build(deps): bump the bundler group across 1 directory with 11 updates by dependabot[bot] · Pull Request #346 · umts/strap

dependabot · 2026-07-07T06:34:32Z

Bumps the bundler group with 6 updates in the / directory:

Package	From	To
haml_lint	`0.73.0`	`0.75.0`
rubocop	`1.87.0`	`1.88.1`
auth-sanitizer	`0.2.1`	`0.2.2`
i18n	`1.14.8`	`1.15.2`
net-ssh	`7.3.2`	`7.3.3`
oauth2	`2.0.22`	`2.0.24`

Updates haml_lint from 0.73.0 to 0.75.0

Release notes

Sourced from haml_lint's releases.

0.75.0

What's Changed

Fix performance regression when using --parallel flag by @sds in sds/haml-lint#669

Full Changelog: sds/haml-lint@v0.74.0...v0.75.0

0.74.0

What's Changed

Add tsort to rubocop1.0 gemfile to fix deprecation warning by @mattmenefee in sds/haml-lint#642

Include CLI flags in the auto-gen-config heading by @mattmenefee in sds/haml-lint#640

Add auto-correction to HAML-level linters by @wilfison in sds/haml-lint#649

Keep file/line in the github reporter's log output by @wilfison in sds/haml-lint#657

Stop testing on Ruby 3.2 by @sds in sds/haml-lint#662

Fix false Lint/UselessAssignment for HTML-style (parens) attributes by @wilfison in sds/haml-lint#659

Fix LineLength not being disabled inside filter blocks by @wilfison in sds/haml-lint#658

Add UnescapedHtml linter by @wilfison in sds/haml-lint#656

Fix RuboCop lints reported on the wrong line on repeated runs by @wilfison in sds/haml-lint#655

Fix Layout/EmptyLineAfterGuardClause false positive by @wilfison in sds/haml-lint#654

Fix UnnecessaryStringOutput false positives by @wilfison in sds/haml-lint#651

Attempt fix JRuby parallel linting by @sds in sds/haml-lint#663

New Contributors

@mattmenefee made their first contribution in sds/haml-lint#642

Full Changelog: sds/haml-lint@v0.73.0...v0.74.0

Changelog

Sourced from haml_lint's changelog.

0.75.0

Fix performance regression when using --parallel flag

0.74.0

Add auto-correction (-a/--auto-correct and -A/--auto-correct-all) to Haml-level linters.

Safe corrections (run under both -a and -A): ClassAttributeWithStaticValue, ClassesBeforeIds, EmptyObjectReference, FinalNewline, ImplicitDiv, LeadingCommentSpace, RubyComments, SpaceBeforeScript, SpaceInsideHashAttributes, TagName, TrailingEmptyLines, TrailingWhitespace, and UnnecessaryInterpolation.

Unsafe corrections (run only under -A): ConsecutiveComments, EmptyScript, and MultilineScript

Keep the file, line, and linter name in the github reporter's log output

Fix RuboCop reporting a false Lint/UselessAssignment

Fix LineLength not being disabled by haml-lint:disable comments inside filter blocks such as :javascript and :css

Add UnescapedHtml linter to flag use of !=/!~/! unescaped HTML output

Fix RuboCop lints being reported on the wrong line when the same file is linted more than once

Fix Layout/EmptyLineAfterGuardClause false positive for a blank line at the end of a :ruby filter

Fix UnnecessaryStringOutput false positives

Fix cached path handling in parallelized runs under JRuby

Commits

1cb79ce Cut version 0.75.0 (#671)
c415765 Reuse selectors per parallel worker (#669)
e00b5b0 Fix RuboCop config warnings (#670)
a8a1752 Add Haml-Lint logo (#667)
cf30d4f Fix automated release process (#666)
149bf63 Cut version 0.74.0 (#665)
773fc54 Add automated gem release flow (#664)
c905b5a Attempt fix JRuby parallel linting (#663)
4da7cfb Fix UnnecessaryStringOutput false positives (#651)
e562f9c Fix Layout/EmptyLineAfterGuardClause false positive inside a :ruby filter...
Additional commits viewable in compare view

Updates rubocop from 1.87.0 to 1.88.1

Release notes

Sourced from rubocop's releases.

RuboCop v1.88.1

Bug fixes

#15408: Fix a crash for Bundler/GemComment with a non-literal gem option key. ([@bbatsov][])

#9571: Fix a crash for Layout/ClassStructure when a class body is a single safe-navigation call (e.g. test&.private_methods(def foo; end)). ([@bbatsov][])

#15413: Fix a crash for Gemspec/DevelopmentDependencies when AllowedGems is nil. ([@bbatsov][])

#15404: Fix a crash for Metrics/MethodLength with an anonymous define_method. ([@bbatsov][])

#15414: Fix a crash for Naming/InclusiveLanguage with nil or empty FlaggedTerms. ([@bbatsov][])

#15405: Fix a crash for Security/IoMethods with a non-string-literal argument. ([@bbatsov][])

#15330: Fix a crash for Style/EmptyStringInsideInterpolation with a modifier conditional. ([@bbatsov][])

#15351: Fix a crash for Style/OpenStructUse with a bare OpenStruct root node. ([@bbatsov][])

#15379: Fix a crash for Style/TrailingUnderscoreVariable when a nested destructuring group consists only of underscore variables. ([@bbatsov][])

#15412: Fix a false negative for Security/MarshalLoad with a proc argument. ([@bbatsov][])

#15386: Fix a false negative for Style/MethodDefParentheses with named rest arguments under EnforcedStyle: require_no_parentheses. ([@bbatsov][])

#15396: Fix a false negative for Style/MultilineMethodSignature where a signature that fits on one line was skipped because the multi-line source length was measured instead of the collapsed width. ([@bbatsov][])

#15386: Fix a false negative for Style/OptionalArguments with singleton methods. ([@bbatsov][])

#15383: Fix a false negative for Style/RedundantFilterChain with numbered-parameter blocks. ([@bbatsov][])

#15290: Fix a false negative for Lint/ToEnumArguments when a braced hash is passed to keyword parameters (e.g. to_enum(:m, { required: required })), which raises ArgumentError when the enumerator is used. ([@RedZapdos123][])

#11956: Fix a false positive for Naming/FileName when a class or module name contains multiple consecutive AllowedAcronyms. ([@camallen][])

#15324: Fix a false positive for Style/DirEmpty with a block. ([@bbatsov][])

#15326: Fix a false positive for Style/EmptyLiteral with numbered and it block parameters. ([@bbatsov][])

#15335: Fix a false positive for Style/EnvHome. ([@bbatsov][])

#15345: Fix a false positive for Style/InlineComment with rubocop:todo directives. ([@bbatsov][])

#15348: Fix a false positive for Style/MultilineIfThen. ([@bbatsov][])

#15383: Fix a false positive for Style/NumericPredicate when an allowed method encloses a numbered-parameter or it block. ([@bbatsov][])

#15389: Fix a false positive for Style/OptionHash when the options hash is forwarded with an explicit super. ([@bbatsov][])

#15350: Fix a false positive for Style/RedundantFormat with a lone format sequence. ([@bbatsov][])

#15374: Fix a false positive for Style/RedundantSelf with a rescue exception variable. ([@bbatsov][])

#15376: Fix a false positive for Style/Semicolon with a semicolon inside a string literal. ([@bbatsov][])

#15398: Fix an incorrect autocorrect for Layout/ConditionPosition that dropped a body statement sharing the condition's line via a semicolon. ([@bbatsov][])

#15399: Fix an incorrect autocorrect for Layout/EmptyComment that deleted a heredoc when removing an empty comment trailing its opener. ([@bbatsov][])

#15400: Fix an incorrect autocorrect for Layout/EmptyLineBetweenDefs that inserted a blank line inside a heredoc body when an endless method's body was a heredoc. ([@bbatsov][])

#15401: Fix an incorrect autocorrect for Layout/SpaceAroundOperators that turned **= and /= compound assignments into **//, dropping the assignment. ([@bbatsov][])

#15406: Fix an incorrect autocorrect for Naming/MemoizedInstanceVariableName. ([@bbatsov][])

#15411: Fix an incorrect autocorrect for Naming/RescuedExceptionsVariableName. ([@bbatsov][])

#15319: Fix an incorrect autocorrect for Style/DataInheritance with a brace block. ([@bbatsov][])

#15323: Fix an incorrect autocorrect for Style/EmptyCaseCondition as a yield/super argument. ([@bbatsov][])

#15323: Fix an incorrect autocorrect for Style/EmptyCaseCondition with low-precedence when values. ([@bbatsov][])

#15322: Fix an incorrect autocorrect for Style/EmptyClassDefinition with a namespaced constant. ([@bbatsov][])

#15336: Fix an incorrect autocorrect for Style/EmptyHeredoc. ([@bbatsov][])

#15332: Fix an incorrect autocorrect for Style/EvenOdd. ([@bbatsov][])

#15329: Fix an incorrect autocorrect for Style/ExactRegexpMatch with a single quote. ([@bbatsov][])

#15333: Fix an incorrect autocorrect for Style/FileNull. ([@bbatsov][])

#15334: Fix an incorrect autocorrect for Style/For. ([@bbatsov][])

#15331: Fix an incorrect autocorrect for Style/FormatString with a low-precedence argument. ([@bbatsov][])

#15331: Fix an incorrect autocorrect for Style/FormatString with a splat argument. ([@bbatsov][])

#15337: Fix an incorrect autocorrect for Style/HashSlice. ([@bbatsov][])

#15327: Fix an incorrect autocorrect for Style/HashSyntax with a multi-pair braceless return. ([@bbatsov][])

#15368: Fix an incorrect autocorrect for Style/IfWithSemicolon that changed semantics when the condition was an assignment, by parenthesizing it in the resulting ternary. ([@bbatsov][])

#15340: Fix an incorrect autocorrect for Style/KeywordArgumentsMerging with a block-pass argument. ([@bbatsov][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.88.1 (2026-07-01)

Bug fixes

#15408: Fix a crash for Bundler/GemComment with a non-literal gem option key. ([@bbatsov][])

#9571: Fix a crash for Layout/ClassStructure when a class body is a single safe-navigation call (e.g. test&.private_methods(def foo; end)). ([@bbatsov][])

#15413: Fix a crash for Gemspec/DevelopmentDependencies when AllowedGems is nil. ([@bbatsov][])

#15404: Fix a crash for Metrics/MethodLength with an anonymous define_method. ([@bbatsov][])

#15414: Fix a crash for Naming/InclusiveLanguage with nil or empty FlaggedTerms. ([@bbatsov][])

#15405: Fix a crash for Security/IoMethods with a non-string-literal argument. ([@bbatsov][])

#15330: Fix a crash for Style/EmptyStringInsideInterpolation with a modifier conditional. ([@bbatsov][])

#15351: Fix a crash for Style/OpenStructUse with a bare OpenStruct root node. ([@bbatsov][])

#15379: Fix a crash for Style/TrailingUnderscoreVariable when a nested destructuring group consists only of underscore variables. ([@bbatsov][])

#15412: Fix a false negative for Security/MarshalLoad with a proc argument. ([@bbatsov][])

#15386: Fix a false negative for Style/MethodDefParentheses with named rest arguments under EnforcedStyle: require_no_parentheses. ([@bbatsov][])

#15396: Fix a false negative for Style/MultilineMethodSignature where a signature that fits on one line was skipped because the multi-line source length was measured instead of the collapsed width. ([@bbatsov][])

#15386: Fix a false negative for Style/OptionalArguments with singleton methods. ([@bbatsov][])

#15383: Fix a false negative for Style/RedundantFilterChain with numbered-parameter blocks. ([@bbatsov][])

#15290: Fix a false negative for Lint/ToEnumArguments when a braced hash is passed to keyword parameters (e.g. to_enum(:m, { required: required })), which raises ArgumentError when the enumerator is used. ([@RedZapdos123][])

#11956: Fix a false positive for Naming/FileName when a class or module name contains multiple consecutive AllowedAcronyms. ([@camallen][])

#15324: Fix a false positive for Style/DirEmpty with a block. ([@bbatsov][])

#15326: Fix a false positive for Style/EmptyLiteral with numbered and it block parameters. ([@bbatsov][])

#15335: Fix a false positive for Style/EnvHome. ([@bbatsov][])

#15345: Fix a false positive for Style/InlineComment with rubocop:todo directives. ([@bbatsov][])

#15348: Fix a false positive for Style/MultilineIfThen. ([@bbatsov][])

#15383: Fix a false positive for Style/NumericPredicate when an allowed method encloses a numbered-parameter or it block. ([@bbatsov][])

#15389: Fix a false positive for Style/OptionHash when the options hash is forwarded with an explicit super. ([@bbatsov][])

#15350: Fix a false positive for Style/RedundantFormat with a lone format sequence. ([@bbatsov][])

#15374: Fix a false positive for Style/RedundantSelf with a rescue exception variable. ([@bbatsov][])

#15376: Fix a false positive for Style/Semicolon with a semicolon inside a string literal. ([@bbatsov][])

#15398: Fix an incorrect autocorrect for Layout/ConditionPosition that dropped a body statement sharing the condition's line via a semicolon. ([@bbatsov][])

#15399: Fix an incorrect autocorrect for Layout/EmptyComment that deleted a heredoc when removing an empty comment trailing its opener. ([@bbatsov][])

#15400: Fix an incorrect autocorrect for Layout/EmptyLineBetweenDefs that inserted a blank line inside a heredoc body when an endless method's body was a heredoc. ([@bbatsov][])

#15401: Fix an incorrect autocorrect for Layout/SpaceAroundOperators that turned **= and /= compound assignments into **//, dropping the assignment. ([@bbatsov][])

#15406: Fix an incorrect autocorrect for Naming/MemoizedInstanceVariableName. ([@bbatsov][])

#15411: Fix an incorrect autocorrect for Naming/RescuedExceptionsVariableName. ([@bbatsov][])

#15319: Fix an incorrect autocorrect for Style/DataInheritance with a brace block. ([@bbatsov][])

#15323: Fix an incorrect autocorrect for Style/EmptyCaseCondition as a yield/super argument. ([@bbatsov][])

#15323: Fix an incorrect autocorrect for Style/EmptyCaseCondition with low-precedence when values. ([@bbatsov][])

#15322: Fix an incorrect autocorrect for Style/EmptyClassDefinition with a namespaced constant. ([@bbatsov][])

#15336: Fix an incorrect autocorrect for Style/EmptyHeredoc. ([@bbatsov][])

#15332: Fix an incorrect autocorrect for Style/EvenOdd. ([@bbatsov][])

#15329: Fix an incorrect autocorrect for Style/ExactRegexpMatch with a single quote. ([@bbatsov][])

#15333: Fix an incorrect autocorrect for Style/FileNull. ([@bbatsov][])

#15334: Fix an incorrect autocorrect for Style/For. ([@bbatsov][])

#15331: Fix an incorrect autocorrect for Style/FormatString with a low-precedence argument. ([@bbatsov][])

#15331: Fix an incorrect autocorrect for Style/FormatString with a splat argument. ([@bbatsov][])

#15337: Fix an incorrect autocorrect for Style/HashSlice. ([@bbatsov][])

#15327: Fix an incorrect autocorrect for Style/HashSyntax with a multi-pair braceless return. ([@bbatsov][])

#15368: Fix an incorrect autocorrect for Style/IfWithSemicolon that changed semantics when the condition was an assignment, by parenthesizing it in the resulting ternary. ([@bbatsov][])

... (truncated)

Commits

d35b321 Cut 1.88.1
b4cb565 Update Changelog
3988056 Merge pull request #15352 from rubocop/fix-parallel-assignment-literal-escaping
3abe081 Merge pull request #15365 from rubocop/fix-redundant-line-continuation-eof
f391d5a Merge pull request #15394 from rubocop/fix-nil-lambda-proc-return
37b29a9 Merge pull request #15398 from rubocop/fix-condition-position-semicolon-body
839d492 Merge pull request #15399 from rubocop/fix-empty-comment-heredoc
2d191a4 Merge pull request #15412 from rubocop/fix-marshal-load-extra-args
1767e56 Merge pull request #15406 from rubocop/fix-memoized-ivar-operator-method
c923d29 Merge pull request #15368 from rubocop/fix-if-with-semicolon-assignment
Additional commits viewable in compare view

Updates auth-sanitizer from 0.2.1 to 0.2.2

Release notes

Sourced from auth-sanitizer's releases.

v0.2.2

0.2.2 - 2026-06-18

TAG: v0.2.2

COVERAGE: 100.00% -- 145/145 lines in 6 files

BRANCH COVERAGE: 100.00% -- 28/28 branches in 6 files

84.62% documented

Changed

Documented the released anonymous_loader gem as the preferred reusable helper for zero-auth-sanitizer-namespace loading.

Fixed

Documented the $LOAD_PATH fallback needed by isolated loader consumers when Bundler standalone setup provides auth_sanitizer/loader.rb without a matching Gem.loaded_specs or GEM_PATH entry.

Official Discord 👉️

Many paths lead to being a sponsor or a backer of this project. Are you on such a path?

Changelog

Sourced from auth-sanitizer's changelog.

[0.2.2] - 2026-06-18

TAG: [v0.2.2][0.2.2t]

COVERAGE: 100.00% -- 145/145 lines in 6 files

BRANCH COVERAGE: 100.00% -- 28/28 branches in 6 files

84.62% documented

Changed

Documented the released anonymous_loader gem as the preferred reusable helper for zero-auth-sanitizer-namespace loading.

Fixed

Documented the $LOAD_PATH fallback needed by isolated loader consumers when Bundler standalone setup provides auth_sanitizer/loader.rb without a matching Gem.loaded_specs or GEM_PATH entry.

Commits

b43c584 🔖 Prepare release v0.2.2
ce05777 📝 Document anonymous_loader usage
29371b1 📝 Document standalone loader fallback
bc31e2e 💸 Thanks 🙏 to our new backers 🎒 and subscribers 📜
66d050b 🔒️ Checksums for v0.2.1
See full diff in compare view

Updates i18n from 1.14.8 to 1.15.2

Release notes

Sourced from i18n's releases.

v1.15.2

What's Changed

Restore Ruby 3.1 support by @koic in ruby-i18n/i18n#739

Full Changelog: ruby-i18n/i18n@v1.15.1...v1.15.2

v1.15.1

What's Changed

Fix feature fiber storage by @YashaVinter in ruby-i18n/i18n#736

Ignore Ruby 3.2 + Rails main from the matrix by @radar in ruby-i18n/i18n#737

New Contributors

@YashaVinter made their first contribution in ruby-i18n/i18n#736

Full Changelog: ruby-i18n/i18n@v1.15.0...v1.15.1

v1.15.0

What's Changed

Make lazy loading of I18n translations thread safe ( part 2 ) by @chaadow in ruby-i18n/i18n#729

Add support to not replace non-ASCII chars not in map by @sobrinho in ruby-i18n/i18n#720

Add transliteration for O with ogonek by @radar in ruby-i18n/i18n#733

CI: exclude Ruby 3.2 from rails-main matrix by @radar in ruby-i18n/i18n#734

Fiber-aware I18n config storage by @lee266 in ruby-i18n/i18n#731

New Contributors

@chaadow made their first contribution in ruby-i18n/i18n#729

@sobrinho made their first contribution in ruby-i18n/i18n#720

Full Changelog: ruby-i18n/i18n@v1.14.8...v1.15.0

Commits

8beba78 Bump to 1.15.2
d6964f2 Merge pull request #739 from koic/restore_ruby_3_1_support
e4c806e Restore Ruby 3.1 support
02841cb Bump to 1.15.1
a56484d Merge pull request #737 from ruby-i18n/ignore-ruby32-rails-main
52deaba Ignore Ruby 3.2 + Rails main from the matrix
94891ca Merge pull request #736 from YashaVinter/fix-feature-fiber-storage
5a7913e Test against Ruby 3.2
cd337a8 fix ruby-i18n/i18n#735 NoMethodError: undefined met...
78fa20a Bump to 1.15.0
Additional commits viewable in compare view

Updates language_server-protocol from 3.17.0.5 to 3.17.0.6

Changelog

Sourced from language_server-protocol's changelog.

3.17.0.6

Regenerate protocol files with the Ruby generator (#141)

Add missing LSP 3.17 interfaces and constants

Include RBS signature files in the gem package

Add dependent gem test workflow (#142)

Commits

8608d51 Setup trusted publishing
d56025d Release 3.17.0.6
a21a339 Merge pull request #141 from mtsmfm/mtsmfm/fix-generate-file-rb
42d1aa6 Regenerate protocol files
eb8d9d2 Remove Node generator stack
ba05d93 Fix Ruby protocol generator
70d4fee Merge pull request #142 from mtsmfm/mtsmfm/downstream-test
e33cb4d Add dependent test workflow
1c56613 Merge pull request #137 from mtsmfm/mtsmfm/tweak-gemfile
4a063a3 Do not specify activesupport version
Additional commits viewable in compare view

Updates net-ssh from 7.3.2 to 7.3.3

Changelog

Sourced from net-ssh's changelog.

=== 7.3.3

Support .pub file as IdentityFile to filter/prioritize agent keys (1Password SSH agent use case) #942

Fix cert signing regression when using a .pub companion file without an agent #1006

Fix unreadable .pub IdentityFile silently skipped instead of raising #1006

Allow multiple UserKnownHostsFile entries (space-separated, matching ssh_config(5)) #979

Stop mutating ENV['HOME'] at require time #997

Fix ED25519 loader with frozen string literals #995

Commits

b991e88 Update CHANGES.txt for 7.3.3
e7c4afc bump version
9698668 Fix rubocop offenses introduced by #979 and #951
4be06b0 Merge pull request #1006 from net-ssh/pub-key-identity
81b2e89 Fix rubocop offenses: hash brace spacing and empty block comments
60490df Fix cert signing regression and unreadable .pub file error handling
11243f2 Merge pull request #951 from usiegj00/patch-1
491660f Merge pull request #979 from andrewdotn/main
6f01d90 Merge pull request #995 from G-Rath/patch-1
1aa9ea6 Merge pull request #997 from net-ssh/fix/remove-env-home-mutation
Additional commits viewable in compare view

Updates oauth2 from 2.0.22 to 2.0.24

Release notes

Sourced from oauth2's releases.

v2.0.24

2.0.24 - 2026-06-18

TAG: v2.0.24

COVERAGE: 100.00% -- 558/558 lines in 15 files

BRANCH COVERAGE: 97.89% -- 186/190 branches in 15 files

88.35% documented

Changed

Raised the anonymous_loader runtime dependency floor to >= 0.1.1.

Raised the auth-sanitizer runtime dependency floor to >= 0.2.2 and switched isolated sanitizer loading to the released anonymous_loader gem, including local workspace wiring for the new runtime dependency.

Fixed

Fixed isolated auth-sanitizer loading when Bundler standalone setup makes auth_sanitizer/loader.rb available on $LOAD_PATH without adding auth-sanitizer to Gem.loaded_specs or GEM_PATH.

Official Discord 👉️ [![Live Chat on Discord][✉️discord-invite-img]][✉️discord-invite]

Many paths lead to being a sponsor or a backer of this project. Are you on such a path?

... (truncated)

Changelog

Sourced from oauth2's changelog.

[2.0.24] - 2026-06-18

TAG: [v2.0.24][2.0.24t]

COVERAGE: 100.00% -- 558/558 lines in 15 files

BRANCH COVERAGE: 97.89% -- 186/190 branches in 15 files

88.35% documented

Changed

Raised the anonymous_loader runtime dependency floor to >= 0.1.1.

Raised the auth-sanitizer runtime dependency floor to >= 0.2.2 and switched isolated sanitizer loading to the released anonymous_loader gem, including local workspace wiring for the new runtime dependency.

Fixed

Fixed isolated auth-sanitizer loading when Bundler standalone setup makes auth_sanitizer/loader.rb available on $LOAD_PATH without adding auth-sanitizer to Gem.loaded_specs or GEM_PATH.

[2.0.23] - 2026-06-13

TAG: [v2.0.23][2.0.23t]

COVERAGE: 100.00% -- 562/562 lines in 15 files

BRANCH COVERAGE: 97.89% -- 186/190 branches in 15 files

88.35% documented

Changed

Upgraded to snaky_hash v2.0.6 by @pboling

Refreshed generated GHA workflow action SHA pins by @pboling

Fixed

Addressed Reek code-quality checks with targeted cleanup and documented compatibility exclusions by @pboling

Fixed deprecation warning from MultiXML by @robzolkos

Fixed head appraisal dependency conflicts and Ruby 2.4 protocol-relative redirect handling by @pboling

Commits

4f239dc 🧪 Fix head and old TruffleRuby CI appraisals
de0636f 📝 Prune internal changelog entries
2f643a5 🧪 Isolate auth sanitizer subprocess environment
21deed4 📝 Update CHANGELOG.md
844f143 🧪 Disable RubyGems prelude in auth sanitizer load spec
7064cc5 📝 Update CHANGELOG.md
e0858bd 🧪 Isolate auth sanitizer load path spec from Bundler
7032b58 🔖 Prepare release v2.0.24
bf06b5f 🧩 Regenerate anonymous loader template output
f46551c ⬆️ Raise anonymous_loader floor to 0.1.1
Additional commits viewable in compare view

Updates rubocop-ast from 1.49.1 to 1.50.0

Release notes

Sourced from rubocop-ast's releases.

RuboCop AST v1.50.0

Bug fixes

#412: Fix Node#argument? returning true for receivers that are structurally equal to an argument (e.g. the receiver in foo.bar(foo)). (@bbatsov)

#401: Avoid intermediate array allocations in HashNode#each_key/each_value. (@bbatsov)

#409: Fix Node#chained? and MethodDispatchNode#block_literal? returning true for nodes that are merely structurally equal to the receiver or send node (e.g. the argument in foo.bar(foo)). (@bbatsov)

#407: Fix the blockless form of the deprecated each_when, each_in_pattern, each_condition, and each_branch methods, which returned an unusable Enumerator. (@bbatsov)

#401: Fix force_encoding being a no-op for frozen string inputs. (@bbatsov)

#408: Fix ProcessedSource#preceding_line returning the last line of the file for tokens on the first line. (@bbatsov)

Changes

#411: Speed up filtered node traversals (each_descendant(:send) etc.) by not allocating an array per visited node, and add the non-splatting Node#type_in? predicate. (@bbatsov)

#404: Improve parser_prism performance by building tokens only when they are first accessed. (@bbatsov)

#408: Memoize ProcessedSource#checksum and skip the token sort when the tokens are already in order. (@bbatsov)

#410: Reduce allocations in keyword? and the method-name predicates (predicate_method?, bang_method?, etc.). (@bbatsov)

#405: Use Prism by default when analyzing Ruby 3.3 code. (@bbatsov)

Changelog

Sourced from rubocop-ast's changelog.

1.50.0 (2026-07-04)

Bug fixes

#412: Fix Node#argument? returning true for receivers that are structurally equal to an argument (e.g. the receiver in foo.bar(foo)). ([@bbatsov][])

#401: Avoid intermediate array allocations in HashNode#each_key/each_value. ([@bbatsov][])

#409: Fix Node#chained? and MethodDispatchNode#block_literal? returning true for nodes that are merely structurally equal to the receiver or send node (e.g. the argument in foo.bar(foo)). ([@bbatsov][])

#407: Fix the blockless form of the deprecated each_when, each_in_pattern, each_condition, and each_branch methods, which returned an unusable Enumerator. ([<...
Description has been truncated

Bumps the bundler group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [haml_lint](https://github.com/sds/haml-lint) | `0.73.0` | `0.75.0` | | [rubocop](https://github.com/rubocop/rubocop) | `1.87.0` | `1.88.1` | | [auth-sanitizer](https://github.com/ruby-oauth/auth-sanitizer) | `0.2.1` | `0.2.2` | | [i18n](https://github.com/ruby-i18n/i18n) | `1.14.8` | `1.15.2` | | [net-ssh](https://github.com/net-ssh/net-ssh) | `7.3.2` | `7.3.3` | | [oauth2](https://github.com/ruby-oauth/oauth2) | `2.0.22` | `2.0.24` | Updates `haml_lint` from 0.73.0 to 0.75.0 - [Release notes](https://github.com/sds/haml-lint/releases) - [Changelog](https://github.com/sds/haml-lint/blob/main/CHANGELOG.md) - [Commits](sds/haml-lint@v0.73.0...v0.75.0) Updates `rubocop` from 1.87.0 to 1.88.1 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.87.0...v1.88.1) Updates `auth-sanitizer` from 0.2.1 to 0.2.2 - [Release notes](https://github.com/ruby-oauth/auth-sanitizer/releases) - [Changelog](https://github.com/ruby-oauth/auth-sanitizer/blob/main/CHANGELOG.md) - [Commits](ruby-oauth/auth-sanitizer@v0.2.1...v0.2.2) Updates `i18n` from 1.14.8 to 1.15.2 - [Release notes](https://github.com/ruby-i18n/i18n/releases) - [Changelog](https://github.com/ruby-i18n/i18n/blob/master/CHANGELOG.md) - [Commits](ruby-i18n/i18n@v1.14.8...v1.15.2) Updates `language_server-protocol` from 3.17.0.5 to 3.17.0.6 - [Changelog](https://github.com/mtsmfm/language_server-protocol-ruby/blob/main/CHANGELOG.md) - [Commits](mtsmfm/language_server-protocol-ruby@v3.17.0.5...v3.17.0.6) Updates `net-ssh` from 7.3.2 to 7.3.3 - [Changelog](https://github.com/net-ssh/net-ssh/blob/master/CHANGES.txt) - [Commits](net-ssh/net-ssh@v7.3.2...v7.3.3) Updates `oauth2` from 2.0.22 to 2.0.24 - [Release notes](https://github.com/ruby-oauth/oauth2/releases) - [Changelog](https://github.com/ruby-oauth/oauth2/blob/main/CHANGELOG.md) - [Commits](ruby-oauth/oauth2@v2.0.22...v2.0.24) Updates `rubocop-ast` from 1.49.1 to 1.50.0 - [Release notes](https://github.com/rubocop/rubocop-ast/releases) - [Changelog](https://github.com/rubocop/rubocop-ast/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop-ast@v1.49.1...v1.50.0) Updates `snaky_hash` from 2.0.5 to 2.0.6 - [Release notes](https://github.com/ruby-oauth/snaky_hash/releases) - [Changelog](https://github.com/ruby-oauth/snaky_hash/blob/main/CHANGELOG.md) - [Commits](ruby-oauth/snaky_hash@v2.0.5...v2.0.6) Updates `tilt` from 2.7.0 to 2.8.0 - [Changelog](https://github.com/jeremyevans/tilt/blob/master/CHANGELOG.md) - [Commits](jeremyevans/tilt@v2.7.0...v2.8.0) Updates `version_gem` from 1.1.11 to 1.1.13 - [Release notes](https://github.com/ruby-oauth/version_gem/releases) - [Changelog](https://github.com/ruby-oauth/version_gem/blob/main/CHANGELOG.md) - [Commits](ruby-oauth/version_gem@v1.1.11...v1.1.13) --- updated-dependencies: - dependency-name: haml_lint dependency-version: 0.75.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler - dependency-name: rubocop dependency-version: 1.88.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler - dependency-name: auth-sanitizer dependency-version: 0.2.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: bundler - dependency-name: i18n dependency-version: 1.15.2 dependency-type: indirect update-type: version-update:semver-minor dependency-group: bundler - dependency-name: language_server-protocol dependency-version: 3.17.0.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: bundler - dependency-name: net-ssh dependency-version: 7.3.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: bundler - dependency-name: oauth2 dependency-version: 2.0.24 dependency-type: indirect update-type: version-update:semver-patch dependency-group: bundler - dependency-name: rubocop-ast dependency-version: 1.50.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: bundler - dependency-name: snaky_hash dependency-version: 2.0.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: bundler - dependency-name: tilt dependency-version: 2.8.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: bundler - dependency-name: version_gem dependency-version: 1.1.13 dependency-type: indirect update-type: version-update:semver-patch dependency-group: bundler ... Signed-off-by: dependabot[bot] <support@github.com>

This is just the result of rendering the content, which is itself escaped.

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jul 7, 2026

Permit "unescaped" yield

dbb4297

This is just the result of rendering the content, which is itself escaped.

werebus self-assigned this Jul 7, 2026

werebus requested a review from benmelz July 7, 2026 15:55

benmelz approved these changes Jul 7, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the bundler group across 1 directory with 11 updates#346

build(deps): bump the bundler group across 1 directory with 11 updates#346
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/bundler/bundler-44c1d9cc6d

dependabot Bot commented on behalf of github Jul 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 7, 2026

0.75.0

What's Changed

0.74.0

What's Changed

New Contributors

0.75.0

0.74.0

RuboCop v1.88.1

Bug fixes

1.88.1 (2026-07-01)

Bug fixes

v0.2.2

0.2.2 - 2026-06-18

Changed

Fixed

[0.2.2] - 2026-06-18

Changed

Fixed

v1.15.2

What's Changed

v1.15.1

What's Changed

New Contributors

v1.15.0

What's Changed

New Contributors

3.17.0.6

v2.0.24

2.0.24 - 2026-06-18

Changed

Fixed

[2.0.24] - 2026-06-18

Changed

Fixed

[2.0.23] - 2026-06-13

Changed

Fixed

RuboCop AST v1.50.0

Bug fixes

Changes

1.50.0 (2026-07-04)

Bug fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants