chore(deps): bump the bundler-version-updates group across 1 directory with 16 updates by dependabot[bot] · Pull Request #104 · zitadel/client-ruby

dependabot · 2026-11-05T09:07:25Z

Updates the requirements on oauth2, typhoeus, warning, rubocop, rubocop-minitest, better_coverage, dotenv, minitest-hooks, rake, simplecov-cobertura, cgi, date, net-http, tempfile, time and uri to permit the latest version.
Updates oauth2 from 2.0.22 to 2.1.0

Release notes

Sourced from oauth2's releases.

v2.1.0

2.1.0 - 2026-10-25

TAG: v2.1.0

COVERAGE: 98.48% -- 649/659 lines in 16 files

BRANCH COVERAGE: 93.53% -- 217/232 branches in 16 files

90.83% documented

Changed

BREAKING: allow_cross_origin_redirects now defaults to false. Cross-origin redirects are blocked before credentials are replayed. Set allow_cross_origin_redirects: true explicitly to retain the previous behavior (deprecated).

Security

GHSA-cmh8-5q25-68v6 - OAUTH_DEBUG token-request secrets are redacted; see gh!769. Reported by iamibi.

gh!769 - Redact secrets in structured token-request debug bodies, expand the default filtered credential keys, and require auth-sanitizer >= 0.2.5 by @makssein

gh!775 - Strip Authorization headers, request bodies, and query parameters from cross-origin redirects by @Huge

gh!776 - Redact configured sensitive response options from tokenless access-token initialization errors by @Huge

v2.0.26

[2.0.26] - 2026-10-25

TAG: [v2.0.26][2.0.26t]

COVERAGE: 98.48% -- 647/657 lines in 16 files

BRANCH COVERAGE: 93.48% -- 215/230 branches in 16 files

90.83% documented

Security

GHSA-cmh8-5q25-68v6 - OAUTH_DEBUG token-request secrets are redacted; see gh!769. Reported by iamibi.

gh!769 - Redact secrets in structured token-request debug bodies, expand the default filtered credential keys, and require auth-sanitizer >= 0.2.5 by @makssein

gh!775 - Strip Authorization headers, request bodies, and query parameters from cross-origin redirects by @Huge

gh!776 - Redact configured sensitive response options from tokenless access-token initialization errors by @Huge

GHSA-cmh8-5q25-68v6 - OAUTH_DEBUG token-request secrets are redacted; see gh!769. Reported by iamibi.

... (truncated)

Changelog

Sourced from oauth2's changelog.

[2.1.0] - 2026-10-25

TAG: [v2.1.0][2.1.0t]

COVERAGE: 98.48% -- 649/659 lines in 16 files

BRANCH COVERAGE: 93.53% -- 217/232 branches in 16 files

90.83% documented

Changed

BREAKING: allow_cross_origin_redirects now defaults to false. Cross-origin redirects are blocked before credentials are replayed. Set allow_cross_origin_redirects: true explicitly to retain the previous behavior (deprecated).

Security

GHSA-cmh8-5q25-68v6 - OAUTH_DEBUG token-request secrets are redacted; see gh!769. Reported by iamibi.

gh!769 - Redact secrets in structured token-request debug bodies, expand the default filtered credential keys, and require auth-sanitizer >= 0.2.5 by @makssein

gh!775 - Strip Authorization headers, request bodies, and query parameters from cross-origin redirects by @Huge

gh!776 - Redact configured sensitive response options from tokenless access-token initialization errors by @Huge

[2.0.26] - 2026-10-25

TAG: [v2.0.26][2.0.26t]

COVERAGE: 98.48% -- 647/657 lines in 16 files

BRANCH COVERAGE: 93.48% -- 215/230 branches in 16 files

90.83% documented

Security

GHSA-cmh8-5q25-68v6 - OAUTH_DEBUG token-request secrets are redacted; see gh!769. Reported by iamibi.

Deprecated

allow_cross_origin_redirects: true is deprecated. The default will change to false in the next minor release (2.1.0). Set it explicitly to retain the current behavior.

Added

kettle-jem-template-20260720-001 - READMEs can now display configured corporate sponsor logos.

kettle-jem-template-20260720-005 - README Support & Community links now include RubyForum.

kettle-jem-template-20260726-001 - Projects now include YARD lint configuration and documentation dependencies so documentation issues fail before generated docs are refreshed.

kettle-jem-template-20260727-001 - Spec harness documentation now lists the RSpec helpers provided by kettle-test.

... (truncated)

Commits

33d0896 🔖 Prepare release v2.1.0
fbeacbc ⬆️ Reconcile family dependencies
9a407cf Merge pull request #779 from ruby-oauth/room/fix-https-github-com-ruby-oauth-...
1cd914b 🔧 Constrain URI for TruffleRuby 22.3
7e8f82a 🔧 Update RuboCop Gradual lockfile after client_spec.rb changes
868fb39 🔧 Fix Ruby 2.4 compatibility: use scheme/host instead of URI#origin
8963899 🔖 Prepare release v2.1.0
d8c18b7 🔒️ Checksums for v2.0.26
b3e092d 🔖 Prepare release v2.0.26
a0ddf66 🔒 Load Faraday logging formatter explicitly
Additional commits viewable in compare view

Updates typhoeus from 1.4.1 to 1.7.1

Changelog

Sourced from typhoeus's changelog.

1.7.1

Full Changelog

Require Ethon >= 0.19.1. Ethon 0.19.0 rejects Easy#cleanup from an on_complete callback, which broke every request with :resolve because Typhoeus cleans up resolve-list easies instead of pooling them. The compatibility specs now cover a :resolve request. (#824, ethon#456)

1.7.0

Full Changelog

This release requires Ethon 0.19 and changes several public behaviors. Review the breaking changes and UPGRADE.md before upgrading.

Breaking changes

Require Ethon >= 0.19.0. Release easy handles when callbacks raise, clean up failed hydra runs without dropping queued requests, drop inherited handles after fork, and document fork and empty-header behavior. Ethon 0.19 also propagates callback exceptions, rejects handles inherited across fork, validates enum and bitmask options, and fixes multipart PUT requests.

Constrain the Ethon dependency to < 0.20 so a future pre-1.0 minor release cannot introduce breaking changes unnoticed.

Call on_progress callbacks with the documented four arguments. A lambda with four parameters no longer raises ArgumentError.

Raise ArgumentError for a non-positive Hydra max_concurrency, including when it is assigned after the hydra is created, instead of leaving every queued request unperformed. (#753)

Raise ArgumentError with the option name for non-numeric timeout options instead of failing with NoMethodError inside option sanitization. (#758)

Raise Typhoeus::Errors::NoResponse when a stub has no response or its response block returns nil or a non-Response object. (#776)

Behavior changes

Make Typhoeus.with_connection thread-local so it no longer unblocks requests in other threads. (#813)

Make Typhoeus.with_connection apply across fibers in the current thread by using thread variables instead of fiber-local storage.

Bypass stubs inside Typhoeus.with_connection. A stub can now forward its request to the real service without matching itself in an endless loop, and the real response is not finished a second time.

... (truncated)

Commits

a6028ed Merge pull request #826 from typhoeus/release/v1.7.1
c86617b Release v1.7.1
cf1fd01 Require Ethon 0.19.1
c9f44ce Merge pull request #823 from typhoeus/docs/changelog-sections
5831617 Split the 1.7.0 release notes into sections
49fa463 Merge pull request #817 from typhoeus/release/v1.7.0
61a1af3 Document the Ethon cap and progress callback arity
1c647ba Treat every before response as a mock
f525e68 Document the 1.7 requirements and verbose output
3f3dd17 Fix stub response reuse and hydra error cleanup
Additional commits viewable in compare view

Updates warning from 1.5.0 to 1.6.0

Changelog

Sourced from warning's changelog.

=== 1.6.0 (2026-05-11)

Skip warning's own frame when raising exceptions (byroot) (#27)

Add Warning.error_class accessor to override class to use when raising warnings as errors (byroot) (#26)

Commits

42094ca Bump version to 1.6.0
f704c0b Mention Warning.error_class= in README
0f11aa1 Update CHANGELOG and documentation
808bcaf Skip warning's own frame when raising exceptions
3b25dc0 Allow to customize the raised error
1c8f52f Bump copyright year
9fd6fd4 Update to actions/checkout@v6
4de5514 Add Ruby 4.0 to CI
8086bcd Use SimpleCov.add_filter block instead of string
b574f24 Switch rdoc task to normal rake task, avoid rdoc/task require
Additional commits viewable in compare view

Updates rubocop from 1.78.0 to 1.92.2

Release notes

Sourced from rubocop's releases.

RuboCop v1.92.2

Bug fixes

#16147: Fix a false negative for Lint/RedundantCopDisableDirective when autocorrection shifts lines. ([@koic][])

#16104: Fix a false negative for Style/FloatDivision with a trailing comment. ([@a-lavis][])

#16146: Fix a false positive for Lint/RedundantCopDisableDirective with a repeated disable. ([@koic][])

#16176: Fix a false positive for Style/RaiseArgs with EnforcedStyle: compact and constructor arguments. ([@bbatsov][])

#16183: Fix an error for Layout/RescueEnsureAlignment with index or-assignment. ([@koic][])

#16158: Fix an error for Style/NumericPredicate with a predicate nested in the receiver of another. ([@Starlexxx][])

#16125: Fix an error for Style/RedundantCondition with a nested modifier if. ([@koic][])

#16175: Fix an incorrect autocorrect for Layout/HashAlignment with multiple styles and pairs on one line. ([@bbatsov][])

#16139: Fix an incorrect autocorrect for Layout/LineLength with code after a heredoc opener. ([@koic][])

#16160: Fix an incorrect autocorrect for Layout/SingleLineBlockChain with Style/MapToSet. ([@koic][])

#16002: Fix an incorrect autocorrect for Layout/SpaceBeforeBlockBraces with a brace after a line continuation. ([@Starlexxx][])

#16175: Fix an incorrect autocorrect for Layout/SpaceBeforeBlockBraces with a brace after a heredoc body. ([@bbatsov][])

#16180: Fix an incorrect autocorrect for Lint/InterpolationCheck in a split string. ([@Starlexxx][])

#16143: Fix an incorrect autocorrect for Lint/ParenthesesAsGroupedExpression with a command call operand. ([@koic][])

#16170: Fix an incorrect autocorrect for Lint/RedundantSplatExpansion with Array.new as a method argument. ([@wleeaf][])

#16178: Fix an incorrect autocorrect for Style/AndOr with a binary operator method operand. ([@bbatsov][])

#16150: Fix an incorrect autocorrect for Style/AndOr with a command call that takes a do block. ([@Starlexxx][])

#16178: Fix an incorrect autocorrect for Style/AndOr with a method chained onto a command call's do block. ([@bbatsov][])

#16178: Fix an incorrect autocorrect for Style/AndOr with a negated command call that takes a do block. ([@bbatsov][])

#16178: Fix an incorrect autocorrect for Style/AndOr with a pattern matching, ternary, range or defined? operand. ([@bbatsov][])

#16178: Fix an incorrect autocorrect for Style/AndOr with super called with arguments. ([@bbatsov][])

#16171: Fix an incorrect autocorrect for Style/CaseEquality with a non-numeric range. ([@wleeaf][])

#16127: Fix an incorrect autocorrect for Style/ClassAndModuleChildren with Style/DataInheritance. ([@koic][])

#16154: Fix an incorrect autocorrect for Style/EndlessMethod with modifier cops. ([@koic][])

#16167: Fix an incorrect autocorrect for Style/HashAsLastArrayItem with Layout/MultilineArrayBraceLayout. ([@Starlexxx][])

#16126: Fix an incorrect autocorrect for Style/HashLookupMethod with forwarded or splatted arguments. ([@koic][])

#16163: Fix an incorrect autocorrect for Style/MethodCallWithArgsParentheses with Layout/HeredocArgumentClosingParenthesis. ([@koic][])

#16124: Fix an incorrect autocorrect for Style/MethodDefParentheses with a line continuation. ([@koic][])

#16159: Fix an incorrect autocorrect for Style/ParenthesesAroundCondition with a command call assignment. ([@koic][])

#16137: Fix an incorrect autocorrect for Style/QuotedSymbols with a trailing backslash. ([@koic][])

#16176: Fix an incorrect autocorrect for Style/RaiseArgs compact style with e.class as the exception. ([@bbatsov][])

#16169: Fix an incorrect autocorrect for Style/RaiseArgs with a heredoc message. ([@Starlexxx][])

#16132: Fix an incorrect autocorrect for Style/RaiseArgs with a parenthesized raise. ([@koic][])

#16136: Fix an incorrect autocorrect for Style/ReduceToHash with a heredoc. ([@koic][])

#16162: Fix an incorrect autocorrect for Style/RedundantBegin with a ternary branch. ([@koic][])

#16176: Fix an incorrect autocorrect for Style/RedundantException with a heredoc in a multiline call. ([@bbatsov][])

#16177: Fix an incorrect autocorrect for Style/SingleLineMethods with code after the method's end. ([@bbatsov][])

#16157: Fix an incorrect autocorrect for Style/StringConcatenation when joining parts forms an interpolation. ([@Starlexxx][])

#16161: Fix an incorrect autocorrect for Style/TrailingCommaInArguments with argument forwarding. ([@koic][])

#16182: Fix an infinite loop for Layout/EmptyLinesAfterModuleInclusion with a logical operator. ([@Starlexxx][])

#16138: Fix an infinite loop for Layout/EmptyLinesAroundClassBody with Layout/IndentationWidth. ([@koic][])

#16142: Fix an infinite loop for Layout/EndAlignment with a class or module assigned to a constant. ([@Starlexxx][])

#16128: Fix an infinite loop for Layout/ExtraSpacing with Layout/LineLength. ([@koic][])

#16148: Fix an infinite loop for Layout/SpaceAroundOperators with Layout/LineContinuationSpacing. ([@Starlexxx][])

#16123: Fix an infinite loop for Layout/SpaceAroundOperators with hash rockets aligned on non-adjacent lines. ([@koic][])

#16144: Fix an infinite loop for Layout/SpaceInsideBlockBraces with Layout/BlockAlignment. ([@koic][])

#16145: Fix an infinite loop for Layout/SpaceInsideRangeLiteral with a nested endless range. ([@koic][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.92.2 (2026-10-29)

Bug fixes

#16147: Fix a false negative for Lint/RedundantCopDisableDirective when autocorrection shifts lines. ([@koic][])

#16104: Fix a false negative for Style/FloatDivision with a trailing comment. ([@a-lavis][])

#16146: Fix a false positive for Lint/RedundantCopDisableDirective with a repeated disable. ([@koic][])

#16176: Fix a false positive for Style/RaiseArgs with EnforcedStyle: compact and constructor arguments. ([@bbatsov][])

#16183: Fix an error for Layout/RescueEnsureAlignment with index or-assignment. ([@koic][])

#16158: Fix an error for Style/NumericPredicate with a predicate nested in the receiver of another. ([@Starlexxx][])

#16125: Fix an error for Style/RedundantCondition with a nested modifier if. ([@koic][])

#16175: Fix an incorrect autocorrect for Layout/HashAlignment with multiple styles and pairs on one line. ([@bbatsov][])

#16139: Fix an incorrect autocorrect for Layout/LineLength with code after a heredoc opener. ([@koic][])

#16160: Fix an incorrect autocorrect for Layout/SingleLineBlockChain with Style/MapToSet. ([@koic][])

#16002: Fix an incorrect autocorrect for Layout/SpaceBeforeBlockBraces with a brace after a line continuation. ([@Starlexxx][])

#16175: Fix an incorrect autocorrect for Layout/SpaceBeforeBlockBraces with a brace after a heredoc body. ([@bbatsov][])

#16180: Fix an incorrect autocorrect for Lint/InterpolationCheck in a split string. ([@Starlexxx][])

#16143: Fix an incorrect autocorrect for Lint/ParenthesesAsGroupedExpression with a command call operand. ([@koic][])

#16170: Fix an incorrect autocorrect for Lint/RedundantSplatExpansion with Array.new as a method argument. ([@wleeaf][])

#16178: Fix an incorrect autocorrect for Style/AndOr with a binary operator method operand. ([@bbatsov][])

#16150: Fix an incorrect autocorrect for Style/AndOr with a command call that takes a do block. ([@Starlexxx][])

#16178: Fix an incorrect autocorrect for Style/AndOr with a method chained onto a command call's do block. ([@bbatsov][])

#16178: Fix an incorrect autocorrect for Style/AndOr with a negated command call that takes a do block. ([@bbatsov][])

#16178: Fix an incorrect autocorrect for Style/AndOr with a pattern matching, ternary, range or defined? operand. ([@bbatsov][])

#16178: Fix an incorrect autocorrect for Style/AndOr with super called with arguments. ([@bbatsov][])

#16171: Fix an incorrect autocorrect for Style/CaseEquality with a non-numeric range. ([@wleeaf][])

#16127: Fix an incorrect autocorrect for Style/ClassAndModuleChildren with Style/DataInheritance. ([@koic][])

#16154: Fix an incorrect autocorrect for Style/EndlessMethod with modifier cops. ([@koic][])

#16167: Fix an incorrect autocorrect for Style/HashAsLastArrayItem with Layout/MultilineArrayBraceLayout. ([@Starlexxx][])

#16126: Fix an incorrect autocorrect for Style/HashLookupMethod with forwarded or splatted arguments. ([@koic][])

#16163: Fix an incorrect autocorrect for Style/MethodCallWithArgsParentheses with Layout/HeredocArgumentClosingParenthesis. ([@koic][])

#16124: Fix an incorrect autocorrect for Style/MethodDefParentheses with a line continuation. ([@koic][])

#16159: Fix an incorrect autocorrect for Style/ParenthesesAroundCondition with a command call assignment. ([@koic][])

#16137: Fix an incorrect autocorrect for Style/QuotedSymbols with a trailing backslash. ([@koic][])

#16176: Fix an incorrect autocorrect for Style/RaiseArgs compact style with e.class as the exception. ([@bbatsov][])

#16169: Fix an incorrect autocorrect for Style/RaiseArgs with a heredoc message. ([@Starlexxx][])

#16132: Fix an incorrect autocorrect for Style/RaiseArgs with a parenthesized raise. ([@koic][])

#16136: Fix an incorrect autocorrect for Style/ReduceToHash with a heredoc. ([@koic][])

#16162: Fix an incorrect autocorrect for Style/RedundantBegin with a ternary branch. ([@koic][])

#16176: Fix an incorrect autocorrect for Style/RedundantException with a heredoc in a multiline call. ([@bbatsov][])

#16177: Fix an incorrect autocorrect for Style/SingleLineMethods with code after the method's end. ([@bbatsov][])

#16157: Fix an incorrect autocorrect for Style/StringConcatenation when joining parts forms an interpolation. ([@Starlexxx][])

#16161: Fix an incorrect autocorrect for Style/TrailingCommaInArguments with argument forwarding. ([@koic][])

#16182: Fix an infinite loop for Layout/EmptyLinesAfterModuleInclusion with a logical operator. ([@Starlexxx][])

#16138: Fix an infinite loop for Layout/EmptyLinesAroundClassBody with Layout/IndentationWidth. ([@koic][])

#16142: Fix an infinite loop for Layout/EndAlignment with a class or module assigned to a constant. ([@Starlexxx][])

#16128: Fix an infinite loop for Layout/ExtraSpacing with Layout/LineLength. ([@koic][])

#16148: Fix an infinite loop for Layout/SpaceAroundOperators with Layout/LineContinuationSpacing. ([@Starlexxx][])

#16123: Fix an infinite loop for Layout/SpaceAroundOperators with hash rockets aligned on non-adjacent lines. ([@koic][])

#16144: Fix an infinite loop for Layout/SpaceInsideBlockBraces with Layout/BlockAlignment. ([@koic][])

... (truncated)

Commits

d6ef1f9 Cut 1.92.2
01d4e47 Update Changelog
75b6eb7 Fix an incorrect autocorrect for Style/RaiseArgs with a heredoc message
00b9402 Fix an incorrect autocorrect for Lint/InterpolationCheck in a split string
3677424 Fix an infinite loop for Layout/SpaceAroundOperators with Layout/LineContinua...
cd52175 Fix a false negative for Style/FloatDivision with a trailing comment
5cf8ab0 [Fix #16168] Fix false positives for Lint/NestedPercentLiteral with format se...
5cd5d75 Fix an infinite loop for Layout/EmptyLinesAfterModuleInclusion with a logic...
ac10ccf Merge pull request #16183 from koic/fix_an_error_for_layout_rescue_ensure_ali...
5c851c2 Fix an error for Layout/RescueEnsureAlignment with index or-assignment
Additional commits viewable in compare view

Updates rubocop-minitest from 0.38.1 to 0.41.0

Release notes

Sourced from rubocop-minitest's releases.

RuboCop Minitest v0.41.0

Bug fixes

#361: Fix RuboCop::TestCase raising NameError: wrong constant name when used with Minitest's spec DSL and nested describe blocks. (@bquorning)

#367: Fix an error for Minitest/GlobalExpectations when the receiver of a matcher call is itself a matcher call. (@pcbeingused333, @koic)

#364: Fix Minitest/MultipleAssertions, Minitest/NoAssertions, Minitest/NoTestCases, and Minitest/DuplicateTestRun treating a test or it block inside a method definition as a test case. (@moberegger)

Changes

#363: Improve Minitest/MultipleAssertions performance by removing per-node allocations and a linear matcher-method lookup from the assertion counter. (@moberegger)

#360: Speed up loading rubocop-minitest by lazily loading only the cops and mixins needed for a run. This requires RuboCop 1.89.0+. (@koic)

RuboCop Minitest v0.40.0

New features

#355: Add new RuboCop::TestCase as a stable API for testing custom cops with Minitest. The cop under test is derived from the test class name and can be configured with cop_class, cop_config, other_cops, and target_ruby_version. (@koic)

Changes

#345: Fix false positives and negatives in Minitest/NonExecutableTestMethod for nested test classes and for test methods defined before the test class. (@amckinnie)

#278: (Breaking) Remove the cop argument from inspect_source and investigate in the Minitest test support; the cop under test is now resolved automatically. The test configuration now merges the default configuration for the cop under test and sets AllCops: TargetRubyVersion explicitly. (@koic)

RuboCop Minitest v0.39.1

Bug fixes

#347: Fix false positives in Minitest/AssertIncludes and Minitest/RefuteIncludes cops. (@koic)

RuboCop Minitest v0.39.0

Changes

#344: Disable Minitest/AssertEmptyLiteral by default. (@koic)

#315: Make Minitest/AssertIncludes and Minitest/RefuteIncludes aware of key?, has_key?, and member? alias methods. (@koic)

RuboCop Minitest v0.38.2

Bug fixes

#321: Fix false positives for Minitest/MultipleAssertions when the assertion has a receiver. ([@earlopain][])

... (truncated)

Changelog

Sourced from rubocop-minitest's changelog.

0.41.0 (2026-10-02)

Bug fixes

#361: Fix RuboCop::TestCase raising NameError: wrong constant name when used with Minitest's spec DSL and nested describe blocks. ([@bquorning][])

#367: Fix an error for Minitest/GlobalExpectations when the receiver of a matcher call is itself a matcher call. ([@pcbeingused333][], [@koic][])

#364: Fix Minitest/MultipleAssertions, Minitest/NoAssertions, Minitest/NoTestCases, and Minitest/DuplicateTestRun treating a test or it block inside a method definition as a test case. ([@moberegger][])

Changes

#363: Improve Minitest/MultipleAssertions performance by removing per-node allocations and a linear matcher-method lookup from the assertion counter. ([@moberegger][])

#360: Speed up loading rubocop-minitest by lazily loading only the cops and mixins needed for a run. This requires RuboCop 1.89.0+. ([@koic][])

0.40.0 (2026-07-20)

New features

#355: Add new RuboCop::TestCase as a stable API for testing custom cops with Minitest. The cop under test is derived from the test class name and can be configured with cop_class, cop_config, other_cops, and target_ruby_version. ([@koic][])

Changes

#345: Fix false positives and negatives in Minitest/NonExecutableTestMethod for nested test classes and for test methods defined before the test class. ([@amckinnie][])

#278: (Breaking) Remove the cop argument from inspect_source and investigate in the Minitest test support; the cop under test is now resolved automatically. The test configuration now merges the default configuration for the cop under test and sets AllCops: TargetRubyVersion explicitly. ([@koic][])

0.39.1 (2026-02-24)

Bug fixes

#347: Fix false positives in Minitest/AssertIncludes and Minitest/RefuteIncludes cops for key? and has_key? used with assert or refute. ([@koic][])

0.39.0 (2026-02-24)

Changes

#344: Disable Minitest/AssertEmptyLiteral by default. ([@koic][])

#315: Make Minitest/AssertIncludes and Minitest/RefuteIncludes aware of key?, has_key?, and member? alias methods. ([@koic][])

0.38.2 (2025-08-30)

Bug fixes

#321: Fix false positives for Minitest/MultipleAssertions when the assertion has a receiver. ([@earlopain][])

Commits

64ba67f Cut 0.41.0
3004d92 Update Changelog
d50118b Merge pull request #362 from rubocop/fix-test-case-minitest-spec-nested-describe
c6dea3e [Fix #361] Fix NameError in derive_cop_class_from_name
cc3b288 Merge pull request #367 from koic/fix_global_expectations_nested_matcher_rece...
d66d27a Fix an error for Minitest/GlobalExpectations on a nested matcher receiver
b22556c Merge pull request #364 from moberegger/moberegger/optimize-test_cases-helper
0566295 Optimize MinitestExplorationHelpers#test_cases helper
92d3aff Merge pull request #363 from moberegger/moberegger/optimize-MultipleAssertion...
c826d9b Optimize MultipleAssertions cop
Additional commits viewable in compare view

Updates better_coverage from 1.1.1 to 1.1.2

Release notes

Sourced from better_coverage's releases.

v1.1.2

1.1.2 (2026-10-27)

Bug Fixes

pin rubocop and fix DirectiveScope offenses (6aa7bb7)

Commits

9a868fc chore(release): 1.1.2 [skip ci]
6aa7bb7 fix: pin rubocop and fix DirectiveScope offenses
8003a74 ci: bump action-semantic-release to v2
5fd1ca1 chore(release): use semantic-release default branches
ebccc1a chore: track devbox config in git
465a3cb ci: add concurrency group to release workflow
21c633f chore(ci): add runner-common setup step to all workflows
d03c6c5 ci: drop unnecessary contents:write from lint/test workflows
See full diff in compare view

Updates dotenv from 3.1.8 to 3.2.0

Release notes

Sourced from dotenv's releases.

v3.2.0

What's Changed

Boost app startup time by removing to_sentence usage by @ThomasCrambert in bkeepers/dotenv#534

Handle parentheses in variables in commands by @i7an in bkeepers/dotenv#540

allow warning when a env var was not overwritten by @grosser in bkeepers/dotenv#531

fix a few small issues by @grosser in bkeepers/dotenv#532

New Contributors

@ThomasCrambert made their first contribution in bkeepers/dotenv#534

@i7an made their first contribution in bkeepers/dotenv#540

Full Changelog: bkeepers/dotenv@v3.1.8...v3.2.0

Commits

34156bf Prepare for 3.2.0 release
ab47820 Merge pull request #531 from grosser/grosser/warn
fae6120 Merge branch 'main' into grosser/warn
4f510f4 Merge pull request #532 from grosser/grosser/fixes
959e1da Merge pull request #539 from bkeepers/dependabot/github_actions/actions/check...
041451e Update spec message
b300f26 Bump actions/checkout from 4 to 6
5f4ca01 Merge branch 'main' into grosser/warn
209dca4 Merge pull request #540 from i7an/handle-parentheses
48c4956 Merge branch 'main' into handle-parentheses
Additional commits viewable in compare view

Updates minitest-hooks from 1.5.2 to 1.5.4

Changelog

Sourced from minitest-hooks's changelog.

=== 1.5.4 (2026-05-04)

Fix reported assertion counts on minitest 6+ (jeremyevans)

=== 1.5.3 (2025-12-18)

Work correctly on minitest 6+ (jeremyevans)

Commits

f3ef8c7 Bump version to 1.5.4
aa7f157 Spec tweak to pass on Ruby 1.8
375a4bf Fix reported assertion counts on minitest 6+
84937b2 Bump copyright year
7e4db42 Update to actions/checkout@v6
129288d Add Ruby 4.0 to CI
e690c2e Bump version to 1.5.3
fc549a2 Add nocov around minitest 6 conditional
88126f2 Add metadata and required ruby version to gemspec
672d4af Work correctly on minitest 6+
Additional commits viewable in compare view

Updates rake from 13.3.0 to 13.4.2

Commits

503b8ec v13.4.2
46038e7 Merge pull request #723 from ruby/fix/testopts-preserve-existing-value
604a3d9 Isolate TESTOPTS env in TestRakeTestTask s...
Description has been truncated

…y with 16 updates Updates the requirements on [oauth2](https://github.com/ruby-oauth/oauth2), [typhoeus](https://github.com/typhoeus/typhoeus), [warning](https://github.com/jeremyevans/ruby-warning), [rubocop](https://github.com/rubocop/rubocop), [rubocop-minitest](https://github.com/rubocop/rubocop-minitest), [better_coverage](https://github.com/mridang/minitest-reporters), [dotenv](https://github.com/bkeepers/dotenv), [minitest-hooks](https://github.com/jeremyevans/minitest-hooks), [rake](https://github.com/ruby/rake), [simplecov-cobertura](https://github.com/jessebs/simplecov-cobertura), [cgi](https://github.com/ruby/cgi), [date](https://github.com/ruby/date), [net-http](https://github.com/ruby/net-http), [tempfile](https://github.com/ruby/tempfile), [time](https://github.com/ruby/time) and [uri](https://github.com/ruby/uri) to permit the latest version. Updates `oauth2` from 2.0.22 to 2.1.0 - [Release notes](https://github.com/ruby-oauth/oauth2/releases) - [Changelog](https://github.com/ruby-oauth/oauth2/blob/main/CHANGELOG.md) - [Commits](ruby-oauth/oauth2@v2.0.22...v2.1.0) Updates `typhoeus` from 1.4.1 to 1.7.1 - [Changelog](https://github.com/typhoeus/typhoeus/blob/master/CHANGELOG.md) - [Commits](typhoeus/typhoeus@v1.4.1...v1.7.1) Updates `warning` from 1.5.0 to 1.6.0 - [Changelog](https://github.com/jeremyevans/ruby-warning/blob/master/CHANGELOG) - [Commits](jeremyevans/ruby-warning@1.5.0...1.6.0) Updates `rubocop` from 1.78.0 to 1.92.2 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.78.0...v1.92.2) Updates `rubocop-minitest` from 0.38.1 to 0.41.0 - [Release notes](https://github.com/rubocop/rubocop-minitest/releases) - [Changelog](https://github.com/rubocop/rubocop-minitest/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop-minitest@v0.38.1...v0.41.0) Updates `better_coverage` from 1.1.1 to 1.1.2 - [Release notes](https://github.com/mridang/minitest-reporters/releases) - [Commits](mridang/minitest-reporters@v1.1.1...v1.1.2) Updates `dotenv` from 3.1.8 to 3.2.0 - [Release notes](https://github.com/bkeepers/dotenv/releases) - [Changelog](https://github.com/bkeepers/dotenv/blob/main/Changelog.md) - [Commits](bkeepers/dotenv@v3.1.8...v3.2.0) Updates `minitest-hooks` from 1.5.2 to 1.5.4 - [Changelog](https://github.com/jeremyevans/minitest-hooks/blob/master/CHANGELOG) - [Commits](jeremyevans/minitest-hooks@1.5.2...1.5.4) Updates `rake` from 13.3.0 to 13.4.2 - [Release notes](https://github.com/ruby/rake/releases) - [Changelog](https://github.com/ruby/rake/blob/master/History.rdoc) - [Commits](ruby/rake@v13.3.0...v13.4.2) Updates `simplecov-cobertura` from 3.1.0 to 3.2.0 - [Release notes](https://github.com/jessebs/simplecov-cobertura/releases) - [Commits](jessebs/simplecov-cobertura@v3.1.0...v3.2.0) Updates `cgi` from 0.5.1 to 0.5.2 - [Release notes](https://github.com/ruby/cgi/releases) - [Commits](ruby/cgi@v0.5.1...v0.5.2) Updates `date` from 3.5.1 to 3.6.0 - [Release notes](https://github.com/ruby/date/releases) - [Commits](ruby/date@v3.5.1...v3.6.0) Updates `net-http` from 0.9.1 to 0.10.0 - [Release notes](https://github.com/ruby/net-http/releases) - [Commits](ruby/net-http@v0.9.1...v0.10.0) Updates `tempfile` from 0.3.1 to 0.3.2 - [Release notes](https://github.com/ruby/tempfile/releases) - [Commits](ruby/tempfile@v0.3.1...v0.3.2) Updates `time` from 0.4.2 to 0.5.0 - [Release notes](https://github.com/ruby/time/releases) - [Commits](ruby/time@v0.4.2...v0.5.0) Updates `uri` from 1.1.1 to 1.1.2 - [Release notes](https://github.com/ruby/uri/releases) - [Commits](ruby/uri@v1.1.1...v1.1.2) --- updated-dependencies: - dependency-name: oauth2 dependency-version: 2.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bundler-version-updates - dependency-name: typhoeus dependency-version: 1.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bundler-version-updates - dependency-name: warning dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bundler-version-updates - dependency-name: rubocop dependency-version: 1.92.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler-version-updates - dependency-name: rubocop-minitest dependency-version: 0.41.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler-version-updates - dependency-name: better_coverage dependency-version: 1.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: bundler-version-updates - dependency-name: dotenv dependency-version: 3.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler-version-updates - dependency-name: minitest-hooks dependency-version: 1.5.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: bundler-version-updates - dependency-name: rake dependency-version: 13.4.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler-version-updates - dependency-name: simplecov-cobertura dependency-version: 3.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler-version-updates - dependency-name: cgi dependency-version: 0.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-version-updates - dependency-name: date dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bundler-version-updates - dependency-name: net-http dependency-version: 0.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bundler-version-updates - dependency-name: tempfile dependency-version: 0.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-version-updates - dependency-name: time dependency-version: 0.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bundler-version-updates - dependency-name: uri dependency-version: 1.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler-version-updates ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-11-05T09:13:11Z

Qodana for PHP

It seems all right 👌

No new problems were found according to the checks applied

💡 Qodana analysis was run in the pull request mode: only the changed files were checked
☁️ View the detailed Qodana report

Contact Qodana team

Contact us at qodana-support@jetbrains.com

Or via our issue tracker: https://jb.gg/qodana-issue
Or share your feedback: https://jb.gg/qodana-discussions

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Nov 5, 2026

Navigation Menu

Repository navigation

chore(deps): bump the bundler-version-updates group across 1 directory with 16 updates - #104

chore(deps): bump the bundler-version-updates group across 1 directory with 16 updates#104
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/bundler-version-updates-ef4209bdcd

dependabot Bot commented on behalf of github Nov 5, 2026

Uh oh!

github-actions Bot commented Nov 5, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 5, 2026

v2.1.0

2.1.0 - 2026-10-25

Changed

Security

v2.0.26

[2.0.26] - 2026-10-25

Security

[2.1.0] - 2026-10-25

Changed

Security

[2.0.26] - 2026-10-25

Security

Deprecated

Added

1.7.1

1.7.0

Breaking changes

Behavior changes

RuboCop v1.92.2

Bug fixes

1.92.2 (2026-10-29)

Bug fixes

RuboCop Minitest v0.41.0

Bug fixes

Changes

RuboCop Minitest v0.40.0

New features

Changes

RuboCop Minitest v0.39.1

Bug fixes

RuboCop Minitest v0.39.0

Changes

RuboCop Minitest v0.38.2

Bug fixes

0.41.0 (2026-10-02)

Bug fixes

Changes

0.40.0 (2026-07-20)

New features

Changes

0.39.1 (2026-02-24)

Bug fixes

0.39.0 (2026-02-24)

Changes

0.38.2 (2025-08-30)

Bug fixes

v1.1.2

1.1.2 (2026-10-27)

Bug Fixes

v3.2.0

What's Changed

New Contributors

Uh oh!

github-actions Bot commented Nov 5, 2026

Qodana for PHP

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants