Bump the bundler-dependencies group with 19 updates #1478

dependabot · 2024-09-01T10:43:14Z

Bumps the bundler-dependencies group with 19 updates:

Package	From	To
nokogiri	`1.16.6`	`1.16.7`
pg	`1.5.6`	`1.5.7`
rack	`2.2.9`	`3.1.7`
rails	`7.1.3.4`	`7.1.4`
bootsnap	`1.18.3`	`1.18.4`
net-imap	`0.4.14`	`0.4.15`
brakeman	`6.1.2`	`6.2.1`
erb_lint	`0.5.0`	`0.6.0`
rubocop	`1.65.0`	`1.66.0`
rubocop-rails	`2.25.1`	`2.26.0`
rubocop-rspec	`3.0.3`	`3.0.4`
sorbet	`0.5.11485`	`0.5.11553`
sorbet-runtime	`0.5.11485`	`0.5.11553`
activejob	`7.1.3.4`	`7.1.4`
activerecord	`7.1.3.4`	`7.1.4`
railties	`7.1.3.4`	`7.1.4`
thor	`1.3.1`	`1.3.2`
rspec-rails	`6.1.3`	`6.1.4`
selenium-webdriver	`4.22.0`	`4.24.0`

Updates nokogiri from 1.16.6 to 1.16.7

Release notes

Sourced from nokogiri's releases.

v1.16.7 / 2024-07-27

Dependencies

[CRuby] Vendored libxml2 is updated to v2.12.9, which the upstream release notes state is a security release to address CVE-2024-40896. Nokogiri's maintainers believe this vulnerability does not affect users of Nokogiri, but we advise upgrading at your earliest convenience anyway.

sha256 checksums:

78778d35f165b59513be31c0fe232c63a82cf97626ffba695b5f822e5da1d74b  nokogiri-1.16.7-aarch64-linux.gem
c84cdb9e3aa44c35bbb981b20175838c4b2066c26c5cb118f31f177168a42fc3  nokogiri-1.16.7-arm-linux.gem
276dcea1b988a5b22b5acc1ba901d24b8e908c40b71dccd5d54a2ae279480dad  nokogiri-1.16.7-arm64-darwin.gem
044c45ca46abc2b6135a85ab39a546ff2f0434d43142bc59b83e5b1068876a42  nokogiri-1.16.7-java.gem
01ed785392f9cbdfd45e0e5ef6ad6d2c80a6128672589448f18952168bd68e56  nokogiri-1.16.7-x64-mingw-ucrt.gem
d8fd5c675743b85354c9098117bfa9e703c7cacab8c33e5190104ea8218ad1ec  nokogiri-1.16.7-x64-mingw32.gem
dddbf1c1ef99ce9fab98302b14f8bacb703e6f16e89b99f05ecee8a1fca23664  nokogiri-1.16.7-x86-linux.gem
b6517d995b024739cbb81251a26866d40e1ccb151936b5bb0977e7487f4e617c  nokogiri-1.16.7-x86-mingw32.gem
630732b80fc572690eab50c73a1f18988f3ac401ed0b67ca9956ba2b1e2c3faa  nokogiri-1.16.7-x86_64-darwin.gem
9e1e428641d5942af877c60b418c71163560e9feb4a5c4015f3230a8b86a40f6  nokogiri-1.16.7-x86_64-linux.gem
f819cbfdfb0a7b19c9c52c6f2ca63df0e58a6125f4f139707b586b9511d7fe95  nokogiri-1.16.7.gem

Changelog

Sourced from nokogiri's changelog.

v1.16.7 / 2024-07-27

Dependencies

[CRuby] Vendored libxml2 is updated to v2.12.9, which the upstream release notes state is a security release to address CVE-2024-40896. Nokogiri's maintainers believe this vulnerability does not affect users of Nokogiri, but we advise upgrading at your earliest convenience anyway.

Commits

d8d6ba3 version bump to v1.16.7
76199bb dep: update libxml2 to v2.12.9 (branch v1.16.x) (#3297)
ca92e48 dep: update packaged libxml2 to v2.12.9
See full diff in compare view

Updates pg from 1.5.6 to 1.5.7

Changelog

Sourced from pg's changelog.

v1.5.7 [2024-07-28] Lars Kanis lars@greiz-reinsdorf.de

Remove deprecated use of fptr->fd.#562 Direct access is disallowed since ruby-3.4.

Make pgconn_connect_poll close the socket prior to calling PQconnectPoll. #564 This could result in an exception while connecting when used multi threaded.

Fix several typos and improve spelling in documentation and code. #566

Add missing PG::RollbackTransaction as an option to exit conn.transaction. #560 Usage like in rails: https://api.rubyonrails.org/classes/ActiveRecord/Rollback.html

Don't print a warning when bigdecimal is required on ruby-3.4+ #574

Commits

0ac827c Bump VERSION to 1.5.7
cdb5202 Update release notes for pg-1.5.7
5935b15 Merge pull request #575 from larskanis/appv1
e5f1630 CI: Fix appveyor build by switching to x64 platform
8e62c81 Fix ruby warning
d17123c Merge pull request #574 from larskanis/bigdeci
a629d14 Don't print a warning when bigdecimal is required on ruby-3.4+
1a94b12 Add comment to Gemfile reg. bigdecimal
3719759 Add ostruct as a development gem as a preparation for ruby-3.5
69551bd Add release notes for pg-1.5.7
Additional commits viewable in compare view

Updates rack from 2.2.9 to 3.1.7

Release notes

Sourced from rack's releases.

v3.0.9.1

What's Changed

Fixed ReDoS in Accept header parsing [CVE-2024-26146]

Fixed ReDoS in Content Type header parsing [CVE-2024-25126]

Reject Range headers which are too large [CVE-2024-26141]

Full Changelog: rack/rack@v3.0.9...v3.0.9.1

v3.0.9

What's Changed

Fix content-length calcuation in Rack:Response#write #2150

Full Changelog: rack/rack@v3.0.8...v3.0.9

v3.0.8

What's Changed

Backport "Fix some unused variable verbose warnings" by @skipkayhil in rack/rack#2084

New Contributors

@skipkayhil made their first contribution in rack/rack#2084

Full Changelog: rack/rack@v3.0.7...v3.0.8

v3.0.7

What's Changed

Backport "Make query parameters without = have nil values". by @jeremyevans in rack/rack#2060

Full Changelog: rack/rack@v3.0.6.1...v3.0.7

v3.0.6.1

No release notes provided.

v3.0.4.1

Full Changelog: rack/rack@v3.0.4...v3.0.4.1

v3.0.4

Full Changelog: rack/rack@v3.0.3...v3.0.4

v3.0.3

What's Changed

Release v3.0.3 by @ioquatix in rack/rack#2000

Full Changelog: rack/rack@v3.0.2...v3.0.3

v3.0.2

Full Changelog: rack/rack@v3.0.1...v3.0.2

Changelog

Sourced from rack's changelog.

[3.1.7] - 2024-07-11

Fixed

Do not remove escaped opening/closing quotes for content-disposition filenames. (#2229, [@jeremyevans])

Fix encoding setting for non-binary IO-like objects in MockRequest#env_for. (#2227, [@jeremyevans])

Rack::Response should not generate invalid content-length header. (#2219, [@ioquatix])

Allow empty PATH_INFO. (#2214, [@ioquatix])

[3.1.6] - 2024-07-03

Fixed

Fix several edge cases in Rack::Request#parse_http_accept_header's implementation. (#2226, [@ioquatix])

[3.1.5] - 2024-07-02

Security

Fix potential ReDoS attack in Rack::Request#parse_http_accept_header. (GHSA-cj83-2ww7-mvq7, @dwisiswant0)

[3.1.4] - 2024-06-22

Fixed

Fix Rack::Lint matching some paths incorrectly as authority form. (#2220, [@ioquatix])

[3.1.3] - 2024-06-12

Fixed

Fix passing non-strings to Rack::Utils.escape_html. (#2202, [@earlopain])

Rack::MockResponse gracefully handles empty cookies (#2203 [@wynksaiddestroy])

[3.1.2] - 2024-06-11

Rack::Response will take in to consideration chunked encoding responses (#2204, [@tenderlove])

[3.1.1] - 2024-06-11

Oops! I shouldn't have shipped that

[3.1.0] - 2024-06-11

⚠️ This release includes several breaking changes. Refer to the Removed section below for the list of deprecated methods that have been removed in this release.

Rack v3.1 is primarily a maintenance release that removes features deprecated in Rack v3.0. Alongside these removals, there are several improvements to the Rack SPEC, mainly focused on enhancing input and output handling. These changes aim to make Rack more efficient and align better with the requirements of server implementations and relevant HTTP specifications.

SPEC Changes

... (truncated)

Commits

4bb2f72 Bump patch version.
1c1e413 Ignore external tests directory.
b4a1036 Prepare for 3.1.7 release.
d0da91b Add more external tests.
f6f1510 Improve Rack::Response content-length header generation. (#2219)
fb339e0 Fix encoding setting for non-binary IO-like objects in MockRequest#env_for
e21872d Do not remove escaped opening/closing quotes for content-disposition filenames
5c3d79f Synchronize changelog with HEAD.
bca33b4 Allow empty PATH_INFO. (#2214) (#2234)
98aa947 Bump patch version.
Additional commits viewable in compare view

Updates rails from 7.1.3.4 to 7.1.4

Release notes

Sourced from rails's releases.

7.1.4

Active Support
Improve compatibility for ActiveSupport::BroadcastLogger.

Máximo Mussini

Pass options along to write_entry in handle_expired_entry method.

Graham Cooper

Fix Active Support configurations deprecations.

fatkodima

Fix teardown callbacks.

Tristan Starck

BacktraceCleaner silence core internal methods by default.

Jean Boussier
Fix delegate_missing_to allow_nil: true when called with implict self
class Person
  delegate_missing_to :address, allow_nil: true
def address
nil
end
def berliner?
city == "Berlin"
end
end
Person.new.city # => nil
Person.new.berliner? # undefined local variable or method `city' for an instance of Person (NameError)
Jean Boussier
Work around a Ruby bug that can cause a VM crash.

This would happen if using TaggerLogger with a Proc formatter on which you called object_id.

... (truncated)

Commits

6f57590 Preparing for 7.1.4 release
63fe89d Sync changelog
8d62955 Merge pull request #52585 from Shopify/fix-docs-linting
6036b65 Merge pull request #52138 from skipkayhil/hm-rack-input-is-optional
578eb9a Move the rewind code closer to the reason why we need to rewind
fef23ff Merge pull request #52281 from jagthedrummer/jeremy/action-text-content-trix-fix
128b5b0 Merge pull request #52631 from zenspider/zenspider/minitest-cleanup
62abd09 Merge pull request #52619 from fatkodima/eager-load-nil-associations
dbc560d Merge pull request #52609 from rails/rm-minitest
6a14308 Merge pull request #52591 from fatkodima/fix-create_table-with-auto_increment
Additional commits viewable in compare view

Updates bootsnap from 1.18.3 to 1.18.4

Changelog

Sourced from bootsnap's changelog.

1.18.4

Allow using bootsnap without bundler. See #488.

Fix startup failure if the cache directory points to a broken symlink.

Commits

cae219a Release 1.18.4
407bdef Merge pull request #489 from Shopify/fix-load-error
7afa951 Fix bootsnap setup in environments without bundler
c5513d9 Merge pull request #487 from Uaitt/update-gh-action-versions
65691ca Update GitHub actions versions
156b8c9 Merge pull request #485 from Uaitt/changelog-typo
e76fe38 Merge pull request #486 from Uaitt/correct-rubocop-offenses
9ec8d70 Correct Rubocop offenses
47ad134 Correct a typo present in the CHANGELOG
f627992 Add --version flag
Additional commits viewable in compare view

Updates net-imap from 0.4.14 to 0.4.15

Release notes

Sourced from net-imap's releases.

v0.4.15

What's Changed

Fixed

🐛 Fix #send_data to send DateTime as time by @taku0 in ruby/net-imap#313

New Contributors

@taku0 made their first contribution in ruby/net-imap#313

Full Changelog: ruby/net-imap@v0.4.14...v0.4.15

Commits

eea091e 🔖 Bump version to 0.4.15
34f4bc3 🐛 Fix #send_data to send DateTime as time
See full diff in compare view

Updates brakeman from 6.1.2 to 6.2.1

Release notes

Sourced from brakeman's releases.

6.2.1

Add optional support for Prism parser (use --prism)

Handle parallel assignment with splats (#1833)

Warn about unscoped finds with find_by! (#1786)

Add initial Rails 8 support (Ron Shinall)

Add support for symbolic links (Lu Zhu)

Support YAML aliases in secret configs (Chedli Bourguiba)

Add --show-ignored option (Gabriel Arcangel Zayas)

Treat ::X and X the same, for now (Jill Klang)

Remediation advice for command injection Nicholas Barone

Fix compatibility with default frozen string literals (Jean Boussier)

Fix Ruby warnings in test suite (Jean Boussier)

Changelog

Sourced from brakeman's changelog.

6.2.1 - 2024-08-22

Just a packaging fix for brakeman.gem

6.2.0 - 2024-08-22

Add --show-ignored option (Gabriel Zayas)

Add optional support for Prism parser

Warn about unscoped finds with find_by!

Treat ::X and X the same, for now (Jill Klang)

Fix compatibility with default frozen string literals (Jean Boussier)

Remediation advice for command injection (Nicholas Barone)

Fix Ruby warnings in test suite (Jean Boussier)

Support YAML aliases in secret configs (Chedli Bourguiba)

Add initial Rails 8 support (Ron Shinall)

Handle mass assignment with splats

Add support for symbolic links (Lu Zhu)

Commits

281e580 Bump to 6.2.1
a7478ea Do not package strscan in gem
4f47cad Bump to 6.2.0
833afc1 Update CHANGES
1f7bbad Merge pull request #1861 from gazayas/features/show-ignored-flag
5d40a44 Show ignored warnings at end of report text, explicitly return output string
3203739 Improve title for show ignored flag
c83406e Update CHANGES
c8c96d5 Add show ignored flag test to options tests
e1d32ce Add --show-ignored flag
Additional commits viewable in compare view

Updates erb_lint from 0.5.0 to 0.6.0

Release notes

Sourced from erb_lint's releases.

v0.6.0

What's Changed

Update README code example for writing Custom linters with correct syntax by @andapopovici in Shopify/erb_lint#335

Add GitLab reporter by @matteeyah in Shopify/erb_lint#343

Add --show-linter-names option by @andyw8 in Shopify/erb_lint#340

Remove deprecated Cop.all usage by @ryanfb in Shopify/erb_lint#358

Internal changes

Add Ruby 3.3 to CI matrix by @m-nakamura145 in Shopify/erb_lint#337

Centralize Ruby Version to .ruby-version by @george-ma in Shopify/erb_lint#345

New Contributors

@andapopovici made their first contribution in Shopify/erb_lint#335

@m-nakamura145 made their first contribution in Shopify/erb_lint#337

@matteeyah made their first contribution in Shopify/erb_lint#343

@george-ma made their first contribution in Shopify/erb_lint#345

@andyw8 made their first contribution in Shopify/erb_lint#340

@ryanfb made their first contribution in Shopify/erb_lint#358

Full Changelog: Shopify/erb_lint@v0.5.0...v0.6.0

Commits

d091313 v0.6.0 (#365)
dc678dc Bump rexml from 3.2.8 to 3.3.2 in the bundler group (#364)
0d39442 Remove deprecated Cop.all usage (#358)
38e1129 Drop EOL Ruby versions
a3f0d44 Stop testing against Rubocop < 0.87
b303e2a Switch from deprecated Cop.all API to Rubocop v1 Registry.all
f82b3f7 Merge pull request #340 from andyw8/andyw8/add-linter-names-option
ba09d0b Add linter names option
a9c1e64 Bump rexml from 3.2.6 to 3.2.8 in the bundler group across 1 directory (#352)
f31f100 Centralize Ruby Version to .ruby-version (#345)
Additional commits viewable in compare view

Updates rubocop from 1.65.0 to 1.66.0

Release notes

Sourced from rubocop's releases.

RuboCop 1.66

New features

#13077: Add new global StringLiteralsFrozenByDefault option for correct analysis with RUBYOPT=--enable=frozen-string-literal. (@earlopain)

#13080: Add new DocumentationExtension global option to serve documentation with extensions different than .html. (@earlopain)

#13074: Add new Lint/UselessNumericOperation cop to check for inconsequential numeric operations. (@zopolis4)

#13061: Add new Style/RedundantInterpolationUnfreeze cop to check for dup and @+ on interpolated strings in Ruby >= 3.0. (@earlopain)

Bug fixes

#13093: Fix an error for Lint/ImplicitStringConcatenation when implicitly concatenating a string literal with a line break and string interpolation. ([@koic][])

#13098: Fix an error for Style/IdenticalConditionalBranches when handling empty case branches. ([@koic][])

#13113: Fix an error for Style/IfWithSemicolon when a nested if with a semicolon is used. ([@koic][])

#13097: Fix an error for Style/InPatternThen when using alternative pattern matching deeply. ([@koic][])

#13159: Fix an error for Style/OneLineConditional when using if/then/else/end with multiple expressions in the then body. ([@koic][])

#13092: Fix an incorrect autocorrect for Layout/EmptyLineBetweenDefs when two method definitions are on the same line separated by a semicolon. ([@koic][])

#13116: Fix an incorrect autocorrect for Style/IfWithSemicolon when a single-line if/;/end has an argument in the then body expression. ([@koic][])

#13161: Fix incorrect autocorrect for Style/IfWithSemicolon when using multiple expressions in the else body. ([@koic][])

#13132: Fix incorrect autocorrect for Style/TrailingBodyOnMethodDefinition when an expression precedes a method definition on the same line with a semicolon. ([@koic][])

#13164: Fix incorrect autocorrect behavior for Layout/BlockAlignment when EnforcedStyleAlignWith: either (default). ([@koic][])

#13087: Fix an incorrect autocorrect for Style/MultipleComparison when expression with more comparisons precedes an expression with less comparisons. ([@fatkodima][])

#13172: Fix an error for Layout/EmptyLinesAroundExceptionHandlingKeywords when ensure or else and end are on the same line. ([@koic][])

#13107: Fix an error for Lint/ImplicitStringConcatenation when there are multiple adjacent string interpolation literals on the same line. ([@koic][])

#13111: Fix an error for Style/GuardClause when if clause is empty and correction would not fit on single line because of Layout/LineLength. (@earlopain)

#13137: Fix an error for Style/ParallelAssignment when using __FILE__. (@earlopain)

#13143: Fix an error during TargetRubyVersion detection if the gemspec is not valid syntax. (@earlopain)

#13131: Fix false negatives for Lint/Void when using ensure, defs and numblock. ([@vlad-pisanov][])

#13174: Fix false negatives for Style/MapIntoArray when initializing the destination using Array[], Array([]), or Array.new([]). ([@vlad-pisanov][])

#13173: Fix false negatives for Style/EmptyLiteral when using Array[], Hash[], Array.new([]) and Hash.new([]). ([@vlad-pisanov][])

#13126: Fix a false positive for Style/Alias when using multiple alias in def. ([@koic][])

#13085: Fix a false positive for Style/EmptyElse when a comment-only else is used after elsif and AllowComments: true is set. ([@koic][])

#13118: Fix a false positive for Style/MapIntoArray when splatting. (@earlopain)

#13105: Fix false positives for Style/ArgumentsForwarding when forwarding kwargs/block arg with non-matching additional args. ([@koic][])

#13139: Fix false positives for Style/RedundantCondition when using modifier if or unless. ([@koic][])

#13134: Fix false negative for Lint/Void when using using frozen literals. ([@vlad-pisanov][])

#13148: Fix incorrect autocorrect for Lint/EmptyConditionalBody when missing elsif body with end on the same line. ([@koic][])

#13109: Fix an error for the Lockfile parser when it contains incompatible BUNDLED WITH versions. (@earlopain)

#13112: Fix detection of TargetRubyVersion through the gemfile if the gemfile ruby version is below 2.7. (@earlopain)

#13155: Fixes an error when the server cache directory has too long path, causing rubocop to fail even with caching disabled. ([@protocol7][])

Changes

#13050: Allow get_!, set_!, get_?, set_?, get_=, and set_= in Naming/AccessorMethodName. ([@koic][])

#13103: Make Lint/UselessAssignment autocorrection safe. ([@koic][])

#13099: Make Style/RedundantRegexpArgument respect the EnforcedStyle of Style/StringLiterals. ([@koic][])

#13165: Remove dependency on the rexml gem. ([@bquorning][])

#13090: Require RuboCop AST 1.32.0+ to use RuboCop::AST::RationalNode. ([@koic][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.66.0 (2024-08-31)

New features

#13077: Add new global StringLiteralsFrozenByDefault option for correct analysis with RUBYOPT=--enable=frozen-string-literal. ([@earlopain][])

#13080: Add new DocumentationExtension global option to serve documentation with extensions different than .html. ([@earlopain][])

#13074: Add new Lint/UselessNumericOperation cop to check for inconsequential numeric operations. ([@zopolis4][])

#13061: Add new Style/RedundantInterpolationUnfreeze cop to check for dup and @+ on interpolated strings in Ruby >= 3.0. ([@earlopain][])

Bug fixes

#13093: Fix an error for Lint/ImplicitStringConcatenation when implicitly concatenating a string literal with a line break and string interpolation. ([@koic][])

#13098: Fix an error for Style/IdenticalConditionalBranches when handling empty case branches. ([@koic][])

#13113: Fix an error for Style/IfWithSemicolon when a nested if with a semicolon is used. ([@koic][])

#13097: Fix an error for Style/InPatternThen when using alternative pattern matching deeply. ([@koic][])

#13159: Fix an error for Style/OneLineConditional when using if/then/else/end with multiple expressions in the then body. ([@koic][])

#13092: Fix an incorrect autocorrect for Layout/EmptyLineBetweenDefs when two method definitions are on the same line separated by a semicolon. ([@koic][])

#13116: Fix an incorrect autocorrect for Style/IfWithSemicolon when a single-line if/;/end has an argument in the then body expression. ([@koic][])

#13161: Fix incorrect autocorrect for Style/IfWithSemicolon when using multiple expressions in the else body. ([@koic][])

#13132: Fix incorrect autocorrect for Style/TrailingBodyOnMethodDefinition when an expression precedes a method definition on the same line with a semicolon. ([@koic][])

#13164: Fix incorrect autocorrect behavior for Layout/BlockAlignment when EnforcedStyleAlignWith: either (default). ([@koic][])

#13087: Fix an incorrect autocorrect for Style/MultipleComparison when expression with more comparisons precedes an expression with less comparisons. ([@fatkodima][])

#13172: Fix an error for Layout/EmptyLinesAroundExceptionHandlingKeywords when ensure or else and end are on the same line. ([@koic][])

#13107: Fix an error for Lint/ImplicitStringConcatenation when there are multiple adjacent string interpolation literals on the same line. ([@koic][])

#13111: Fix an error for Style/GuardClause when if clause is empty and correction would not fit on single line because of Layout/LineLength. ([@earlopain][])

#13137: Fix an error for Style/ParallelAssignment when using __FILE__. ([@earlopain][])

#13143: Fix an error during TargetRubyVersion detection if the gemspec is not valid syntax. ([@earlopain][])

#13131: Fix false negatives for Lint/Void when using ensure, defs and numblock. ([@vlad-pisanov][])

#13174: Fix false negatives for Style/MapIntoArray when initializing the destination using Array[], Array([]), or Array.new([]). ([@vlad-pisanov][])

#13173: Fix false negatives for Style/EmptyLiteral when using Array[], Hash[], Array.new([]) and Hash.new([]). ([@vlad-pisanov][])

#13126: Fix a false positive for Style/Alias when using multiple alias in def. ([@koic][])

#13085: Fix a false positive for Style/EmptyElse when a comment-only else is used after elsif and AllowComments: true is set. ([@koic][])

#13118: Fix a false positive for Style/MapIntoArray when splatting. ([@earlopain][])

#13105: Fix false positives for Style/ArgumentsForwarding when forwarding kwargs/block arg with non-matching additional args. ([@koic][])

#13139: Fix false positives for Style/RedundantCondition when using modifier if or unless. ([@koic][])

#13134: Fix false negative for Lint/Void when using using frozen literals. ([@vlad-pisanov][])

#13148: Fix incorrect autocorrect for Lint/EmptyConditionalBody when missing elsif body with end on the same line. ([@koic][])

#13109: Fix an error for the Lockfile parser when it contains incompatible BUNDLED WITH versions. ([@earlopain][])

#13112: Fix detection of TargetRubyVersion through the gemfile if the gemfile ruby version is below 2.7. ([@earlopain][])

#13155: Fixes an error when the server cache directory has too long path, causing rubocop to fail even with caching disabled. ([@protocol7][])

Changes

#13050: Allow get_!, set_!, get_?, set_?, get_=, and set_= in Naming/AccessorMethodName. ([@koic][])

#13103: Make Lint/UselessAssignment autocorrection safe. ([@koic][])

#13099: Make Style/RedundantRegexpArgument respect the EnforcedStyle of Style/StringLiterals. ([@koic][])

#13165: Remove dependency on the rexml gem. ([@bquorning][])

#13090: Require RuboCop AST 1.32.0+ to use RuboCop::AST::RationalNode. ([@koic][])

1.65.1 (2024-08-01)

... (truncated)

Commits

c8edd7d Cut 1.66
9c106a5 Update Changelog
1e4b4c8 Add new Lint/UselessNumericOperation cop
d6b05cd [Fix #13150] Don't consider get_!, set_!, get_?, set_?, get_=, and ...
9e1e493 [Fix #13061] Add new Style/RedundantInterpolationUnfreeze cop
0431023 Fix false negatives for Style/EmptyLiteral when using Array[], Hash[], ...
a2ef5b4 Fix false negatives for Style/MapIntoArray when initializing the destinatio...
2382ecb Fix false negative for Lint/Void when using using frozen literals
be6e656 Merge pull request #13172 from koic/fix_error_for_layout_empty_lines_around_e...
d8e0c87 Merge pull request #13175 from Earlopain/no-forwardable
Additional commits viewable in compare view

Updates rubocop-rails from 2.25.1 to 2.26.0

Release notes

Sourced from rubocop-rails's releases.

RuboCop Rails 2.26.0

New features

#1238: Add new Rails/EnumSyntax cop. (@maxprokopiev, @koic)

#1309: Support Rails 7 syntax for Rails/EnumHash cop. (@ytjmt)

#1298: Support Rails 7 syntax for Rails/EnumUniqueness cop. (@ytjmt)

Bug fixes

#1335: Fix an error for Rails/BulkChangeTable when the block for change_table is empty. (@earlopain)

#1325: Fix an error for Rails/RenderPlainText when the content type is passed as a constant. (@earlopain)

#1337: Fix an error for Rails/Validation when passing no arguments. (@earlopain)

#1330: Fix an error for Rails/WhereNot when using placeholder without second argument. (@earlopain)

#1311: Fix false negatives for Rails/ActionControllerFlashBeforeRender when using implicit render or rescue blocks. (@tldn0718)

#1313: Fix false positives for Rails/CompactBlank when using collection.reject!. (@koic)

#1319: Fix a false positive for Rails/RedundantPresenceValidationOnBelongsTo when removing presence would leave other non-validation options like allow_blank without validations. (@earlopain)

#1306: Make Rails/PluralizationGrammar aware of byte methods. (@earlopain)

#1302: Allow params receiver by default for Style/CollectionMethods. (@koic)

#1321: Fix an error for Rails/WhereEquals when the second argument is not yet typed (where("foo = ?", )). (@earlopain)

Changes

#1308: Change Rails/CompactBlank to handle select(&:present?). (@fatkodima)

#1303: Change Rails/IgnoredSkipActionFilterOption to handle multiple callbacks. (@fatkodima)

#1199: Make Rails/WhereEquals aware of where.not(...). (@earlopain)

#1003: Change Rails/RootPathnameMethods to detect offenses on Dir.[]. (@r7kamura)

Changelog

Sourced from rubocop-rails's changelog.

2.26.0 (2024-08-24)

New features

#1238: Add new Rails/EnumSyntax cop. ([@maxprokopiev][], [@koic][])

#1309: Support Rails 7 syntax for Rails/EnumHash cop. ([@ytjmt][])

#1298: Support Rails 7 syntax for Rails/EnumUniqueness cop. ([@ytjmt][])

Bug fixes

#1335: Fix an error for Rails/BulkChangeTable when the block for change_table is empty. ([@earlopain][])

#1325: Fix an error for Rails/RenderPlainText when the content type is passed as a constant. ([@earlopain][])

#1337: Fix an error for Ra... Description has been truncated

Bumps the bundler-dependencies group with 19 updates: | Package | From | To | | --- | --- | --- | | [nokogiri](https://github.com/sparklemotion/nokogiri) | `1.16.6` | `1.16.7` | | [pg](https://github.com/ged/ruby-pg) | `1.5.6` | `1.5.7` | | [rack](https://github.com/rack/rack) | `2.2.9` | `3.1.7` | | [rails](https://github.com/rails/rails) | `7.1.3.4` | `7.1.4` | | [bootsnap](https://github.com/Shopify/bootsnap) | `1.18.3` | `1.18.4` | | [net-imap](https://github.com/ruby/net-imap) | `0.4.14` | `0.4.15` | | [brakeman](https://github.com/presidentbeef/brakeman) | `6.1.2` | `6.2.1` | | [erb_lint](https://github.com/Shopify/erb-lint) | `0.5.0` | `0.6.0` | | [rubocop](https://github.com/rubocop/rubocop) | `1.65.0` | `1.66.0` | | [rubocop-rails](https://github.com/rubocop/rubocop-rails) | `2.25.1` | `2.26.0` | | [rubocop-rspec](https://github.com/rubocop/rubocop-rspec) | `3.0.3` | `3.0.4` | | [sorbet](https://github.com/sorbet/sorbet) | `0.5.11485` | `0.5.11553` | | [sorbet-runtime](https://github.com/sorbet/sorbet) | `0.5.11485` | `0.5.11553` | | [activejob](https://github.com/rails/rails) | `7.1.3.4` | `7.1.4` | | [activerecord](https://github.com/rails/rails) | `7.1.3.4` | `7.1.4` | | [railties](https://github.com/rails/rails) | `7.1.3.4` | `7.1.4` | | [thor](https://github.com/rails/thor) | `1.3.1` | `1.3.2` | | [rspec-rails](https://github.com/rspec/rspec-rails) | `6.1.3` | `6.1.4` | | [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.22.0` | `4.24.0` | Updates `nokogiri` from 1.16.6 to 1.16.7 - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md) - [Commits](sparklemotion/nokogiri@v1.16.6...v1.16.7) Updates `pg` from 1.5.6 to 1.5.7 - [Changelog](https://github.com/ged/ruby-pg/blob/master/History.md) - [Commits](ged/ruby-pg@v1.5.6...v1.5.7) Updates `rack` from 2.2.9 to 3.1.7 - [Release notes](https://github.com/rack/rack/releases) - [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md) - [Commits](rack/rack@v2.2.9...v3.1.7) Updates `rails` from 7.1.3.4 to 7.1.4 - [Release notes](https://github.com/rails/rails/releases) - [Commits](rails/rails@v7.1.3.4...v7.1.4) Updates `bootsnap` from 1.18.3 to 1.18.4 - [Changelog](https://github.com/Shopify/bootsnap/blob/main/CHANGELOG.md) - [Commits](Shopify/bootsnap@v1.18.3...v1.18.4) Updates `net-imap` from 0.4.14 to 0.4.15 - [Release notes](https://github.com/ruby/net-imap/releases) - [Commits](ruby/net-imap@v0.4.14...v0.4.15) Updates `brakeman` from 6.1.2 to 6.2.1 - [Release notes](https://github.com/presidentbeef/brakeman/releases) - [Changelog](https://github.com/presidentbeef/brakeman/blob/main/CHANGES.md) - [Commits](presidentbeef/brakeman@v6.1.2...v6.2.1) Updates `erb_lint` from 0.5.0 to 0.6.0 - [Release notes](https://github.com/Shopify/erb-lint/releases) - [Commits](Shopify/erb_lint@v0.5.0...v0.6.0) Updates `rubocop` from 1.65.0 to 1.66.0 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.65.0...v1.66.0) Updates `rubocop-rails` from 2.25.1 to 2.26.0 - [Release notes](https://github.com/rubocop/rubocop-rails/releases) - [Changelog](https://github.com/rubocop/rubocop-rails/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop-rails@v2.25.1...v2.26.0) Updates `rubocop-rspec` from 3.0.3 to 3.0.4 - [Release notes](https://github.com/rubocop/rubocop-rspec/releases) - [Changelog](https://github.com/rubocop/rubocop-rspec/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop-rspec@v3.0.3...v3.0.4) Updates `sorbet` from 0.5.11485 to 0.5.11553 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `sorbet-runtime` from 0.5.11485 to 0.5.11553 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `activejob` from 7.1.3.4 to 7.1.4 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.1/activejob/CHANGELOG.md) - [Commits](rails/rails@v7.1.3.4...v7.1.4) Updates `activerecord` from 7.1.3.4 to 7.1.4 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.1/activerecord/CHANGELOG.md) - [Commits](rails/rails@v7.1.3.4...v7.1.4) Updates `railties` from 7.1.3.4 to 7.1.4 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.2.1/railties/CHANGELOG.md) - [Commits](rails/rails@v7.1.3.4...v7.1.4) Updates `thor` from 1.3.1 to 1.3.2 - [Release notes](https://github.com/rails/thor/releases) - [Commits](rails/thor@v1.3.1...v1.3.2) Updates `rspec-rails` from 6.1.3 to 6.1.4 - [Changelog](https://github.com/rspec/rspec-rails/blob/main/Changelog.md) - [Commits](rspec/rspec-rails@v6.1.3...v6.1.4) Updates `selenium-webdriver` from 4.22.0 to 4.24.0 - [Release notes](https://github.com/SeleniumHQ/selenium/releases) - [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES) - [Commits](SeleniumHQ/selenium@selenium-4.22.0...selenium-4.24.0) --- updated-dependencies: - dependency-name: nokogiri dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: pg dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: rack dependency-type: direct:production update-type: version-update:semver-major dependency-group: bundler-dependencies - dependency-name: rails dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: bootsnap dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: net-imap dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: brakeman dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler-dependencies - dependency-name: erb_lint dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler-dependencies - dependency-name: rubocop dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler-dependencies - dependency-name: rubocop-rails dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler-dependencies - dependency-name: rubocop-rspec dependency-type: direct:development update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: sorbet dependency-type: direct:development update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: sorbet-runtime dependency-type: direct:development update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: activejob dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: activerecord dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: railties dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: thor dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: rspec-rails dependency-type: direct:development update-type: version-update:semver-patch dependency-group: bundler-dependencies - dependency-name: selenium-webdriver dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2024-09-14T17:44:11Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Sep 1, 2024

dependabot bot closed this Sep 14, 2024

dependabot bot deleted the dependabot/bundler/bundler-dependencies-243d022ef4 branch September 14, 2024 17:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the bundler-dependencies group with 19 updates #1478

Bump the bundler-dependencies group with 19 updates #1478

dependabot bot commented on behalf of github Sep 1, 2024 •

edited

Loading

dependabot bot commented on behalf of github Sep 14, 2024

Bump the bundler-dependencies group with 19 updates #1478

Bump the bundler-dependencies group with 19 updates #1478

Conversation

dependabot bot commented on behalf of github Sep 1, 2024 • edited Loading

v1.16.7 / 2024-07-27

Dependencies

v1.16.7 / 2024-07-27

Dependencies

v1.5.7 [2024-07-28] Lars Kanis lars@greiz-reinsdorf.de

v3.0.9.1

What's Changed

v3.0.9

What's Changed

v3.0.8

What's Changed

New Contributors

v3.0.7

What's Changed

v3.0.6.1

v3.0.4.1

v3.0.4

v3.0.3

What's Changed

v3.0.2

[3.1.7] - 2024-07-11

Fixed

[3.1.6] - 2024-07-03

Fixed

[3.1.5] - 2024-07-02

Security

[3.1.4] - 2024-06-22

Fixed

[3.1.3] - 2024-06-12

Fixed

[3.1.2] - 2024-06-11

[3.1.1] - 2024-06-11

[3.1.0] - 2024-06-11

SPEC Changes

7.1.4

Active Support

1.18.4

v0.4.15

What's Changed

Fixed

New Contributors

6.2.1

6.2.1 - 2024-08-22

6.2.0 - 2024-08-22

v0.6.0

What's Changed

Internal changes

New Contributors

RuboCop 1.66

New features

Bug fixes

Changes

1.66.0 (2024-08-31)

New features

Bug fixes

Changes

1.65.1 (2024-08-01)

RuboCop Rails 2.26.0

New features

Bug fixes

Changes

2.26.0 (2024-08-24)

New features

Bug fixes

dependabot bot commented on behalf of github Sep 14, 2024

dependabot bot commented on behalf of github Sep 1, 2024 •

edited

Loading