From 170a15e9b5ec3d152c7d6f3d01c8e0fb355d1a38 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 21 Jan 2026 19:32:32 +0000 Subject: [PATCH 1/3] Bump the minor-and-patch group across 1 directory with 4 updates Bumps the minor-and-patch group with 4 updates in the / directory: [graphql](https://github.com/rmosolgo/graphql-ruby), [kramdown](https://github.com/gettalong/kramdown), [require-hooks](https://github.com/ruby-next/require-hooks) and [sorbet-static-and-runtime](https://github.com/sorbet/sorbet). Updates `graphql` from 2.5.16 to 2.5.17 - [Release notes](https://github.com/rmosolgo/graphql-ruby/releases) - [Changelog](https://github.com/rmosolgo/graphql-ruby/blob/master/CHANGELOG.md) - [Commits](https://github.com/rmosolgo/graphql-ruby/compare/v2.5.16...v2.5.17) Updates `kramdown` from 2.5.1 to 2.5.2 - [Release notes](https://github.com/gettalong/kramdown/releases) - [Changelog](https://github.com/gettalong/kramdown/blob/master/doc/news.page) - [Commits](https://github.com/gettalong/kramdown/commits) Updates `require-hooks` from 0.2.2 to 0.2.3 - [Changelog](https://github.com/ruby-next/require-hooks/blob/master/CHANGELOG.md) - [Commits](https://github.com/ruby-next/require-hooks/commits/v0.2.3) Updates `sorbet-static-and-runtime` from 0.6.12883 to 0.6.12894 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) --- updated-dependencies: - dependency-name: graphql dependency-version: 2.5.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: kramdown dependency-version: 2.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: require-hooks dependency-version: 0.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: sorbet-static-and-runtime dependency-version: 0.6.12894 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] --- Gemfile.lock | 26 +++++++++---------- ...{kramdown@2.5.1.rbi => kramdown@2.5.2.rbi} | 0 ...ooks@0.2.2.rbi => require-hooks@0.2.3.rbi} | 0 3 files changed, 13 insertions(+), 13 deletions(-) rename sorbet/rbi/gems/{kramdown@2.5.1.rbi => kramdown@2.5.2.rbi} (100%) rename sorbet/rbi/gems/{require-hooks@0.2.2.rbi => require-hooks@0.2.3.rbi} (100%) diff --git a/Gemfile.lock b/Gemfile.lock index 64b3fda2b..6f98afcf8 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -178,7 +178,7 @@ GEM google-protobuf (4.33.4-x86_64-linux-musl) bigdecimal rake (>= 13) - graphql (2.5.16) + graphql (2.5.17) base64 fiber-storage logger @@ -194,8 +194,8 @@ GEM rdoc (>= 4.0.0) reline (>= 0.4.2) json (2.18.0) - kramdown (2.5.1) - rexml (>= 3.3.9) + kramdown (2.5.2) + rexml (>= 3.4.4) kredis (1.8.0) activemodel (>= 6.0.0) activesupport (>= 6.0.0) @@ -321,7 +321,7 @@ GEM regexp_parser (2.11.3) reline (0.6.3) io-console (~> 0.5) - require-hooks (0.2.2) + require-hooks (0.2.3) rexml (3.4.4) rubocop (1.82.1) json (~> 2.3) @@ -362,15 +362,15 @@ GEM rack (>= 3.2.0) redis-client (>= 0.26.0) smart_properties (1.17.0) - sorbet (0.6.12883) - sorbet-static (= 0.6.12883) - sorbet-runtime (0.6.12883) - sorbet-static (0.6.12883-aarch64-linux) - sorbet-static (0.6.12883-universal-darwin) - sorbet-static (0.6.12883-x86_64-linux) - sorbet-static-and-runtime (0.6.12883) - sorbet (= 0.6.12883) - sorbet-runtime (= 0.6.12883) + sorbet (0.6.12894) + sorbet-static (= 0.6.12894) + sorbet-runtime (0.6.12894) + sorbet-static (0.6.12894-aarch64-linux) + sorbet-static (0.6.12894-universal-darwin) + sorbet-static (0.6.12894-x86_64-linux) + sorbet-static-and-runtime (0.6.12894) + sorbet (= 0.6.12894) + sorbet-runtime (= 0.6.12894) spoom (1.7.11) erubi (>= 1.10.0) prism (>= 0.28.0) diff --git a/sorbet/rbi/gems/kramdown@2.5.1.rbi b/sorbet/rbi/gems/kramdown@2.5.2.rbi similarity index 100% rename from sorbet/rbi/gems/kramdown@2.5.1.rbi rename to sorbet/rbi/gems/kramdown@2.5.2.rbi diff --git a/sorbet/rbi/gems/require-hooks@0.2.2.rbi b/sorbet/rbi/gems/require-hooks@0.2.3.rbi similarity index 100% rename from sorbet/rbi/gems/require-hooks@0.2.2.rbi rename to sorbet/rbi/gems/require-hooks@0.2.3.rbi From f2b04b9fbcf6c126383f4be20019f9f8f707765e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Rafael=20Mendon=C3=A7a=20Fran=C3=A7a?= Date: Wed, 21 Jan 2026 15:07:59 -0500 Subject: [PATCH 2/3] Lock sorbet-static to avoid segfaults --- Gemfile | 2 ++ Gemfile.lock | 19 ++++++++++--------- 2 files changed, 12 insertions(+), 9 deletions(-) diff --git a/Gemfile b/Gemfile index 0aac35a4b..fc13e10da 100644 --- a/Gemfile +++ b/Gemfile @@ -62,6 +62,8 @@ group :development, :test do gem "bcrypt" gem "xpath" gem "kredis" + # TODO: Unlock when segfault in sorbet-static is fixed + gem "sorbet-static", "< 0.6.12889" end group :test do diff --git a/Gemfile.lock b/Gemfile.lock index 6f98afcf8..8c0affc50 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -362,15 +362,15 @@ GEM rack (>= 3.2.0) redis-client (>= 0.26.0) smart_properties (1.17.0) - sorbet (0.6.12894) - sorbet-static (= 0.6.12894) - sorbet-runtime (0.6.12894) - sorbet-static (0.6.12894-aarch64-linux) - sorbet-static (0.6.12894-universal-darwin) - sorbet-static (0.6.12894-x86_64-linux) - sorbet-static-and-runtime (0.6.12894) - sorbet (= 0.6.12894) - sorbet-runtime (= 0.6.12894) + sorbet (0.6.12887) + sorbet-static (= 0.6.12887) + sorbet-runtime (0.6.12887) + sorbet-static (0.6.12887-aarch64-linux) + sorbet-static (0.6.12887-universal-darwin) + sorbet-static (0.6.12887-x86_64-linux) + sorbet-static-and-runtime (0.6.12887) + sorbet (= 0.6.12887) + sorbet-runtime (= 0.6.12887) spoom (1.7.11) erubi (>= 1.10.0) prism (>= 0.28.0) @@ -461,6 +461,7 @@ DEPENDENCIES shopify-money sidekiq smart_properties + sorbet-static (< 0.6.12889) sprockets sqlite3 state_machines From 128e960e83c197fb06b1c387e1faed58997f29e7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Rafael=20Mendon=C3=A7a=20Fran=C3=A7a?= Date: Wed, 21 Jan 2026 15:39:24 -0500 Subject: [PATCH 3/3] Downgrade graphql since it has a bug https://github.com/rmosolgo/graphql-ruby/pull/5510 --- Gemfile.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile.lock b/Gemfile.lock index 8c0affc50..d0b2e0d0b 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -178,7 +178,7 @@ GEM google-protobuf (4.33.4-x86_64-linux-musl) bigdecimal rake (>= 13) - graphql (2.5.17) + graphql (2.5.16) base64 fiber-storage logger