Bump the bundler group with 8 updates by dependabot[bot] · Pull Request #84 · rubyatscale/danger-packwerk

dependabot · 2026-09-01T20:45:42Z

Bumps the bundler group with 8 updates:

Package	From	To
packwerk	`7fa7c51`	`31e5342`
rack	`3.2.6`	`3.2.7`
rubocop	`1.88.2`	`1.90.0`
rubocop-performance	`1.26.1`	`1.27.0`
rubocop-sorbet	`0.13.2`	`0.15.0`
sorbet	`0.6.13371`	`0.6.13454`
code_ownership	`2.1.3`	`2.1.4`
sorbet-runtime	`0.6.13371`	`0.6.13454`

Updates packwerk from 7fa7c51 to 31e5342

Commits

31e5342 Prepare for 3.3.1
580b1e7 Merge pull request #472 from Shopify/rmf-free-this-gem
aea187b Allow parallel 2.x to be used
2b3995a Merge pull request #465 from Shopify/dependabot/bundler/nokogiri-1.19.4
7e241ec Merge pull request #464 from Shopify/dependabot/github_actions/actions/checko...
fe6e274 Merge pull request #466 from Shopify/dependabot/bundler/concurrent-ruby-1.3.7
c4f2cc4 Merge pull request #471 from Hashim1999164/fix/skip-dynamic-namespace-in-clas...
32d8f28 Skip dynamic namespaces in class definitions so packwerk does not crash.
7b04959 Merge pull request #469 from Shopify/dependabot/bundler/rails-html-sanitizer-...
4483921 Merge pull request #468 from Shopify/dependabot/bundler/loofah-2.25.2
Additional commits viewable in compare view

Updates rack from 3.2.6 to 3.2.7

Changelog

Sourced from rack's changelog.

Changelog

All notable changes to this project will be documented in this file. For info on how to format all future additions to this file please reference Keep A Changelog.

Unreleased

SPEC Changes

Define rack.response_finished callback arguments more strictly. (#2365, @skipkayhil)

Added

Add Rack::Files#assign_headers to allow overriding how the configured file headers are set. (#2377, @codergeek121)

Add support for rack.response_finished to Rack::TempfileReaper. (#2363, @skipkayhil)

Add support for streaming bodies when using Rack::Events. (#2375, @unflxw)

Add deflaters option to Rack::Deflater to enable custom compression algorithms like zstd. (#2168, @alexanderadam)

Add Rack::Request#prefetch? for identifying requests with Sec-Purpose: prefetch header set. (#2405, @glaszig)

Add rack.request.config environment key to configure Rack::Request behavior.

Add Rack::Request#headers for simpler access to request headers by header name. (#1881, @jeremyevans)

Allow disabling the Rack::QueryParser bytesize and params limits by passing nil for the bytesize_limit/params_limit keyword arguments, or a negative value for RACK_QUERY_PARSER_BYTESIZE_LIMIT/RACK_QUERY_PARSER_PARAMS_LIMIT. (#2492, @alpaca-tc)

Changed

Require Ruby 2.7.3 or newer and replace ruby2_keywords with argument forwarding.

Raise before exceeding a part limit, not after. (#2362, @matthew-puku)

Rack::Deflater now uses a fixed GZip mtime value. (#2372, @bensheldon)

Multipart parser drops support for RFC 2231 filename* parameter (prohibited by RFC 7578) and now properly handles UTF-8 encoded filenames via percent-encoding and direct UTF-8 bytes. (#2398, @wtn)

The query parser now raises Rack::QueryParser::IncompatibleEncodingError if we try to parse params that are not ASCII compatible. (#2416, @bquorning)

The mime type for .pem files has been changed from application/x-x509-ca-cert to application/x-pem-file. (#2435, @jeremyevans)

Freeze Rack::Auth::AbstractRequest::AUTHORIZATION_KEYS, Rack::Utils::STATUS_WITH_NO_ENTITY_BODY, Rack::Multipart::Parser::EMPTY, Rack::Utils.default_query_parser, and internal constants in Rack::Lint. (#2428, @jhawthorn)

Fixed

Rack::Multipart::UploadedFile now delegates keyword arguments to the wrapped tempfile. Calls such as uploaded_file.readlines(chomp: true) raised TypeError on Ruby 3.0+. (#2481, #2499, @SeanLF)

Multipart parser: limit MIME header size check to the unread buffer region to avoid false multipart mime part header too large errors when previously read data accumulates in the scan buffer. (#2392, @alpaca-tc, @willnet, @krororo)

Multipart parser: add nil guards to prevent NoMethodError crashes when handling Content-Disposition without parameters and Content-Type parameters without '='. (@haruki0409)

Commits

70d2e10 Bump patch version.
9b31adf Fix specs on Ruby 2.4
7c0abab Do not ignore Ruby 2.4/2.5 errors in CI
ef52d4e Fix FORWARDED typo.
108405e Restore Ruby 2.4/2.5 compatibility
c3fe393 Update changelog.
See full diff in compare view

Updates rubocop from 1.88.2 to 1.90.0

Release notes

Sourced from rubocop's releases.

RuboCop v1.90.0

New features

#15073: Add AllowTrailingComment option to Style/DisableCopsWithinSourceCodeDirective. ([@bbatsov][])

#9505: Add disable-next directives scoped to the following statement. ([@bbatsov][])

#15550: Add --display-suppressed option to also report offenses suppressed by directive comments, including their -- justification in the JSON formatter. ([@bbatsov][])

#15523: Add new Lint/ArgumentMismatch cop. ([@bbatsov][])

#15594: Add new Lint/SuperArgumentMismatch cop. ([@bbatsov][])

#15581: Add new Style/TimeNow cop. ([@Starlexxx][])

#15111: Add NumberOfEmptyLines option to Layout/EmptyLineAfterMagicComment to configure the minimum number of empty lines required after magic comments. ([@alejofraga][])

#13037: Add --report-unused-todo-entries to catch rotting todo files. ([@bbatsov][])

#15559: Add new Style/DirectiveScope cop to flag disable/enable pairs and disable-only push/pop scopes that wrap a single statement and can use disable-next instead. ([@bbatsov][])

#15547: Make Lint/RedundantCopEnableDirective flag # rubocop:pop directives without a matching # rubocop:push. ([@bbatsov][])

Bug fixes

#15584: Fix a crash in Lint/NameTypo and Lint/UnusedPrivateMethod on string literals with invalid encoding. ([@bbatsov][])

#15541: Fix a false negative for Lint/OutOfRangeRegexpRef when a preceding element access with a non-string literal argument (e.g. hash[:key]) discarded the tracked capture count. ([@koic][])

#7958: Add todo comments for skipped unsafe corrections with --disable-uncorrectable. ([@bbatsov][])

#15569: Fix an error for the built-in language server when a workspace/executeCommand request has no document URI in its arguments. ([@koic][])

#15410: Fix an incorrect autocorrect for Naming/BinaryOperatorParameterName. ([@bbatsov][])

#15576: Fix an incorrect autocorrect for Style/Sample when shuffle is given a random: argument; the offense is still reported but no longer autocorrected, since shuffle and sample consume a seeded generator differently and would select different elements. ([@koic][])

#15590: Fix an infinite loop error for Layout/FirstArgumentIndentation when EnforcedStyle: with_fixed_indentation is specified for Layout/ArgumentAlignment and Layout/FirstMethodArgumentLineBreak is enabled with AllowMultilineFinalElement: true. ([@Starlexxx][])

#15588: Fix RuboCop::Cop::IgnoredMethods and RuboCop::Cop::IgnoredPattern being unreachable after require 'rubocop'. ([@SeanLF][])

#8349: Don't autocorrect away directives for unknown cops. ([@bbatsov][])

#7894: Don't flag disables of pending cops as redundant. ([@bbatsov][])

#9963: Fix false negatives for Layout/ExtraSpacing. ([@Starlexxx][])

#15525: Fix false negatives in Layout/LineLength when a constant path like Http::UploadedFile matches URISchemes case-insensitively. ([@koic][])

#13941: Fix false positives for Lint/UselessConstantScoping when assigning with Class.new, Module.new, Struct.new, or Data.define after private. ([@pdobb][])

#15526: Fix false positives in Layout/MultilineMethodCallIndentation when a line has multiple single-line blocks before a multiline block. ([@koic][])

#15538: Fix false positives in Lint/ConstantReassignment when a constant is assigned in compact-style namespaces (e.g. module A::B). ([@alex-tan][])

#15517: Fix false positives in Lint/RedundantSafeNavigation when InferNonNilReceiver is enabled and the receiver name is rebound by a nested block (it or a shadowed block parameter). ([@koic][])

#15572: Fix RuboCop::Cop::Registry#freeze to freeze its internal collections, so that registering a lazily loaded cop after the freeze fails fast at the registration site instead of corrupting the registry. ([@koic][])

#15585: Make Lint/DuplicateMethods honor silence_redefinition_of_method and redefine_method as intentional redefinitions. ([@bbatsov][])

#15558: Fix --display-suppressed reporting a nil justification when the offense is loaded from the result cache. ([@corsonknowles][])

#10449: Fix Layout/ClassStructure autocorrection producing a wrong order when an element cannot be moved, and make offenses report the category that actually blocks the expected order. ([@koic][])

#15568: Fix Lint/NameTypo registering false positives for names provided by a gem whose namespace the project reopens, and for constants read from a namespace with an unresolved ancestor. ([@HoneyryderChuck][])

#15556: Fix Lint/UnusedPrivateMethod retaining every past project_index object it has seen (and the index graph reachable from each), rather than only the most recent one. This caused unbounded memory growth in long-lived processes such as rubocop --server. ([@bquorning][])

#10046: Fix Lint/UselessMethodDefinition false positive for methods with **kwargs. ([@bbatsov][])

#15589: Fix --lsp and --mcp being silently ignored when the RuboCop server is running: they now start the protocol server in the current process instead of being forwarded to the server as a lint request. ([@koic][])

#11148: Merge department and cop-level Exclude settings. ([@bbatsov][])

#15531: Fix a regression in RuboCop 1.89 where the modifier cops could produce lines longer than Layout/LineLength Max when exemptions like AllowedPatterns matched the result. ([@bbatsov][])

#15574: Fix an incorrect warning such as AllCops does not support TargetRailsVersion parameter when a plugin declares a custom AllCops key with a nil value and another plugin is loaded after it. ([@koic][])

#9543: Preserve escape notation in Style/StringConcatenation autocorrect. ([@bbatsov][])

#11119: Preserve persistent cop instances across files. ([@Eljees][])

#13022: Fix rubocop . (and other relative directory arguments) needlessly traversing directories excluded by the configuration, which made it much slower than rubocop in projects with large ignored trees. ([@bbatsov][])

#15561: Fix Lint/RedundantCopDisableDirective and Lint/RedundantCopEnableDirective leaving a directive's -- reason behind when removing the directive. ([@corsonknowles][])

#15593: Fix false positives for Lint/UnusedPrivateMethod for private definitions of Ruby runtime hooks like inherited and const_missing. ([@bbatsov][])

#15547: Make Lint/MissingCopEnableDirective suggest # rubocop:pop instead of # rubocop:enable for an unclosed # rubocop:push. ([@bbatsov][])

#14379: Suppress multi-line offenses with a directive on any of their lines. ([@bbatsov][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.90.0 (2026-08-24)

New features

#15073: Add AllowTrailingComment option to Style/DisableCopsWithinSourceCodeDirective. ([@bbatsov][])

#9505: Add disable-next directives scoped to the following statement. ([@bbatsov][])

#15550: Add --display-suppressed option to also report offenses suppressed by directive comments, including their -- justification in the JSON formatter. ([@bbatsov][])

#15523: Add new Lint/ArgumentMismatch cop. ([@bbatsov][])

#15594: Add new Lint/SuperArgumentMismatch cop. ([@bbatsov][])

#15581: Add new Style/TimeNow cop. ([@Starlexxx][])

#15111: Add NumberOfEmptyLines option to Layout/EmptyLineAfterMagicComment to configure the minimum number of empty lines required after magic comments. ([@alejofraga][])

#13037: Add --report-unused-todo-entries to catch rotting todo files. ([@bbatsov][])

#15559: Add new Style/DirectiveScope cop to flag disable/enable pairs and disable-only push/pop scopes that wrap a single statement and can use disable-next instead. ([@bbatsov][])

#15547: Make Lint/RedundantCopEnableDirective flag # rubocop:pop directives without a matching # rubocop:push. ([@bbatsov][])

Bug fixes

#15584: Fix a crash in Lint/NameTypo and Lint/UnusedPrivateMethod on string literals with invalid encoding. ([@bbatsov][])

#15541: Fix a false negative for Lint/OutOfRangeRegexpRef when a preceding element access with a non-string literal argument (e.g. hash[:key]) discarded the tracked capture count. ([@koic][])

#7958: Add todo comments for skipped unsafe corrections with --disable-uncorrectable. ([@bbatsov][])

#15569: Fix an error for the built-in language server when a workspace/executeCommand request has no document URI in its arguments. ([@koic][])

#15410: Fix an incorrect autocorrect for Naming/BinaryOperatorParameterName. ([@bbatsov][])

#15576: Fix an incorrect autocorrect for Style/Sample when shuffle is given a random: argument; the offense is still reported but no longer autocorrected, since shuffle and sample consume a seeded generator differently and would select different elements. ([@koic][])

#15590: Fix an infinite loop error for Layout/FirstArgumentIndentation when EnforcedStyle: with_fixed_indentation is specified for Layout/ArgumentAlignment and Layout/FirstMethodArgumentLineBreak is enabled with AllowMultilineFinalElement: true. ([@Starlexxx][])

#15588: Fix RuboCop::Cop::IgnoredMethods and RuboCop::Cop::IgnoredPattern being unreachable after require 'rubocop'. ([@SeanLF][])

#8349: Don't autocorrect away directives for unknown cops. ([@bbatsov][])

#7894: Don't flag disables of pending cops as redundant. ([@bbatsov][])

#9963: Fix false negatives for Layout/ExtraSpacing. ([@Starlexxx][])

#15525: Fix false negatives in Layout/LineLength when a constant path like Http::UploadedFile matches URISchemes case-insensitively. ([@koic][])

#13941: Fix false positives for Lint/UselessConstantScoping when assigning with Class.new, Module.new, Struct.new, or Data.define after private. ([@pdobb][])

#15526: Fix false positives in Layout/MultilineMethodCallIndentation when a line has multiple single-line blocks before a multiline block. ([@koic][])

#15538: Fix false positives in Lint/ConstantReassignment when a constant is assigned in compact-style namespaces (e.g. module A::B). ([@alex-tan][])

#15517: Fix false positives in Lint/RedundantSafeNavigation when InferNonNilReceiver is enabled and the receiver name is rebound by a nested block (it or a shadowed block parameter). ([@koic][])

#15572: Fix RuboCop::Cop::Registry#freeze to freeze its internal collections, so that registering a lazily loaded cop after the freeze fails fast at the registration site instead of corrupting the registry. ([@koic][])

#15585: Make Lint/DuplicateMethods honor silence_redefinition_of_method and redefine_method as intentional redefinitions. ([@bbatsov][])

#15558: Fix --display-suppressed reporting a nil justification when the offense is loaded from the result cache. ([@corsonknowles][])

#10449: Fix Layout/ClassStructure autocorrection producing a wrong order when an element cannot be moved, and make offenses report the category that actually blocks the expected order. ([@koic][])

#15568: Fix Lint/NameTypo registering false positives for names provided by a gem whose namespace the project reopens, and for constants read from a namespace with an unresolved ancestor. ([@HoneyryderChuck][])

#15556: Fix Lint/UnusedPrivateMethod retaining every past project_index object it has seen (and the index graph reachable from each), rather than only the most recent one. This caused unbounded memory growth in long-lived processes such as rubocop --server. ([@bquorning][])

#10046: Fix Lint/UselessMethodDefinition false positive for methods with **kwargs. ([@bbatsov][])

#15589: Fix --lsp and --mcp being silently ignored when the RuboCop server is running: they now start the protocol server in the current process instead of being forwarded to the server as a lint request. ([@koic][])

#11148: Merge department and cop-level Exclude settings. ([@bbatsov][])

#15531: Fix a regression in RuboCop 1.89 where the modifier cops could produce lines longer than Layout/LineLength Max when exemptions like AllowedPatterns matched the result. ([@bbatsov][])

#15574: Fix an incorrect warning such as AllCops does not support TargetRailsVersion parameter when a plugin declares a custom AllCops key with a nil value and another plugin is loaded after it. ([@koic][])

#9543: Preserve escape notation in Style/StringConcatenation autocorrect. ([@bbatsov][])

#11119: Preserve persistent cop instances across files. ([@Eljees][])

#13022: Fix rubocop . (and other relative directory arguments) needlessly traversing directories excluded by the configuration, which made it much slower than rubocop in projects with large ignored trees. ([@bbatsov][])

#15561: Fix Lint/RedundantCopDisableDirective and Lint/RedundantCopEnableDirective leaving a directive's -- reason behind when removing the directive. ([@corsonknowles][])

#15593: Fix false positives for Lint/UnusedPrivateMethod for private definitions of Ruby runtime hooks like inherited and const_missing. ([@bbatsov][])

#15547: Make Lint/MissingCopEnableDirective suggest # rubocop:pop instead of # rubocop:enable for an unclosed # rubocop:push. ([@bbatsov][])

... (truncated)

Commits

f1b25e1 Cut 1.90
72895f6 Update Changelog
7042de6 Move op_method? before the shadowing helpers
4b14dd2 Fix an incorrect autocorrect for Naming/BinaryOperatorParameterName
5d221ac [Fix #10046] Fix Lint/UselessMethodDefinition false positive for methods wi...
5070fc3 [Fix #15111] Add NumberOfEmptyLines option to `Layout/EmptyLineAfterMagicCo...
496eb65 [Fix #9543] Preserve escape notation in Style/StringConcatenation autocorrect
75b3622 Remove a directive's -- reason along with the directive
858d8a8 Merge pull request #15596 from koic/add_real_last_column_to_offense
15557b0 Add Offense#real_last_column and use it in JSONFormatter
Additional commits viewable in compare view

Updates rubocop-performance from 1.26.1 to 1.27.0

Release notes

Sourced from rubocop-performance's releases.

RuboCop Performance v1.27.0

Bug fixes

#532: Fix false negatives for Performance/ChainArrayAllocation when using flat_map, filter_map, and collect_concat. (@koic)

Changes

#530: Speed up loading rubocop-performance by lazily loading only the cops needed for a run. This requires RuboCop 1.89.0+. (@koic)

Changelog

Sourced from rubocop-performance's changelog.

1.27.0 (2026-08-16)

Bug fixes

#532: Fix false negatives for Performance/ChainArrayAllocation when using flat_map, filter_map, and collect_concat. ([@koic][])

Changes

#530: Speed up loading rubocop-performance by lazily loading only the cops needed for a run. This requires RuboCop 1.89.0+. ([@koic][])

Commits

c07064d Cut 1.27.0
0e7abe8 Update Changelog
0d43a61 Suppress RuboCop offenses
72eb77d Merge pull request #533 from koic/fix_chain_array_allocation_false_negatives
9c60244 Merge pull request #528 from koic/fix_regexp_match_offense_message_for_bang_t...
c3515cb [Fix #532] Fix false negatives for Performance/ChainArrayAllocation
dba3d75 Merge pull request #530 from koic/lazy_load_cops
dd5f992 Load cops lazily
f1763dd [Fix #510] Clarify Performance/RegexpMatch message for !~
9c969a6 Fix JRuby CI failure caused by rbs native extension build
Additional commits viewable in compare view

Updates rubocop-sorbet from 0.13.2 to 0.15.0

Release notes

Sourced from rubocop-sorbet's releases.

v0.15.0

What's Changed

🛠 Other Changes

Add Sorbet/StructPropName cop by @Guflly in Shopify/rubocop-sorbet#393

Add autocorrect for RBS comments ↔ sig blocks signatures by @Morriar in Shopify/rubocop-sorbet#397

Add Sorbet/ForbidTBindInAssignment by @Morriar in Shopify/rubocop-sorbet#398

Support root-scoped T.bind calls by @Morriar in Shopify/rubocop-sorbet#399

Reject spaced RBS comment markers by @Morriar in Shopify/rubocop-sorbet#402

Add AutocorrectStyle: rbs to Sorbet/ForbidTStruct by @rafaelfranca in Shopify/rubocop-sorbet#395

Extend RedundantTLetForLiteral to trailing RBS annotations by @Morriar in Shopify/rubocop-sorbet#401

Autocorrect T.bind to RBS self assertions by @Morriar in Shopify/rubocop-sorbet#400

Remove obsolete RBS marker spacing test by @Morriar in Shopify/rubocop-sorbet#408

Autocorrect T.absurd to RBS assertions by @Morriar in Shopify/rubocop-sorbet#403

Autocorrect T.cast to RBS assertions by @Morriar in Shopify/rubocop-sorbet#406

Autocorrect T.let to RBS annotations by @Morriar in Shopify/rubocop-sorbet#407

Autocorrect T.unsafe to RBS assertions by @Morriar in Shopify/rubocop-sorbet#404

Autocorrect inline else T.absurd calls by @Morriar in Shopify/rubocop-sorbet#409

Autocorrect T.must to RBS assertions by @Morriar in Shopify/rubocop-sorbet#405

New Contributors

@Guflly made their first contribution in Shopify/rubocop-sorbet#393

Full Changelog: Shopify/rubocop-sorbet@v0.14.0...v0.15.0

v0.14.0

What's Changed

🛠 Other Changes

Add Sorbet/SetterReturnType cop and extract RBSParser helper by @rafaelfranca in Shopify/rubocop-sorbet#389

Fix TLetCorrection corrupting files with interior heredocs by @dduugg in Shopify/rubocop-sorbet#387

Patch Lint/Void to be RBS #: absurd aware by @rafaelfranca in Shopify/rubocop-sorbet#390

Drop support for Ruby 3.1 and 3.2 by @Morriar in Shopify/rubocop-sorbet#392

Full Changelog: Shopify/rubocop-sorbet@v0.13.2...v0.14.0

Commits

a88afd4 Release v0.15.0
c3e4550 Merge pull request #405 from Shopify/t-must-rbs-autocorrection
946e63b Add trailing comment autocorrection test
673b342 Merge pull request #409 from Shopify/t-absurd-inline-else
0dac722 Test inline unless absurd autocorrection
6979d2e Handle inline if else T.absurd autocorrection
0ce61e7 Autocorrect inline else T.absurd calls
6468538 Merge pull request #404 from Shopify/t-unsafe-rbs-autocorrection
5a5dc70 Merge pull request #407 from Shopify/t-let-rbs-autocorrection
9cf7734 Merge pull request #406 from Shopify/t-cast-rbs-autocorrection
Additional commits viewable in compare view

Updates sorbet from 0.6.13371 to 0.6.13454

Release notes

Sourced from sorbet's releases.

sorbet 0.6.13453.20260827153016-8b0a71ff8

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13453', :group => :development
gem 'sorbet-runtime', '0.6.13453'
sorbet 0.6.13452.20260827121448-b0e749cd0

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13452', :group => :development
gem 'sorbet-runtime', '0.6.13452'
sorbet 0.6.13451.20260827114157-c8a7b977e

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13451', :group => :development
gem 'sorbet-runtime', '0.6.13451'
sorbet 0.6.13450.20260827112108-257c924ba

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13450', :group => :development
gem 'sorbet-runtime', '0.6.13450'
sorbet 0.6.13449.20260826113755-1b9d41e16

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13449', :group => :development
gem 'sorbet-runtime', '0.6.13449'
sorbet 0.6.13448.20260826140853-26a713681

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13448', :group => :development
gem 'sorbet-runtime', '0.6.13448'
sorbet 0.6.13447.20260826102833-3f35a9cc3

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13447', :group => :development
gem 'sorbet-runtime', '0.6.13447'
sorbet 0.6.13446.20260826092600-a46765e7c

... (truncated)

Commits

See full diff in compare view

Updates code_ownership from 2.1.3 to 2.1.4

Release notes

Sourced from code_ownership's releases.

v2.1.4

CodeOwnership v2.1.4

📦 Published Gems

Source gem: code_ownership-2.1.4.gem

Platform gems: Published for all supported platforms

🎯 Supported Platforms

musl

linux

ucrt

darwin

darwin

musl

linux

What's Changed

Resolve CI annotation warnings by @dduugg in rubyatscale/code_ownership#170

Require Ruby >= 3.3 and update CI Ruby versions by @dduugg in rubyatscale/code_ownership#173

Add Dependabot config for monthly Bundler updates by @dduugg in rubyatscale/code_ownership#172

Auto-trigger CD when CI passes and the gem version is bumped by @perryqh in rubyatscale/code_ownership#171

Add advanced CodeQL setup to replace broken default setup by @dduugg in rubyatscale/code_ownership#174

Use shared-config's reusable CodeQL workflow by @dduugg in rubyatscale/code_ownership#175

Fix the declared return type of RustCodeOwners.for_file by @dduugg in rubyatscale/code_ownership#176

Full Changelog: rubyatscale/code_ownership@v2.1.3...v2.1.4

Commits

b1726f5 Fix the declared return type of RustCodeOwners.for_file (#176)
5f3ed93 Use shared-config's reusable CodeQL workflow (#175)
85dc855 Fix code scanning issues: CodeQL setup / workflow permissions (#174)
44bd17f Auto-trigger CD when CI passes and the gem version is bumped (#171)
6cd5c42 Add Dependabot config for monthly Bundler updates (#172)
82eb2ac Require Ruby >= 3.3 and update CI Ruby versions (#173)
d861735 Resolve CI annotation warnings (#170)
See full diff in compare view

Updates sorbet-runtime from 0.6.13371 to 0.6.13454

Release notes

Sourced from sorbet-runtime's releases.

sorbet 0.6.13453.20260827153016-8b0a71ff8

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13453', :group => :development
gem 'sorbet-runtime', '0.6.13453'
sorbet 0.6.13452.20260827121448-b0e749cd0

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13452', :group => :development
gem 'sorbet-runtime', '0.6.13452'
sorbet 0.6.13451.20260827114157-c8a7b977e

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13451', :group => :development
gem 'sorbet-runtime', '0.6.13451'
sorbet 0.6.13450.20260827112108-257c924ba

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13450', :group => :development
gem 'sorbet-runtime', '0.6.13450'
sorbet 0.6.13449.20260826113755-1b9d41e16

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13449', :group => :development
gem 'sorbet-runtime', '0.6.13449'
sorbet 0.6.13448.20260826140853-26a713681

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13448', :group => :development
gem 'sorbet-runtime', '0.6.13448'
sorbet 0.6.13447.20260826102833-3f35a9cc3

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13447', :group => :development
gem 'sorbet-runtime', '0.6.13447'
sorbet 0.6.13446.20260826092600-a46765e7c

... (truncated)

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the bundler group with 8 updates: | Package | From | To | | --- | --- | --- | | [packwerk](https://github.com/Shopify/packwerk) | ``7fa7c51`` | ``31e5342`` | | [rack](https://github.com/rack/rack) | `3.2.6` | `3.2.7` | | [rubocop](https://github.com/rubocop/rubocop) | `1.88.2` | `1.90.0` | | [rubocop-performance](https://github.com/rubocop/rubocop-performance) | `1.26.1` | `1.27.0` | | [rubocop-sorbet](https://github.com/shopify/rubocop-sorbet) | `0.13.2` | `0.15.0` | | [sorbet](https://github.com/sorbet/sorbet) | `0.6.13371` | `0.6.13454` | | [code_ownership](https://github.com/rubyatscale/code_ownership) | `2.1.3` | `2.1.4` | | [sorbet-runtime](https://github.com/sorbet/sorbet) | `0.6.13371` | `0.6.13454` | Updates `packwerk` from `7fa7c51` to `31e5342` - [Release notes](https://github.com/Shopify/packwerk/releases) - [Commits](Shopify/packwerk@7fa7c51...31e5342) Updates `rack` from 3.2.6 to 3.2.7 - [Release notes](https://github.com/rack/rack/releases) - [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md) - [Commits](rack/rack@v3.2.6...v3.2.7) Updates `rubocop` from 1.88.2 to 1.90.0 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.88.2...v1.90.0) Updates `rubocop-performance` from 1.26.1 to 1.27.0 - [Release notes](https://github.com/rubocop/rubocop-performance/releases) - [Changelog](https://github.com/rubocop/rubocop-performance/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop-performance@v1.26.1...v1.27.0) Updates `rubocop-sorbet` from 0.13.2 to 0.15.0 - [Release notes](https://github.com/shopify/rubocop-sorbet/releases) - [Commits](Shopify/rubocop-sorbet@v0.13.2...v0.15.0) Updates `sorbet` from 0.6.13371 to 0.6.13454 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `code_ownership` from 2.1.3 to 2.1.4 - [Release notes](https://github.com/rubyatscale/code_ownership/releases) - [Commits](rubyatscale/code_ownership@v2.1.3...v2.1.4) Updates `sorbet-runtime` from 0.6.13371 to 0.6.13454 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) --- updated-dependencies: - dependency-name: packwerk dependency-version: 31e534283f93a225b520cddab3c2d735557c76de dependency-type: direct:production dependency-group: bundler - dependency-name: rack dependency-version: 3.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler - dependency-name: rubocop dependency-version: 1.90.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bundler - dependency-name: rubocop-performance dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bundler - dependency-name: rubocop-sorbet dependency-version: 0.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bundler - dependency-name: sorbet dependency-version: 0.6.13454 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler - dependency-name: code_ownership dependency-version: 2.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler - dependency-name: sorbet-runtime dependency-version: 0.6.13454 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Sep 1, 2026

dependabot Bot requested a review from a team as a code owner September 1, 2026 20:45

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Sep 1, 2026

github-project-automation Bot added this to Modularity Sep 1, 2026

github-project-automation Bot moved this to Triage in Modularity Sep 1, 2026

Navigation Menu

Uh oh!

Bump the bundler group with 8 updates - #84

Bump the bundler group with 8 updates#84
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/bundler-eeecfcb1e4

dependabot Bot commented on behalf of github Sep 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 1, 2026

Changelog

Unreleased

SPEC Changes

Added

Changed

Fixed

RuboCop v1.90.0

New features

Bug fixes

1.90.0 (2026-08-24)

New features

Bug fixes

RuboCop Performance v1.27.0

Bug fixes

Changes

1.27.0 (2026-08-16)

Bug fixes

Changes

v0.15.0

What's Changed

🛠 Other Changes

New Contributors

v0.14.0

What's Changed

🛠 Other Changes

sorbet 0.6.13453.20260827153016-8b0a71ff8

sorbet 0.6.13452.20260827121448-b0e749cd0

sorbet 0.6.13451.20260827114157-c8a7b977e

sorbet 0.6.13450.20260827112108-257c924ba

sorbet 0.6.13449.20260826113755-1b9d41e16

sorbet 0.6.13448.20260826140853-26a713681

sorbet 0.6.13447.20260826102833-3f35a9cc3

sorbet 0.6.13446.20260826092600-a46765e7c

v2.1.4

CodeOwnership v2.1.4

📦 Published Gems

🎯 Supported Platforms

What's Changed

sorbet 0.6.13453.20260827153016-8b0a71ff8

sorbet 0.6.13452.20260827121448-b0e749cd0

sorbet 0.6.13451.20260827114157-c8a7b977e

sorbet 0.6.13450.20260827112108-257c924ba

sorbet 0.6.13449.20260826113755-1b9d41e16

sorbet 0.6.13448.20260826140853-26a713681

sorbet 0.6.13447.20260826102833-3f35a9cc3

sorbet 0.6.13446.20260826092600-a46765e7c

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants