build(deps): bump the bundler group across 1 directory with 6 updates #256

dependabot · 2025-12-25T07:05:03Z

Bumps the bundler group with 4 updates in the / directory: rubocop, bigdecimal, hashie and i18n.

Updates rubocop from 1.82.0 to 1.82.1

Release notes

RuboCop v1.82.1

Bug fixes

#14736: Fix an error for Style/TrailingCommaInArguments when EnforcedStyleForMultiline is consistent_comma and keyword arguments use a trailing comma. (@koic)

#14737: Fix crash in Layout/RedundantLineBreak when Layout/LineLength is disabled. (@ydakuka)

#14719: Fix crash on long lines when Layout/LineLength is disabled. (@floriandejonckheere)

#14743: Fix false positives for Layout/MultilineMethodCallIndentation when multiline method chain with block has expected indent width and the method is preceded by splat or double splat. (@koic)

#12297: Fix false negative in Layout/IndentationWidth for multiline method chain blocks. (@rscq)

#14730: Fix the cache implementation to use consistent cache keys across workers. (@byroot)

#14559: Fix false positives for Lint/UselessAssignment when a variable is assigned in loop body and used in loop condition. (@ydakuka)

Changelog

Sourced from rubocop's changelog.

1.82.1 (2025-12-24)

Bug fixes

#14736: Fix an error for Style/TrailingCommaInArguments when EnforcedStyleForMultiline is consistent_comma and keyword arguments use a trailing comma. ([@koic][])

#14737: Fix crash in Layout/RedundantLineBreak when Layout/LineLength is disabled. ([@ydakuka][])

#14719: Fix crash on long lines when Layout/LineLength is disabled. ([@floriandejonckheere][])

#14743: Fix false positives for Layout/MultilineMethodCallIndentation when multiline method chain with block has expected indent width and the method is preceded by splat or double splat. ([@koic][])

#12297: Fix false negative in Layout/IndentationWidth for multiline method chain blocks. ([@rscq][])

#14730: Fix the cache implementation to use consistent cache keys across workers. ([@byroot][])

#14559: Fix false positives for Lint/UselessAssignment when a variable is assigned in loop body and used in loop condition. ([@ydakuka][])

Commits

5711dcb Cut 1.82.1
4918002 Update Changelog
0479119 [Fix rubocop#14559] Fix false positives for Lint/UselessAssignment when a v...
990121b Optimize cache cleanup routine
e06d0c1 [Fix #14743] Fix false positives for Layout/MultilineMethodCallIndentation
a6e4adf Merge pull request #14742 from ydakuka/14737/fix_crash_in_layout_redundant_li...
1873836 [Fix rubocop#14737] Fix crash in Layout/RedundantLineBreak when `Layout/Lin...
bb2fb48 Merge pull request #14738 from koic/fix_an_error_for_style_trailing_comma_in_...
d08ff2e [Fix #14736] Fix an error for Style/TrailingCommaInArguments
edca36e Merge pull request #14725 from viralpraxis/fix-layout-line-length-cop-error-i...
Additional commits viewable in compare view

Updates bigdecimal from 3.3.1 to 4.0.1

Release notes

Sourced from bigdecimal's releases.

v4.0.1

What's Changed

Exclude dependabot updates from release note by @hsbt in ruby/bigdecimal#474

Remove unused variable (and add test for it) by @tompng in ruby/bigdecimal#475

Remove "Which version should you select" section by @tompng in ruby/bigdecimal#476

Bump version to v4.0.1 by @tompng in ruby/bigdecimal#477

Full Changelog: ruby/bigdecimal@v4.0.0...v4.0.1

v4.0.0

What's Changed

Fix x**y, x.power(y, 0) and x.sqrt(0) calculates huge digits if precision limit is huge by @tompng in ruby/bigdecimal#445

Implement major math functions by @tompng in ruby/bigdecimal#336

Fix fast-path of frac and _decimal_shift affected by BigDecimal.limit by @tompng in ruby/bigdecimal#447

Update the latest versions of actions by @hsbt in ruby/bigdecimal#449

Add missing bigmath precision test, add missing indent by @tompng in ruby/bigdecimal#450

Make BigMath.exp and log also a module_method by @tompng in ruby/bigdecimal#452

Fix incorrect exception when exponent is fractional for Infinity base by @troy-dunamu in ruby/bigdecimal#453

Bump step-security/harden-runner from 2.13.1 to 2.13.2 by @dependabot[bot] in ruby/bigdecimal#454

Don't use assert_separatly if not needed by @tompng in ruby/bigdecimal#455

Bump actions/checkout from 5.0.0 to 6.0.0 by @dependabot[bot] in ruby/bigdecimal#456

Bump actions/checkout from 5.0.1 to 6.0.0 by @dependabot[bot] in ruby/bigdecimal#457

Add missing BigMath test for jruby by @tompng in ruby/bigdecimal#459

Change remainder/modulo/divmod test of +0/-0 type tolerant by @tompng in ruby/bigdecimal#460

Cast divmod quotient to int by @mrzasa in ruby/bigdecimal#312

Bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in ruby/bigdecimal#462

Bump step-security/harden-runner from 2.13.2 to 2.13.3 by @dependabot[bot] in ruby/bigdecimal#461

Implement BigMath.erf(x, prec) and BigMath.erfc(x, prec) by @tompng in ruby/bigdecimal#357

Implement BigMath.gamma and BigMath.lgamma by @tompng in ruby/bigdecimal#451

Fix typos + improve copy/paste in readme by @tas50 in ruby/bigdecimal#463

Fix inaccurate calculation (last digit) and add a workaround for add/sub hang bug by @tompng in ruby/bigdecimal#465

Fix lgamma precision around 1 and 2 by @tompng in ruby/bigdecimal#466

Fix lgamma precision when gamma(negative_x).abs nearly equals 1 by @tompng in ruby/bigdecimal#467

Implement BigMath.frexp and ldexp with exponent of 10 by @tompng in ruby/bigdecimal#448

Bump step-security/harden-runner from 2.13.3 to 2.14.0 by @dependabot[bot] in ruby/bigdecimal#468

Better rounding of BigMath.atan(nearly_one, prec) by @tompng in ruby/bigdecimal#469

Remove deprecated method BigDecimal#precs by @tompng in ruby/bigdecimal#470

Deprecate ludcmp, jacobian and newton by @tompng in ruby/bigdecimal#471

Bump version to v4.0.0 by @tompng in ruby/bigdecimal#472

New Contributors

@troy-dunamu made their first contribution in ruby/bigdecimal#453

@tas50 made their first contribution in ruby/bigdecimal#463

Full Changelog: ruby/bigdecimal@v3.3.1...v4.0.0

Changelog

Sourced from bigdecimal's changelog.

4.0.1

Fix warning GH-475

@tompng

4.0.0

BigDecimal#divmod return value changed to [Integer, BigDecimal] GH-312

@mrzasa

Remove BigDecimal#precs GH-470

@tompng

BigMath now supports all functions defined in Math module GH-336 GH-357 GH-451 GH-448

@tompng

Fix incorrect exception when exponent is fractional for Infinity base GH-453

@troy-dunamu

Deprecate bigdecimal/jacobian, bigdecimal/ludcmp and bigdecimal/newton GH-471

@tompng

Commits

6d01c36 Bump version to v4.0.1 (#477)
4914cc3 Remove "Which version should you select" section (#476)
4120325 Remove unused variable (and add test for it) (#475)
f0bf63f Merge pull request #474 from ruby/exclude-dependabot-update
d93ef2b Exclude dependabot updates from release note
d9914c9 Bump version to v4.0.0 (#472)
45d203a Deprecate ludcmp, jacobian and newton (#471)
8146336 Remove deprecated method BigDecimal#precs (#470)
b7e93bf Better rounding of BigMath.atan(nearly_one, prec) (#469)
cef76eb Merge pull request #468 from ruby/dependabot/github_actions/step-security/har...
Additional commits viewable in compare view

Updates hashie from 5.0.0 to 5.1.0

Release notes

Sourced from hashie's releases.

v5.1.0

What's Changed

Include example of Dash's lazy evaluation feature by @njakobsen in hashie/hashie#557

Add Ruby 3.1 to CI by @petergoldstein in hashie/hashie#558

Run CI on all branches. by @dblock in hashie/hashie#561

Add dependabot for GitHub Actions by @petergoldstein in hashie/hashie#564

Bump actions/checkout from 2 to 3 by @dependabot[bot] in hashie/hashie#565

Fix: Make Danger happy with the CHANGELOG. by @dblock in hashie/hashie#570

new integration spec for rails 7 exhibiting failure when executing de… by @aflansburg in hashie/hashie#569

Add Ruby 3.2 to the CI matrix by @petergoldstein in hashie/hashie#571

Bump actions/checkout from 3 to 4 by @dependabot[bot] in hashie/hashie#577

Fix: integration tests in CI. by @dblock in hashie/hashie#581

Fix typos by @kianmeng in hashie/hashie#580

Add Ruby 3.3 & 3.4 to the CI matrix by @btalayeminaei in hashie/hashie#582

Add logger as a runtime dependency by @Earlopain in hashie/hashie#583

Requires Ruby 2.7+ and upgraded Rubocop to 1.82.0 by @sue445 in hashie/hashie#589

Bump actions/checkout from 4 to 6 by @dependabot[bot] in hashie/hashie#588

New Contributors

@njakobsen made their first contribution in hashie/hashie#557

@dependabot[bot] made their first contribution in hashie/hashie#565

@aflansburg made their first contribution in hashie/hashie#569

@kianmeng made their first contribution in hashie/hashie#580

@btalayeminaei made their first contribution in hashie/hashie#582

@Earlopain made their first contribution in hashie/hashie#583

@sue445 made their first contribution in hashie/hashie#589

Full Changelog: hashie/hashie@v5.0.0...v5.1.0

Changelog

Sourced from hashie's changelog.

5.1.0 - 2025-12-24

Added

#569: Added support for Rails 7 - @aflansburg.

Changed

#571: Test with Ruby 3.2 - @petergoldstein.

#558: Test with Ruby 3.1 - @petergoldstein.

#582: Test with Ruby 3.3 and 3.4 - @btalayeminaei.

#589: Requires Ruby 2.7+ and upgraded Rubocop to 1.82.0 - @sue445.

Fixed

#583: Fix a warning about the logger gem on Ruby 3.4 - @earlopain.

Commits

ce22262 Preparing for release, 5.1.0.
db14062 Fixup RELEASING.md.
b0dd1b8 Merge pull request #588 from hashie/dependabot/github_actions/actions/checkout-6
cb62aa8 Bump actions/checkout from 4 to 6
777c7e9 Requires Ruby 2.7+ and upgraded Rubocop to 1.82.0 (#589)
6d9ad8c Add logger as a runtime dependency (#583)
7351055 Merge pull request #582 from btalayeminaei/test-with-ruby-3.3
cd3db28 Test with Ruby 3.4
cd2f2e0 Test with Ruby 3.3
d07b2a3 Merge pull request #580 from kianmeng/fix-typos
Additional commits viewable in compare view

Updates i18n from 1.14.7 to 1.14.8

Release notes

Sourced from i18n's releases.

v1.14.8

Full Changelog: ruby-i18n/i18n@v1.14.7...v1.14.8

What's Changed

Remove unused cgi require for Ruby 3.5 compatibility by @Earlopain in ruby-i18n/i18n#713

Explicitly require pathname by @voxik in ruby-i18n/i18n#708

CI: Add Ruby 3.4 to CI Matrix by @taketo1113 in ruby-i18n/i18n#722

Fix: I18n.locale reset in Fiber context by using Thread#thread_variable by @lee266 in ruby-i18n/i18n#724

CI: Use actions/checkout@v5 by @olleolleolle in ruby-i18n/i18n#721

Fix compatibility with --enable-frozen-string-literal by @byroot in ruby-i18n/i18n#726

New Contributors

@Earlopain made their first contribution in ruby-i18n/i18n#713

@taketo1113 made their first contribution in ruby-i18n/i18n#722

@lee266 made their first contribution in ruby-i18n/i18n#724

@byroot made their first contribution in ruby-i18n/i18n#726

Full Changelog: ruby-i18n/i18n@v1.14.7...v1.14.8

Commits

f2fb6a5 Bump to 1.14.9
ef62253 Merge pull request #726 from byroot/fstr-compat
0022013 Merge branch 'master' into fstr-compat
dee96b6 Remove testing for EOL Rubies 3.1 + 3.0
c6873f9 Merge remote-tracking branch 'olleolleolle/patch-1'
2134338 Merge pull request #724 from lee266/fix/i18n-locale-thread-variable
3f9ae64 Fix compatibility with --enable-frozen-string-literal
d64a88d Merge pull request #722 from taketo1113/ci-ruby-3.4
0e5484f CI: Fix rails version specification in gemfiles to run with the specified min...
960ab2b CI: Add ruby 3.4 to CI Matrix
Additional commits viewable in compare view

Updates multi_xml from 0.7.2 to 0.8.0

Changelog

Sourced from multi_xml's changelog.

0.8.0

Add per-parse :parser option to MultiXml.parse

Add SAX parsers for Nokogiri and LibXML

Fix inconsistent whitespace handling across parsers

Make parsing errors inspectable with cause and xml accessors

Drop support for JRuby

Commits

f1d0703 Bump version to 0.8.0
e19f336 Add push workflow and update release rake task
901bd2e Document Ruby 4 support
e5d1d8c Refactor
d6f7415 Remove test skips
ce8c07c Increase branch coverage to 100%
ba709fd Fix tests on Windows
67fc3a0 Drop support for JRuby
afa7099 Add type checking with RBS and Steep
b12a339 More refactoring
Additional commits viewable in compare view

Updates prism from 1.6.0 to 1.7.0

Release notes

Sourced from prism's releases.

v1.7.0

Added

Support 4.1 as a version option.

Add equal_loc to CallNode.

Add len()/is_empty() to ConstantList and NodeList in the Rust API.

Changed

Rename version 3.5 to version 4.0.

Fix compiling the gem from source on Windows.

Fix parsing of unary method calls like 42.~@.

Reject def f a, (b) = 1.

Reject endless method as a block parameter default.

Reject variable capture in alternative pattern.

Many fixes in regards to memory safety, found through fuzzing.

Many fixes to better handle invalid syntax, also found through fuzzing.

Fix the ruby version used by the ripper translator.

Fix ruby_parser translation comment processing.

Changelog

Sourced from prism's changelog.

[1.7.0] - 2025-12-18

Added

Support 4.1 as a version option.

Add equal_loc to CallNode.

Add len()/is_empty() to ConstantList and NodeList in the Rust API.

Changed

Rename version 3.5 to version 4.0.

Fix compiling the gem from source on Windows.

Fix parsing of unary method calls like 42.~@.

Reject def f a, (b) = 1.

Reject endless method as a block parameter default.

Reject variable capture in alternative pattern.

Many fixes in regards to memory safety, found through fuzzing.

Many fixes to better handle invalid syntax, also found through fuzzing.

Fix the ruby version used by the ripper translator.

Fix ruby_parser translation comment processing.

Commits

df55403 Merge pull request #3819 from ruby/bump-version
21c499d Bump to v1.7.0
0fa754e Merge pull request #3743 from Earlopain/bare-hash-command-call-v2
48b403e Reject p(p a, &block => value) and similar
61e45d5 Merge pull request #3817 from Earlopain/target-4.1
849f726 Merge pull request #3813 from ruby/dependabot/maven/java-wasm/java-deps-6679a...
095115f Merge pull request #3814 from ruby/dependabot/github_actions/action-deps-35b2...
3b0b771 Merge pull request #3815 from ruby/dependabot/bundler/gemfiles/2.7/ruby-deps-...
66e99e0 Merge pull request #3816 from eregon/fix-location_test
138db9c Add Ruby 4.1 as a version specifier
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the bundler group with 4 updates in the / directory: [rubocop](https://github.com/rubocop/rubocop), [bigdecimal](https://github.com/ruby/bigdecimal), [hashie](https://github.com/hashie/hashie) and [i18n](https://github.com/ruby-i18n/i18n). Updates `rubocop` from 1.82.0 to 1.82.1 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.82.0...v1.82.1) Updates `bigdecimal` from 3.3.1 to 4.0.1 - [Release notes](https://github.com/ruby/bigdecimal/releases) - [Changelog](https://github.com/ruby/bigdecimal/blob/master/CHANGES.md) - [Commits](ruby/bigdecimal@v3.3.1...v4.0.1) Updates `hashie` from 5.0.0 to 5.1.0 - [Release notes](https://github.com/hashie/hashie/releases) - [Changelog](https://github.com/hashie/hashie/blob/master/CHANGELOG.md) - [Commits](hashie/hashie@v5.0.0...v5.1.0) Updates `i18n` from 1.14.7 to 1.14.8 - [Release notes](https://github.com/ruby-i18n/i18n/releases) - [Changelog](https://github.com/ruby-i18n/i18n/blob/master/CHANGELOG.md) - [Commits](ruby-i18n/i18n@v1.14.7...v1.14.8) Updates `multi_xml` from 0.7.2 to 0.8.0 - [Changelog](https://github.com/sferik/multi_xml/blob/main/CHANGELOG.md) - [Commits](sferik/multi_xml@v0.7.2...v0.8.0) Updates `prism` from 1.6.0 to 1.7.0 - [Release notes](https://github.com/ruby/prism/releases) - [Changelog](https://github.com/ruby/prism/blob/main/CHANGELOG.md) - [Commits](ruby/prism@v1.6.0...v1.7.0) --- updated-dependencies: - dependency-name: rubocop dependency-version: 1.82.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: bundler - dependency-name: bigdecimal dependency-version: 4.0.1 dependency-type: indirect update-type: version-update:semver-major dependency-group: bundler - dependency-name: hashie dependency-version: 5.1.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: bundler - dependency-name: i18n dependency-version: 1.14.8 dependency-type: indirect update-type: version-update:semver-patch dependency-group: bundler - dependency-name: multi_xml dependency-version: 0.8.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: bundler - dependency-name: prism dependency-version: 1.7.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: bundler ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-12-26T07:05:13Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Dec 25, 2025

dependabot bot closed this Dec 26, 2025

dependabot bot deleted the dependabot/bundler/bundler-91a16f8821 branch December 26, 2025 07:05

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the bundler group across 1 directory with 6 updates #256

build(deps): bump the bundler group across 1 directory with 6 updates #256

Uh oh!

dependabot bot commented on behalf of github Dec 25, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Dec 26, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

build(deps): bump the bundler group across 1 directory with 6 updates #256

build(deps): bump the bundler group across 1 directory with 6 updates #256

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 25, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

RuboCop v1.82.1

Bug fixes

1.82.1 (2025-12-24)

Bug fixes

v4.0.1

What's Changed

v4.0.0

What's Changed

New Contributors

4.0.1

4.0.0

v5.1.0

What's Changed

New Contributors

5.1.0 - 2025-12-24

Added

Changed

Fixed

v1.14.8

What's Changed

New Contributors

0.8.0

v1.7.0

Added

Changed

[1.7.0] - 2025-12-18

Added

Changed

Uh oh!

dependabot bot commented on behalf of github Dec 26, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Dec 25, 2025 •

edited

Loading