Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 6, 2025

Bumps the ruby-deps group with 9 updates in the / directory:

Package From To
omniauth 2.1.3 2.1.4
pundit 2.5.1 2.5.2
icalendar 2.11.2 2.12.0
commonmarker 2.3.2 2.4.1
faraday 2.13.4 2.14.0
turbo-rails 2.0.16 2.0.17
rubocop 1.80.2 1.81.1
rubocop-rails 2.33.3 2.33.4
selenium-webdriver 4.35.0 4.36.0

Updates omniauth from 2.1.3 to 2.1.4

Release notes

Sourced from omniauth's releases.

v2.1.4

What's Changed

Full Changelog: omniauth/omniauth@v2.1.3...v2.1.4

You may now configure an after_request_phase callback on your omniauth builder instance. This callback will be run after the request phase before returning the request result.

Commits

Updates pundit from 2.5.1 to 2.5.2

Changelog

Sourced from pundit's changelog.

2.5.2 (2025-09-24)

Fixed

  • Added config/rubocop-rspec.yml back from accidentally being excluded #866
Commits

Updates icalendar from 2.11.2 to 2.12.0

Changelog

Sourced from icalendar's changelog.

2.12.0 - 2025-09-26

  • Support timezone lookup by Windows names - Ronak Gothi
Commits
  • 57eda75 Bump version to 2.12.0
  • a73e0bf Merge pull request #314 from ronakjain90/support-windows-tzid
  • 4513646 make WindowsToIana be of higher precedence.
  • b5ba2e2 Support tzid in Windows format.
  • See full diff in compare view

Updates commonmarker from 2.3.2 to 2.4.1

Release notes

Sourced from commonmarker's releases.

v2.4.1

What's Changed

Full Changelog: gjtorikian/commonmarker@v2.4.0...v2.4.1

v2.4.0

What's Changed

Full Changelog: gjtorikian/commonmarker@v2.3.2...v2.4.0

Changelog

Sourced from commonmarker's changelog.

[v2.4.1] - 29-09-2025

What's Changed

Full Changelog: gjtorikian/commonmarker@v2.4.0...v2.4.1

[v2.4.0] - 15-09-2025

What's Changed

Full Changelog: gjtorikian/commonmarker@v2.3.2...v2.4.0

Commits
  • c8e4490 Merge pull request #398 from gjtorikian/release/v2.4.1
  • d9d9d64 [skip test] update changelog
  • a99e4d1 Merge pull request #397 from gjtorikian/push-zquoqzprqtzp
  • 558f1f0 💎 2.4.1
  • 9205d9f Merge pull request #396 from gjtorikian/push-lrylvlllknqn
  • 6222dae Bump comrak from 0.42.0 to 0.43.0
  • 8bfa616 Merge pull request #395 from gjtorikian/dependabot/cargo/comrak-0.42.0
  • 9e29923 Bump comrak from 0.41.1 to 0.42.0
  • 537eea7 Merge pull request #393 from gjtorikian/release/v2.4.0
  • 464a593 [skip test] update changelog
  • Additional commits viewable in compare view

Updates faraday from 2.13.4 to 2.14.0

Release notes

Sourced from faraday's releases.

v2.14.0

What's Changed

New features ✨

Fixes 🐞

Misc/Docs 📄

New Contributors

Full Changelog: lostisland/faraday@v2.13.4...v2.14.0

Commits

Updates turbo-rails from 2.0.16 to 2.0.17

Release notes

Sourced from turbo-rails's releases.

v2.0.17

What's Changed

See https://github.com/hotwired/turbo/releases/tag/v8.0.18

New Contributors

Commits

Updates rubocop from 1.80.2 to 1.81.1

Release notes

Sourced from rubocop's releases.

RuboCop v1.81.1

Bug fixes

  • #14563: Fix incorrect autocorrection for Lint/DeprecatedOpenSSLConstant when Cipher appears twice. (@​koic)

Changes

  • #14565: Allow multiline method chain for Style/NumberedParameters and Style/ItBlockParameter with EnforcedStyle: allow_single_line when the block itself is on a single line. (@​earlopain)

