build(deps): bump the bundler group across 1 directory with 8 updates by dependabot[bot] · Pull Request #336 · umts/strap

dependabot · 2026-06-17T06:34:16Z

Bumps the bundler group with 5 updates in the / directory:

Package	From	To
rubocop	`1.87.0`	`1.88.0`
concurrent-ruby	`1.3.6`	`1.3.7`
faraday	`2.14.2`	`2.14.3`
i18n	`1.14.8`	`1.15.0`
oauth2	`2.0.22`	`2.0.23`

Updates rubocop from 1.87.0 to 1.88.0

Release notes

Sourced from rubocop's releases.

RuboCop v1.88.0

New features

#15166: Add a new Recursive option to Style/MutableConstant. When enabled, the cop checks and freezes mutable literals nested inside arrays and hashes. The option is disabled by default to preserve existing behavior. ([@paracycle][])

Bug fixes

#15220: Fix a bad autocorrect for Lint/RedundantSplatExpansion when splatting an empty literal (e.g. when *[] or rescue *[]), which expanded to invalid or semantically different code. ([@bbatsov][])

#15221: Fix a bad autocorrect for Lint/RegexpAsCondition when the regexp literal is negated (e.g. if !/foo/), which inverted the condition. ([@bbatsov][])

#15242: Fix a bad autocorrect for Lint/SymbolConversion when the receiver is an interpolated string containing an embedded double quote (e.g. "foo#{bar}\"qux".to_sym), which produced a syntax error. ([@bbatsov][])

#15270: Fix a crash for Style/CombinableLoops when a for loop has an empty body, and stop autocorrecting consecutive for loops whose iteration variables differ (which produced code referencing an undefined variable). ([@bbatsov][])

#15272: Fix a crash for Style/ConstantVisibility when a visibility declaration has a numeric literal argument (e.g. private_constant 42). ([@bbatsov][])

#15215: Fix a false negative for Lint/OrderedMagicComments when an encoding magic comment is preceded by a magic comment other than frozen_string_literal (e.g. shareable_constant_value). ([@bbatsov][])

#15228: Fix a false negative for Lint/RedundantWithIndex when the block takes no arguments (e.g. ary.each_with_index { do_something }). ([@bbatsov][])

#15230: Fix a false negative for Lint/RequireRelativeSelfPath when requiring the current file by name with its extension (e.g. require_relative 'foo.rb') and the file path is absolute. ([@bbatsov][])

#15229: Fix a false negative for Lint/SafeNavigationChain when an ordinary method is chained after a parenthesized safe navigation call (e.g. (x&.foo).bar). ([@bbatsov][])

#15225: Fix a false negative for Lint/SafeNavigationWithEmpty when the receiver of &.empty? is a local variable, instance variable, constant, or other non-method-call expression. ([@bbatsov][])

#15231: Fix a false negative for Lint/SendWithMixinArgument when send/public_send/__send__ is called with no explicit receiver or with a self receiver (e.g. send(:include, Bar)). ([@bbatsov][])

#15248: Fix a false negative for Lint/ToEnumArguments when more positional arguments are passed than the method accepts (e.g. def m(x); to_enum(:m, x, extra); end), which raises ArgumentError when the enumerator is used. ([@bbatsov][])

#15249: Fix a false negative for Lint/UnescapedBracketInRegexp when an unescaped ] is preceded by an escaped backslash (e.g. /abc\\]123/). ([@bbatsov][])

#15267: Fix a false positive for Style/ArrayIntersectWithSingleElement with a splat argument (e.g. array.intersect?([*foo])), which is not a single element and was incorrectly rewritten to array.include?(*foo). ([@bbatsov][])

#15272: Fix a false positive for Style/ColonMethodCall with chained JRuby interop calls (e.g. Java::com::something_method). ([@bbatsov][])

#15271: Fix a false positive for Style/ConditionalAssignment with EnforcedStyle: assign_inside_condition when assigning an unless without an else branch (e.g. x = unless cond; 1; end), which was rewritten to move the assignment inside the unless and changed behavior when the condition was true. ([@bbatsov][])

#14401: Fix a false positive for Layout/BlockAlignment with EnforcedStyleAlignWith: start_of_line when a block is passed as a method argument. ([@augustocbx][])

#15216: Fix a false positive for Lint/RaiseException when raise Exception is used inside a module nested within an allowed implicit namespace (e.g. Gem). ([@bbatsov][])

#15219: Fix a false positive for Lint/RedundantDirGlobSort when sort is given a comparator block or a block-pass argument, which is not redundant with the default sorting. ([@bbatsov][])

#15224: Fix a false positive for Lint/ShadowingOuterLocalVariable when a block argument has the same name as a pattern variable from a different in branch of the same case. ([@bbatsov][])

#15239: Fix a false positive for Lint/SuppressedExceptionInNumberConversion when the numeric constructor already passes exception: false (e.g. Integer(arg, exception: false) rescue nil), which also produced an autocorrect with a duplicate exception: false keyword. ([@bbatsov][])

#15243: Fix a false positive for Lint/TopLevelReturnWithArgument when a return with an argument is inside a numbered-parameter block or an it block. ([@bbatsov][])

#15245: Fix a false positive for Lint/UselessRuby2Keywords when ruby2_keywords in a nested class or module refers to a method of the same name defined in an outer scope. ([@bbatsov][])

#15246: Fix a false positive for Lint/UselessSetterCall when a multiple assignment uses nested destructuring (e.g. (a, b), c = arg, other_arg), which misaligned variables with the right-hand side values. ([@bbatsov][])

#15125: Fix a false positive for Style/ZeroLengthPredicate when File::Stat.new(...).size.zero? is used. ([@augustocbx][])

#15196: Fix --start-server to wait until the server is running before returning, which fixes a flaky --restart-server spec and a race for commands run right after starting the server. ([@koic][])

#15272: Fix Style/Alias not detecting block scope for numbered-parameter and it blocks, which caused a false positive for alias_method and a false negative for alias inside such blocks. ([@bbatsov][])

#15281: Fix an incorrect autocorrect when Style/IfUnlessModifier and Style/Next correct the same conditional. ([@fynsta][])

#15260: Fix an error for Style/FileWrite when a literal or variable is passed to write in the block form. ([@koic][])

#15276: Fix an error for Style/RedundantFormat when the format string is a heredoc with format arguments. ([@fynsta][])

#15270: Fix an incorrect autocorrect for Style/AndOr when an operand is next, break, or yield with an argument (e.g. foo and next 1), which produced invalid Ruby like foo && next 1. ([@bbatsov][])

#15267: Fix an incorrect autocorrect for Style/ArrayFirstLast when arr[0]/arr[-1] is the target of a compound assignment (e.g. arr[0] += 1), which produced arr.first += 1 and raised NoMethodError. ([@bbatsov][])

#15267: Fix an incorrect autocorrect for Style/ArrayIntersect where a negated predicate on a safe-navigation chain (e.g. a&.intersection(b)&.none?) was rewritten to !a&.intersect?(b), flipping the result when the receiver is nil. ([@bbatsov][])

#15273: Fix an incorrect autocorrect for Style/BlockDelimiters that converted a single-line do...end block containing a block-level rescue or ensure to {...}, producing invalid Ruby. ([@bbatsov][])

#15268: Fix an incorrect autocorrect for Style/CaseEquality when the argument is an operator or unary expression (e.g. Array === a + b), which produced mis-parsed code like a + b.is_a?(Array). ([@bbatsov][])

#15268: Fix an incorrect autocorrect for Style/ClassEqualityComparison inside a namespace when the class name string is already fully qualified (e.g. bar.class.name == '::Bar'), which produced instance_of?(::::Bar) and was a syntax error. ([@bbatsov][])

#15268: Fix an incorrect autocorrect for Style/ClassEqualityComparison when comparing Class itself to a string literal (e.g. var.class == 'Date'), which produced var.instance_of?('Date') and raised TypeError; such comparisons are no longer autocorrected. ([@bbatsov][])

#15274: Fix an incorrect autocorrect for Style/ClassMethodsDefinitions that corrupted a preceding comment containing def <name> and left the method undefined as a class method. ([@bbatsov][])

#15270: Fix an incorrect autocorrect for Style/ComparableClamp when the clamped value is an operator expression (e.g. a + b), which produced mis-parsed code like a + b.clamp(low, high). ([@bbatsov][])

#15267: Fix an incorrect autocorrect for Style/ConcatArrayLiterals with an empty array literal argument (e.g. arr.concat([], [b])), which produced invalid Ruby like arr.push(, b). ([@bbatsov][])

#15274: Fix an incorrect autocorrect for Style/DigChain that duplicated a trailing comment and dropped indentation when the chain was inside a method or block. ([@bbatsov][])

#15288: Fix an incorrect autocorrect for Lint/UselessTimes when a 1.times block takes a single destructured (|(a, b)|) or splat (|*a|) argument, which produced a body referencing an undefined variable. ([@bbatsov][])

#15280: Fix an incorrect autocorrect for Style/ConditionalAssignment with EnforcedStyle: assign_inside_condition and a single-line case. ([@fynsta][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.88.0 (2026-06-16)

New features

#15166: Add a new Recursive option to Style/MutableConstant. When enabled, the cop checks and freezes mutable literals nested inside arrays and hashes. The option is disabled by default to preserve existing behavior. ([@paracycle][])

Bug fixes

#15220: Fix a bad autocorrect for Lint/RedundantSplatExpansion when splatting an empty literal (e.g. when *[] or rescue *[]), which expanded to invalid or semantically different code. ([@bbatsov][])

#15221: Fix a bad autocorrect for Lint/RegexpAsCondition when the regexp literal is negated (e.g. if !/foo/), which inverted the condition. ([@bbatsov][])

#15242: Fix a bad autocorrect for Lint/SymbolConversion when the receiver is an interpolated string containing an embedded double quote (e.g. "foo#{bar}\"qux".to_sym), which produced a syntax error. ([@bbatsov][])

#15270: Fix a crash for Style/CombinableLoops when a for loop has an empty body, and stop autocorrecting consecutive for loops whose iteration variables differ (which produced code referencing an undefined variable). ([@bbatsov][])

#15272: Fix a crash for Style/ConstantVisibility when a visibility declaration has a numeric literal argument (e.g. private_constant 42). ([@bbatsov][])

#15215: Fix a false negative for Lint/OrderedMagicComments when an encoding magic comment is preceded by a magic comment other than frozen_string_literal (e.g. shareable_constant_value). ([@bbatsov][])

#15228: Fix a false negative for Lint/RedundantWithIndex when the block takes no arguments (e.g. ary.each_with_index { do_something }). ([@bbatsov][])

#15230: Fix a false negative for Lint/RequireRelativeSelfPath when requiring the current file by name with its extension (e.g. require_relative 'foo.rb') and the file path is absolute. ([@bbatsov][])

#15229: Fix a false negative for Lint/SafeNavigationChain when an ordinary method is chained after a parenthesized safe navigation call (e.g. (x&.foo).bar). ([@bbatsov][])

#15225: Fix a false negative for Lint/SafeNavigationWithEmpty when the receiver of &.empty? is a local variable, instance variable, constant, or other non-method-call expression. ([@bbatsov][])

#15231: Fix a false negative for Lint/SendWithMixinArgument when send/public_send/__send__ is called with no explicit receiver or with a self receiver (e.g. send(:include, Bar)). ([@bbatsov][])

#15248: Fix a false negative for Lint/ToEnumArguments when more positional arguments are passed than the method accepts (e.g. def m(x); to_enum(:m, x, extra); end), which raises ArgumentError when the enumerator is used. ([@bbatsov][])

#15249: Fix a false negative for Lint/UnescapedBracketInRegexp when an unescaped ] is preceded by an escaped backslash (e.g. /abc\\]123/). ([@bbatsov][])

#15267: Fix a false positive for Style/ArrayIntersectWithSingleElement with a splat argument (e.g. array.intersect?([*foo])), which is not a single element and was incorrectly rewritten to array.include?(*foo). ([@bbatsov][])

#15272: Fix a false positive for Style/ColonMethodCall with chained JRuby interop calls (e.g. Java::com::something_method). ([@bbatsov][])

#15271: Fix a false positive for Style/ConditionalAssignment with EnforcedStyle: assign_inside_condition when assigning an unless without an else branch (e.g. x = unless cond; 1; end), which was rewritten to move the assignment inside the unless and changed behavior when the condition was true. ([@bbatsov][])

#14401: Fix a false positive for Layout/BlockAlignment with EnforcedStyleAlignWith: start_of_line when a block is passed as a method argument. ([@augustocbx][])

#15216: Fix a false positive for Lint/RaiseException when raise Exception is used inside a module nested within an allowed implicit namespace (e.g. Gem). ([@bbatsov][])

#15219: Fix a false positive for Lint/RedundantDirGlobSort when sort is given a comparator block or a block-pass argument, which is not redundant with the default sorting. ([@bbatsov][])

#15224: Fix a false positive for Lint/ShadowingOuterLocalVariable when a block argument has the same name as a pattern variable from a different in branch of the same case. ([@bbatsov][])

#15239: Fix a false positive for Lint/SuppressedExceptionInNumberConversion when the numeric constructor already passes exception: false (e.g. Integer(arg, exception: false) rescue nil), which also produced an autocorrect with a duplicate exception: false keyword. ([@bbatsov][])

#15243: Fix a false positive for Lint/TopLevelReturnWithArgument when a return with an argument is inside a numbered-parameter block or an it block. ([@bbatsov][])

#15245: Fix a false positive for Lint/UselessRuby2Keywords when ruby2_keywords in a nested class or module refers to a method of the same name defined in an outer scope. ([@bbatsov][])

#15246: Fix a false positive for Lint/UselessSetterCall when a multiple assignment uses nested destructuring (e.g. (a, b), c = arg, other_arg), which misaligned variables with the right-hand side values. ([@bbatsov][])

#15125: Fix a false positive for Style/ZeroLengthPredicate when File::Stat.new(...).size.zero? is used. ([@augustocbx][])

#15196: Fix --start-server to wait until the server is running before returning, which fixes a flaky --restart-server spec and a race for commands run right after starting the server. ([@koic][])

#15272: Fix Style/Alias not detecting block scope for numbered-parameter and it blocks, which caused a false positive for alias_method and a false negative for alias inside such blocks. ([@bbatsov][])

#15281: Fix an incorrect autocorrect when Style/IfUnlessModifier and Style/Next correct the same conditional. ([@fynsta][])

#15260: Fix an error for Style/FileWrite when a literal or variable is passed to write in the block form. ([@koic][])

#15276: Fix an error for Style/RedundantFormat when the format string is a heredoc with format arguments. ([@fynsta][])

#15270: Fix an incorrect autocorrect for Style/AndOr when an operand is next, break, or yield with an argument (e.g. foo and next 1), which produced invalid Ruby like foo && next 1. ([@bbatsov][])

#15267: Fix an incorrect autocorrect for Style/ArrayFirstLast when arr[0]/arr[-1] is the target of a compound assignment (e.g. arr[0] += 1), which produced arr.first += 1 and raised NoMethodError. ([@bbatsov][])

#15267: Fix an incorrect autocorrect for Style/ArrayIntersect where a negated predicate on a safe-navigation chain (e.g. a&.intersection(b)&.none?) was rewritten to !a&.intersect?(b), flipping the result when the receiver is nil. ([@bbatsov][])

#15273: Fix an incorrect autocorrect for Style/BlockDelimiters that converted a single-line do...end block containing a block-level rescue or ensure to {...}, producing invalid Ruby. ([@bbatsov][])

#15268: Fix an incorrect autocorrect for Style/CaseEquality when the argument is an operator or unary expression (e.g. Array === a + b), which produced mis-parsed code like a + b.is_a?(Array). ([@bbatsov][])

#15268: Fix an incorrect autocorrect for Style/ClassEqualityComparison inside a namespace when the class name string is already fully qualified (e.g. bar.class.name == '::Bar'), which produced instance_of?(::::Bar) and was a syntax error. ([@bbatsov][])

#15268: Fix an incorrect autocorrect for Style/ClassEqualityComparison when comparing Class itself to a string literal (e.g. var.class == 'Date'), which produced var.instance_of?('Date') and raised TypeError; such comparisons are no longer autocorrected. ([@bbatsov][])

#15274: Fix an incorrect autocorrect for Style/ClassMethodsDefinitions that corrupted a preceding comment containing def <name> and left the method undefined as a class method. ([@bbatsov][])

#15270: Fix an incorrect autocorrect for Style/ComparableClamp when the clamped value is an operator expression (e.g. a + b), which produced mis-parsed code like a + b.clamp(low, high). ([@bbatsov][])

#15267: Fix an incorrect autocorrect for Style/ConcatArrayLiterals with an empty array literal argument (e.g. arr.concat([], [b])), which produced invalid Ruby like arr.push(, b). ([@bbatsov][])

#15274: Fix an incorrect autocorrect for Style/DigChain that duplicated a trailing comment and dropped indentation when the chain was inside a method or block. ([@bbatsov][])

#15288: Fix an incorrect autocorrect for Lint/UselessTimes when a 1.times block takes a single destructured (|(a, b)|) or splat (|*a|) argument, which produced a body referencing an undefined variable. ([@bbatsov][])

... (truncated)

Commits

37bf5ad Cut 1.88
cd0c2e3 Update Changelog
b7af64a [Fix #12276] Record pending cops options in the auto-gen-config command
bbd7ff2 Add hk integration docs
117e40a Merge pull request #15293 from RedZapdos123/fix-literal-interp-hash-symbol
4d95141 [Fix #15291] Fix hash symbol interpolation
0347d27 Add Recursive option to Style/MutableConstant
f0d92b4 Fix incorrect autocorrects for Style/FileWrite with heredocs
32df346 Fix an incorrect autocorrect for Style/Semicolon with heredocs
4c221fb [Fix #15269] Fix a false positive where cop Include patterns matched parent...
Additional commits viewable in compare view

Updates concurrent-ruby from 1.3.6 to 1.3.7

Release notes

Sourced from concurrent-ruby's releases.

v1.3.7

There are 3 security fixes in this release, so updating is recommended. These security vulnerabilities are not very likely to be hit in practice and have a corresponding Low severity score.

What's Changed

CVE-2026-54904 AtomicReference#update livelocks when the stored value is Float::NAN. Fix by @joshuay03 and @eregon

CVE-2026-54905 ReentrantReadWriteLock read-count overflow grants a write lock without exclusivity. Fix by @joshuay03

CVE-2026-54906 ReadWriteLock allows wrong-thread write release and stray read-release counter corruption. Fix by @joshuay03

concurrent-ruby-ext: fix build on Darwin 32-bit by @barracuda156 in ruby-concurrency/concurrent-ruby#1064

Add SECURITY.md by @eregon in ruby-concurrency/concurrent-ruby#1104

Add Ruby 4.0 in CI by @eregon in ruby-concurrency/concurrent-ruby#1106

New Contributors

@barracuda156 made their first contribution in ruby-concurrency/concurrent-ruby#1064

Full Changelog: ruby-concurrency/concurrent-ruby@v1.3.6...v1.3.7

Changelog

Sourced from concurrent-ruby's changelog.

Release v1.3.7 (16 June 2026)

concurrent-ruby:

See the release notes on GitHub.

Commits

4c8fc28 Release 1.3.7
d91ca94 Fix AtomicReference#update livelock when stored value is Float::NAN on JRuby ...
7e4d711 Fix ReentrantReadWriteLock read hold overflow into write-lock bit
6e37e06 Fix AtomicReference#update livelock when stored value is Float::NAN
2825cfa Cleanup spec
3fd4932 Fix ReadWriteLock wrong-thread write release and stray read release
1974b47 Add Ruby 4.0 in CI
df8706d Add SECURITY.md (#1104)
7a1b789 Bump actions/upload-pages-artifact from 4 to 5
9b2dbf7 Bump actions/deploy-pages from 4 to 5
Additional commits viewable in compare view

Updates faraday from 2.14.2 to 2.14.3

Release notes

Sourced from faraday's releases.

v2.14.3

Security Note

This release contains a security fix, we recommend all users to upgrade as soon as possible. A Security Advisory with more details will be posted shortly.

What's Changed

Upgrade CI lint step from Ruby 3 to 4 by @larouxn in lostisland/faraday#1673

feat(test): add Stubs#clear to remove all stubs by @SAY-5 in lostisland/faraday#1675

New Contributors

@SAY-5 made their first contribution in lostisland/faraday#1675

Full Changelog: lostisland/faraday@v2.14.2...v2.14.3

Commits

f1ace87 Version bump to 2.14.3
36764bf Merge commit from fork
59334e0 feat(test): add Stubs#clear to remove all stubs (#1675)
469f25c Upgrade CI lint step from Ruby 3 to 4 (#1673)
See full diff in compare view

Updates i18n from 1.14.8 to 1.15.0

Release notes

Sourced from i18n's releases.

v1.15.0

What's Changed

Make lazy loading of I18n translations thread safe ( part 2 ) by @chaadow in ruby-i18n/i18n#729

Add support to not replace non-ASCII chars not in map by @sobrinho in ruby-i18n/i18n#720

Add transliteration for O with ogonek by @radar in ruby-i18n/i18n#733

CI: exclude Ruby 3.2 from rails-main matrix by @radar in ruby-i18n/i18n#734

Fiber-aware I18n config storage by @lee266 in ruby-i18n/i18n#731

New Contributors

@chaadow made their first contribution in ruby-i18n/i18n#729

@sobrinho made their first contribution in ruby-i18n/i18n#720

Full Changelog: ruby-i18n/i18n@v1.14.8...v1.15.0

Commits

78fa20a Bump to 1.15.0
6ef9bb2 Merge pull request #731 from lee266/feature/fiber-storage
416eebe remove 3.2 builds from ruby.yml
daefe70 Merge branch 'master' into feature/fiber-storage
0a04c98 Support Ruby >= 3.1
e2067d2 Merge pull request #734 from ruby-i18n/ci-drop-ruby-3.2-rails-main
0c2d1e1 Merge pull request #733 from ruby-i18n/transliterate-o-ogonek
5ecdb13 CI: exclude Ruby 3.2 from rails-main matrix
e43419d Merge pull request #720 from sobrinho/sobrinho/add-none-replacement
d397bb0 Add transliteration for O with ogonek
Additional commits viewable in compare view

Updates json from 2.19.8 to 2.19.9

Release notes

Sourced from json's releases.

v2.19.9

Fix buffer overflow that could lead to a crash when writing JSON directly into an IO with JSON.generate(object, io). [CVE-2026-54696].

Full Changelog: ruby/json@v2.19.8...v2.19.9

Changelog

Sourced from json's changelog.

2026-06-11 (2.19.9)

Fix buffer overflow that could lead to a crash when writing JSON directly into an IO with JSON.generate(object, io). [CVE-2026-54696].

Commits

2cff267 Release 2.19.9
fd6a65b generator.c: don't start with a stack buffer in IO case
See full diff in compare view

Updates oauth2 from 2.0.22 to 2.0.23

Release notes

Sourced from oauth2's releases.

v2.0.23

2.0.23 - 2026-06-13

TAG: v2.0.23

COVERAGE: 100.00% -- 562/562 lines in 15 files

BRANCH COVERAGE: 97.89% -- 186/190 branches in 15 files

88.35% documented

Changed

Upgraded to snaky_hash v2.0.6 by @pboling

Refreshed generated GHA workflow action SHA pins by @pboling

Fixed

Addressed Reek code-quality checks with targeted cleanup and documented compatibility exclusions by @pboling

Fixed deprecation warning from MultiXML by @robzolkos

Fixed head appraisal dependency conflicts and Ruby 2.4 protocol-relative redirect handling by @pboling

Official Discord 👉️ [![Live Chat on Discord][✉️discord-invite-img]][✉️discord-invite]

Many paths lead to being a sponsor or a backer of this project. Are you on such a path?

[][🖇paypal]

... (truncated)

Changelog

Sourced from oauth2's changelog.

[2.0.23] - 2026-06-13

TAG: [v2.0.23][2.0.23t]

COVERAGE: 100.00% -- 562/562 lines in 15 files

BRANCH COVERAGE: 97.89% -- 186/190 branches in 15 files

88.35% documented

Changed

Upgraded to snaky_hash v2.0.6 by @pboling

Refreshed generated GHA workflow action SHA pins by @pboling

Fixed

Addressed Reek code-quality checks with targeted cleanup and documented compatibility exclusions by @pboling

Fixed deprecation warning from MultiXML by @robzolkos

Fixed head appraisal dependency conflicts and Ruby 2.4 protocol-relative redirect handling by @pboling

Commits

af44293 👷 Normalize appraisal gemfile style
876c95a 🔖 Prepare release v2.0.23
016ff6a Merge pull request #734 from ruby-oauth/feat/repease-prep-v2.0.23
c3547db 👷 Avoid JRuby turbo test hangs
85ef281 🐛 Tolerate nil redirect counts
b9e850f 🔥 Remove style deps from appraisal root
0460e3e 🐛 Address remaining PR review comments
3423986 🐛 Stabilize Truffle CI expectations
174809b 🐛 Run legacy Truffle appraisals directly
1b95345 🐛 Fix legacy TruffleRuby CI
Additional commits viewable in compare view

Updates snaky_hash from 2.0.5 to 2.0.6

Release notes

Sourced from snaky_hash's releases.

v2.0.6

2.0.6 - 2026-06-11

TAG: v2.0.6

COVERAGE: 100.00% -- 133/133 lines in 7 files

BRANCH COVERAGE: 100.00% -- 38/38 branches in 7 files

92.86% documented

Fixed

Restored docs/CNAME so the generated documentation site keeps its custom domain.

Removed stale legacy CI workflows and duplicate extracted-stdlib gem declarations from generated Appraisal gemfiles.

Official Discord 👉️

Many paths lead to being a sponsor or a backer of this project. Are you on such a path?

Changelog

Sourced from snaky_hash's changelog.

[2.0.6] - 2026-06-11

TAG: [v2.0.6][2.0.6t]

COVERAGE: 100.00% -- 133/133 lines in 7 files

BRANCH COVERAGE: 100.00% -- 38/38 branches in 7 files

92.86% documented

Fixed

Restored docs/CNAME so the generated documentation site keeps its custom domain.

Removed stale legacy CI workflows and duplicate extracted-stdlib gem declarations from generated Appraisal gemfiles.

Commits

6e12a7b 🔖 Prepare release v2.0.6
371eadd 🧰 Retemplate snaky_hash
43c861d ⬆️ Retemplate for kettle tooling floors
bea68d4 📝 Document restored docs CNAME
33128a6 📝 Restore docs CNAME
eca4b01 Merge pull request #11 from leoarnold/leoarnold/rbs/version
18c80c7 Fix RBS::DuplicatedDeclarationError
e37869d 🔒️ Checksums for v2.0.5
See full diff in compare view

Updates version_gem from 1.1.11 to 1.1.12

Release notes

Sourced from version_gem's releases.

v1.1.12

1.1.12 - 2026-06-14

TAG: v1.1.12

COVERAGE: 100.00% -- 58/58 lines in 2 files

BRANCH COVERAGE: 0.00% -- 0/0 branches in 2 files

85.19% documented

Changed

Retemplated repository metadata, workflows, modular gemfiles, and documentation scaffolding with the current kettle-jem template.

Fixed

Restored docs/CNAME so the generated documentation site keeps its custom domain.

Corrected misspelled contact metadata to use galtzo.com.

Official Discord 👉️

Many paths lead to being a sponsor or a backer of this project. Are you on such a path?

Changelog

Sourced from version_gem's changelog.

[1.1.12] - 2026-06-14

TAG: [v1.1.12][1.1.12t]

COVERAGE: 100.00% -- 58/58 lines in 2 files

BRANCH COVERAGE: 0.00% -- 0/0 branches in 2 files

85.19% documented

Changed

Retemplated repository metadata, workflows, modular gemfiles, and documentation scaffolding with the current kettle-jem template.

Fixed

Restored docs/CNAME so the generated documentation site keeps its custom domain.

Corrected misspelled contact metadata to use galtzo.com.

Commits

56b2e57 📝 Release prep
84e2b00 🧑‍💻 Retemplate with current kettle-jem
816f833 📝 Document restored docs CNAME
e167c31 📝 Restore docs CNAME
ac64cec ✏️ Correct galtzo contact metadata
2e3422a 🔒️ Checksums for v1.1.11
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
`@dependabot ignore <dependency na...

Description has been truncated

Bumps the bundler group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [rubocop](https://github.com/rubocop/rubocop) | `1.87.0` | `1.88.0` | | [concurrent-ruby](https://github.com/ruby-concurrency/concurrent-ruby) | `1.3.6` | `1.3.7` | | [faraday](https://github.com/lostisland/faraday) | `2.14.2` | `2.14.3` | | [i18n](https://github.com/ruby-i18n/i18n) | `1.14.8` | `1.15.0` | | [oauth2](https://github.com/ruby-oauth/oauth2) | `2.0.22` | `2.0.23` | Updates `rubocop` from 1.87.0 to 1.88.0 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.87.0...v1.88.0) Updates `concurrent-ruby` from 1.3.6 to 1.3.7 - [Release notes](https://github.com/ruby-concurrency/concurrent-ruby/releases) - [Changelog](https://github.com/ruby-concurrency/concurrent-ruby/blob/master/CHANGELOG.md) - [Commits](ruby-concurrency/concurrent-ruby@v1.3.6...v1.3.7) Updates `faraday` from 2.14.2 to 2.14.3 - [Release notes](https://github.com/lostisland/faraday/releases) - [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md) - [Commits](lostisland/faraday@v2.14.2...v2.14.3) Updates `i18n` from 1.14.8 to 1.15.0 - [Release notes](https://github.com/ruby-i18n/i18n/releases) - [Changelog](https://github.com/ruby-i18n/i18n/blob/master/CHANGELOG.md) - [Commits](ruby-i18n/i18n@v1.14.8...v1.15.0) Updates `json` from 2.19.8 to 2.19.9 - [Release notes](https://github.com/ruby/json/releases) - [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md) - [Commits](ruby/json@v2.19.8...v2.19.9) Updates `oauth2` from 2.0.22 to 2.0.23 - [Release notes](https://github.com/ruby-oauth/oauth2/releases) - [Changelog](https://github.com/ruby-oauth/oauth2/blob/main/CHANGELOG.md) - [Commits](ruby-oauth/oauth2@v2.0.22...v2.0.23) Updates `snaky_hash` from 2.0.5 to 2.0.6 - [Release notes](https://github.com/ruby-oauth/snaky_hash/releases) - [Changelog](https://github.com/ruby-oauth/snaky_hash/blob/main/CHANGELOG.md) - [Commits](ruby-oauth/snaky_hash@v2.0.5...v2.0.6) Updates `version_gem` from 1.1.11 to 1.1.12 - [Release notes](https://github.com/ruby-oauth/version_gem/releases) - [Changelog](https://github.com/ruby-oauth/version_gem/blob/main/CHANGELOG.md) - [Commits](ruby-oauth/version_gem@v1.1.11...v1.1.12) --- updated-dependencies: - dependency-name: rubocop dependency-version: 1.88.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler - dependency-name: concurrent-ruby dependency-version: 1.3.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: bundler - dependency-name: faraday dependency-version: 2.14.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: bundler - dependency-name: i18n dependency-version: 1.15.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: bundler - dependency-name: json dependency-version: 2.19.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: bundler - dependency-name: oauth2 dependency-version: 2.0.23 dependency-type: indirect update-type: version-update:semver-patch dependency-group: bundler - dependency-name: snaky_hash dependency-version: 2.0.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: bundler - dependency-name: version_gem dependency-version: 1.1.12 dependency-type: indirect update-type: version-update:semver-patch dependency-group: bundler ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-19T06:34:16Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jun 17, 2026

dependabot Bot closed this Jun 19, 2026

dependabot Bot deleted the dependabot/bundler/bundler-fb3cd0ffc7 branch June 19, 2026 06:34

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the bundler group across 1 directory with 8 updates#336

build(deps): bump the bundler group across 1 directory with 8 updates#336
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/bundler-fb3cd0ffc7

dependabot Bot commented on behalf of github Jun 17, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

RuboCop v1.88.0

New features

Bug fixes

1.88.0 (2026-06-16)

New features

Bug fixes

v1.3.7

What's Changed

New Contributors

Release v1.3.7 (16 June 2026)

v2.14.3

Security Note

What's Changed

New Contributors

v1.15.0

What's Changed

New Contributors

v2.19.9

2026-06-11 (2.19.9)

v2.0.23

2.0.23 - 2026-06-13

Changed

Fixed

[2.0.23] - 2026-06-13

Changed

Fixed

v2.0.6

2.0.6 - 2026-06-11

Fixed

[2.0.6] - 2026-06-11

Fixed

v1.1.12

1.1.12 - 2026-06-14

Changed

Fixed

[1.1.12] - 2026-06-14

Changed

Fixed

Uh oh!

dependabot Bot commented on behalf of github Jun 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 17, 2026 •

edited

Loading