches. ([@koic][])

#13178: Fix false positive for Style/EmptyLiteral with Hash.new([]). ([@earlopain][])

#13176: Fix crash in Style/EmptyElse when AllowComments: true and the else clause is missing. ([@vlad-pisanov][])

#13185: Fix false negatives in Style/MapIntoArray autocorrection when using ensure, def, defs and for. ([@vlad-pisanov][])

1.66.0 (2024-08-31)

New features

#13077: Add new global StringLiteralsFrozenByDefault option for correct analysis with RUBYOPT=--enable=frozen-string-literal. ([@earlopain][])

#13080: Add new DocumentationExtension global option to serve documentation with extensions different than .html. ([@earlopain][])

#13074: Add new Lint/UselessNumericOperation cop to check for inconsequential numeric operations. ([@zopolis4][])

#13061: Add new Style/RedundantInterpolationUnfreeze cop to check for dup and @+ on interpolated strings in Ruby >= 3.0. ([@earlopain][])

Bug fixes

#13093: Fix an error for Lint/ImplicitStringConcatenation when implicitly concatenating a string literal with a line break and string interpolation. ([@koic][])

#13098: Fix an error for Style/IdenticalConditionalBranches when handling empty case branches. ([@koic][])

#13113: Fix an error for Style/IfWithSemicolon when a nested if with a semicolon is used. ([@koic][])

#13097: Fix an error for Style/InPatternThen when using alternative pattern matching deeply. ([@koic][])

#13159: Fix an error for Style/OneLineConditional when using if/then/else/end with multiple expressions in the then body. ([@koic][])

#13092: Fix an incorrect autocorrect for Layout/EmptyLineBetweenDefs when two method definitions are on the same line separated by a semicolon. ([@koic][])

#13116: Fix an incorrect autocorrect for Style/IfWithSemicolon when a single-line if/;/end has an argument in the then body expression. ([@koic][])

#13161: Fix incorrect autocorrect for Style/IfWithSemicolon when using multiple expressions in the else body. ([@koic][])

#13132: Fix incorrect autocorrect for Style/TrailingBodyOnMethodDefinition when an expression precedes a method definition on the same line with a semicolon. ([@koic][])

#13164: Fix incorrect autocorrect behavior for Layout/BlockAlignment when EnforcedStyleAlignWith: either (default). ([@koic][])

#13087: Fix an incorrect autocorrect for Style/MultipleComparison when expression with more comparisons precedes an expression with less comparisons. ([@fatkodima][])

#13172: Fix an error for Layout/EmptyLinesAroundExceptionHandlingKeywords when ensure or else and end are on the same line. ([@koic][])

#13107: Fix an error for Lint/ImplicitStringConcatenation when there are multiple adjacent string interpolation literals on the same line. ([@koic][])

#13111: Fix an error for Style/GuardClause when if clause is empty and correction would not fit on single line because of Layout/LineLength. ([@earlopain][])

#13137: Fix an error for Style/ParallelAssignment when using __FILE__. ([@earlopain][])

#13143: Fix an error during TargetRubyVersion detection if the gemspec is not valid syntax. ([@earlopain][])

#13131: Fix false negatives for Lint/Void when using ensure, defs and numblock. ([@vlad-pisanov][])

#13174: Fix false negatives for Style/MapIntoArray when initializing the destination using Array[], Array([]), or Array.new([]). ([@vlad-pisanov][])

#13173: Fix false negatives for Style/EmptyLiteral when using Array[], Hash[], Array.new([]) and Hash.new([]). ([@vlad-pisanov][])

#13126: Fix a false positive for Style/Alias when using multiple alias in def. ([@koic][])

#13085: Fix a false positive for Style/EmptyElse when a comment-only else is used after elsif and AllowComments: true is set. ([@koic][])

#13118: Fix a false positive for Style/MapIntoArray when splatting. ([@earlopain][])

#13105: Fix false positives for Style/ArgumentsForwarding when forwarding kwargs/block arg with non-matching additional args. ([@koic][])

#13139: Fix false positives for Style/RedundantCondition when using modifier if or unless. ([@koic][])

#13134: Fix false negative for Lint/Void when using using frozen literals. ([@vlad-pisanov][])

#13148: Fix incorrect autocorrect for Lint/EmptyConditionalBody when missing elsif body with end on the same line. ([@koic][])

#13109: Fix an error for the Lockfile parser when it contains incompatible BUNDLED WITH versions. ([@earlopain][])

#13112: Fix detection of TargetRubyVersion through the gemfile if the gemfile ruby version is below 2.7. ([@earlopain][])

#13155: Fixes an error when the server cache directory has too long path, causing rubocop to fail even with caching disabled. ([@protocol7][])

... (truncated)

Commits

ba8e7be Cut 1.66.1
2900c91 Update Changelog
08bed81 Fix an error for Style/IfWithSemicolon
c2ae362 Don't parse YAML twice
5f3481f Use rubocop-ast SimpleForwardable
5e65a39 Merge pull request #13185 from vlad-pisanov/vp_map_into_array_2
d18b3c9 Fix false negatives in Style/MapIntoArray autocorrection when using `ensure...
3277118 [Fix #13182] Tweak the doc for Style/RedundantInterpolationUnfreeze
9a38b11 Merge pull request #13179 from Earlopain/node-matcher-directiry-error
fd4f4d7 Fix an error for InternalAffairs/NodeMatcherDirective when no second argument
Additional commits viewable in compare view

Updates sorbet from 0.5.11485 to 0.5.11600

Release notes

Sourced from sorbet's releases.

sorbet 0.5.11599.20241007105354-45818cadd

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11599', :group => :development
gem 'sorbet-runtime', '0.5.11599'
sorbet 0.5.11598.20241007102001-c88e49b73

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11598', :group => :development
gem 'sorbet-runtime', '0.5.11598'
sorbet 0.5.11597.20241004154738-4a06adcaa

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11597', :group => :development
gem 'sorbet-runtime', '0.5.11597'
sorbet 0.5.11596.20241004111715-70e35331c

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11596', :group => :development
gem 'sorbet-runtime', '0.5.11596'
sorbet 0.5.11595.20241003100026-6198c09dd

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11595', :group => :development
gem 'sorbet-runtime', '0.5.11595'
sorbet 0.5.11594.20241003095841-8b9eb9efd

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11594', :group => :development
gem 'sorbet-runtime', '0.5.11594'
sorbet 0.5.11593.20241003080229-61ad72cb9

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11593', :group => :development
gem 'sorbet-runtime', '0.5.11593'
sorbet 0.5.11592.20241002144506-89a698d9f

... (truncated)

Commits

See full diff in compare view

Updates sorbet-runtime from 0.5.11485 to 0.5.11600

Release notes

Sourced from sorbet-runtime's releases.

sorbet 0.5.11599.20241007105354-45818cadd

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11599', :group => :development
gem 'sorbet-runtime', '0.5.11599'
sorbet 0.5.11598.20241007102001-c88e49b73

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11598', :group => :development
gem 'sorbet-runtime', '0.5.11598'
sorbet 0.5.11597.20241004154738-4a06adcaa

To use Sorbet add this line to your Gemfile:<...
Description has been truncated

Bumps the bundler-dependencies group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [nokogiri](https://github.com/sparklemotion/nokogiri) | `1.16.6` | `1.16.7` | | [pg](https://github.com/ged/ruby-pg) | `1.5.6` | `1.5.8` | | [rack](https://github.com/rack/rack) | `2.2.9` | `3.1.7` | | [rails](https://github.com/rails/rails) | `7.1.3.4` | `7.1.4` | | [bootsnap](https://github.com/Shopify/bootsnap) | `1.18.3` | `1.18.4` | | [dotenv-rails](https://github.com/bkeepers/dotenv) | `3.1.2` | `3.1.4` | | [net-imap](https://github.com/ruby/net-imap) | `0.4.14` | `0.4.16` | | [benchmark-ips](https://github.com/evanphx/benchmark-ips) | `2.13.0` | `2.14.0` | | [rubocop](https://github.com/rubocop/rubocop) | `1.65.0` | `1.66.1` | | [sorbet](https://github.com/sorbet/sorbet) | `0.5.11485` | `0.5.11600` | | [rspec-rails](https://github.com/rspec/rspec-rails) | `6.1.3` | `7.0.1` | | [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.22.0` | `4.25.0` | | [webrick](https://github.com/ruby/webrick) | `1.8.1` | `1.8.2` | | [yard](https://github.com/lsegal/yard) | `0.9.36` | `0.9.37` | Updates `nokogiri` from 1.16.6 to 1.16.7 - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md) - [Commits](sparklemotion/nokogiri@v1.16.6...v1.16.7) Updates `pg` from 1.5.6 to 1.5.8 - [Changelog](https://github.com/ged/ruby-pg/blob/master/History.md) - [Commits](ged/ruby-pg@v1.5.6...v1.5.8) Updates `rack` from 2.2.9 to 3.1.7 - [Release notes](https://github.com/rack/rack/releases) - [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md) - [Commits](rack/rack@v2.2.9...v3.1.7) Updates `rails` from 7.1.3.4 to 7.1.4 - [Release notes](https://github.com/rails/rails/releases) - [Commits](rails/rails@v7.1.3.4...v7.1.4) Updates `bootsnap` from 1.18.3 to 1.18.4 - [Changelog](https://github.com/Shopify/bootsnap/blob/main/CHANGELOG.md) - [Commits](Shopify/bootsnap@v1.18.3...v1.18.4) Updates `dotenv-rails` from 3.1.2 to 3.1.4 - [Release notes](https://github.com/bkeepers/dotenv/releases) - [Changelog](https://github.com/bkeepers/dotenv/blob/main/Changelog.md) - [Commits](bkeepers/dotenv@v3.1.2...v3.1.4) Updates `net-imap` from 0.4.14 to 0.4.16 - [Release notes](https://github.com/ruby/net-imap/releases) - [Commits](ruby/net-imap@v0.4.14...v0.4.16) Updates `benchmark-ips` from 2.13.0 to 2.14.0 - [Release notes](https://github.com/evanphx/benchmark-ips/releases) - [Changelog](https://github.com/evanphx/benchmark-ips/blob/master/History.md) - [Commits](evanphx/benchmark-ips@v2.13.0...v2.14.0) Updates `rubocop` from 1.65.0 to 1.66.1 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.65.0...v1.66.1) Updates `sorbet` from 0.5.11485 to 0.5.11600 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `sorbet-runtime` from 0.5.11485 to 0.5.11600 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `activejob` from 7.1.3.4 to 7.1.4 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.1/activejob/CHANGELOG.md) - [Commits](rails/rails@v7.1.3.4...v7.1.4) Updates `activerecord` from 7.1.3.4 to 7.1.4 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.1/activerecord/CHANGELOG.md) - [Commits](rails/rails@v7.1.3.4...v7.1.4) Updates `railties` from 7.1.3.4 to 7.1.4 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.1/railties/CHANGELOG.md) - [Commits](rails/rails@v7.1.3.4...v7.1.4) Updates `thor` from 1.3.1 to 1.3.2 - [Release notes](https://github.com/rails/thor/releases) - [Commits](rails/thor@v1.3.1...v1.3.2) Updates `rspec-rails` from 6.1.3 to 7.0.1 - [Changelog](https://github.com/rspec/rspec-rails/blob/main/Changelog.md) - [Commits](rspec/rspec-rails@v6.1.3...v7.0.1) Updates `selenium-webdriver` from 4.22.0 to 4.25.0 - [Release notes](https://github.com/SeleniumHQ/selenium/releases) - [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES) - [Commits](SeleniumHQ/selenium@selenium-4.22.0...selenium-4.25.0) Updates `webrick` from 1.8.1 to 1.8.2 - [Release notes](https://github.com/ruby/webrick/releases) - [Commits](ruby/webrick@v1.8.1...v1.8.2) Updates `yard` from 0.9.36 to 0.9.37 - [Release notes](https://github.com/lsegal/yard/releases) - [Changelog](https://github.com/lsegal/yard/blob/main/CHANGELOG.md) - [Commits](lsegal/yard@v0.9.36...v0.9.37) --- updated-dependencies: - dependency-name: nokogiri dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: pg dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: rack dependency-type: direct:production update-type: version-update:semver-major dependency-group: bundler-dependencies - dependency-name: rails dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: bootsnap dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: dotenv-rails dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: net-imap dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: benchmark-ips dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler-dependencies - dependency-name: rubocop dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler-dependencies - dependency-name: sorbet dependency-type: direct:development update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: sorbet-runtime dependency-type: direct:development update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: activejob dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: activerecord dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: railties dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: thor dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: rspec-rails dependency-type: direct:development update-type: version-update:semver-major dependency-group: bundler-dependencies - dependency-name: selenium-webdriver dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler-dependencies - dependency-name: webrick dependency-type: direct:development update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: yard dependency-type: direct:development update-type: version-update:semver-patch dependency-group: bundler-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2024-10-10T18:27:04Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Oct 10, 2024

dependabot bot force-pushed the dependabot/bundler/bundler-dependencies-d12863f739 branch from b5f6ed7 to bd29401 Compare October 10, 2024 18:09

dependabot bot force-pushed the dependabot/bundler/bundler-dependencies-d12863f739 branch from bd29401 to af7fb48 Compare October 10, 2024 18:18

dependabot bot closed this Oct 10, 2024

dependabot bot deleted the dependabot/bundler/bundler-dependencies-d12863f739 branch October 10, 2024 18:27

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the bundler-dependencies group across 1 directory with 19 updates #1508

Bump the bundler-dependencies group across 1 directory with 19 updates #1508

dependabot bot commented on behalf of github Oct 10, 2024 •

edited

Loading

dependabot bot commented on behalf of github Oct 10, 2024

Bump the bundler-dependencies group across 1 directory with 19 updates #1508

Bump the bundler-dependencies group across 1 directory with 19 updates #1508

Conversation

dependabot bot commented on behalf of github Oct 10, 2024 • edited Loading

v1.16.7 / 2024-07-27

Dependencies

v1.16.7 / 2024-07-27

Dependencies

v1.5.8 [2024-09-06] Lars Kanis [email protected]

v1.5.7 [2024-07-28] Lars Kanis [email protected]

v3.0.9.1

What's Changed

v3.0.9

What's Changed

v3.0.8

What's Changed

New Contributors

v3.0.7

What's Changed

v3.0.6.1

v3.0.4.1

v3.0.4

v3.0.3

What's Changed

v3.0.2

[3.1.7] - 2024-07-11

Fixed

[3.1.6] - 2024-07-03

Fixed

[3.1.5] - 2024-07-02

Security

[3.1.4] - 2024-06-22

Fixed

[3.1.3] - 2024-06-12

Fixed

[3.1.2] - 2024-06-11

[3.1.1] - 2024-06-11

[3.1.0] - 2024-06-11

SPEC Changes

7.1.4

Active Support

1.18.4

3.1.4

What's Changed

New Contributors

3.1.3

What's Changed

New Contributors

3.1.4

New Contributors

3.1.3

New Contributors

v0.4.16

What's Changed

Fixed

v0.4.15

What's Changed

Fixed

New Contributors

2.14 "Akagi"

What's Changed

New Contributors

2.14.0 / 2024-09-08

RuboCop 1.66.1

Bug fixes

RuboCop 1.66

New features

Bug fixes

1.66.1 (2024-09-04)

Bug fixes

1.66.0 (2024-08-31)

New features

Bug fixes

sorbet 0.5.11599.20241007105354-45818cadd

sorbet 0.5.11598.20241007102001-c88e49b73

sorbet 0.5.11597.20241004154738-4a06adcaa

sorbet 0.5.11596.20241004111715-70e35331c

sorbet 0.5.11595.20241003100026-6198c09dd

sorbet 0.5.11594.20241003095841-8b9eb9efd

sorbet 0.5.11593.20241003080229-61ad72cb9

dependabot bot commented on behalf of github Oct 10, 2024 •

edited

Loading