RuboCop v1.81.0

New features

Bug fixes

  • #14560: Fix an error for Style/NilComparison cop when using the var.==(nil) and var.===(nil) syntax. (@​viralpraxis)
  • #14535: Fix autocorrect for Style/ExplicitBlockArgument when there are two methods that share the same implementation. (@​earlopain)
  • #14527: Fix false negatives for Style/NumberedParameters and Style/ItBlockParameter when using multiline method chain with EnforcedStyle: allow_single_line. (@​koic)
  • #14522: Fix false negatives for Layout/MultilineOperationIndentation when using indented code on LHS of equality operator in modifier method definition. (@​koic)
  • #14496: Fix false negatives for Layout/EmptyLineBetweenDefs for AllowAdjacentOneLineDefs: false and DefLikeMacros that take no block. (@​earlopain)
  • #14553: Fix false positives when EnforcedStyle: allowed_in_returns and !! appears across multiple lines in return position. (@​koic)
  • #14557: Fix false positives for Style/RedundantParentheses when parentheses are used around a one-line rescue expression as a condition. (@​koic)
  • #14525: Fix false positives for Style/RedundantRegexpEscape when an escaped variable sigil follows # (e.g., /#\@foo/, /#\@@bar/, /#\$baz/). (@​koic)
  • #14529: Fix false negative in Layout/RescueEnsureAlignment with a block whose send node is split over multiple lines. (@​dvandersluis)
  • #14528: Fix Style/RedundantFormat when the format string has a variable width that isn't given as a literal value. (@​dvandersluis)
  • #14541: Fix gemspec parsing error when ParserEngine: parser_prism is configured in a base config file. ([@​sudoremo][])
  • #14544: Fix an incorrect autocorrect for Lint/Void when using a return value in assignment method definition. (@​koic)
  • #14543: Fix an incorrect autocorrect for Style/RedundantRegexpArgument when using escaped single quote character. (@​koic)
  • #14540: Fix an incorrect autocorrect for Style/UnlessElse when using unless with then. (@​koic)
  • #14507: Fix the built-in Ruby LSP add-on not restarting when config files (.rubocop.yml, .rubocop_todo.yml) change. (@​earlopain)
  • #14514: Fix the built-in Ruby LSP add-on not respecting .rubocop config file. (@​earlopain)
  • #14508: Fix the built-in Ruby LSP add-on getting in an irrecoverable state when the config is invalid on startup. (@​earlopain)
  • #14534: Prevent Layout/LineLength autocorrection from splitting a block if its receiver contains a heredoc. (@​dvandersluis)
  • #14497: Fix a false positive for Lint/ShadowedArgument when assigning inside a rescue block. (@​earlopain)

Changes

  • #14492: Add support for LSP positionEncoding utf-8 and utf-32. ([@​tmtm][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.81.1 (2025-09-26)

Bug fixes

  • #14563: Fix incorrect autocorrection for Lint/DeprecatedOpenSSLConstant when Cipher appears twice. ([@​koic][])

Changes

  • #14565: Allow multiline method chain for Style/NumberedParameters and Style/ItBlockParameter with EnforcedStyle: allow_single_line when the block itself is on a single line. ([@​earlopain][])

1.81.0 (2025-09-25)

New features

  • #14512: Add Style/ArrayIntersectWithSingleElement cop. ([@​r7kamura][])
  • #10971: Support EnforcedStyleForMultiline: diff_comma in Style/TrailingCommaInArguments. ([@​akouryy][])

Bug fixes

  • #14560: Fix an error for Style/NilComparison cop when using the var.==(nil) and var.===(nil) syntax. ([@​viralpraxis][])
  • #14535: Fix autocorrect for Style/ExplicitBlockArgument when there are two methods that share the same implementation. ([@​earlopain][])
  • #14527: Fix false negatives for Style/NumberedParameters and Style/ItBlockParameter when using multiline method chain with EnforcedStyle: allow_single_line. ([@​koic][])
  • #14522: Fix false negatives for Layout/MultilineOperationIndentation when using indented code on LHS of equality operator in modifier method definition. ([@​koic][])
  • #14496: Fix false negatives for Layout/EmptyLineBetweenDefs for AllowAdjacentOneLineDefs: false and DefLikeMacros that take no block. ([@​earlopain][])
  • #14553: Fix false positives when EnforcedStyle: allowed_in_returns and !! appears across multiple lines in return position. ([@​koic][])
  • #14557: Fix false positives for Style/RedundantParentheses when parentheses are used around a one-line rescue expression as a condition. ([@​koic][])
  • #14525: Fix false positives for Style/RedundantRegexpEscape when an escaped variable sigil follows # (e.g., /#\@foo/, /#\@@bar/, /#\$baz/). ([@​koic][])
  • #14529: Fix false negative in Layout/RescueEnsureAlignment with a block whose send node is split over multiple lines. ([@​dvandersluis][])
  • #14528: Fix Style/RedundantFormat when the format string has a variable width that isn't given as a literal value. ([@​dvandersluis][])
  • #14541: Fix gemspec parsing error when ParserEngine: parser_prism is configured in a base config file. ([@​sudoremo][])
  • #14544: Fix an incorrect autocorrect for Lint/Void when using a return value in assignment method definition. ([@​koic][])
  • #14543: Fix an incorrect autocorrect for Style/RedundantRegexpArgument when using escaped single quote character. ([@​koic][])
  • #14540: Fix an incorrect autocorrect for Style/UnlessElse when using unless with then. ([@​koic][])
  • #14507: Fix the built-in Ruby LSP add-on not restarting when config files (.rubocop.yml, .rubocop_todo.yml) change. ([@​earlopain][])
  • #14514: Fix the built-in Ruby LSP add-on not respecting .rubocop config file. ([@​earlopain][])
  • #14508: Fix the built-in Ruby LSP add-on getting in an irrecoverable state when the config is invalid on startup. ([@​earlopain][])
  • #14534: Prevent Layout/LineLength autocorrection from splitting a block if its receiver contains a heredoc. ([@​dvandersluis][])
  • #14497: Fix a false positive for Lint/ShadowedArgument when assigning inside a rescue block. ([@​earlopain][])

Changes

  • #14492: Add support for LSP positionEncoding utf-8 and utf-32. ([@​tmtm][])
Commits
  • db58831 Cut 1.81.1
  • 2797207 Update Changelog
  • 6b2f047 [Fix #14563] Fix an incorrect autocorrect for Lint/DeprecatedOpenSSLConstant
  • 8260fc1 Allow implicit block args when the block itself is on one line only
  • c1400e7 [Docs] Document --editor-mode in a comment`
  • d3ef76a Reset the docs version
  • 386bf10 Cut 1.81
  • 148250d Update Changelog
  • face244 Fix an error for Style/NilComparison cop
  • d8c1d4c Fix an error for InternalAffairsOnSendWithoutOnCSend with alias_method an...
  • Additional commits viewable in compare view

Updates rubocop-rails from 2.33.3 to 2.33.4

Release notes

Sourced from rubocop-rails's releases.

RuboCop Rails v2.33.4

Bug fixes

  • #1530: Fix an incorrect autocorrect for Rails/FindByOrAssignmentMemoization when using endless method definition. (@​koic)
  • #1522: Fix an error for Rails/FindBy when where takes a block. (@​earlopain)
  • #1182: Fix a false positive for Rails/ActionControllerFlashBeforeRender when flash is called in a block. (@​5hun-s)
Changelog

Sourced from rubocop-rails's changelog.

2.33.4 (2025-09-27)

Bug fixes

  • #1530: Fix an incorrect autocorrect for Rails/FindByOrAssignmentMemoization when using endless method definition. ([@​koic][])
  • #1522: Fix an error for Rails/FindBy when where takes a block. ([@​earlopain][])
  • #1182: Fix a false positive for Rails/ActionControllerFlashBeforeRender when flash is called in a block. ([@​5hun-s][])
Commits
  • b2ccb82 Cut 2.33.4
  • 0fb1259 Update Changelog
  • 24faad2 Merge pull request #1533 from viralpraxis/load-simplecov-before-lib-for-bette...
  • 28caddb Load simplecov before loading lib for better coverage results
  • 60dd19b Merge pull request #1528 from 5hun-s/fix_false_positive_for_rails_action_cont...
  • 87e5bbf [Fix rubocop#1182] Fix a false positive for Rails/ActionControllerFlashBefore...
  • ec292a2 Fix a build error when using Ruby 2.7
  • 17371a8 Merge pull request #1531 from koic/fix_an_incorrect_autocorrect_for_rails_fin...
  • 2b091eb Fix an incorrect autocorrect for Rails/FindByOrAssignmentMemoization
  • dd73491 Merge pull request #1522 from Earlopain/find-by-where-block
  • Additional commits viewable in compare view

Updates selenium-webdriver from 4.35.0 to 4.36.0

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.36.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

... (truncated)

Changelog

Sourced from selenium-webdriver's changelog.

4.36.0 (2025-09-18)

  • Add CDP for Chrome 140 and remove 137
  • [BiDi] Create browser module, added user context related methods (#15371)
  • BiDi get client windows (#16211)
  • Fix links to exception documentation on website (#16305)
  • Update unhandled_prompt_behavior capability to support hash syntax (#16289)
Commits
  • 6d115cf [build] Prepare for release of Selenium 4.36.0 (#16332)
  • 4c603ec [rb] fix unit tests (#16357)
  • 29af98d [rb] Remove fedcm test guard due to fix in chrome (#16119)
  • f5ad7eb [rb] Update unhandled_prompt_behavior capability to support hash syntax (#1...
  • 5e73df4 [dotnet][java][rb] Fix links to exception documentation on website (#16305)
  • b562a93 [rb] BiDi get client windows (#16211)
  • 66f738e [dotnet][rb][java][js][py] Automated Browser Version Update (#16213)
  • 148487d [rb][BiDi] Create browser module, added user context related methods (#15371)
  • b4073ff Bumping versions to nightly
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ruby-deps group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [omniauth](https://github.com/omniauth/omniauth) | `2.1.3` | `2.1.4` |
| [pundit](https://github.com/varvet/pundit) | `2.5.1` | `2.5.2` |
| [icalendar](https://github.com/icalendar/icalendar) | `2.11.2` | `2.12.0` |
| [commonmarker](https://github.com/gjtorikian/commonmarker) | `2.3.2` | `2.4.1` |
| [faraday](https://github.com/lostisland/faraday) | `2.13.4` | `2.14.0` |
| [turbo-rails](https://github.com/hotwired/turbo-rails) | `2.0.16` | `2.0.17` |
| [rubocop](https://github.com/rubocop/rubocop) | `1.80.2` | `1.81.1` |
| [rubocop-rails](https://github.com/rubocop/rubocop-rails) | `2.33.3` | `2.33.4` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.35.0` | `4.36.0` |



Updates `omniauth` from 2.1.3 to 2.1.4
- [Release notes](https://github.com/omniauth/omniauth/releases)
- [Commits](omniauth/omniauth@v2.1.3...v2.1.4)

Updates `pundit` from 2.5.1 to 2.5.2
- [Changelog](https://github.com/varvet/pundit/blob/main/CHANGELOG.md)
- [Commits](varvet/pundit@v2.5.1...v2.5.2)

Updates `icalendar` from 2.11.2 to 2.12.0
- [Changelog](https://github.com/icalendar/icalendar/blob/main/CHANGELOG.md)
- [Commits](icalendar/icalendar@v2.11.2...v2.12.0)

Updates `commonmarker` from 2.3.2 to 2.4.1
- [Release notes](https://github.com/gjtorikian/commonmarker/releases)
- [Changelog](https://github.com/gjtorikian/commonmarker/blob/main/CHANGELOG.md)
- [Commits](gjtorikian/commonmarker@v2.3.2...v2.4.1)

Updates `faraday` from 2.13.4 to 2.14.0
- [Release notes](https://github.com/lostisland/faraday/releases)
- [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md)
- [Commits](lostisland/faraday@v2.13.4...v2.14.0)

Updates `turbo-rails` from 2.0.16 to 2.0.17
- [Release notes](https://github.com/hotwired/turbo-rails/releases)
- [Commits](hotwired/turbo-rails@v2.0.16...v2.0.17)

Updates `rubocop` from 1.80.2 to 1.81.1
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.80.2...v1.81.1)

Updates `rubocop-rails` from 2.33.3 to 2.33.4
- [Release notes](https://github.com/rubocop/rubocop-rails/releases)
- [Changelog](https://github.com/rubocop/rubocop-rails/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop-rails@v2.33.3...v2.33.4)

Updates `selenium-webdriver` from 4.35.0 to 4.36.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](SeleniumHQ/selenium@selenium-4.35.0...selenium-4.36.0)

---
updated-dependencies:
- dependency-name: omniauth
  dependency-version: 2.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: pundit
  dependency-version: 2.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: icalendar
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: commonmarker
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: faraday
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: turbo-rails
  dependency-version: 2.0.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: rubocop
  dependency-version: 1.81.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: rubocop-rails
  dependency-version: 2.33.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: selenium-webdriver
  dependency-version: 4.36.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies ruby Pull requests that update Ruby code labels Oct 6, 2025
Copy link
Collaborator

@olleolleolle olleolleolle left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dependabot Looks good!

@olleolleolle olleolleolle merged commit 96abdef into master Oct 7, 2025
4 checks passed
@olleolleolle olleolleolle deleted the dependabot/bundler/ruby-deps-5459d82fe3 branch October 7, 2025 16:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant