Gemfile.lock: Bump the minor-patch group across 1 directory with 6 updates #255

dependabot · 2024-10-31T18:57:32Z

Bumps the minor-patch group with 2 updates in the / directory: sorbet-runtime and rubocop.

Updates sorbet-runtime from 0.5.11625 to 0.5.11630

Release notes

Sourced from sorbet-runtime's releases.

sorbet 0.5.11629.20241030140713-f63b06430

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11629', :group => :development
gem 'sorbet-runtime', '0.5.11629'
sorbet 0.5.11628.20241030140450-02211b88b

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11628', :group => :development
gem 'sorbet-runtime', '0.5.11628'
sorbet 0.5.11627.20241030115654-17ef143fd

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11627', :group => :development
gem 'sorbet-runtime', '0.5.11627'
sorbet 0.5.11626.20241030115208-02d87551a

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11626', :group => :development
gem 'sorbet-runtime', '0.5.11626'
sorbet 0.5.11625.20241029161507-5b817f491

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11625', :group => :development
gem 'sorbet-runtime', '0.5.11625'

Commits

See full diff in compare view

Updates rubocop from 1.67.0 to 1.68.0

Release notes

Sourced from rubocop's releases.

RuboCop 1.68

New features

#13050: Add new Style/BitwisePredicate cop. (@koic)

#12140: Add new Style/CombinableDefined cop. (@dvandersluis)

#12988: Add new Style/AmbiguousEndlessMethodDefinition cop. (@dvandersluis)

#11514: Add new Lint/UnescapedBracketInRegexp cop. (@dvandersluis)

#13360: Add AllowSteepAnnotation config option to Layout/LeadingCommentSpace. (@tk0miya)

#13146: Add new IgnoreDuplicateElseBranch option to Lint/DuplicateBranch. (@fatkodima)

#13171: Add new Style/SafeNavigationChainLength cop. (@fatkodima)

#13252: Add new Style/KeywordArgumentsMerging cop. (@fatkodima)

Bug fixes

#13401: Fix a false negative for Style/RedundantLineContinuation when there is a line continuation at the EOF. (@koic)

#13368: Fix an incorrect autocorrect for Naming/BlockForwarding with Style/ExplicitBlockArgument. (@koic)

#13391: Fix deserialization of unknown encoding offenses. (@earlopain)

#13348: Ensure Style/BlockDelimiters autocorrection does not move other code between the block and comment. (@dvandersluis)

#13382: Fix an error during error handling for custom ruby extractors when the extractor is a class. (@earlopain)

#13309: Fix a false negative for Lint/UselessAssignment cop when there is a useless assignment followed by a block. (@pCosta99)

#13255: Fix false negatives for Style/MapIntoArray when using non-splatted arguments. (@vlad-pisanov)

#13356: Fix a false positive for Layout/SpaceBeforeBrackets when there is a dot before []=. (@earlopain)

#13365: Fix false positives for Lint/SafeNavigationConsistency when using safe navigation on the LHS with operator method on the RHS of &&. (@koic)

#13390: Fix false positives for Style/GuardClause when using a local variable assigned in a conditional expression in a branch. (@koic)

#13337: Fix false positives for Style/RedundantLineContinuation when required line continuations for && is used with an assignment after a line break. (@koic)

#13387: Fix false positives in Style/RedundantParentheses when parentheses are used around method chain with do...end block in keyword argument. (@koic)

#13341: Fix false positives for Lint/SafeNavigationChain when a safe navigation operator is used with a method call as the RHS operand of && for the same receiver. (@koic)

#13324: Fix --disable-uncorrectable to not insert a comment inside a string continuation. (@dvandersluis)

#13364: Fix incorrect autocorrect with Lint/UselessAssignment a multiple assignment or for contains an inner assignment. (@dvandersluis)

#13353: Fix an incorrect autocorrect for Style/BlockDelimiters when EnforcedStyle: semantic is set and used with Layout/SpaceInsideBlockBraces. (@koic)

#13361: Fix false positives for Style/RedundantInterpolationUnfreeze and Style/RedundantFreeze when strings contain interpolated global, instance, and class variables. (@vlad-pisanov)

#13343: Prevent Layout/LineLength from breaking up a method with arguments chained onto a heredoc delimiter. (@dvandersluis)

#13374: Return exit code 0 with --display-only-correctable and --display-only-safe-correctable when no offenses are displayed. (@dvandersluis)

#13193: Fix false positive in Style/MultipleComparison when ComparisonsThreshold exceeds 2. (@fatkodima,@vlad-pisanov)

#13325: Fix an incorrect autocorrect for Lint/NonAtomicFileOperation when using a postfix unless for file existence checks before creating a file, in cases with Dir.mkdir. ([@kotaro0522][])

#13397: Update PercentLiteralCorrector to be able to write pairs of delimiters without excessive escaping. (@dvandersluis)

#13336: Update Style/SafeNavigation to not autocorrect if the RHS of an and node is an or node. (@dvandersluis)

#13378: When removing parens in Style/TernaryParentheses with a send node condition, ensure its arguments are parenthesized. (@dvandersluis)

Changes

#13347: When running rubocop -V, show the analysis Ruby version of the current directory. (@earlopain)

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.68.0 (2024-10-31)

New features

#13050: Add new Style/BitwisePredicate cop. ([@koic][])

#12140: Add new Style/CombinableDefined cop. ([@dvandersluis][])

#12988: Add new Style/AmbiguousEndlessMethodDefinition cop. ([@dvandersluis][])

#11514: Add new Lint/UnescapedBracketInRegexp cop. ([@dvandersluis][])

#13360: Add AllowSteepAnnotation config option to Layout/LeadingCommentSpace. ([@tk0miya][])

#13146: Add new IgnoreDuplicateElseBranch option to Lint/DuplicateBranch. ([@fatkodima][])

#13171: Add new Style/SafeNavigationChainLength cop. ([@fatkodima][])

#13252: Add new Style/KeywordArgumentsMerging cop. ([@fatkodima][])

Bug fixes

#13401: Fix a false negative for Style/RedundantLineContinuation when there is a line continuation at the EOF. ([@koic][])

#13368: Fix an incorrect autocorrect for Naming/BlockForwarding with Style/ExplicitBlockArgument. ([@koic][])

#13391: Fix deserialization of unknown encoding offenses. ([@earlopain][])

#13348: Ensure Style/BlockDelimiters autocorrection does not move other code between the block and comment. ([@dvandersluis][])

#13382: Fix an error during error handling for custom ruby extractors when the extractor is a class. ([@earlopain][])

#13309: Fix a false negative for Lint/UselessAssignment cop when there is a useless assignment followed by a block. ([@pCosta99][])

#13255: Fix false negatives for Style/MapIntoArray when using non-splatted arguments. ([@vlad-pisanov][])

#13356: Fix a false positive for Layout/SpaceBeforeBrackets when there is a dot before []=. ([@earlopain][])

#13365: Fix false positives for Lint/SafeNavigationConsistency when using safe navigation on the LHS with operator method on the RHS of &&. ([@koic][])

#13390: Fix false positives for Style/GuardClause when using a local variable assigned in a conditional expression in a branch. ([@koic][])

#13337: Fix false positives for Style/RedundantLineContinuation when required line continuations for && is used with an assignment after a line break. ([@koic][])

#13387: Fix false positives in Style/RedundantParentheses when parentheses are used around method chain with do...end block in keyword argument. ([@koic][])

#13341: Fix false positives for Lint/SafeNavigationChain when a safe navigation operator is used with a method call as the RHS operand of && for the same receiver. ([@koic][])

#13324: Fix --disable-uncorrectable to not insert a comment inside a string continuation. ([@dvandersluis][])

#13364: Fix incorrect autocorrect with Lint/UselessAssignment a multiple assignment or for contains an inner assignment. ([@dvandersluis][])

#13353: Fix an incorrect autocorrect for Style/BlockDelimiters when EnforcedStyle: semantic is set and used with Layout/SpaceInsideBlockBraces. ([@koic][])

#13361: Fix false positives for Style/RedundantInterpolationUnfreeze and Style/RedundantFreeze when strings contain interpolated global, instance, and class variables. ([@vlad-pisanov][])

#13343: Prevent Layout/LineLength from breaking up a method with arguments chained onto a heredoc delimiter. ([@dvandersluis][])

#13374: Return exit code 0 with --display-only-correctable and --display-only-safe-correctable when no offenses are displayed. ([@dvandersluis][])

#13193: Fix false positive in Style/MultipleComparison when ComparisonsThreshold exceeds 2. ([@fatkodima][],[@vlad-pisanov][])

#13325: Fix an incorrect autocorrect for Lint/NonAtomicFileOperation when using a postfix unless for file existence checks before creating a file, in cases with Dir.mkdir. ([@kotaro0522][])

#13397: Update PercentLiteralCorrector to be able to write pairs of delimiters without excessive escaping. ([@dvandersluis][])

#13336: Update Style/SafeNavigation to not autocorrect if the RHS of an and node is an or node. ([@dvandersluis][])

#13378: When removing parens in Style/TernaryParentheses with a send node condition, ensure its arguments are parenthesized. ([@dvandersluis][])

Changes

#13347: When running rubocop -V, show the analysis Ruby version of the current directory. ([@earlopain][])

Commits

7d35ef7 Cut 1.68
3033deb Update Changelog
37e9e5f [Fix #12140] Add new Style/CombinableDefined cop.
f8aa27f Fix a false negative for Style/RedundantLineContinuation
d033a5e Merge pull request #13400 from Earlopain/offense-cop-name-docs
faaa349 Fix docs for Offense.cop_name
85f9405 Fix deserialization of unknown encoding offenses
d499d80 [Fix #13387] Fix false positives for Style/RedundantParentheses
3e855b0 Merge pull request #13399 from dvandersluis/fix-and-offense-typo
1f58513 Fix typos and offense instead of an offense.
Additional commits viewable in compare view

Updates sorbet-static-and-runtime from 0.5.11625 to 0.5.11630

Release notes

Sourced from sorbet-static-and-runtime's releases.

sorbet 0.5.11629.20241030140713-f63b06430

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11629', :group => :development
gem 'sorbet-runtime', '0.5.11629'
sorbet 0.5.11628.20241030140450-02211b88b

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11628', :group => :development
gem 'sorbet-runtime', '0.5.11628'
sorbet 0.5.11627.20241030115654-17ef143fd

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11627', :group => :development
gem 'sorbet-runtime', '0.5.11627'
sorbet 0.5.11626.20241030115208-02d87551a

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11626', :group => :development
gem 'sorbet-runtime', '0.5.11626'
sorbet 0.5.11625.20241029161507-5b817f491

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11625', :group => :development
gem 'sorbet-runtime', '0.5.11625'

Commits

See full diff in compare view

Updates parser from 3.3.5.0 to 3.3.5.1

Changelog

Sourced from parser's changelog.

Changelog

Not released (2024-10-31)

API modifications:

Bump maintenance branches to 3.2.6 (#1044) (Koichi ITO)

Commits

e8d80ad Update changelog.
a36edaf Bump version.
cde8a96 * Bump maintenance branches to 3.2.6 (#1044)
90e0a4e Update my name and copyright.
12dc519 Update changelog.
See full diff in compare view

Updates sorbet from 0.5.11625 to 0.5.11630

Release notes

Sourced from sorbet's releases.

sorbet 0.5.11629.20241030140713-f63b06430

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11629', :group => :development
gem 'sorbet-runtime', '0.5.11629'
sorbet 0.5.11628.20241030140450-02211b88b

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11628', :group => :development
gem 'sorbet-runtime', '0.5.11628'
sorbet 0.5.11627.20241030115654-17ef143fd

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11627', :group => :development
gem 'sorbet-runtime', '0.5.11627'
sorbet 0.5.11626.20241030115208-02d87551a

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11626', :group => :development
gem 'sorbet-runtime', '0.5.11626'
sorbet 0.5.11625.20241029161507-5b817f491

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11625', :group => :development
gem 'sorbet-runtime', '0.5.11625'

Commits

See full diff in compare view

Updates sorbet-static from 0.5.11625 to 0.5.11630

Release notes

Sourced from sorbet-static's releases.

sorbet 0.5.11629.20241030140713-f63b06430

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11629', :group => :development
gem 'sorbet-runtime', '0.5.11629'
sorbet 0.5.11628.20241030140450-02211b88b

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11628', :group => :development
gem 'sorbet-runtime', '0.5.11628'
sorbet 0.5.11627.20241030115654-17ef143fd

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11627', :group => :development
gem 'sorbet-runtime', '0.5.11627'
sorbet 0.5.11626.20241030115208-02d87551a

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11626', :group => :development
gem 'sorbet-runtime', '0.5.11626'
sorbet 0.5.11625.20241029161507-5b817f491

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.5.11625', :group => :development
gem 'sorbet-runtime', '0.5.11625'

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

carlocab · 2024-10-31T18:58:14Z

@dependabot rebase

carlocab · 2024-10-31T19:26:24Z

@dependabot recreate

…dates Bumps the minor-patch group with 2 updates in the / directory: [sorbet-runtime](https://github.com/sorbet/sorbet) and [rubocop](https://github.com/rubocop/rubocop). Updates `sorbet-runtime` from 0.5.11625 to 0.5.11630 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `rubocop` from 1.67.0 to 1.68.0 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.67.0...v1.68.0) Updates `sorbet-static-and-runtime` from 0.5.11625 to 0.5.11630 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `parser` from 3.3.5.0 to 3.3.5.1 - [Changelog](https://github.com/whitequark/parser/blob/master/CHANGELOG.md) - [Commits](whitequark/parser@v3.3.5.0...v3.3.5.1) Updates `sorbet` from 0.5.11625 to 0.5.11630 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `sorbet-static` from 0.5.11625 to 0.5.11630 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) --- updated-dependencies: - dependency-name: sorbet-runtime dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: rubocop dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: sorbet-static-and-runtime dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: parser dependency-type: indirect update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: sorbet dependency-type: indirect update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: sorbet-static dependency-type: indirect update-type: version-update:semver-patch dependency-group: minor-patch ... Signed-off-by: dependabot[bot] <[email protected]>

carlocab · 2024-10-31T19:32:18Z

@Bo98 making zizmor always required means we always have to run it, no?

Bo98 · 2024-10-31T20:20:05Z

Ah didn't realise we only situationally run it. Wouldn't it make sense to require it to avoid security regressions like we do for CodeQL? We rely on auto-merge a lot.

dependabot · 2024-11-01T14:10:21Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

carlocab · 2024-11-01T15:15:07Z

Wouldn't it make sense to require it to avoid security regressions like we do for CodeQL? We rely on auto-merge a lot.

Could do, but that now requires running it on every CI run in all the .github-managed repos. (Or special-casing this one.) Would the zizmor job fail on regressions? It seemed to always be green to me.

Bo98 · 2024-11-01T16:16:45Z

It's not a required on the job itself - it's required on the "Code scanning results" status that GitHub generates, which is red when it detects that a new alert would be opened when compared to main/master.

Could also just have a no-automerge policy for workflow edits I guess?

carlocab · 2024-11-01T16:47:03Z

Let's just make it mandatory -- we can make exceptions for our high-volume repos if we need to.

We currently run only when when workflow files are modified, but that means we cannot make the results of the Zizmor scan a required status check. Let's just run this all the time so that we can make sure to never merge regressions. This will affect only one high-volume repo: Homebrew/cask. We can carve out an exception for that if we need to. (Though I'm currently inclined to do something similar on our high-volume repos anyway.) See discussion at Homebrew/ci-orchestrator#255

carlocab · 2024-11-01T16:54:37Z

Homebrew/.github#204

We currently run only when when workflow files are modified, but that means we cannot make the results of the Zizmor scan a required status check. Let's just run this all the time so that we can make sure to never merge regressions. This will affect only one high-volume repo: Homebrew/cask. We can carve out an exception for that if we need to. (Though I'm currently inclined to do something similar on our high-volume repos anyway.) See discussion at Homebrew/ci-orchestrator#255

dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Oct 31, 2024

carlocab approved these changes Oct 31, 2024

View reviewed changes

carlocab enabled auto-merge October 31, 2024 18:58

dependabot bot force-pushed the dependabot/bundler/minor-patch-0af5834692 branch 2 times, most recently from 89ca4df to b349be0 Compare October 31, 2024 19:00

carlocab approved these changes Oct 31, 2024

View reviewed changes

dependabot bot force-pushed the dependabot/bundler/minor-patch-0af5834692 branch from b349be0 to 7d3a965 Compare October 31, 2024 19:27

dependabot bot closed this Nov 1, 2024

auto-merge was automatically disabled November 1, 2024 14:10
Pull request was closed

dependabot bot deleted the dependabot/bundler/minor-patch-0af5834692 branch November 1, 2024 14:10

carlocab mentioned this pull request Nov 1, 2024

actionlint: run on every push Homebrew/.github#204

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Gemfile.lock: Bump the minor-patch group across 1 directory with 6 updates #255

Gemfile.lock: Bump the minor-patch group across 1 directory with 6 updates #255

dependabot bot commented on behalf of github Oct 31, 2024 •

edited

Loading

carlocab commented Oct 31, 2024

carlocab commented Oct 31, 2024

carlocab commented Oct 31, 2024

Bo98 commented Oct 31, 2024 •

edited

Loading

dependabot bot commented on behalf of github Nov 1, 2024

carlocab commented Nov 1, 2024

Bo98 commented Nov 1, 2024 •

edited

Loading

carlocab commented Nov 1, 2024

carlocab commented Nov 1, 2024

Gemfile.lock: Bump the minor-patch group across 1 directory with 6 updates #255

Gemfile.lock: Bump the minor-patch group across 1 directory with 6 updates #255

Conversation

dependabot bot commented on behalf of github Oct 31, 2024 • edited Loading

sorbet 0.5.11629.20241030140713-f63b06430

sorbet 0.5.11628.20241030140450-02211b88b

sorbet 0.5.11627.20241030115654-17ef143fd

sorbet 0.5.11626.20241030115208-02d87551a

sorbet 0.5.11625.20241029161507-5b817f491

RuboCop 1.68

New features

Bug fixes

Changes

1.68.0 (2024-10-31)

New features

Bug fixes

Changes

sorbet 0.5.11629.20241030140713-f63b06430

sorbet 0.5.11628.20241030140450-02211b88b

sorbet 0.5.11627.20241030115654-17ef143fd

sorbet 0.5.11626.20241030115208-02d87551a

sorbet 0.5.11625.20241029161507-5b817f491

Changelog

Not released (2024-10-31)

sorbet 0.5.11629.20241030140713-f63b06430

sorbet 0.5.11628.20241030140450-02211b88b

sorbet 0.5.11627.20241030115654-17ef143fd

sorbet 0.5.11626.20241030115208-02d87551a

sorbet 0.5.11625.20241029161507-5b817f491

sorbet 0.5.11629.20241030140713-f63b06430

sorbet 0.5.11628.20241030140450-02211b88b

sorbet 0.5.11627.20241030115654-17ef143fd

sorbet 0.5.11626.20241030115208-02d87551a

sorbet 0.5.11625.20241029161507-5b817f491

carlocab commented Oct 31, 2024

carlocab commented Oct 31, 2024

carlocab commented Oct 31, 2024

Bo98 commented Oct 31, 2024 • edited Loading

dependabot bot commented on behalf of github Nov 1, 2024

carlocab commented Nov 1, 2024

Bo98 commented Nov 1, 2024 • edited Loading

carlocab commented Nov 1, 2024

carlocab commented Nov 1, 2024

dependabot bot commented on behalf of github Oct 31, 2024 •

edited

Loading

Bo98 commented Oct 31, 2024 •

edited

Loading

Bo98 commented Nov 1, 2024 •

edited

Loading