build(deps): bump the per-dependency group across 1 directory with 5 updates - #41
Closed
dependabot[bot] wants to merge 2 commits into
Closed
Conversation
Configure GitHub Copilot for regorus with deep domain knowledge, multi-perspective code review, and automated codebase auditing. Copilot Instructions and Knowledge Base ──────────────────────────────────────── Add copilot-instructions.md with project identity, coding rules, build commands, and references to 20 knowledge files covering every major subsystem: value semantics, interpreter architecture, Rego compiler, RVM, builtin system, FFI boundary, Azure policy/RBAC languages, error handling, feature composition, security, and more. Each knowledge file maps domain concepts to specific source files so Copilot understands what code implements what behavior. Code Review Instructions ──────────────────────── Add copilot-code-review-instructions.md with severity categories, multi-scale thinking guidance, and 10 embedded review perspectives. Reviews are organized around the concern being examined (security, reliability, semantics, performance, API design) rather than a checklist, encouraging Copilot to think freely about each change. Agents and Skills ───────────────── Add 16 role-based agents under .github/agents/ — each is a specialist persona (architect, security-auditor, red-teamer, semantics-expert, test-engineer, reliability-engineer, performance-engineer, etc.) with domain-specific instructions grounded in regorus internals. Add 6 skills under .github/skills/ for structured workflows: add-builtin, design-alternatives, opa-conformance, security-review, thorough-review, and verification. Multi-Perspective PR Review (GitHub Actions) ──────────────────────────────────────────── Add perspective-review.yml workflow and perspective-review.sh script. On every PR, the system parses the diff to extract valid line anchors with actual code content, selects relevant perspectives based on changed file paths, calls the GitHub Models API (gpt-4o-mini) for each perspective, and posts inline PR review comments via the GitHub PR Review API. Findings include severity tags, code snippets, and perspective attribution. Codebase Audit System ───────────────────── Add codebase-audit.yml workflow and codebase-audit.sh script for analyzing existing code — not just PR diffs. The system uses a deterministic-first file discovery strategy: it searches knowledge files for topic relevance, extracts referenced source paths, expands via grep, then lets the LLM rerank for precision. Files are analyzed in clusters per perspective, with findings posted as rolling GitHub Issues (one issue per topic, updated on rerun). Add 11 audit presets under .github/prompts/ covering: panic safety, FFI boundary, security hardening, undefined propagation, resource limits, performance, design alternatives, code cleanup, test gaps, API ergonomics, and knowledge accuracy. The workflow runs on a Mon/Wed/Fri schedule rotating through all presets for continuous coverage (~4 week full cycle). Knowledge Accuracy Audit ──────────────────────── Add knowledge-accuracy.sh as a specialized audit that compares each docs/knowledge/*.md file against the actual source code it documents. It detects factual inaccuracies, stale descriptions from refactoring, deleted or renamed files still referenced in docs, and significant source files (>100 lines) with no knowledge documentation. Configuration Validation ──────────────────────── Add copilot-config-validation.yml workflow that validates YAML syntax, checks that all knowledge file references resolve, verifies skill frontmatter, and tracks knowledge-to-source freshness (warns when source files change more recently than their knowledge docs). Runs on config changes, weekly, and on manual dispatch. Cloud Agent Setup ───────────────── Add copilot-setup-steps.yml to configure the Copilot cloud agent environment with Rust toolchain, cargo cache, and dependency fetch. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
…updates Bumps the per-dependency group with 4 updates in the /bindings/ruby directory: [minitest](https://github.com/minitest/minitest), [rake](https://github.com/ruby/rake), [rake-compiler-dock](https://github.com/rake-compiler/rake-compiler-dock) and [rubocop](https://github.com/rubocop/rubocop). Updates `minitest` from 6.0.3 to 6.0.5 - [Changelog](https://github.com/minitest/minitest/blob/master/History.rdoc) - [Commits](minitest/minitest@v6.0.3...v6.0.5) Updates `rake` from 13.3.1 to 13.4.2 - [Release notes](https://github.com/ruby/rake/releases) - [Changelog](https://github.com/ruby/rake/blob/master/History.rdoc) - [Commits](ruby/rake@v13.3.1...v13.4.2) Updates `rake-compiler-dock` from 1.11.0 to 1.12.0 - [Release notes](https://github.com/rake-compiler/rake-compiler-dock/releases) - [Changelog](https://github.com/rake-compiler/rake-compiler-dock/blob/main/CHANGELOG.md) - [Commits](rake-compiler/rake-compiler-dock@v1.11.0...v1.12.0) Updates `rubocop` from 1.86.0 to 1.86.1 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.86.0...v1.86.1) Updates `rb_sys` from 0.9.125 to 0.9.127 - [Release notes](https://github.com/oxidize-rb/rb-sys/releases) - [Commits](oxidize-rb/rb-sys@v0.9.125...v0.9.127) --- updated-dependencies: - dependency-name: minitest dependency-version: 6.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: per-dependency - dependency-name: rake dependency-version: 13.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: per-dependency - dependency-name: rake-compiler-dock dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: per-dependency - dependency-name: rubocop dependency-version: 1.86.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: per-dependency - dependency-name: rb_sys dependency-version: 0.9.127 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: per-dependency ... Signed-off-by: dependabot[bot] <support@github.com>
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/bundler/bindings/ruby/per-dependency-b4cd5859b7
branch
May 1, 2026 16:08
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the per-dependency group with 4 updates in the /bindings/ruby directory: minitest, rake, rake-compiler-dock and rubocop.
Updates
minitestfrom 6.0.3 to 6.0.5Changelog
Sourced from minitest's changelog.
Commits
89c3e62Branching minitest to version 6.0.56790f86- Raise TypeError if assert_raises is passed anything but modules/classes.235fa5b- Avoid circular requires in lib/minitest/server_plugin.rb.5f0482eprepped for releaseb12f87f- Fixed refute_predicate to call assert_respond_to w/ include_all:true like a...Updates
rakefrom 13.3.1 to 13.4.2Commits
503b8ecv13.4.246038e7Merge pull request #723 from ruby/fix/testopts-preserve-existing-value604a3d9Isolate TESTOPTS env in TestRakeTestTask setup/teardown5886caaPreserve ENV["TESTOPTS"] when verbose is enabled92193acv13.4.1b74be0bMerge pull request #721 from ruby/fix/add-options-to-gemspec829f66dAdd lib/rake/options.rb to gemspec2d55bc4v13.4.01415070Exclude dependabot updates from release noteb3dc948Merge pull request #713 from pvdb/simplify_standard_system_dirUpdates
rake-compiler-dockfrom 1.11.0 to 1.12.0Release notes
Sourced from rake-compiler-dock's releases.
Changelog
Sourced from rake-compiler-dock's changelog.
Commits
1c7b338Regenerate release-images workflow for v1.12.08a13f3fversion bump to v1.12.05136272Merge pull request #197 from rake-compiler/bump-rubies-20260401b901cFix musl cross-compiler build: remove dead linux-headers mirror95f763bBump Ruby versions to 4.0.2, 3.4.9, 3.3.11, and 3.2.1185b1d4aMerge pull request #192 from rake-compiler/fix-rdoc-plugin668706fMove rdoc plugin permission fix into bootstrap ruby install stepd7b8573Merge pull request #196 from rake-compiler/fix-release26c60470Generate merge manifests also for generic linux architectures52b4da3Merge pull request #195 from rake-compiler/rubygems-pluginUpdates
rubocopfrom 1.86.0 to 1.86.1Release notes
Sourced from rubocop's releases.
Changelog
Sourced from rubocop's changelog.
Commits
af80266Cut 1.86.1eb504ceUpdate Changelog9c8fe2cMerge pull request #15085 from G-Rath/fix-style-guard11d796aMerge pull request #15093 from koic/fix_return_tool_execution_errors_instead_...4450067Return tool execution errors instead of protocol errors in MCP serverff64180Merge pull request #15092 from viralpraxis/fix-an-error-for-layout-end-alignm...11e04c0Merge pull request #15091 from eugeneius/duplicate_methods_anonymous_classesb8deea4Merge pull request #15090 from eugeneius/guard_clause_and_returne130020FixLayout/EndAlignmentcop error on an emptybegin4808594FixDuplicateMethodsfor anonymous classes in constant assignments and methodsUpdates
rb_sysfrom 0.9.125 to 0.9.127Release notes
Sourced from rb_sys's releases.
Commits
7243059Bump to v0.9.12714f072dtest(stable-api): add comprehensive edge-case parity tests (#737)b5ecb64perf(stable-api): inline num2long/num2ulong Bignum fast path for MRI (#736)670ca77perf(stable-api): inline rhash_size for MRI stable versions (#735)e346649perf(stable-api): inline dbl2num flonum encode for MRI stable versions (#734)27271f8perf(stable-api): inline num2dbl T_FLOAT fast path for MRI (#733)20c1b10chore(deps): bump rake-compiler-dock to 1.12.0 (#732)b4c88e2Merge pull request #731 from bangseongbeom/cargo-metadata-utf-81f67a5cEnsure that Cargo metadata is UTF-8 encodedd03ff5cperf(stable-api): inline encoding_get for MRI stable versions (#730)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions