Update bundler non-major dependencies to v2.7.5

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
annotate	2.6.5 → 2.7.5
graphql (source, changelog)	2.6.8 → 2.6.10
rails_cloudflare_turnstile (changelog)	0.5.0 → 0.5.1
rubocop (source, changelog)	1.89.0 → 1.90.0
rubocop-rails (source, changelog)	2.36.0 → 2.37.0
scout_apm (source, changelog)	6.2.1 → 6.3.0
selenium-webdriver (source, changelog)	4.47.0 → 4.48.0
sqlite3	2.9.6-aarch64-linux-gnu → 2.9.6
webmock (changelog)	3.26.2 → 3.26.4

---

Release Notes

ctran/annotate_models (annotate)

v2.7.5

Compare Source

See https://github.com/ctran/annotate_models/releases/tag/v2.7.5

v2.7.4

Compare Source

• Fix with_comment format in annotate_models_rake #​560

v2.7.3

Compare Source

See https://github.com/ctran/annotate_models/releases/tag/v2.7.3

v2.7.2

Compare Source

See https://github.com/ctran/annotate_models/releases/tag/v2.7.2

v2.7.1

Compare Source

See https://github.com/ctran/annotate_models/releases/tag/v2.7.1

v2.7.0

Compare Source

See https://github.com/ctran/annotate_models/releases/tag/v2.7.0

v2.6.10: Revert incompatible change

Compare Source

Revert "Prefer SQL column type over normalized AR type"

v2.6.9

Compare Source

• Support foreigh key #​241
• Check if model has skip tag in annotate_model_file #​167
• Fix issue where serializer-related flags weren't being honored #​246
• Prefer SQL column type over normalized AR type #​231

v2.6.8

Compare Source

• Nothing annotated unless options[:model_dir] is specified, #​234

v2.6.7

Compare Source

• Nothing annotated unless options[:model_dir] is specified, #​234

v2.6.6

Compare Source

• Makes it possible to wrap annotations, #​225
• Fix single model generation, #​214
• Fix default value for Rails 4.2, #​212
• Don't crash on inherited models in subdirectories, #​232
• Process model_dir in rake task, #​197

rmosolgo/graphql-ruby (graphql)

v2.6.10

Compare Source

New features

• Execution::Next: Add dataload: { ..., method: } shorthand #​5706

Bug fixes

• AsyncDataloader: Avoid ClosedError race in old fibers #​5702
• AsyncDataloader: fix nested dataloader runs #​5703
• Validation: speed up FieldsWillMerge #​5704
• AsyncDataloader: Fix ActiveRecord relation loads in connections #​5708
• Execution::Next: handle SystemStackErrors #​5705
• Restore current multiplex after nested execution #​5714
• Parser: handle out-of-range Unicode escapes as parse errors #​5710
• Lexer: re-raise unexpected ArgumentErrors #​5711
• Parser: support short braced unicode escapes #​5712
• Float: reject non-finite values #​5713

v2.6.9

Compare Source

Security

• Parser cache: validate payloads before loading them (GHSA-rmxg-5p3r-j6hh)

instrumentl/rails-cloudflare-turnstile (rails_cloudflare_turnstile)

v0.5.1

Compare Source

• Ruby 4.0 support added.
  • Dependencies updates

rubocop/rubocop (rubocop)

v1.90.0

Compare Source

New features

• #​15073: Add AllowTrailingComment option to Style/DisableCopsWithinSourceCodeDirective. ([@​bbatsov][])
• #​9505: Add disable-next directives scoped to the following statement. ([@​bbatsov][])
• #​15550: Add --display-suppressed option to also report offenses suppressed by directive comments, including their -- justification in the JSON formatter. ([@​bbatsov][])
• #​15523: Add new Lint/ArgumentMismatch cop. ([@​bbatsov][])
• #​15594: Add new Lint/SuperArgumentMismatch cop. ([@​bbatsov][])
• #​15581: Add new Style/TimeNow cop. ([@​Starlexxx][])
• #​15111: Add NumberOfEmptyLines option to Layout/EmptyLineAfterMagicComment to configure the minimum number of empty lines required after magic comments. ([@​alejofraga][])
• #​13037: Add --report-unused-todo-entries to catch rotting todo files. ([@​bbatsov][])
• #​15559: Add new Style/DirectiveScope cop to flag disable/enable pairs and disable-only push/pop scopes that wrap a single statement and can use disable-next instead. ([@​bbatsov][])
• #​15547: Make Lint/RedundantCopEnableDirective flag # rubocop:pop directives without a matching # rubocop:push. ([@​bbatsov][])

Bug fixes

• #​15584: Fix a crash in Lint/NameTypo and Lint/UnusedPrivateMethod on string literals with invalid encoding. ([@​bbatsov][])
• #​15541: Fix a false negative for Lint/OutOfRangeRegexpRef when a preceding element access with a non-string literal argument (e.g. hash[:key]) discarded the tracked capture count. ([@​koic][])
• #​7958: Add todo comments for skipped unsafe corrections with --disable-uncorrectable. ([@​bbatsov][])
• #​15569: Fix an error for the built-in language server when a workspace/executeCommand request has no document URI in its arguments. ([@​koic][])
• #​15410: Fix an incorrect autocorrect for Naming/BinaryOperatorParameterName. ([@​bbatsov][])
• #​15576: Fix an incorrect autocorrect for Style/Sample when shuffle is given a random: argument; the offense is still reported but no longer autocorrected, since shuffle and sample consume a seeded generator differently and would select different elements. ([@​koic][])
• #​15590: Fix an infinite loop error for Layout/FirstArgumentIndentation when EnforcedStyle: with_fixed_indentation is specified for Layout/ArgumentAlignment and Layout/FirstMethodArgumentLineBreak is enabled with AllowMultilineFinalElement: true. ([@​Starlexxx][])
• #​15588: Fix RuboCop::Cop::IgnoredMethods and RuboCop::Cop::IgnoredPattern being unreachable after require 'rubocop'. ([@​SeanLF][])
• #​8349: Don't autocorrect away directives for unknown cops. ([@​bbatsov][])
• #​7894: Don't flag disables of pending cops as redundant. ([@​bbatsov][])
• #​9963: Fix false negatives for Layout/ExtraSpacing. ([@​Starlexxx][])
• #​15525: Fix false negatives in Layout/LineLength when a constant path like Http::UploadedFile matches URISchemes case-insensitively. ([@​koic][])
• #​13941: Fix false positives for Lint/UselessConstantScoping when assigning with Class.new, Module.new, Struct.new, or Data.define after private. ([@​pdobb][])
• #​15526: Fix false positives in Layout/MultilineMethodCallIndentation when a line has multiple single-line blocks before a multiline block. ([@​koic][])
• #​15538: Fix false positives in Lint/ConstantReassignment when a constant is assigned in compact-style namespaces (e.g. module A::B). ([@​alex-tan][])
• #​15517: Fix false positives in Lint/RedundantSafeNavigation when InferNonNilReceiver is enabled and the receiver name is rebound by a nested block (it or a shadowed block parameter). ([@​koic][])
• #​15572: Fix RuboCop::Cop::Registry#freeze to freeze its internal collections, so that registering a lazily loaded cop after the freeze fails fast at the registration site instead of corrupting the registry. ([@​koic][])
• #​15585: Make Lint/DuplicateMethods honor silence_redefinition_of_method and redefine_method as intentional redefinitions. ([@​bbatsov][])
• #​15558: Fix --display-suppressed reporting a nil justification when the offense is loaded from the result cache. ([@​corsonknowles][])
• #​10449: Fix Layout/ClassStructure autocorrection producing a wrong order when an element cannot be moved, and make offenses report the category that actually blocks the expected order. ([@​koic][])
• #​15568: Fix Lint/NameTypo registering false positives for names provided by a gem whose namespace the project reopens, and for constants read from a namespace with an unresolved ancestor. ([@​HoneyryderChuck][])
• #​15556: Fix Lint/UnusedPrivateMethod retaining every past project_index object it has seen (and the index graph reachable from each), rather than only the most recent one. This caused unbounded memory growth in long-lived processes such as rubocop --server. ([@​bquorning][])
• #​10046: Fix Lint/UselessMethodDefinition false positive for methods with **kwargs. ([@​bbatsov][])
• #​15589: Fix --lsp and --mcp being silently ignored when the RuboCop server is running: they now start the protocol server in the current process instead of being forwarded to the server as a lint request. ([@​koic][])
• #​11148: Merge department and cop-level Exclude settings. ([@​bbatsov][])
• #​15531: Fix a regression in RuboCop 1.89 where the modifier cops could produce lines longer than Layout/LineLength Max when exemptions like AllowedPatterns matched the result. ([@​bbatsov][])
• #​15574: Fix an incorrect warning such as AllCops does not support TargetRailsVersion parameter when a plugin declares a custom AllCops key with a nil value and another plugin is loaded after it. ([@​koic][])
• #​9543: Preserve escape notation in Style/StringConcatenation autocorrect. ([@​bbatsov][])
• #​11119: Preserve persistent cop instances across files. ([@​Eljees][])
• #​13022: Fix rubocop . (and other relative directory arguments) needlessly traversing directories excluded by the configuration, which made it much slower than rubocop in projects with large ignored trees. ([@​bbatsov][])
• #​15561: Fix Lint/RedundantCopDisableDirective and Lint/RedundantCopEnableDirective leaving a directive's -- reason behind when removing the directive. ([@​corsonknowles][])
• #​15593: Fix false positives for Lint/UnusedPrivateMethod for private definitions of Ruby runtime hooks like inherited and const_missing. ([@​bbatsov][])
• #​15547: Make Lint/MissingCopEnableDirective suggest # rubocop:pop instead of # rubocop:enable for an unclosed # rubocop:push. ([@​bbatsov][])
• #​14379: Suppress multi-line offenses with a directive on any of their lines. ([@​bbatsov][])
• #​15593: Fix false positives for Lint/UnusedPrivateMethod when a method name is composed with an interpolated symbol or string prefix. ([@​bbatsov][])

Changes

• #​15585: Add AllowedCrossFilePaths option to Lint/DuplicateMethods to skip cross-file duplicates in configured paths. ([@​bbatsov][])
• #​15593: Add AllowedNames and AllowedPatterns options to Lint/UnusedPrivateMethod. ([@​bbatsov][])
• #​15587: Backfill missing StyleGuide metadata for 21 cops and fix four broken style guide links. ([@​bbatsov][])
• #​15530: Improve Lint/DeprecatedReference performance by short-circuiting deprecated?. ([@​connorshea][])
• #​15529: Improve Lint/NameTypo performance by deferring the literal-name scan. ([@​connorshea][])
• #​15554: Change AllowForAlignment to no longer treat a same-indentation line beyond the enclosing block as an alignment anchor for Layout/ExtraSpacing, Layout/SpaceAroundOperators, and Layout/SpaceBeforeFirstArg. ([@​koic][])
• #​15582: Make JUnit formatter output <testcase> elements only for cops enabled for each inspected file, instead of all cops. ([@​koic][])
• #​15562: Make Layout/SpaceAroundOperators aware of endless method definitions. ([@​koic][])
• #​14673: Make Lint/CopDirectiveSyntax catch keyword typos and unknown cop names. ([@​bbatsov][])
• #​12219: Stop honoring wrongly-namespaced disable directives. ([@​bbatsov][])

rubocop/rubocop-rails (rubocop-rails)

v2.37.0

Compare Source

Changes

• #​1649: Allow frozen array/hash literal (e.g. [].freeze, {}.freeze) as :default value in Rails/AttributeDefaultBlockValue. ([@​kuboon][])
• #​1652: Improve Rails/HttpPositionalArguments performance by checking for include Rack::Test::Methods once per file instead of once per HTTP call. ([@​moberegger][])
• #​1650: Speed up loading rubocop-rails by lazily loading only the cops and mixins needed for a run. This requires RuboCop 1.89.0+. ([@​koic][])

scoutapp/scout_apm_ruby (scout_apm)

v6.3.0

Compare Source

• Fix span leak on ActionController::Live streaming requests (#​631)

SeleniumHQ/selenium (selenium-webdriver)

v4.48.0

=========================

• Support CDP versions: v150, v151, v152
• add low-level BiDi protocol integration specs (#​17878)
• [build] Automated Browser Version Update (major) with CDP (#​17910)
• fix silent hang on oversized WebSocket frames (#​17655)
• always reject a missing required inbound BiDi field (#​17936)
• accept a whole-valued float for an integer BiDi field (#​17939)
• reject an inbound BiDi scalar outside its union's declared arms (#​17947)

bblimke/webmock (webmock)

v3.26.4

Compare Source

• Fix race condition in HTTPClient adapter async requests by @​koic in #​1131

v3.26.3

Compare Source

• Confirm to work with curb 1.3.7

  Thanks to Josch Bockler

• Fix NameError in async-http adapter on protocol-http1 >= 0.40

  Thanks to Leslie Hoare

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coveralls]

Coverage Report for CI Build 33672168391

Coverage remained the same at 98.3%

Details

• Coverage remained the same as the base build.
• Patch coverage: No coverable lines changed in this PR.
• No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

---

Coverage Stats

Relevant Lines:	1706
Covered Lines:	1677
Line Coverage:	98.3%
Coverage Strength:	82.0 hits per line

---

💛 - Coveralls