chore(deps): consolidate pending dependency updates

- actions/checkout v4→v7 (Node 24, fork PR blocking)
- gitleaks/gitleaks-action v2→v3 (Node 20→24 runtime)
- anthropic 1.36.0→1.49.0 (code_execution tool, HTTP middleware)
- rss 0.3.2→0.3.3 (PI parse performance)
- rubocop 1.86.1→1.88.0 (bug fixes)
- json 2.19.4→2.19.9 (transitive via rubocop)

Supersedes #84, #86, #88, #89, #90.

https://claude.ai/code/session_01CDVXuEGetaSKyDrq7p6yrk

Author: claude

.github/workflows/ci.yml

@@ -15,7 +15,7 @@ jobs:
         working-directory: runtimes/ruby
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Ruby
         uses: ruby/setup-ruby@v1

.github/workflows/security.yml

@@ -33,7 +33,7 @@ jobs:
         working-directory: runtimes/ruby
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Ruby
         uses: ruby/setup-ruby@v1
@@ -53,11 +53,11 @@ jobs:
       pull-requests: read
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
       - name: Run gitleaks
-        uses: gitleaks/gitleaks-action@v2
+        uses: gitleaks/gitleaks-action@v3
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/simulation-readiness-ci.yml

@@ -23,7 +23,7 @@ jobs:
         working-directory: runtimes/ruby
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Ruby
         uses: ruby/setup-ruby@v1

.github/workflows/simulation-readiness-nightly.yml

@@ -14,7 +14,7 @@ jobs:
         working-directory: runtimes/ruby
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup Ruby
         uses: ruby/setup-ruby@v1

runtimes/ruby/Gemfile

@@ -7,5 +7,5 @@ gemspec
 group :development do
   gem "rake", "~> 13.4"
   gem "rspec", "~> 3.0"
-  gem "rubocop", "~> 1.86"
+  gem "rubocop", "~> 1.88"
 end

runtimes/ruby/Gemfile.lock

@@ -9,15 +9,16 @@ PATH
 GEM
   remote: https://rubygems.org/
   specs:
-    anthropic (1.36.0)
+    anthropic (1.49.0)
       cgi
       connection_pool
+      standardwebhooks
     ast (2.4.3)
     base64 (0.3.0)
     cgi (0.5.1)
     connection_pool (3.0.2)
     diff-lcs (1.6.2)
-    json (2.19.4)
+    json (2.19.9)
     language_server-protocol (3.17.0.5)
     lint_roller (1.1.0)
     parallel (1.28.0)
@@ -43,9 +44,9 @@ GEM
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.13.0)
     rspec-support (3.13.7)
-    rss (0.3.2)
+    rss (0.3.3)
       rexml
-    rubocop (1.86.1)
+    rubocop (1.88.0)
       json (~> 2.3)
       language_server-protocol (~> 3.17.0.2)
       lint_roller (~> 1.1.0)
@@ -60,6 +61,7 @@ GEM
       parser (>= 3.3.7.2)
       prism (~> 1.7)
     ruby-progressbar (1.13.0)
+    standardwebhooks (1.0.1)
     unicode-display_width (3.2.0)
       unicode-emoji (~> 4.1)
     unicode-emoji (4.2.0)
@@ -72,16 +74,16 @@ DEPENDENCIES
   rake (~> 13.4)
   recurgent!
   rspec (~> 3.0)
-  rubocop (~> 1.86)
+  rubocop (~> 1.88)
 
 CHECKSUMS
-  anthropic (1.36.0) sha256=f6dcbe2fbb4a1d61cac15a3e46c635c70fb8b5b21e0e4f0bcede212c722f9b41
+  anthropic (1.49.0) sha256=22a3cc650003c0fee202519199137bd81056080a0c20d729d04d70f774e486f9
   ast (2.4.3) sha256=954615157c1d6a382bc27d690d973195e79db7f55e9765ac7c481c60bdb4d383
   base64 (0.3.0) sha256=27337aeabad6ffae05c265c450490628ef3ebd4b67be58257393227588f5a97b
   cgi (0.5.1) sha256=e93fcafc69b8a934fe1e6146121fa35430efa8b4a4047c4893764067036f18e9
   connection_pool (3.0.2) sha256=33fff5ba71a12d2aa26cb72b1db8bba2a1a01823559fb01d29eb74c286e62e0a
   diff-lcs (1.6.2) sha256=9ae0d2cba7d4df3075fe8cd8602a8604993efc0dfa934cff568969efb1909962
-  json (2.19.4) sha256=670a7d333fb3b18ca5b29cb255eb7bef099e40d88c02c80bd42a3f30fe5239ac
+  json (2.19.9) sha256=9b9025b7cdddafa38d316eca0b2358488e42d417045c1b90d216a9fefe46b79a
   language_server-protocol (3.17.0.5) sha256=fd1e39a51a28bf3eec959379985a72e296e9f9acfce46f6a79d31ca8760803cc
   lint_roller (1.1.0) sha256=2c0c845b632a7d172cb849cc90c1bce937a28c5c8ccccb50dfd46a485003cc87
   parallel (1.28.0) sha256=33e6de1484baf2524792d178b0913fc8eb94c628d6cfe45599ad4458c638c970
@@ -98,10 +100,11 @@ CHECKSUMS
   rspec-expectations (3.13.5) sha256=33a4d3a1d95060aea4c94e9f237030a8f9eae5615e9bd85718fe3a09e4b58836
   rspec-mocks (3.13.7) sha256=0979034e64b1d7a838aaaddf12bf065ea4dc40ef3d4c39f01f93ae2c66c62b1c
   rspec-support (3.13.7) sha256=0640e5570872aafefd79867901deeeeb40b0c9875a36b983d85f54fb7381c47c
-  rss (0.3.2) sha256=3bd0446d32d832cda00ba07f4b179401f903b52ea1fdaac0f1f08de61a501efa
-  rubocop (1.86.1) sha256=44415f3f01d01a21e01132248d2fd0867572475b566ca188a0a42133a08d4531
+  rss (0.3.3) sha256=37ef1ec4d691d67edbe92159079a4e89a0965e6a6b32246009ae3d734d12d1ab
+  rubocop (1.88.0) sha256=e420ddf1662d0ef34bc8a2910ac4b396a7ddda0b51a708264405241734b08e0b
   rubocop-ast (1.49.1) sha256=4412f3ee70f6fe4546cc489548e0f6fcf76cafcfa80fa03af67098ffed755035
   ruby-progressbar (1.13.0) sha256=80fc9c47a9b640d6834e0dc7b3c94c9df37f08cb072b7761e4a71e22cff29b33
+  standardwebhooks (1.0.1) sha256=35db391599d9318747e1e75e77b96236b3fc25241b92387c9a8d31bd974f3d7d
   unicode-display_width (3.2.0) sha256=0cdd96b5681a5949cdbc2c55e7b420facae74c4aaf9a9815eee1087cb1853c42
   unicode-emoji (4.2.0) sha256=519e69150f75652e40bf736106cfbc8f0f73aa3fb6a65afe62fefa7f80b0f80f