Bump the dev-dependencies group across 1 directory with 11 updates#14185
Open
dependabot[bot] wants to merge 3 commits intomainfrom
Open
Bump the dev-dependencies group across 1 directory with 11 updates#14185dependabot[bot] wants to merge 3 commits intomainfrom
dependabot[bot] wants to merge 3 commits intomainfrom
Conversation
e2560bd to
c575d0c
Compare
c575d0c to
a741adf
Compare
Bumps the dev-dependencies group with 11 updates in the /updater directory: | Package | From | To | | --- | --- | --- | | [debug](https://github.com/ruby/debug) | `1.9.2` | `1.11.1` | | [gpgme](https://github.com/ueno/ruby-gpgme) | `2.0.25` | `2.0.26` | | [rake](https://github.com/ruby/rake) | `13.3.0` | `13.3.1` | | [rspec](https://github.com/rspec/rspec) | `3.13.0` | `3.13.2` | | [rubocop](https://github.com/rubocop/rubocop) | `1.80.2` | `1.84.2` | | [rubocop-performance](https://github.com/rubocop/rubocop-performance) | `1.26.0` | `1.26.1` | | [rubocop-rspec](https://github.com/rubocop/rubocop-rspec) | `3.7.0` | `3.9.0` | | [rubocop-sorbet](https://github.com/shopify/rubocop-sorbet) | `0.10.5` | `0.12.0` | | [vcr](https://github.com/vcr/vcr) | `6.3.1` | `6.4.0` | | [webmock](https://github.com/bblimke/webmock) | `3.25.1` | `3.26.1` | | [webrick](https://github.com/ruby/webrick) | `1.9.1` | `1.9.2` | Updates `debug` from 1.9.2 to 1.11.1 - [Release notes](https://github.com/ruby/debug/releases) - [Commits](ruby/debug@v1.9.2...v1.11.1) Updates `gpgme` from 2.0.25 to 2.0.26 - [Changelog](https://github.com/ueno/ruby-gpgme/blob/master/NEWS) - [Commits](ueno/ruby-gpgme@v2.0.25...v2.0.26) Updates `rake` from 13.3.0 to 13.3.1 - [Release notes](https://github.com/ruby/rake/releases) - [Changelog](https://github.com/ruby/rake/blob/master/History.rdoc) - [Commits](ruby/rake@v13.3.0...v13.3.1) Updates `rspec` from 3.13.0 to 3.13.2 - [Commits](rspec/rspec@rspec-metagem-v3.13.0...rspec-v3.13.2) Updates `rubocop` from 1.80.2 to 1.84.2 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.80.2...v1.84.2) Updates `rubocop-performance` from 1.26.0 to 1.26.1 - [Release notes](https://github.com/rubocop/rubocop-performance/releases) - [Changelog](https://github.com/rubocop/rubocop-performance/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop-performance@v1.26.0...v1.26.1) Updates `rubocop-rspec` from 3.7.0 to 3.9.0 - [Release notes](https://github.com/rubocop/rubocop-rspec/releases) - [Changelog](https://github.com/rubocop/rubocop-rspec/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop-rspec@v3.7.0...v3.9.0) Updates `rubocop-sorbet` from 0.10.5 to 0.12.0 - [Release notes](https://github.com/shopify/rubocop-sorbet/releases) - [Commits](Shopify/rubocop-sorbet@v0.10.5...v0.12.0) Updates `vcr` from 6.3.1 to 6.4.0 - [Release notes](https://github.com/vcr/vcr/releases) - [Changelog](https://github.com/vcr/vcr/blob/master/CHANGELOG.md) - [Commits](vcr/vcr@v6.3.1...v6.4.0) Updates `webmock` from 3.25.1 to 3.26.1 - [Release notes](https://github.com/bblimke/webmock/releases) - [Changelog](https://github.com/bblimke/webmock/blob/master/CHANGELOG.md) - [Commits](bblimke/webmock@v3.25.1...v3.26.1) Updates `webrick` from 1.9.1 to 1.9.2 - [Release notes](https://github.com/ruby/webrick/releases) - [Commits](ruby/webrick@v1.9.1...v1.9.2) --- updated-dependencies: - dependency-name: debug dependency-version: 1.11.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: gpgme dependency-version: 2.0.26 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: rake dependency-version: 13.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: rspec dependency-version: 3.13.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: rubocop dependency-version: 1.84.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: rubocop-performance dependency-version: 1.26.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: rubocop-rspec dependency-version: 3.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: rubocop-sorbet dependency-version: 0.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: vcr dependency-version: 6.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: webmock dependency-version: 3.26.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: webrick dependency-version: 1.9.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
a741adf to
4668e8d
Compare
JamieMagee
previously approved these changes
Feb 20, 2026
Member
|
Bumping rubocop to 1.84.2 and rubocop-rspec to 3.9.0 introduced 179 lint offenses and 18 Sorbet errors. Here's what I did to fix them:
|
4668e8d to
922cbc7
Compare
- Fix RuboCop offenses from rubocop 1.84.2 and rubocop-rspec 3.9.0 - Fix RSpec/LeakyLocalVariable offenses across 18 spec files - Fix Layout/LineLength in bun and npm_and_yarn file_fetcher.rb - Bump sorbet 0.6.12544 -> 0.6.12949, tapioca 0.17.7 -> 0.17.10 - Regenerate Sorbet RBI files for updated gems - Fix Sorbet error in updater/error_handler.rb (Module -> T::Module) - Add RDoc::Markup::Heading superclass suppression to sorbet/config
922cbc7 to
92e5829
Compare
| "auth_headers" => auth_headers(cred.fetch("url").gsub(%r{/+$}, "")) | ||
| } | ||
| { | ||
| "url" => cred.fetch("url").gsub(%r{/+$}, ""), |
Check failure
Code scanning / CodeQL
Polynomial regular expression used on uncontrolled data High
| } | ||
| { | ||
| "url" => cred.fetch("url").gsub(%r{/+$}, ""), | ||
| "auth_headers" => auth_headers(cred.fetch("url").gsub(%r{/+$}, "")) |
Check failure
Code scanning / CodeQL
Polynomial regular expression used on uncontrolled data High
| .find do |c| | ||
| cred_url = c.fetch("url").gsub(%r{/+$}, "") | ||
| next false unless cred_url == maven_repo_url | ||
| cred_url = c.fetch("url").gsub(%r{/+$}, "") |
Check failure
Code scanning / CodeQL
Polynomial regular expression used on uncontrolled data High
| .find do |c| | ||
| cred_host = c.fetch("host").gsub(%r{/+$}, "") | ||
| next false unless URI(maven_repo_url).host == cred_host | ||
| cred_host = c.fetch("host").gsub(%r{/+$}, "") |
Check failure
Code scanning / CodeQL
Polynomial regular expression used on uncontrolled data High
Member
|
JamieMagee
approved these changes
Feb 20, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the dev-dependencies group with 11 updates in the /updater directory:
1.9.21.11.12.0.252.0.2613.3.013.3.13.13.03.13.21.80.21.84.21.26.01.26.13.7.03.9.00.10.50.12.06.3.16.4.03.25.13.26.11.9.11.9.2Updates
debugfrom 1.9.2 to 1.11.1Release notes
Sourced from debug's releases.
... (truncated)
Commits
bad4d38v1.11.188d762cFileUtils is needed553373aomit on older versionc1c1c8euseKernel.__callee__24f95d6catch up 4.0.0 backtrace changebc97d33add a test forb path: ...1139d78supportb path: path_expr06342cdcatch any exception onsingletonclass2791573fix(DAP): Return unverified breakpoints instead of unsuccessful response14c8a54Update imemo_mask to match ruby'sUpdates
gpgmefrom 2.0.25 to 2.0.26Changelog
Sourced from gpgme's changelog.
Commits
a8deb5aRelease 2.0.261e7f56cUpdate encryption constant checks to use have_const.c5a9498Add have_const for encrypt enums.b8d7058Add more encryption constants.af6c2e9Enable thread safety by default.873ed02Restore the check_version call.9b40220Add back require.036d461Add sync.cf2d166Add a monitor wrapper.8ad8400Fix require.Updates
rakefrom 13.3.0 to 13.3.1Commits
f0001c3v13.3.1a644c80Merge pull request #483 from luke-gru/fix_test_warnings2465ea5silence warnings during execution of rake tasks in Rakefile (ex: rake test)df25fb1Merge pull request #610 from pvdb/fix_testhelper_requireec12ac9Merge pull request #635 from nevans/deconstruct_keys-for-nil-keys4664a69Merge pull request #666 from ruby/dependabot/github_actions/ruby/setup-ruby-1...7a0bf15Bump ruby/setup-ruby from 1.265.0 to 1.266.0b3ed789Merge pull request #665 from ruby/dependabot/github_actions/ruby/setup-ruby-1...1e7ef52Bump ruby/setup-ruby from 1.263.0 to 1.265.077225e1Merge pull request #664 from ruby/dependabot/github_actions/ruby/setup-ruby-1...Updates
rspecfrom 3.13.0 to 3.13.2Commits
ce5fe4frspec-v3.13.21cb8517Merge pull request #270 from bquorning/fix-rspec-source_code_uricd5cab2rspec v3.13.14c87b84Remove duplicate source uri02dcc2aSet rubygems homepage to rspec.infod3054daSet tag prefixesdf15aaaUnify Gemfile3b23a71Unify.gitignoreUpdates
rubocopfrom 1.80.2 to 1.84.2Release notes
Sourced from rubocop's releases.
... (truncated)
Changelog
Sourced from rubocop's changelog.
... (truncated)
Commits
b210a6eCut 1.84.2b2e355bUpdate Changelogc7a3c5e[Fix rubocop#7436] FixStyle/FormatStringTokento not autocorrect strings o...87b0ca4[Fix rubocop#14847] Fix false positive for `Layout/MultilineMethodCallIndenta...429b640[Fix rubocop#14833] Fix false positive for `Layout/MultilineMethodCallIndenta...d1bf379[Fix #14841] Fix false negatives inStyle/HashAsLastArrayItema1157d2[Fix #14816] Use toplevel cache configs for remote configuration files7849c22Update changelog/fix_offense_highlighted_area_for_pseudo_source_range_locatio...1f8e439Fix Offense#highlighted_area for PseudoSourceRange locations99422a0[Fix #14858] Fix an error inLayout/FirstArgumentIndentationUpdates
rubocop-performancefrom 1.26.0 to 1.26.1Release notes
Sourced from rubocop-performance's releases.
Changelog
Sourced from rubocop-performance's changelog.
Commits
4783c90Cut 1.26.1d3f1806Update Changeloga63df04Merge pull request #521 from Earlopain/disable-bigdecimal7a5499f[Fix #520] DisablePerformance/BigDecimalWithNumericArgumentby default03a6071Merge pull request #518 from koic/fix_false_positives_for_performance_redunda...a1ef194[Fix #517] Fix false positives forPerformance/RedundantStringChars6e1afebTweak bug report template60ff474Suppress RuboCop's offense955429aSwitch back docs version to masterUpdates
rubocop-rspecfrom 3.7.0 to 3.9.0Release notes
Sourced from rubocop-rspec's releases.
Changelog
Sourced from rubocop-rspec's changelog.
Commits
f7aecf0Merge pull request #2151 from rubocop/release893a25bBump version to 3.9.091ad43dMerge pull request #2150 from kevinrobell-st/patch-1802b386Fix CHANGELOGa03e0c7Merge pull request #2149 from rubocop/ci-test-ruby-4.068f25d9Temporarily add irb to Gemfileb9e50b8CI: Test with Ruby 4.0b63bcd8Merge pull request #2148 from sucicfilip/fix-described-class-inside-eval278245aFix RSpec/DescribedClass to ignore *_eval and *_exec blocksca18f5eMerge pull request #2144 from rubocop/dont-use-ruby-versionUpdates
rubocop-sorbetfrom 0.10.5 to 0.12.0Release notes
Sourced from rubocop-sorbet's releases.
Commits
d41d1fePrepare for 0.12.0b67f892Merge pull request #366 from Shopify/rm-fix-rubocop-1-826d3a46fFix ObsoleteStrictMemoization crash when Layout/LineLength is disabled5b52028Use nix for development setup824251aMerge pull request #365 from Shopify/fix-forbid-t-struct-nil-max-line-length77b81e4Fix ForbidTStruct crash when Layout/LineLength is disabled371fc96Merge pull request #363 from Shopify/dependabot/github_actions/actions/checko...ce5b221Bump actions/checkout from 6.0.1 to 6.0.2f5690a8Merge pull request #361 from Shopify/dependabot/github_actions/dependabot/fet...bf567fdBump dependabot/fetch-metadata from 2.4.0 to 2.5.0Updates
vcrfrom 6.3.1 to 6.4.0Release notes
Sourced from vcr's releases.
Changelog
Sourced from vcr's changelog.
Commits
5dcacdfRelease v6.4.0 (#1066)81b06bfadd Crystal ports to readme (#1065)0bf676cBump actions/checkout from 5 to 6 (#1064)ce35c23ReplaceCGI.parsewithURI.decode_www_formfor Ruby 3.5+ compatibility (#...97f3682Bump actions/checkout from 4 to 5 (#1058)3b69506Refresh Ruby support matrix in README (#1056)882c0e0Drop runtime dependency on base64 (#1014)76c7e33Migrate documentation from Relishapp to Github page (#968)3719393Add Vcr.HttpRecorder (C#/.NET) to README.md (#1051)52329d1Add Haskell VCR to README.md (#1049)Updates
webmockfrom 3.25.1 to 3.26.1Release notes
Sourced from webmock's releases.
Changelog
Sourced from webmock's changelog.
Commits
56cb661Version 3.26.1ea4cea3Merge pull request #1109 from misdoro/duplicate_headersc05fe47Split SAMPLE_REQUEST_HEADERS and SAMPLE_RESPONSE_HEADERS to be more realistic5f46ecaFix specs with recent Async-http versions.aa747baRun CI on pushes to all branches348622fVersion 3.26.0710131aAdded .devcontainer to ignore.52cc74cDon't verify peer certificate in requests to google.af3655cUpdated request_pattern_spec.rb after error message was updated.00bd15aMerge branch 'ixti-fix-request-pattern-regression'Updates
webrickfrom 1.9.1 to 1.9.2Release notes
Sourced from webrick's releases.
Commits
b1684cev1.9.28f979b8Add GitHub release.yml to exclude dependencies label from changelog72744d8Bump ruby/setup-ruby action from v1.190.0 to v1.268.0b0398afMerge pull request #158 from jackorp/fix_test6456725Merge pull request #180 from ruby/dependabot/github_actions/actions/checkout-6