Skip to content

chore(deps): bump the ruby-deps group across 1 directory with 11 updates - #559

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/bundler/dev/ruby-deps-5d3b352f85
Closed

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/bundler/dev/ruby-deps-5d3b352f85

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the ruby-deps group with 11 updates in the / directory:

Package From To
bootsnap 1.25.0 1.26.0
rails 8.1.3.1 8.1.4
image_processing 1.14.0 2.2.0
thruster 0.1.26 0.1.27
solid_cable 4.0.2 4.1.0
pagy 6.5.0 9.4.0
json 2.21.2 3.1.0
rubocop 1.90.0 1.92.0
selenium-webdriver 4.47.0 4.51.0
simplecov 1.1.1 1.3.2
prawn 2.4.0 2.5.0

Updates bootsnap from 1.25.0 to 1.26.0

Release notes

Sourced from bootsnap's releases.

v1.26.0

What's Changed

  • Handle top level Coverage constant being defined, but without it being the true stdlib coverage module.
  • Fix bootsnap precompile that could generate a corrupted cache entry if an already cached YAML file was modified without changing its size.
  • Workaround a potential Ruby SEGV if Bootsnap.instrumentation raised an error.
Changelog

Sourced from bootsnap's changelog.

1.26.0

  • Handle top level Coverage constant being defined, but without it being the true stdlib coverage module.
  • Fix bootsnap precompile that could generate a corrupted cache entry if an already cached YAML file was modified without changing its size.
  • Workaround a potential Ruby SEGV if Bootsnap.instrumentation raised an error.
Commits
  • 67a7290 Release 1.26.0
  • 1881b9a Merge pull request #573 from byroot/same-size-miscompilation
  • 605bbeb Fix precompilation when regenerating an existing cache entry of the same size
  • 5fd59da Merge pull request #569 from OskarEichler/codex/accept-tempfile-fd-zero
  • 70550c7 Merge pull request #568 from OskarEichler/codex/remove-umask-debug-output
  • 8aed2ed Accept tempfile descriptor zero
  • f7457ea Remove umask debug output
  • 9ee62a2 Merge pull request #567 from byroot/rename-mod
  • 7c8178e Handle write(2) being interrupted.
  • 3e755ca atomic_write_cache_file: stop leaking FD on error
  • Additional commits viewable in compare view

Updates rails from 8.1.3.1 to 8.1.4

Release notes

Sourced from rails's releases.

8.1.4

Active Support

  • Fix the debug error page rendering for SyntaxErrors with multi-line messages.

    Marco Roth

  • Make ActiveSupport::JSON.decode compatible with the upcoming json 3.0 gem.

    Earlopain

  • Fix number_to_human_size crashing for sizes above a terabyte by supporting petabyte, exabyte, and zettabyte storage units.

    Kenta Ishizaki

  • Fix Range#sole raising NoMethodError when the enumerable core extension isn't already loaded.

    Kenta Ishizaki

  • Fix ActiveSupport::Cache::FileStore raising NameError for FileUtils when fileutils isn't already loaded.

    Kenta Ishizaki

  • Fix Enumerable#in_order_of with filter: true dropping nil elements explicitly named in the series.

    Kenta Ishizaki

  • Keep HashWithIndifferentAccess#filter returning a HashWithIndifferentAccess instead of a plain Hash.

    Kenta Ishizaki

  • Fix number_to_human and number_to_human_size crashing when :precision is nil.

    Kenta Ishizaki

  • Fix ActiveSupport::InheritableOptions#to_h to recursively flatten nested InheritableOptions parents.

    Andrew Novoselac

  • Fix ActiveSupport::StructuredEventSubscriber.debug_only leaking debug-only methods across subscriber subclasses.

    Kenta Ishizaki

... (truncated)

Commits
  • c3466ea Preparing for 8.1.4 release
  • 334dc3e Merge pull request #58854 from carlosdanielpohlod/strict-locals-ascii-only-body
  • 8df6693 Merge pull request #58827 from rails/backport-alias-fallback-8-1-stable
  • 2ed2c88 Define read_attribute_for_validation instead of aliasing send
  • 2616145 Merge pull request #56705 from p8/activemodel/fix-read-attr-for-serialization...
  • 20abac3 Merge pull request #58817 from yahonda/fix-alias-fallback-to-object-in-attrib...
  • 2670772 Merge pull request #58733 from kwestein/create-or-find-by-deadlock
  • 8236300 Merge pull request #58806 from Shopify/hm-wnqzpryypymkrxtn
  • e6288a8 Update CHANGELOGs for 8-1-stable backports
  • 44a7fd4 Merge pull request #58799 from e-akashsaini/fix-tuple-where-key-corrupting-at...
  • Additional commits viewable in compare view

Updates image_processing from 1.14.0 to 2.2.0

Changelog

Sourced from image_processing's changelog.

2.2.0 (2026-09-29)

  • Save in the #convert format when the destination path has no extension, such as a /dev/fd/N path (thanks to @​flavorjones)

2.1.0 (2026-09-01)

  • [minimagick] Add inherit_fds: so a loader can name an already-open input (thanks to @​flavorjones)

2.0.3 (2026-08-06)

  • Prevent remote code execution when operation names come from user input, closing bypasses through the #operation meta-builder, #method_missing, and nested #send calls (reported by @​szymonsec)

  • [minimagick] Prevent remote code execution through unsafe public methods (e.g. #instance_eval, #send) passed as loader/saver option names

2.0.2 (2026-06-03)

  • Raise LoadError instead of ImageProcessing::Error when soft dependencies are missing (@​bdewater-thatch)

2.0.1 (2026-05-22)

  • [minimagick] Prevent remote shell execution when passing loader/saver options from user input

2.0.0 (2026-05-20)

  • mini_magick/ruby-vips are now soft dependencies and need to be manually added to the Gemfile (@​janko)

  • Avoid remote shell execution vulnerability in #apply when arguments are coming from user input (@​janko)

  • [vips] Unfuzzed loaders are now blocked by default (@​janko)

  • [vips] Sharpening after resize has been disabled by default (@​janko)

  • [minimagick] Remove deprecated :compose and :geometry keyword arguments for #composite (@​janko)

  • Ruby 3.0+ is now required (@​janko)

Commits
  • d9737fb Set version to 2.2.0
  • 8f7b538 Handle missing AVIF encoder in tests
  • 92086c5 Handle AVIF format on extensionless destinations
  • 5827e83 Save in the #convert format to an extensionless destination (#150)
  • 3d990c3 Set version to 2.1.0
  • 722d900 Add inherit_fds: so a loader can name an already-open input (#147)
  • 1611c00 Bump to 2.0.3
  • 8cd14e9 Test on JRuby 10.1.x
  • 28684e7 Close more RCE security gaps
  • 0360dbd Remove ruby2_keywords usage (#145)
  • Additional commits viewable in compare view

Updates thruster from 0.1.26 to 0.1.27

Changelog

Sourced from thruster's changelog.

v0.1.27 / 2026-09-28

  • Update dependencies (#154)
  • Bump golang.org/x/crypto to v0.56.0 (#152)
  • Build with Go 1.27.1, update dependencies, add make check (#150)
Commits
  • 669643f Merge commit from fork
  • 38d3721 Merge pull request #155 from erikthoreson24/version-0.1.27
  • 0992970 Bump version
  • 72796d7 Merge pull request #154 from basecamp/deps
  • 0864e8a Use http.Transport for h2c test client
  • 80e89ee Update dependencies
  • 22a9978 Merge pull request #152 from erikthoreson24/fix/bump-x-crypto-0.56.0
  • b186518 Bump golang.org/x/crypto to v0.56.0
  • 3ef8516 Merge pull request #150 from basecamp/go-1.27.1
  • fa31b96 Add make check to run go vet and govulncheck
  • Additional commits viewable in compare view

Updates solid_cable from 4.0.2 to 4.1.0

Release notes

Sourced from solid_cable's releases.

v4.1.0

Rails World Edition

Full Changelog: rails/solid_cable@v4.0.2...v4.1.0

Commits
  • 1e4217e disable autotrimming
  • 6bb0bd4 bump version
  • 7e97e8c pass around the actual message
  • 79b9839 Pass the actual messages to broadcast_batch
  • 41b1059 better naming
  • 56f41fe skip duping the current_channels
  • 0585967 actually compress encrypted messages
  • a1d8b27 Remove channel index since we use channel_hash now
  • c75d007 Bring autotrimming inline with solid cache (#89)
  • 2dea601 Update bench app and loadtest script (#90)
  • Additional commits viewable in compare view

Updates pagy from 6.5.0 to 9.4.0

Release notes

Sourced from pagy's releases.

Version 9.4.0

🚀 Try the upcoming v43! 🚀

Pagy is about to leap to the next level.

Try the new v43.0.0.rc*.

Leave your comments in the Version 43 discussion.

✴ What's new in 9.0+ ✴

  • Wicked-fast Keyset Pagination for big data! It works with ActiveRecord::Relation and Sequel::Dataset sets.
  • More Playground Apps to showcase, clone and develop pagy APPs without any setup on your side
  • Lots of refactorings and optimizations
  • See the Changelog for possible breaking changes

Changes in 9.4.0

  • Update aria translation for Tamil (#788)
  • Add Slovak localization with west_slavic pluralization rules (#787)

CHANGELOG

Version 9.3.4

✴ What's new in 9.0+ ✴

  • Wicked-fast Keyset Pagination for big data! It works with ActiveRecord::Relation and Sequel::Dataset sets.
  • More Playground Apps to showcase, clone and develop pagy APPs without any setup on your side
  • Lots of refactorings and optimizations
  • See the Changelog for possible breaking changes

Changes in 9.3.4

  • Fix method visibility in JsonApiExtra (#765)

CHANGELOG

Version 9.3.3

✴ What's new in 9.0+ ✴

  • Wicked-fast Keyset Pagination for big data! It works with ActiveRecord::Relation and Sequel::Dataset sets.
  • More Playground Apps to showcase, clone and develop pagy APPs without any setup on your side

... (truncated)

Changelog

Sourced from pagy's changelog.

Version 9.4.0

  • Update aria translation for Tamil (#788)
  • Add Slovak localization with west_slavic pluralization rules (#787)

Version 9.3.5

  • fix quoted identifiers in keyset (#780)
  • Fix clone command (#770)

Version 9.3.4

  • Fix method visibility in JsonApiExtra (#765)

Version 9.3.3

  • Add test for locales - to find problematic keys (#752)
  • Update locales: zh-CN, zh-HK, zh-TW (#751) (fix #608, fix #609, fix #610)
    • Remove :other from :aria_label key and code comment
    • Change :item_name which had :one_other keys to default to the :other key
    • Fix comment

Version 9.3.2

  • Improve gapped series computation by a few milliseconds

Version 9.3.1

  • Added qualified column names to the keyset query

Version 9.3.0

  • Remove the :typecast_latest variable
  • Add the :jsonify_keyset_attributes variable to override the encoding (#749)

Version 9.2.2

  • Replace inline templates with template block in sinatra apps
  • Replace the rails calendar app with a sinatra app
  • Add PagyApps::INDEX

Version 9.2.1

  • Improve bin/pagy to dynamically find apps and descriptions
  • Apps refactoring:
    • Update rails to 8.0
    • Replace rails AR keyset apps with sinatra apps
    • Improve consistency

Version 9.2.0

... (truncated)

Commits

Updates json from 2.21.2 to 3.1.0

Release notes

Sourced from json's releases.

v3.0.0

With the removal of the insecure create_additions option, JSON.load and JSON.dump are now safe to use. Them being unsafe by default caused multiple security vulnerabilites in the past.

If you did depend on create_additions, the recommended migration is to implement a custom serializer using JSON::Coder.

All the mutable default options, such as JSON.load_default_options have been removed. They were preventing Ractor compatiblity, and causing bug in libraries using JSON expecting the default behavior. JSON methods now always behave the same unless monkey patched.

All methods options are now either keyword arguments or checked like keyword arguments, meaning unknown options such as typos raise ArgumentError.

Duplicated keys are now rejected by default.

JavaScript comments in documents are no longer supported by default.

Numerous rarely used aliases have been removed.

  • Add JSON::ParserError#json_path to locate parse errors in the document as a JSONPath-style string (e.g. $.foo[0].bar). For duplicate key errors it points at the duplicated key itself.
  • Fix the parser to also reject lone trailing UTF-16 surrogates (\uDCxx with no leading partner), symmetric to the leading-surrogate case. The Java parser already rejected these; this closes the CRuby/JRuby parity gap.
  • JSON.load defaults are now safe to use.
  • All unknown options will now cause an ArgumentError rather than to be ignored.
  • The allow_comments parsing option now defaults to false.
  • The allow_duplicate_key option now defaults to false, for both parsing and generating JSON.
  • Removed the limit positional argument of JSON.dump.
  • Removed the escape_slash alias of script_safe.
  • Removed Kernel#j and Kernel#jj.
  • Removed JSON.load_default_options.
  • Removed JSON.unsafe_load_default_options.
  • Removed JSON.dump_default_options.
  • Removed JSON::State#[] and JSON::State#[]=.
  • Removed JSON.unparse.
  • Removed JSON.fast_generate.
  • Removed JSON.fast_unparse.
  • Removed JSON.pretty_unparse.
  • Removed JSON.restore.
  • Removed JSON::PRETTY_STATE_PROTOTYPE.
  • Removed the insecure create_additions option.
  • Removed JSON::GenericObject.

Full Changelog: ruby/json@v2.21.2...v3.0.0

v3.0.0.rc1

With the removal of the insecure create_additions option, JSON.load and JSON.dump are now safe to use. Them being unsafe by default caused multiple security vulnerabilites in the past.

If you did depend on create_additions, the recommended migration is to implement a custom serializer using JSON::Coder.

All the mutable default options, such as JSON.load_default_options have been removed. They were preventing Ractor compatiblity, and causing bug in libraries using JSON expecting the default behavior. JSON methods now always behave the same unless monkey patched.

... (truncated)

Changelog

Sourced from json's changelog.

2026-10-13 (3.1.0)

  • Added rfc8785 generator option to canonicalize the output. Replaces the json-canonicalization with numerous correctness fixes.
  • Use the rb_len_t type introduced in Ruby 4.1 to allow for proper 64bit support on LP64 platforms (Windows).
  • JRuby: parser errors now include the position (line, column and the message suffix) as well as json_path, matching the C extension.
  • Improved the accuracy of parser error's line, column and snipets in presence of multibyte characters.
  • Fix JSON.load to work correctly when provided a Zlib::GzipReader as IO source.
  • Reject non-ASCII BINARY strings during JSON generation. This was deprecated since a long time and scheduled to be removed for 3.0.

2026-09-09 (3.0.2)

  • Fix JSON.load_file and JSON.load_file! to load on Ruby 2.7.0 through 2.7.2, which cannot parse a leading parameter before ....

2026-09-08 (3.0.1)

  • Restore the limit positional argument of JSON.dump.

2026-09-07 (3.0.0)

  • Add JSON::ParserError#json_path to locate parse errors in the document as a JSONPath-style string (e.g. $.foo[0].bar). For duplicate key errors it points at the duplicated key itself.
  • Fix the parser to also reject lone trailing UTF-16 surrogates (\uDCxx with no leading partner), symmetric to the leading-surrogate case. The Java parser already rejected these; this closes the CRuby/JRuby parity gap.

2026-08-11 (3.0.0.rc1)

With the removal of the insecure create_additions option, JSON.load and JSON.dump are now safe to use. Them being unsafe by default caused multiple security vulnerabilites in the past.

If you did depend on create_additions, the recommended migration is to implement a custom serializer using JSON::Coder.

All the mutable default options, such as JSON.load_default_options have been removed. They were preventing Ractor compatiblity, and causing bug in libraries using JSON expecting the default behavior. JSON methods now always behave the same unless monkey patched.

All methods options are now either keyword arguments or checked like keyword arguments, meaning unknown options such as typos raise ArgumentError.

Duplicated keys are now rejected by default.

JavaScript comments in documents are no longer supported by default.

Numerous rarely used aliases have been removed.

  • JSON.load defaults are now safe to use.
  • All unknown options will now cause an ArgumentError rather than to be ignored.
  • The allow_comments parsing option now defaults to false.
  • The allow_duplicate_key option now defaults to false, for both parsing and generating JSON.
  • Removed the limit positional argument of JSON.dump.
  • Removed the escape_slash alias of script_safe.
  • Removed Kernel#j and Kernel#jj.

... (truncated)

Commits
  • a15b2ba Release 3.1.0
  • d09e383 Refactor rfc8785_sort_keys_proc
  • e19f7d7 Handle invalid encoding in JSON path keys
  • 78d6a83 parser.c: only update the stack once fully spilled
  • 6ea6201 Fix parsing of number with out of range negative exponents
  • 1b67eb3 Fix parsing of unescaped NULL bytes in strings
  • c1a4372 ResumableParser: fix handling of incomplete unicode escape
  • 429c109 More hardening against adversarial encode methods
  • 8df32ab Index the generated JSON array by rb_len_t
  • 21193d0 Match rb_hash_bulk_insert fallback to Ruby's declaration
  • Additional commits viewable in compare view

Updates rubocop from 1.90.0 to 1.92.0

Release notes

Sourced from rubocop's releases.

RuboCop v1.92.0

New features

  • #15895: Add an MCP tool that explains what cops do. (@​bbatsov)
  • #15700: Add --explain COP to describe what a cop does, how it is configured, and the examples from its documentation. (@​bbatsov)
  • #15699: Add --max-offenses-per-cop to cap how many offenses a single cop reports. (@​bbatsov)
  • #15948: Let MCP autocorrection apply the corrections of AutoCorrect: contextual cops when asked to. (@​bbatsov)
  • #15945: Let MCP autocorrection preview its changes as a diff. (@​bbatsov)
  • #15915: Let MCP inspection cap how many offenses each cop reports. (@​bbatsov)
  • #15930: Let MCP tools choose which cops run and which files they check. (@​bbatsov)
  • #14666: Make Lint/UselessAssignment register an offense for a block-captured variable that is never referenced. (@​IslamElsayed)
  • #15695: Report autocorrection edits in the JSON formatter. (@​bbatsov)
  • #15940: Report cop errors and warnings per file in --format json. (@​bbatsov)
  • #15945: Report the offenses MCP autocorrection leaves behind. (@​bbatsov)

Bug fixes

  • #15780: Fix an error for Lint/MissingCopEnableDirective when an enable-next or next +Cop directive suspends an open rubocop:disable, and a false positive for next -Cop scopes larger than MaxRangeSize. (@​bbatsov)
  • #16005: Fix a false negative for Security/JSONLoad with create_additions as the second argument. (@​bbatsov)
  • #15994: Fix a false positive for Layout/LineEndStringConcatenationIndentation with an already aligned part. (@​bbatsov)
  • #15842: Fix a false positive for Style/ExplicitBlockArgument when the method uses argument forwarding (...). (@​bbatsov)
  • #15843: Fix a false positive for Style/NegativeArrayIndex with a different length receiver. (@​bbatsov)
  • #15841: Fix a false positive for Style/RedundantFreeze with an arithmetic operation on a non-numeric receiver. (@​bbatsov)
  • #15843: Fix a false positive for Style/Sample with an endless range, which was corrected to a sample call of the wrong size. (@​bbatsov)
  • #15842: Fix a false positive for Style/SuperArguments when the method has a destructuring parameter. (@​bbatsov)
  • #15740: Fix an error for Layout/EmptyLinesAroundMethodBody when a method's arguments span multiple lines and the method ends on the last argument's line. (@​viralpraxis)
  • #15860: Fix an error for Layout/HeredocIndentation with a heredoc nested in another heredoc. (@​Starlexxx)
  • #15876: Fix an error for Lint/EmptyConditionalBody with else on the condition line. (@​koic)
  • #16008: Fix an error for Lint/UnescapedBracketInRegexp when using regexp_parser 2.11.2 and earlier. (@​bbatsov)
  • #15897: Fix an error for Metrics/ClassLength with a long singleton class in LSP mode. (@​bbatsov)
  • #15749: Fix an error for Style/ClassAndModuleChildren when a compact class or module definition appears in an expression, such as an assignment value or a method argument. (@​viralpraxis)
  • #15750: Fix an error for Style/ClassAndModuleChildren when using EnforcedStyle: compact and the nested body is indented less than Layout/IndentationWidth's Width. (@​viralpraxis)
  • #15764: Fix an error for Style/ClassAndModuleChildren when EnforcedStyle: compact compacts an irregularly indented definition and Layout/IndentationStyle enforces tabs. (@​viralpraxis)
  • #15946: Fix an error for Style/ExplicitBlockArgument with the shorthand call syntax. (@​Starlexxx)
  • #15861: Fix an error for Style/FormatString with format nested in format. (@​Starlexxx)
  • #15694: Fix an error for Style/HashSyntax when a no_mixed_keys style forces hash rockets on a hash whose value repeats its key. (@​viralpraxis)
  • #16007: Fix an error for Style/IfInsideElse when the nested if shares a line with other code. (@​bbatsov)
  • #15867: Fix an error for Style/MapIntoArray when pushing into a numbered or it block parameter. (@​Starlexxx)
  • #15949: Fix an error for Style/Next with a modifier condition wrapping a block that has its own offense. (@​Starlexxx)
  • #15797: Fix an error for Style/RedundantCondition when autocorrecting a redundant condition nested in the else branch of another one. (@​koic)
  • #15928: Fix an error for Style/Semicolon when a semicolon follows an unparenthesized keyword parameter or hash pattern. (@​viralpraxis)
  • #15714: Fix an error for Style/YodaCondition when one operand of a comparison contains another comparison the cop also corrects. (@​viralpraxis)
  • #16011: Fix an error for the pacman formatter, which crashed with undefined method 'winsize' whether or not the output was a terminal. (@​bbatsov)
  • #15731: Fix an error when caching offenses whose correction or justification cannot be represented as UTF-8. (@​viralpraxis)
  • #16015: Fix an error when cleaning up a result cache that can't be written. (@​bbatsov)
  • #15702: Fix an error when interrupting RuboCop with Ctrl-C. (@​viralpraxis)
  • #16015: Fix an error when the cache directory or config can't be accessed under a sandbox. (@​bbatsov)
  • #16015: Fix an error when the result cache directory exists but can't be written. (@​bbatsov)
  • #15817: Fix an incorrect autocorrect for Gemspec/OrderedDependencies when the same dependency declaration appears more than once in the gemspec. (@​viralpraxis)
  • #15903: Fix an incorrect autocorrect for Layout/ClassStructure with blank line cops. (@​koic)

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.92.0 (2026-10-10)

New features

  • #15895: Add an MCP tool that explains what cops do. ([@​bbatsov][])
  • #15700: Add --explain COP to describe what a cop does, how it is configured, and the examples from its documentation. ([@​bbatsov][])
  • #15699: Add --max-offenses-per-cop to cap how many offenses a single cop reports. ([@​bbatsov][])
  • #15948: Let MCP autocorrection apply the corrections of AutoCorrect: contextual cops when asked to. ([@​bbatsov][])
  • #15945: Let MCP autocorrection preview its changes as a diff. ([@​bbatsov][])
  • #15915: Let MCP inspection cap how many offenses each cop reports. ([@​bbatsov][])
  • #15930: Let MCP tools choose which cops run and which files they check. ([@​bbatsov][])
  • #14666: Make Lint/UselessAssignment register an offense for a block-captured variable that is never referenced. ([@​IslamElsayed][])
  • #15695: Report autocorrection edits in the JSON formatter. ([@​bbatsov][])
  • #15940: Report cop errors and warnings per file in --format json. ([@​bbatsov][])
  • #15945: Report the offenses MCP autocorrection leaves behind. ([@​bbatsov][])

Bug fixes

  • #15780: Fix an error for Lint/MissingCopEnableDirective when an enable-next or next +Cop directive suspends an open rubocop:disable, and a false positive for next -Cop scopes larger than MaxRangeSize. ([@​bbatsov][])
  • #16005: Fix a false negative for Security/JSONLoad with create_additions as the second argument. ([@​bbatsov][])
  • #15994: Fix a false positive for Layout/LineEndStringConcatenationIndentation with an already aligned part. ([@​bbatsov][])
  • #15842: Fix a false positive for Style/ExplicitBlockArgument when the method uses argument forwarding (...). ([@​bbatsov][])
  • #15843: Fix a false positive for Style/NegativeArrayIndex with a different length receiver. ([@​bbatsov][])
  • #15841: Fix a false positive for Style/RedundantFreeze with an arithmetic operation on a non-numeric receiver. ([@​bbatsov][])
  • #15843: Fix a false positive for Style/Sample with an endless range, which was corrected to a sample call of the wrong size. ([@​bbatsov][])
  • #15842: Fix a false positive for Style/SuperArguments when the method has a destructuring parameter. ([@​bbatsov][])
  • #15740: Fix an error for Layout/EmptyLinesAroundMethodBody when a method's arguments span multiple lines and the method ends on the last argument's line. ([@​viralpraxis][])
  • #15860: Fix an error for Layout/HeredocIndentation with a heredoc nested in another heredoc. ([@​Starlexxx][])
  • #15876: Fix an error for Lint/EmptyConditionalBody with else on the condition line. ([@​koic][])
  • #16008: Fix an error for Lint/UnescapedBracketInRegexp when using regexp_parser 2.11.2 and earlier. ([@​bbatsov][])
  • #15897: Fix an error for Metrics/ClassLength with a long singleton class in LSP mode. ([@​bbatsov][])
  • #15749: Fix an error for Style/ClassAndModuleChildren when a compact class or module definition appears in an expression, such as an assignment value or a method argument. ([@​viralpraxis][])
  • #15750: Fix an error for Style/ClassAndModuleChildren when using EnforcedStyle: compact and the nested body is indented less than Layout/IndentationWidth's Width. ([@​viralpraxis][])
  • #15764: Fix an error for Style/ClassAndModuleChildren when EnforcedStyle: compact compacts an irregularly indented definition and Layout/IndentationStyle enforces tabs. ([@​viralpraxis][])
  • #15946: Fix an error for Style/ExplicitBlockArgument with the shorthand call syntax. ([@​Starlexxx][])
  • #15861: Fix an error for Style/FormatString with format nested in format. ([@​Starlexxx][])
  • #15694: Fix an error for Style/HashSyntax when a no_mixed_keys style forces hash rockets on a hash whose value repeats its key. ([@​viralpraxis][])
  • #16007: Fix an error for Style/IfInsideElse when the nested if shares a line with other code. ([@​bbatsov][])
  • #15867: Fix an error for Style/MapIntoArray when pushing into a numbered or it block parameter. ([@​Starlexxx][])
  • #15949: Fix an error for Style/Next with a modifier condition wrapping a block that has its own offense. ([@​Starlexxx][])
  • #15797: Fix an error for Style/RedundantCondition when autocorrecting a redundant condition nested in the else branch of another one. ([@​koic][])
  • #15928: Fix an error for Style/Semicolon when a semicolon follows an unparenthesized keyword parameter or hash pattern. ([@​viralpraxis][])
  • #15714: Fix an error for Style/YodaCondition when one operand of a comparison contains another comparison the cop also corrects. ([@​viralpraxis][])
  • #16011: Fix an error for the pacman formatter, which crashed with undefined method 'winsize' whether or not the output was a terminal. ([@​bbatsov][])
  • #15731: Fix an error when caching offenses whose correction or justification cannot be represented as UTF-8. ([@​viralpraxis][])
  • #16015: Fix an error when cleaning up a result cache that can't be written. ([@​bbatsov][])
  • #15702: Fix an error when interrupting RuboCop with Ctrl-C. ([@​viralpraxis][])
  • #16015: Fix an error when the cache directory or config can't be accessed under a sandbox. ([@​bbatsov][])
  • #16015: Fix an error when the result cache directory exists but can't be written. ([@​bbatsov][])
  • #15817: Fix an incorrect autocorrect for Gemspec/OrderedDependencies when the same dependency declaration appears more than once in the gemspec. ([@​viralpraxis][])

... (truncated)

Commits
  • 4172ce5 Cut 1.92
  • 7e75867 Require net/http in the references:verify task
  • 7c107cb Update Changelog
  • 81c7d42 Fix an error when cleaning up a result cache that can't be written
  • 3b70129 Fix an error when the result cache directory exists but can't be written
  • 830275f Fix an error when the cache directory or config can't be accessed under a san...
  • 38b43fc Remove a check from Style/SingleLineMethods that the shared endless method ...
  • 9897fb1 Fix an incorrect autocorrect for Style/EndlessMethod and `Style/SingleLineM...
  • 1a2221e Fix an incorrect autocorrect for Style/ReturnNilInPredicateMethodDefinition...
  • f2f4fac Fix an incorrect autocorrect for Style/EndlessMethod with a modifier condit...
  • Additional commits viewable in compare view

Updates selenium-webdriver from 4.47.0 to 4.51.0

Release notes

Sourced from selenium-webdriver's releases.

Selenium 4.51.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

Bumps the ruby-deps group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [bootsnap](https://github.com/rails/bootsnap) | `1.25.0` | `1.26.0` |
| [rails](https://github.com/rails/rails) | `8.1.3.1` | `8.1.4` |
| [image_processing](https://github.com/janko/image_processing) | `1.14.0` | `2.2.0` |
| [thruster](https://github.com/basecamp/thruster) | `0.1.26` | `0.1.27` |
| [solid_cable](https://github.com/rails/solid_cable) | `4.0.2` | `4.1.0` |
| [pagy](https://github.com/ddnexus/pagy) | `6.5.0` | `9.4.0` |
| [json](https://github.com/ruby/json) | `2.21.2` | `3.1.0` |
| [rubocop](https://github.com/rubocop/rubocop) | `1.90.0` | `1.92.0` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.47.0` | `4.51.0` |
| [simplecov](https://github.com/simplecov-ruby/simplecov) | `1.1.1` | `1.3.2` |
| [prawn](https://github.com/prawnpdf/prawn) | `2.4.0` | `2.5.0` |



Updates `bootsnap` from 1.25.0 to 1.26.0
- [Release notes](https://github.com/rails/bootsnap/releases)
- [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md)
- [Commits](rails/bootsnap@v1.25.0...v1.26.0)

Updates `rails` from 8.1.3.1 to 8.1.4
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](rails/rails@v8.1.3.1...v8.1.4)

Updates `image_processing` from 1.14.0 to 2.2.0
- [Changelog](https://github.com/janko/image_processing/blob/master/CHANGELOG.md)
- [Commits](janko/image_processing@v1.14.0...v2.2.0)

Updates `thruster` from 0.1.26 to 0.1.27
- [Changelog](https://github.com/basecamp/thruster/blob/main/CHANGELOG.md)
- [Commits](basecamp/thruster@v0.1.26...v0.1.27)

Updates `solid_cable` from 4.0.2 to 4.1.0
- [Release notes](https://github.com/rails/solid_cable/releases)
- [Commits](rails/solid_cable@v4.0.2...v4.1.0)

Updates `pagy` from 6.5.0 to 9.4.0
- [Release notes](https://github.com/ddnexus/pagy/releases)
- [Changelog](https://github.com/ddnexus/pagy/blob/9.4.0/CHANGELOG.md)
- [Commits](ddnexus/pagy@6.5.0...9.4.0)

Updates `json` from 2.21.2 to 3.1.0
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](ruby/json@v2.21.2...v3.1.0)

Updates `rubocop` from 1.90.0 to 1.92.0
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.90.0...v1.92.0)

Updates `selenium-webdriver` from 4.47.0 to 4.51.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](SeleniumHQ/selenium@selenium-4.47.0...selenium-4.51.0)

Updates `simplecov` from 1.1.1 to 1.3.2
- [Release notes](https://github.com/simplecov-ruby/simplecov/releases)
- [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md)
- [Commits](simplecov-ruby/simplecov@v1.1.1...v1.3.2)

Updates `prawn` from 2.4.0 to 2.5.0
- [Release notes](https://github.com/prawnpdf/prawn/releases)
- [Changelog](https://github.com/prawnpdf/prawn/blob/master/CHANGELOG.md)
- [Commits](prawnpdf/prawn@2.4.0...2.5.0)

---
updated-dependencies:
- dependency-name: bootsnap
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: rails
  dependency-version: 8.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: image_processing
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: thruster
  dependency-version: 0.1.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: solid_cable
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: pagy
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: json
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ruby-deps
- dependency-name: rubocop
  dependency-version: 1.92.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: selenium-webdriver
  dependency-version: 4.51.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: simplecov
  dependency-version: 1.3.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: prawn
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Oct 16, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 23, 2026
@dependabot
dependabot Bot deleted the dependabot/bundler/dev/ruby-deps-5d3b352f85 branch October 23, 2026 09:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants