Skip to content
This repository was archived by the owner on May 15, 2026. It is now read-only.

Bump the everything group in /bundler-example with 3 updates#3

Open
github-actions[bot] wants to merge 1 commit into
mainfrom
dependabot-0be8427048521536c87612314933df442db6d4db
Open

Bump the everything group in /bundler-example with 3 updates#3
github-actions[bot] wants to merge 1 commit into
mainfrom
dependabot-0be8427048521536c87612314933df442db6d4db

Conversation

@github-actions
Copy link
Copy Markdown

@github-actions github-actions Bot commented Jan 5, 2026

Bumps the everything group in /bundler-example with 3 updates: rubocop, toml-rb and rack.

Updates rubocop from 0.76.0 to 1.82.1

Release notes

Sourced from rubocop's releases.

RuboCop v1.82.1

Bug fixes

  • #14736: Fix an error for Style/TrailingCommaInArguments when EnforcedStyleForMultiline is consistent_comma and keyword arguments use a trailing comma. (@​koic)
  • #14737: Fix crash in Layout/RedundantLineBreak when Layout/LineLength is disabled. (@​ydakuka)
  • #14719: Fix crash on long lines when Layout/LineLength is disabled. (@​floriandejonckheere)
  • #14743: Fix false positives for Layout/MultilineMethodCallIndentation when multiline method chain with block has expected indent width and the method is preceded by splat or double splat. (@​koic)
  • #12297: Fix false negative in Layout/IndentationWidth for multiline method chain blocks. (@​rscq)
  • #14730: Fix the cache implementation to use consistent cache keys across workers. (@​byroot)
  • #14559: Fix false positives for Lint/UselessAssignment when a variable is assigned in loop body and used in loop condition. (@​ydakuka)

RuboCop v1.82.0

New features

  • #14655: Add AllowRBSInlineAnnotation option to Layout/LineLength. (@​koic)
  • #14569: Add IncludedMacroPatterns configuration option to Style/MethodCallWithArgsParentheses for pattern-based macro method enforcement. ([@​mmenanno][])
  • #14670: Add new cop Style/ModuleMemberExistenceCheck. ([@​lovro-bikic][])
  • #14644: Support TargetRubyVersion 4.0 (experimental). (@​koic)

Bug fixes

  • #14649: Fix an error for Lint/LiteralAsCondition when there are literals in multiple branches. ([@​viralpraxis][])
  • #14678: Fix an error when running deprecated rake rubocop:auto_correct task. (@​koic)
  • #14650: Fix wrong autocorrect for Lint/RedundantSplatExpansion when splatting a single literal. ([@​earlopain][])
  • #14703: Fix false negatives for Layout/RescueEnsureAlignment when using self class definition. (@​koic)
  • #14706: Fix false negatives for Lint/NoReturnInBeginEndBlocks when assigning instance variable, class variable, global variable, or constant. (@​koic)
  • #14715: Fix false positives for Layout/EmptyLineAfterGuardClause when a guard clause follows a multiline heredoc in a parenthesized method call. (@​koic)
  • #14667: Fix false positives for Layout/EndAlignment when a conditional assignment is used on the same line and the end with a safe navigation method call is aligned. (@​koic)
  • #14688: Fix false positives for Layout/EndAlignment when a conditional assignment is used on the same line and the end with a numbered block or it block method call is aligned. (@​koic)
  • #14699: Fix false positives for Lint/RedundantSafeNavigation when the receiver is used outside the singleton method definition scope. (@​koic)
  • #14663: Fix false positives for Style/EndlessMethod when multiline or xstring heredoc is used in method body. (@​koic)
  • #10173: Fix false positives for Style/TrailingCommaInArguments when EnforcedStyleForMultiline is set to consistent_comma and a multiline braced hash argument appears after another argument. (@​koic)
  • #14680: Handle all OptionParser errors when running rubocop with input that causes an error. ([@​dvandersluis][])
  • #14658: Fix incorrect behavior when Layout/LineLength is disabled. (@​koic)
  • #14704: Fix incorrect Position character value in LSP. ([@​tmtm][])
  • #14619: Store remote configuration caches in cache root. ([@​Jack12816][])
  • #14476: Fix Style/ClassAndModuleChildren to skip compact style definitions inside another class or module when EnforcedStyle: nested. (@​rscq)
  • #14281: Update Layout/EndAlignment with EnforcedStyleAlignWith: variable to handle conditionals inside begin nodes properly. ([@​dvandersluis][])

Changes

  • #14662: Add autocorrection for Lint/UselessOr. ([@​r7kamura][])
  • #14668: Exclude Severity from configuration parameters. ([@​r7kamura][])
  • #14684: Make Style/CaseEquality allow regexp case equality where the receiver is a regexp literal. (@​koic)

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.82.1 (2025-12-24)

Bug fixes

  • #14736: Fix an error for Style/TrailingCommaInArguments when EnforcedStyleForMultiline is consistent_comma and keyword arguments use a trailing comma. ([@​koic][])
  • #14737: Fix crash in Layout/RedundantLineBreak when Layout/LineLength is disabled. ([@​ydakuka][])
  • #14719: Fix crash on long lines when Layout/LineLength is disabled. ([@​floriandejonckheere][])
  • #14743: Fix false positives for Layout/MultilineMethodCallIndentation when multiline method chain with block has expected indent width and the method is preceded by splat or double splat. ([@​koic][])
  • #12297: Fix false negative in Layout/IndentationWidth for multiline method chain blocks. ([@​rscq][])
  • #14730: Fix the cache implementation to use consistent cache keys across workers. ([@​byroot][])
  • #14559: Fix false positives for Lint/UselessAssignment when a variable is assigned in loop body and used in loop condition. ([@​ydakuka][])

1.82.0 (2025-12-17)

New features

  • #14655: Add AllowRBSInlineAnnotation option to Layout/LineLength. ([@​koic][])
  • #14569: Add IncludedMacroPatterns configuration option to Style/MethodCallWithArgsParentheses for pattern-based macro method enforcement. ([@​mmenanno][])
  • #14670: Add new cop Style/ModuleMemberExistenceCheck. ([@​lovro-bikic][])
  • #14644: Support TargetRubyVersion 4.0 (experimental). ([@​koic][])

Bug fixes

  • #14649: Fix an error for Lint/LiteralAsCondition when there are literals in multiple branches. ([@​viralpraxis][])
  • #14678: Fix an error when running deprecated rake rubocop:auto_correct task. ([@​koic][])
  • #14650: Fix wrong autocorrect for Lint/RedundantSplatExpansion when splatting a single literal. ([@​earlopain][])
  • #14703: Fix false negatives for Layout/RescueEnsureAlignment when using self class definition. ([@​koic][])
  • #14706: Fix false negatives for Lint/NoReturnInBeginEndBlocks when assigning instance variable, class variable, global variable, or constant. ([@​koic][])
  • #14715: Fix false positives for Layout/EmptyLineAfterGuardClause when a guard clause follows a multiline heredoc in a parenthesized method call. ([@​koic][])
  • #14667: Fix false positives for Layout/EndAlignment when a conditional assignment is used on the same line and the end with a safe navigation method call is aligned. ([@​koic][])
  • #14688: Fix false positives for Layout/EndAlignment when a conditional assignment is used on the same line and the end with a numbered block or it block method call is aligned. ([@​koic][])
  • #14699: Fix false positives for Lint/RedundantSafeNavigation when the receiver is used outside the singleton method definition scope. ([@​koic][])
  • #14663: Fix false positives for Style/EndlessMethod when multiline or xstring heredoc is used in method body. ([@​koic][])
  • #10173: Fix false positives for Style/TrailingCommaInArguments when EnforcedStyleForMultiline is set to consistent_comma and a multiline braced hash argument appears after another argument. ([@​koic][])
  • #14680: Handle all OptionParser errors when running rubocop with input that causes an error. ([@​dvandersluis][])
  • #14658: Fix incorrect behavior when Layout/LineLength is disabled. ([@​koic][])
  • #14704: Fix incorrect Position character value in LSP. ([@​tmtm][])
  • #14619: Store remote configuration caches in cache root. ([@​Jack12816][])
  • #14476: Fix Style/ClassAndModuleChildren to skip compact style definitions inside another class or module when EnforcedStyle: nested. ([@​rscq][])
  • #14281: Update Layout/EndAlignment with EnforcedStyleAlignWith: variable to handle conditionals inside begin nodes properly. ([@​dvandersluis][])

Changes

  • #14662: Add autocorrection for Lint/UselessOr. ([@​r7kamura][])
  • #14668: Exclude Severity from configuration parameters. ([@​r7kamura][])
  • #14684: Make Style/CaseEquality allow regexp case equality where the receiver is a regexp literal. ([@​koic][])
  • #14645: Change Lint/CircularArgumentReference to detect offenses within long assignment chains. ([@​viralpraxis][])
  • #14642: Make Gemspec/RubyVersionGlobalsUsage aware of Ruby::VERSION. ([@​koic][])
  • #14695: Make Layout/EmptyLineAfterMagicComment aware of # rbs_inline magic comment. ([@​koic][])
  • #10147: Make Lint/ElseLayout allow a single-line else body in then single-line conditional. ([@​koic][])

... (truncated)

Commits
  • 5711dcb Cut 1.82.1
  • 4918002 Update Changelog
  • 0479119 [Fix rubocop#14559] Fix false positives for Lint/UselessAssignment when a v...
  • 990121b Optimize cache cleanup routine
  • e06d0c1 [Fix #14743] Fix false positives for Layout/MultilineMethodCallIndentation
  • a6e4adf Merge pull request #14742 from ydakuka/14737/fix_crash_in_layout_redundant_li...
  • 1873836 [Fix rubocop#14737] Fix crash in Layout/RedundantLineBreak when `Layout/Lin...
  • bb2fb48 Merge pull request #14738 from koic/fix_an_error_for_style_trailing_comma_in_...
  • d08ff2e [Fix #14736] Fix an error for Style/TrailingCommaInArguments
  • edca36e Merge pull request #14725 from viralpraxis/fix-layout-line-length-cop-error-i...
  • Additional commits viewable in compare view

Updates toml-rb from 2.2.0 to 4.1.0

Release notes

Sourced from toml-rb's releases.

v4.1.0

What's Changed

Full Changelog: emancu/toml-rb@v4.0.0...v4.1.0

v4.0.0

What's Changed

Full Changelog: emancu/toml-rb@v3.0.1...v4.0.0

v3.0.1

What's Changed

New Contributors

Full Changelog: emancu/toml-rb@v3.0.0...v3.0.1

v3.0.0

The reason for releasing a major version is the fix on #146; even if it's an error, it breaks the previous behaviour that worked for a really long time and I don't want to cause unexpected issues to existing users.

What's Changed

New Contributors

Full Changelog: emancu/toml-rb@v2.2.0...v3.0.0

Commits

Updates rack from 2.1.4 to v3.2.4

Release notes

Sourced from rack's releases.

v3.2.4

No release notes provided.

v3.0.9.1

What's Changed

Full Changelog: rack/rack@v3.0.9...v3.0.9.1

v3.0.9

What's Changed

  • Fix content-length calcuation in Rack:Response#write #2150

Full Changelog: rack/rack@v3.0.8...v3.0.9

v3.0.8

What's Changed

New Contributors

Full Changelog: rack/rack@v3.0.7...v3.0.8

v3.0.7

What's Changed

Full Changelog: rack/rack@v3.0.6.1...v3.0.7

v3.0.6.1

No release notes provided.

v3.0.4.1

Full Changelog: rack/rack@v3.0.4...v3.0.4.1

v3.0.4

Full Changelog: rack/rack@v3.0.3...v3.0.4

v3.0.3

What's Changed

Full Changelog: rack/rack@v3.0.2...v3.0.3

... (truncated)

Changelog

Sourced from rack's changelog.

[3.2.4] - 2025-11-03

Fixed

  • Multipart parser: limit MIME header size check to the unread buffer region to avoid false multipart mime part header too large errors when previously read data accumulates in the scan buffer. (#2392, @​alpaca-tc, @​willnet, @​krororo)

[3.2.3] - 2025-10-10

Security

  • CVE-2025-61780 Improper handling of headers in Rack::Sendfile may allow proxy bypass.
  • CVE-2025-61919 Unbounded read in Rack::Request form parsing can lead to memory exhaustion.

[3.2.2] - 2025-10-07

Security

  • CVE-2025-61772 Multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
  • CVE-2025-61771 Multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)
  • CVE-2025-61770 Unbounded multipart preamble buffering enables DoS (memory exhaustion)

[3.2.1] -- 2025-09-02

Added

  • Add support for streaming bodies when using Rack::Events. (#2375, @​unflxw)

Fixed

  • Fix an issue where a NoMethodError would be raised when using Rack::Events with streaming bodies. (#2375, @​unflxw)

[3.2.0] - 2025-07-31

This release continues Rack's evolution toward a cleaner, more efficient foundation while maintaining backward compatibility for most applications. The breaking changes primarily affect deprecated functionality, so most users should experience a smooth upgrade with improved performance and standards compliance.

SPEC Changes

Added

  • Introduce Rack::VERSION constant. (#2199, [@​ioquatix])
  • ISO-2022-JP encoded parts within MIME Multipart sections of an HTTP request body will now be converted to UTF-8. (#2245, @​nappa)
  • Add Rack::Request#query_parser= to allow setting the query parser to use. (#2349, [@​jeremyevans])
  • Add Rack::Request#form_pairs to access form data as raw key-value pairs, preserving duplicate keys. (#2351, [@​matthewd])

Changed

... (truncated)

Commits
  • 4c24539 Bump patch version.
  • 3ba5e4f Allow Multipart head to span read boundary. (#2392)
  • 32bf888 Bump patch version.
  • e179614 Unbounded read in Rack::Request form parsing can lead to memory exhaustion.
  • 57277b7 Improper handling of proxy headers in Rack::Sendfile may allow proxy bypass.
  • 403b74b Normalize adivsories links.
  • fb395bb Fix handling of Errno::EPIPE in multipart tests.
  • bce149b Bump patch version.
  • 3beacfc Limit amount of retained data when parsing multipart requests
  • 589127f Fix denial of service vulnerbilties in multipart parsing
  • Additional commits viewable in compare view

Bumps the everything group in /bundler-example with 3 updates: [rubocop](https://github.com/rubocop/rubocop), [toml-rb](https://github.com/emancu/toml-rb) and [rack](https://github.com/rack/rack).

Updates `rubocop` from 0.76.0 to 1.82.1
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v0.76.0...v1.82.1)

Updates `toml-rb` from 2.2.0 to 4.1.0
- [Release notes](https://github.com/emancu/toml-rb/releases)
- [Commits](emancu/toml-rb@v2.2.0...v4.1.0)

Updates `rack` from 2.1.4 to v3.2.4
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](rack/rack@f3cf79d...03fc311)
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants