Skip to content

chore(deps-dev): Bump the dev-minor-patch group with 4 updates - #46

Merged
github-actions[bot] merged 2 commits into
mainfrom
dependabot/bundler/dev-minor-patch-3baf65ffc2
Nov 2, 2026
Merged

github-actions[bot] merged 2 commits into
mainfrom
dependabot/bundler/dev-minor-patch-3baf65ffc2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-minor-patch group with 4 updates: rubocop, faraday, mechanize and typhoeus.

Updates rubocop from 1.92.1 to 1.92.2

Release notes

Sourced from rubocop's releases.

RuboCop v1.92.2

Bug fixes

  • #16147: Fix a false negative for Lint/RedundantCopDisableDirective when autocorrection shifts lines. ([@​koic][])
  • #16104: Fix a false negative for Style/FloatDivision with a trailing comment. ([@​a-lavis][])
  • #16146: Fix a false positive for Lint/RedundantCopDisableDirective with a repeated disable. ([@​koic][])
  • #16176: Fix a false positive for Style/RaiseArgs with EnforcedStyle: compact and constructor arguments. ([@​bbatsov][])
  • #16183: Fix an error for Layout/RescueEnsureAlignment with index or-assignment. ([@​koic][])
  • #16158: Fix an error for Style/NumericPredicate with a predicate nested in the receiver of another. ([@​Starlexxx][])
  • #16125: Fix an error for Style/RedundantCondition with a nested modifier if. ([@​koic][])
  • #16175: Fix an incorrect autocorrect for Layout/HashAlignment with multiple styles and pairs on one line. ([@​bbatsov][])
  • #16139: Fix an incorrect autocorrect for Layout/LineLength with code after a heredoc opener. ([@​koic][])
  • #16160: Fix an incorrect autocorrect for Layout/SingleLineBlockChain with Style/MapToSet. ([@​koic][])
  • #16002: Fix an incorrect autocorrect for Layout/SpaceBeforeBlockBraces with a brace after a line continuation. ([@​Starlexxx][])
  • #16175: Fix an incorrect autocorrect for Layout/SpaceBeforeBlockBraces with a brace after a heredoc body. ([@​bbatsov][])
  • #16180: Fix an incorrect autocorrect for Lint/InterpolationCheck in a split string. ([@​Starlexxx][])
  • #16143: Fix an incorrect autocorrect for Lint/ParenthesesAsGroupedExpression with a command call operand. ([@​koic][])
  • #16170: Fix an incorrect autocorrect for Lint/RedundantSplatExpansion with Array.new as a method argument. ([@​wleeaf][])
  • #16178: Fix an incorrect autocorrect for Style/AndOr with a binary operator method operand. ([@​bbatsov][])
  • #16150: Fix an incorrect autocorrect for Style/AndOr with a command call that takes a do block. ([@​Starlexxx][])
  • #16178: Fix an incorrect autocorrect for Style/AndOr with a method chained onto a command call's do block. ([@​bbatsov][])
  • #16178: Fix an incorrect autocorrect for Style/AndOr with a negated command call that takes a do block. ([@​bbatsov][])
  • #16178: Fix an incorrect autocorrect for Style/AndOr with a pattern matching, ternary, range or defined? operand. ([@​bbatsov][])
  • #16178: Fix an incorrect autocorrect for Style/AndOr with super called with arguments. ([@​bbatsov][])
  • #16171: Fix an incorrect autocorrect for Style/CaseEquality with a non-numeric range. ([@​wleeaf][])
  • #16127: Fix an incorrect autocorrect for Style/ClassAndModuleChildren with Style/DataInheritance. ([@​koic][])
  • #16154: Fix an incorrect autocorrect for Style/EndlessMethod with modifier cops. ([@​koic][])
  • #16167: Fix an incorrect autocorrect for Style/HashAsLastArrayItem with Layout/MultilineArrayBraceLayout. ([@​Starlexxx][])
  • #16126: Fix an incorrect autocorrect for Style/HashLookupMethod with forwarded or splatted arguments. ([@​koic][])
  • #16163: Fix an incorrect autocorrect for Style/MethodCallWithArgsParentheses with Layout/HeredocArgumentClosingParenthesis. ([@​koic][])
  • #16124: Fix an incorrect autocorrect for Style/MethodDefParentheses with a line continuation. ([@​koic][])
  • #16159: Fix an incorrect autocorrect for Style/ParenthesesAroundCondition with a command call assignment. ([@​koic][])
  • #16137: Fix an incorrect autocorrect for Style/QuotedSymbols with a trailing backslash. ([@​koic][])
  • #16176: Fix an incorrect autocorrect for Style/RaiseArgs compact style with e.class as the exception. ([@​bbatsov][])
  • #16169: Fix an incorrect autocorrect for Style/RaiseArgs with a heredoc message. ([@​Starlexxx][])
  • #16132: Fix an incorrect autocorrect for Style/RaiseArgs with a parenthesized raise. ([@​koic][])
  • #16136: Fix an incorrect autocorrect for Style/ReduceToHash with a heredoc. ([@​koic][])
  • #16162: Fix an incorrect autocorrect for Style/RedundantBegin with a ternary branch. ([@​koic][])
  • #16176: Fix an incorrect autocorrect for Style/RedundantException with a heredoc in a multiline call. ([@​bbatsov][])
  • #16177: Fix an incorrect autocorrect for Style/SingleLineMethods with code after the method's end. ([@​bbatsov][])
  • #16157: Fix an incorrect autocorrect for Style/StringConcatenation when joining parts forms an interpolation. ([@​Starlexxx][])
  • #16161: Fix an incorrect autocorrect for Style/TrailingCommaInArguments with argument forwarding. ([@​koic][])
  • #16182: Fix an infinite loop for Layout/EmptyLinesAfterModuleInclusion with a logical operator. ([@​Starlexxx][])
  • #16138: Fix an infinite loop for Layout/EmptyLinesAroundClassBody with Layout/IndentationWidth. ([@​koic][])
  • #16142: Fix an infinite loop for Layout/EndAlignment with a class or module assigned to a constant. ([@​Starlexxx][])
  • #16128: Fix an infinite loop for Layout/ExtraSpacing with Layout/LineLength. ([@​koic][])
  • #16148: Fix an infinite loop for Layout/SpaceAroundOperators with Layout/LineContinuationSpacing. ([@​Starlexxx][])
  • #16123: Fix an infinite loop for Layout/SpaceAroundOperators with hash rockets aligned on non-adjacent lines. ([@​koic][])
  • #16144: Fix an infinite loop for Layout/SpaceInsideBlockBraces with Layout/BlockAlignment. ([@​koic][])
  • #16145: Fix an infinite loop for Layout/SpaceInsideRangeLiteral with a nested endless range. ([@​koic][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.92.2 (2026-10-29)

Bug fixes

  • #16147: Fix a false negative for Lint/RedundantCopDisableDirective when autocorrection shifts lines. ([@​koic][])
  • #16104: Fix a false negative for Style/FloatDivision with a trailing comment. ([@​a-lavis][])
  • #16146: Fix a false positive for Lint/RedundantCopDisableDirective with a repeated disable. ([@​koic][])
  • #16176: Fix a false positive for Style/RaiseArgs with EnforcedStyle: compact and constructor arguments. ([@​bbatsov][])
  • #16183: Fix an error for Layout/RescueEnsureAlignment with index or-assignment. ([@​koic][])
  • #16158: Fix an error for Style/NumericPredicate with a predicate nested in the receiver of another. ([@​Starlexxx][])
  • #16125: Fix an error for Style/RedundantCondition with a nested modifier if. ([@​koic][])
  • #16175: Fix an incorrect autocorrect for Layout/HashAlignment with multiple styles and pairs on one line. ([@​bbatsov][])
  • #16139: Fix an incorrect autocorrect for Layout/LineLength with code after a heredoc opener. ([@​koic][])
  • #16160: Fix an incorrect autocorrect for Layout/SingleLineBlockChain with Style/MapToSet. ([@​koic][])
  • #16002: Fix an incorrect autocorrect for Layout/SpaceBeforeBlockBraces with a brace after a line continuation. ([@​Starlexxx][])
  • #16175: Fix an incorrect autocorrect for Layout/SpaceBeforeBlockBraces with a brace after a heredoc body. ([@​bbatsov][])
  • #16180: Fix an incorrect autocorrect for Lint/InterpolationCheck in a split string. ([@​Starlexxx][])
  • #16143: Fix an incorrect autocorrect for Lint/ParenthesesAsGroupedExpression with a command call operand. ([@​koic][])
  • #16170: Fix an incorrect autocorrect for Lint/RedundantSplatExpansion with Array.new as a method argument. ([@​wleeaf][])
  • #16178: Fix an incorrect autocorrect for Style/AndOr with a binary operator method operand. ([@​bbatsov][])
  • #16150: Fix an incorrect autocorrect for Style/AndOr with a command call that takes a do block. ([@​Starlexxx][])
  • #16178: Fix an incorrect autocorrect for Style/AndOr with a method chained onto a command call's do block. ([@​bbatsov][])
  • #16178: Fix an incorrect autocorrect for Style/AndOr with a negated command call that takes a do block. ([@​bbatsov][])
  • #16178: Fix an incorrect autocorrect for Style/AndOr with a pattern matching, ternary, range or defined? operand. ([@​bbatsov][])
  • #16178: Fix an incorrect autocorrect for Style/AndOr with super called with arguments. ([@​bbatsov][])
  • #16171: Fix an incorrect autocorrect for Style/CaseEquality with a non-numeric range. ([@​wleeaf][])
  • #16127: Fix an incorrect autocorrect for Style/ClassAndModuleChildren with Style/DataInheritance. ([@​koic][])
  • #16154: Fix an incorrect autocorrect for Style/EndlessMethod with modifier cops. ([@​koic][])
  • #16167: Fix an incorrect autocorrect for Style/HashAsLastArrayItem with Layout/MultilineArrayBraceLayout. ([@​Starlexxx][])
  • #16126: Fix an incorrect autocorrect for Style/HashLookupMethod with forwarded or splatted arguments. ([@​koic][])
  • #16163: Fix an incorrect autocorrect for Style/MethodCallWithArgsParentheses with Layout/HeredocArgumentClosingParenthesis. ([@​koic][])
  • #16124: Fix an incorrect autocorrect for Style/MethodDefParentheses with a line continuation. ([@​koic][])
  • #16159: Fix an incorrect autocorrect for Style/ParenthesesAroundCondition with a command call assignment. ([@​koic][])
  • #16137: Fix an incorrect autocorrect for Style/QuotedSymbols with a trailing backslash. ([@​koic][])
  • #16176: Fix an incorrect autocorrect for Style/RaiseArgs compact style with e.class as the exception. ([@​bbatsov][])
  • #16169: Fix an incorrect autocorrect for Style/RaiseArgs with a heredoc message. ([@​Starlexxx][])
  • #16132: Fix an incorrect autocorrect for Style/RaiseArgs with a parenthesized raise. ([@​koic][])
  • #16136: Fix an incorrect autocorrect for Style/ReduceToHash with a heredoc. ([@​koic][])
  • #16162: Fix an incorrect autocorrect for Style/RedundantBegin with a ternary branch. ([@​koic][])
  • #16176: Fix an incorrect autocorrect for Style/RedundantException with a heredoc in a multiline call. ([@​bbatsov][])
  • #16177: Fix an incorrect autocorrect for Style/SingleLineMethods with code after the method's end. ([@​bbatsov][])
  • #16157: Fix an incorrect autocorrect for Style/StringConcatenation when joining parts forms an interpolation. ([@​Starlexxx][])
  • #16161: Fix an incorrect autocorrect for Style/TrailingCommaInArguments with argument forwarding. ([@​koic][])
  • #16182: Fix an infinite loop for Layout/EmptyLinesAfterModuleInclusion with a logical operator. ([@​Starlexxx][])
  • #16138: Fix an infinite loop for Layout/EmptyLinesAroundClassBody with Layout/IndentationWidth. ([@​koic][])
  • #16142: Fix an infinite loop for Layout/EndAlignment with a class or module assigned to a constant. ([@​Starlexxx][])
  • #16128: Fix an infinite loop for Layout/ExtraSpacing with Layout/LineLength. ([@​koic][])
  • #16148: Fix an infinite loop for Layout/SpaceAroundOperators with Layout/LineContinuationSpacing. ([@​Starlexxx][])
  • #16123: Fix an infinite loop for Layout/SpaceAroundOperators with hash rockets aligned on non-adjacent lines. ([@​koic][])
  • #16144: Fix an infinite loop for Layout/SpaceInsideBlockBraces with Layout/BlockAlignment. ([@​koic][])

... (truncated)

Commits
  • d6ef1f9 Cut 1.92.2
  • 01d4e47 Update Changelog
  • 75b6eb7 Fix an incorrect autocorrect for Style/RaiseArgs with a heredoc message
  • 00b9402 Fix an incorrect autocorrect for Lint/InterpolationCheck in a split string
  • 3677424 Fix an infinite loop for Layout/SpaceAroundOperators with Layout/LineContinua...
  • cd52175 Fix a false negative for Style/FloatDivision with a trailing comment
  • 5cf8ab0 [Fix #16168] Fix false positives for Lint/NestedPercentLiteral with format se...
  • 5cd5d75 Fix an infinite loop for Layout/EmptyLinesAfterModuleInclusion with a logic...
  • ac10ccf Merge pull request #16183 from koic/fix_an_error_for_layout_rescue_ensure_ali...
  • 5c851c2 Fix an error for Layout/RescueEnsureAlignment with index or-assignment
  • Additional commits viewable in compare view

Updates faraday from 2.15.0 to 2.15.1

Release notes

Sourced from faraday's releases.

v2.15.1

What's Changed

New Contributors

Full Changelog: lostisland/faraday@v2.15.0...v2.15.1

Commits
  • 0cfec3e Version bump to 2.15.1
  • 2dce78b [MEDIUM] Lock the RubyGems release dependency graph (#1712)
  • 340d3a9 Pin GitHub Actions used by CI and releases (#1710)
  • 41666c6 Escape params 2x faster with half the allocations, using CGI.escape (#1727)
  • 573827e fix: honor include_request: false in all errors
  • 670f3a6 Keep header index synchronized across Hash mutations (#1700)
  • d494fce Add integration tests for JSON literal request bodies (#1728)
  • 2d923f3 Preserve false request bodies for JSON encoding (#1691)
  • 745b0f3 Ship only the specs external adapters need (#1726)
  • 161010c Rely on derived metadata for integration specs
  • Additional commits viewable in compare view

Updates mechanize from 2.14.1 to 2.14.2

Release notes

Sourced from mechanize's releases.

2.14.2 / 2026-10-26

Security

  • A malicious server can no longer make Mechanize::FileSaver, or Mechanize::DirectorySaver with decode_filename: true, write files outside the save directory. Only applications that register one of these as a pluggable parser are affected. GHSA-hxgc-9476-fc65

Improved

  • The gem no longer packages the test suite, the test certificates, or the example scripts, which makes it about a third smaller. It still packages test/htdocs/, which Mechanize::TestCase needs. (#667) @​yuri-zubov
  • Mechanize::TestCase fake responses work with net-http 0.10.0 and later, which reads response lines with Net::BufferedIO#readuntil. Previously a chunked response body raised NoMethodError. The fake socket is now a Net::BufferedIO, like a real one, so read_body yields fragments of at most 16 KiB, and a body shorter than its Content-Length raises EOFError when ignore_eof is false.
Changelog

Sourced from mechanize's changelog.

2.14.2 / 2026-10-26

Security

  • A malicious server can no longer make Mechanize::FileSaver, or Mechanize::DirectorySaver with decode_filename: true, write files outside the save directory. Only applications that register one of these as a pluggable parser are affected. GHSA-hxgc-9476-fc65

Improved

  • The gem no longer packages the test suite, the test certificates, or the example scripts, which makes it about a third smaller. It still packages test/htdocs/, which Mechanize::TestCase needs. (#667) @​yuri-zubov
  • Mechanize::TestCase fake responses work with net-http 0.10.0 and later, which reads response lines with Net::BufferedIO#readuntil. Previously a chunked response body raised NoMethodError. The fake socket is now a Net::BufferedIO, like a real one, so read_body yields fragments of at most 16 KiB, and a body shorter than its Content-Length raises EOFError when ignore_eof is false.
Commits
  • 464a5f4 version bump to v2.14.2
  • 8c03022 Merge pull request #678 from sparklemotion/card-857-saver-path-traversal
  • 1b74f05 fix: FileSaver requires its host directory under the current directory
  • 3fdc129 fix: savers write only inside their save directory
  • 2729f53 Merge pull request #677 from sparklemotion/card-815-ci-green
  • 2a7080d fix: get ruby-head CI green
  • fffbf2e ci: run Ruby < 3.2 on ubuntu-24.04
  • 1d5ef8d Merge pull request #667 from yuri-zubov/reduce-gem-size
  • 1d55ca6 doc: match the CHANGELOG's style for the gem-size entry
  • ea68cca Reduce gem size by excluding test files
  • See full diff in compare view

Updates typhoeus from 1.6.0 to 1.7.1

Changelog

Sourced from typhoeus's changelog.

1.7.1

Full Changelog

  • Require Ethon >= 0.19.1. Ethon 0.19.0 rejects Easy#cleanup from an on_complete callback, which broke every request with :resolve because Typhoeus cleans up resolve-list easies instead of pooling them. The compatibility specs now cover a :resolve request. (#824, ethon#456)

1.7.0

Full Changelog

This release requires Ethon 0.19 and changes several public behaviors. Review the breaking changes and UPGRADE.md before upgrading.

Breaking changes

  • Require Ethon >= 0.19.0. Release easy handles when callbacks raise, clean up failed hydra runs without dropping queued requests, drop inherited handles after fork, and document fork and empty-header behavior. Ethon 0.19 also propagates callback exceptions, rejects handles inherited across fork, validates enum and bitmask options, and fixes multipart PUT requests.
  • Constrain the Ethon dependency to < 0.20 so a future pre-1.0 minor release cannot introduce breaking changes unnoticed.
  • Call on_progress callbacks with the documented four arguments. A lambda with four parameters no longer raises ArgumentError.
  • Raise ArgumentError for a non-positive Hydra max_concurrency, including when it is assigned after the hydra is created, instead of leaving every queued request unperformed. (#753)
  • Raise ArgumentError with the option name for non-numeric timeout options instead of failing with NoMethodError inside option sanitization. (#758)
  • Raise Typhoeus::Errors::NoResponse when a stub has no response or its response block returns nil or a non-Response object. (#776)

Behavior changes

  • Make Typhoeus.with_connection thread-local so it no longer unblocks requests in other threads. (#813)
  • Make Typhoeus.with_connection apply across fibers in the current thread by using thread variables instead of fiber-local storage.
  • Bypass stubs inside Typhoeus.with_connection. A stub can now forward its request to the real service without matching itself in an endless loop, and the real response is not finished a second time.

... (truncated)

Commits
  • a6028ed Merge pull request #826 from typhoeus/release/v1.7.1
  • c86617b Release v1.7.1
  • cf1fd01 Require Ethon 0.19.1
  • c9f44ce Merge pull request #823 from typhoeus/docs/changelog-sections
  • 5831617 Split the 1.7.0 release notes into sections
  • 49fa463 Merge pull request #817 from typhoeus/release/v1.7.0
  • 61a1af3 Document the Ethon cap and progress callback arity
  • 1c647ba Treat every before response as a mock
  • f525e68 Document the 1.7 requirements and verbose output
  • 3f3dd17 Fix stub response reuse and hydra error cleanup
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev-minor-patch group with 4 updates: [rubocop](https://github.com/rubocop/rubocop), [faraday](https://github.com/lostisland/faraday), [mechanize](https://github.com/sparklemotion/mechanize) and [typhoeus](https://github.com/typhoeus/typhoeus).


Updates `rubocop` from 1.92.1 to 1.92.2
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.92.1...v1.92.2)

Updates `faraday` from 2.15.0 to 2.15.1
- [Release notes](https://github.com/lostisland/faraday/releases)
- [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md)
- [Commits](lostisland/faraday@v2.15.0...v2.15.1)

Updates `mechanize` from 2.14.1 to 2.14.2
- [Release notes](https://github.com/sparklemotion/mechanize/releases)
- [Changelog](https://github.com/sparklemotion/mechanize/blob/main/CHANGELOG.md)
- [Commits](sparklemotion/mechanize@v2.14.1...v2.14.2)

Updates `typhoeus` from 1.6.0 to 1.7.1
- [Changelog](https://github.com/typhoeus/typhoeus/blob/master/CHANGELOG.md)
- [Commits](typhoeus/typhoeus@v1.6.0...v1.7.1)

---
updated-dependencies:
- dependency-name: rubocop
  dependency-version: 1.92.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-patch
- dependency-name: faraday
  dependency-version: 2.15.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-patch
- dependency-name: mechanize
  dependency-version: 2.14.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-minor-patch
- dependency-name: typhoeus
  dependency-version: 1.7.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added automerge dependencies Pull requests that update a dependency file labels Nov 2, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) November 2, 2026 07:55
Dependabot resolves Bundler updates against the gemspec floor. That
floor was Ruby 3.1, which cannot select nokogiri 1.19 or connection_pool
3, so this group update downgraded them. The integration workflow
installs on current Ruby (4.0.9), and nokogiri 1.18.10's linux gem
requires Ruby < 3.5, so setup-ruby failed before the tests ran.

Keep connection_pool 3.0.2, lock nokogiri 1.19.6 (requires >= 3.2 and
< 4.1.dev), and raise required_ruby_version to >= 3.2 so the next
Dependabot resolution stays on a Ruby that can install those gems.

Co-authored-by: ProxyMesh AI <proxymeshai@users.noreply.github.com>
@github-actions
github-actions Bot merged commit ed50c58 into main Nov 2, 2026
4 checks passed
@dependabot
dependabot Bot deleted the dependabot/bundler/dev-minor-patch-3baf65ffc2 branch November 2, 2026 17:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automerge dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant