Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 28, 2025

Bumps the ruby-deps group with 7 updates in the / directory:

Package From To
pundit 2.5.1 2.5.2
icalendar 2.11.2 2.12.0
commonmarker 2.3.2 2.4.0
faraday 2.13.4 2.14.0
turbo-rails 2.0.16 2.0.17
rubocop 1.80.2 1.81.1
rubocop-rails 2.33.3 2.33.4

Updates pundit from 2.5.1 to 2.5.2

Changelog

Sourced from pundit's changelog.

2.5.2 (2025-09-24)

Fixed

  • Added config/rubocop-rspec.yml back from accidentally being excluded #866
Commits

Updates icalendar from 2.11.2 to 2.12.0

Changelog

Sourced from icalendar's changelog.

2.12.0 - 2025-09-26

  • Support timezone lookup by Windows names - Ronak Gothi
Commits
  • 57eda75 Bump version to 2.12.0
  • a73e0bf Merge pull request #314 from ronakjain90/support-windows-tzid
  • 4513646 make WindowsToIana be of higher precedence.
  • b5ba2e2 Support tzid in Windows format.
  • See full diff in compare view

Updates commonmarker from 2.3.2 to 2.4.0

Release notes

Sourced from commonmarker's releases.

v2.4.0

What's Changed

Full Changelog: gjtorikian/commonmarker@v2.3.2...v2.4.0

Changelog

Sourced from commonmarker's changelog.

[v2.4.0] - 15-09-2025

What's Changed

Full Changelog: gjtorikian/commonmarker@v2.3.2...v2.4.0

Commits
  • 537eea7 Merge pull request #393 from gjtorikian/release/v2.4.0
  • 464a593 [skip test] update changelog
  • 4c3f2e3 Merge pull request #392 from gjtorikian/bumpalump
  • efea216 💎 2.4.0
  • 2dce12a fix deprecated call sites
  • 81ed793 update dependencies
  • a6cac9d Merge pull request #391 from gjtorikian/dependabot/cargo/comrak-0.41.1
  • c75e42c Bump comrak from 0.41.0 to 0.41.1
  • 93de864 Merge pull request #389 from gjtorikian/dependabot/cargo/magnus-0.8.1
  • 3cc0295 Bump magnus from 0.8.0 to 0.8.1
  • Additional commits viewable in compare view

Updates faraday from 2.13.4 to 2.14.0

Release notes

Sourced from faraday's releases.

v2.14.0

What's Changed

New features ✨

Fixes 🐞

Misc/Docs 📄

New Contributors

Full Changelog: lostisland/faraday@v2.13.4...v2.14.0

Commits

Updates turbo-rails from 2.0.16 to 2.0.17

Release notes

Sourced from turbo-rails's releases.

v2.0.17

What's Changed

See https://github.com/hotwired/turbo/releases/tag/v8.0.18

New Contributors

Commits

Updates rubocop from 1.80.2 to 1.81.1

Release notes

Sourced from rubocop's releases.

RuboCop v1.81.1

Bug fixes

  • #14563: Fix incorrect autocorrection for Lint/DeprecatedOpenSSLConstant when Cipher appears twice. (@​koic)

Changes

  • #14565: Allow multiline method chain for Style/NumberedParameters and Style/ItBlockParameter with EnforcedStyle: allow_single_line when the block itself is on a single line. (@​earlopain)

RuboCop v1.81.0

New features

Bug fixes

  • #14560: Fix an error for Style/NilComparison cop when using the var.==(nil) and var.===(nil) syntax. (@​viralpraxis)
  • #14535: Fix autocorrect for Style/ExplicitBlockArgument when there are two methods that share the same implementation. (@​earlopain)
  • #14527: Fix false negatives for Style/NumberedParameters and Style/ItBlockParameter when using multiline method chain with EnforcedStyle: allow_single_line. (@​koic)
  • #14522: Fix false negatives for Layout/MultilineOperationIndentation when using indented code on LHS of equality operator in modifier method definition. (@​koic)
  • #14496: Fix false negatives for Layout/EmptyLineBetweenDefs for AllowAdjacentOneLineDefs: false and DefLikeMacros that take no block. (@​earlopain)
  • #14553: Fix false positives when EnforcedStyle: allowed_in_returns and !! appears across multiple lines in return position. (@​koic)
  • #14557: Fix false positives for Style/RedundantParentheses when parentheses are used around a one-line rescue expression as a condition. (@​koic)
  • #14525: Fix false positives for Style/RedundantRegexpEscape when an escaped variable sigil follows # (e.g., /#\@foo/, /#\@@bar/, /#\$baz/). (@​koic)
  • #14529: Fix false negative in Layout/RescueEnsureAlignment with a block whose send node is split over multiple lines. (@​dvandersluis)
  • #14528: Fix Style/RedundantFormat when the format string has a variable width that isn't given as a literal value. (@​dvandersluis)
  • #14541: Fix gemspec parsing error when ParserEngine: parser_prism is configured in a base config file. ([@​sudoremo][])
  • #14544: Fix an incorrect autocorrect for Lint/Void when using a return value in assignment method definition. (@​koic)
  • #14543: Fix an incorrect autocorrect for Style/RedundantRegexpArgument when using escaped single quote character. (@​koic)
  • #14540: Fix an incorrect autocorrect for Style/UnlessElse when using unless with then. (@​koic)
  • #14507: Fix the built-in Ruby LSP add-on not restarting when config files (.rubocop.yml, .rubocop_todo.yml) change. (@​earlopain)
  • #14514: Fix the built-in Ruby LSP add-on not respecting .rubocop config file. (@​earlopain)
  • #14508: Fix the built-in Ruby LSP add-on getting in an irrecoverable state when the config is invalid on startup. (@​earlopain)
  • #14534: Prevent Layout/LineLength autocorrection from splitting a block if its receiver contains a heredoc. (@​dvandersluis)
  • #14497: Fix a false positive for Lint/ShadowedArgument when assigning inside a rescue block. (@​earlopain)

Changes

  • #14492: Add support for LSP positionEncoding utf-8 and utf-32. ([@​tmtm][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.81.1 (2025-09-26)

Bug fixes

  • #14563: Fix incorrect autocorrection for Lint/DeprecatedOpenSSLConstant when Cipher appears twice. ([@​koic][])

Changes

  • #14565: Allow multiline method chain for Style/NumberedParameters and Style/ItBlockParameter with EnforcedStyle: allow_single_line when the block itself is on a single line. ([@​earlopain][])

1.81.0 (2025-09-25)

New features

  • #14512: Add Style/ArrayIntersectWithSingleElement cop. ([@​r7kamura][])
  • #10971: Support EnforcedStyleForMultiline: diff_comma in Style/TrailingCommaInArguments. ([@​akouryy][])

Bug fixes

  • #14560: Fix an error for Style/NilComparison cop when using the var.==(nil) and var.===(nil) syntax. ([@​viralpraxis][])
  • #14535: Fix autocorrect for Style/ExplicitBlockArgument when there are two methods that share the same implementation. ([@​earlopain][])
  • #14527: Fix false negatives for Style/NumberedParameters and Style/ItBlockParameter when using multiline method chain with EnforcedStyle: allow_single_line. ([@​koic][])
  • #14522: Fix false negatives for Layout/MultilineOperationIndentation when using indented code on LHS of equality operator in modifier method definition. ([@​koic][])
  • #14496: Fix false negatives for Layout/EmptyLineBetweenDefs for AllowAdjacentOneLineDefs: false and DefLikeMacros that take no block. ([@​earlopain][])
  • #14553: Fix false positives when EnforcedStyle: allowed_in_returns and !! appears across multiple lines in return position. ([@​koic][])
  • #14557: Fix false positives for Style/RedundantParentheses when parentheses are used around a one-line rescue expression as a condition. ([@​koic][])
  • #14525: Fix false positives for Style/RedundantRegexpEscape when an escaped variable sigil follows # (e.g., /#\@foo/, /#\@@bar/, /#\$baz/). ([@​koic][])
  • #14529: Fix false negative in Layout/RescueEnsureAlignment with a block whose send node is split over multiple lines. ([@​dvandersluis][])
  • #14528: Fix Style/RedundantFormat when the format string has a variable width that isn't given as a literal value. ([@​dvandersluis][])
  • #14541: Fix gemspec parsing error when ParserEngine: parser_prism is configured in a base config file. ([@​sudoremo][])
  • #14544: Fix an incorrect autocorrect for Lint/Void when using a return value in assignment method definition. ([@​koic][])
  • #14543: Fix an incorrect autocorrect for Style/RedundantRegexpArgument when using escaped single quote character. ([@​koic][])
  • #14540: Fix an incorrect autocorrect for Style/UnlessElse when using unless with then. ([@​koic][])
  • #14507: Fix the built-in Ruby LSP add-on not restarting when config files (.rubocop.yml, .rubocop_todo.yml) change. ([@​earlopain][])
  • #14514: Fix the built-in Ruby LSP add-on not respecting .rubocop config file. ([@​earlopain][])
  • #14508: Fix the built-in Ruby LSP add-on getting in an irrecoverable state when the config is invalid on startup. ([@​earlopain][])
  • #14534: Prevent Layout/LineLength autocorrection from splitting a block if its receiver contains a heredoc. ([@​dvandersluis][])
  • #14497: Fix a false positive for Lint/ShadowedArgument when assigning inside a rescue block. ([@​earlopain][])

Changes

  • #14492: Add support for LSP positionEncoding utf-8 and utf-32. ([@​tmtm][])
Commits
  • db58831 Cut 1.81.1
  • 2797207 Update Changelog
  • 6b2f047 [Fix #14563] Fix an incorrect autocorrect for Lint/DeprecatedOpenSSLConstant
  • 8260fc1 Allow implicit block args when the block itself is on one line only
  • c1400e7 [Docs] Document --editor-mode in a comment`
  • d3ef76a Reset the docs version
  • 386bf10 Cut 1.81
  • 148250d Update Changelog
  • face244 Fix an error for Style/NilComparison cop
  • d8c1d4c Fix an error for InternalAffairsOnSendWithoutOnCSend with alias_method an...
  • Additional commits viewable in compare view

Updates rubocop-rails from 2.33.3 to 2.33.4

Release notes

Sourced from rubocop-rails's releases.

RuboCop Rails v2.33.4

Bug fixes

  • #1530: Fix an incorrect autocorrect for Rails/FindByOrAssignmentMemoization when using endless method definition. (@​koic)
  • #1522: Fix an error for Rails/FindBy when where takes a block. (@​earlopain)
  • #1182: Fix a false positive for Rails/ActionControllerFlashBeforeRender when flash is called in a block. (@​5hun-s)
Changelog

Sourced from rubocop-rails's changelog.

2.33.4 (2025-09-27)

Bug fixes

  • #1530: Fix an incorrect autocorrect for Rails/FindByOrAssignmentMemoization when using endless method definition. ([@​koic][])
  • #1522: Fix an error for Rails/FindBy when where takes a block. ([@​earlopain][])
  • #1182: Fix a false positive for Rails/ActionControllerFlashBeforeRender when flash is called in a block. ([@​5hun-s][])
Commits
  • b2ccb82 Cut 2.33.4
  • 0fb1259 Update Changelog
  • 24faad2 Merge pull request #1533 from viralpraxis/load-simplecov-before-lib-for-bette...
  • 28caddb Load simplecov before loading lib for better coverage results
  • 60dd19b Merge pull request #1528 from 5hun-s/fix_false_positive_for_rails_action_cont...
  • 87e5bbf [Fix rubocop#1182] Fix a false positive for Rails/ActionControllerFlashBefore...
  • ec292a2 Fix a build error when using Ruby 2.7
  • 17371a8 Merge pull request #1531 from koic/fix_an_incorrect_autocorrect_for_rails_fin...
  • 2b091eb Fix an incorrect autocorrect for Rails/FindByOrAssignmentMemoization
  • dd73491 Merge pull request #1522 from Earlopain/find-by-where-block
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ruby-deps group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pundit](https://github.com/varvet/pundit) | `2.5.1` | `2.5.2` |
| [icalendar](https://github.com/icalendar/icalendar) | `2.11.2` | `2.12.0` |
| [commonmarker](https://github.com/gjtorikian/commonmarker) | `2.3.2` | `2.4.0` |
| [faraday](https://github.com/lostisland/faraday) | `2.13.4` | `2.14.0` |
| [turbo-rails](https://github.com/hotwired/turbo-rails) | `2.0.16` | `2.0.17` |
| [rubocop](https://github.com/rubocop/rubocop) | `1.80.2` | `1.81.1` |
| [rubocop-rails](https://github.com/rubocop/rubocop-rails) | `2.33.3` | `2.33.4` |



Updates `pundit` from 2.5.1 to 2.5.2
- [Changelog](https://github.com/varvet/pundit/blob/main/CHANGELOG.md)
- [Commits](varvet/pundit@v2.5.1...v2.5.2)

Updates `icalendar` from 2.11.2 to 2.12.0
- [Changelog](https://github.com/icalendar/icalendar/blob/main/CHANGELOG.md)
- [Commits](icalendar/icalendar@v2.11.2...v2.12.0)

Updates `commonmarker` from 2.3.2 to 2.4.0
- [Release notes](https://github.com/gjtorikian/commonmarker/releases)
- [Changelog](https://github.com/gjtorikian/commonmarker/blob/main/CHANGELOG.md)
- [Commits](gjtorikian/commonmarker@v2.3.2...v2.4.0)

Updates `faraday` from 2.13.4 to 2.14.0
- [Release notes](https://github.com/lostisland/faraday/releases)
- [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md)
- [Commits](lostisland/faraday@v2.13.4...v2.14.0)

Updates `turbo-rails` from 2.0.16 to 2.0.17
- [Release notes](https://github.com/hotwired/turbo-rails/releases)
- [Commits](hotwired/turbo-rails@v2.0.16...v2.0.17)

Updates `rubocop` from 1.80.2 to 1.81.1
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.80.2...v1.81.1)

Updates `rubocop-rails` from 2.33.3 to 2.33.4
- [Release notes](https://github.com/rubocop/rubocop-rails/releases)
- [Changelog](https://github.com/rubocop/rubocop-rails/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop-rails@v2.33.3...v2.33.4)

---
updated-dependencies:
- dependency-name: pundit
  dependency-version: 2.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: icalendar
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: commonmarker
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: faraday
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: turbo-rails
  dependency-version: 2.0.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: rubocop
  dependency-version: 1.81.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: rubocop-rails
  dependency-version: 2.33.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies ruby Pull requests that update Ruby code labels Sep 28, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 6, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Oct 6, 2025
@dependabot dependabot bot deleted the dependabot/bundler/ruby-deps-1872142761 branch October 6, 2025 04:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants