[dependabot]

Bumps the ruby-dependencies group with 1 update: tree_sitter_language_pack.

Updates tree_sitter_language_pack from 1.22.1 to 1.24.0

Release notes

Sourced from tree_sitter_language_pack's releases.

v1.24.0

Release notes are written when the release is published.

v1.23.1

Fixed

• Keep the Elixir NIF core dependency aligned with the release version after version corrections.
• Restore iOS Dart builds with libc 0.2.191.
• Trap Swift scanner allocation failures on WASM without importing unsupported stdio or exit symbols; retain the native allocation-failure diagnostic.
• Generate Elixir release checksums with the system Bash on macOS.
• Resolve the grammar generator from the project Mise toolchain before entering upstream repositories. Preserve bounded failure diagnostics and terminate owned descendants even after their leader exits.
• Refresh the grammar query table and coding-agent plugin provenance.

Security

• Update Zstandard, Rustls, certificate validation and root certificates in the independent Elixir, Ruby and Rust consumer lockfiles; audit all five Cargo resolutions in CI.

v1.23.0

Changed

• Updated parsers change the grammar ABI for Ada (15 to 14) and Hurl, Idris and VRL (14 to 15). Refresh cached grammar artifacts before using this release.

• Upgrade 52 grammar sources and refresh Rust, Python, Node, PHP, Ruby and Elixir dependencies.

• Generate stale bundled parsers with tree-sitter CLI 0.27.1 and reject unsuccessful parser generation.

• Split large parser, configuration, download and intelligence modules into focused modules and test files (#184).

• Development tasks run through mise (mise run <task>) instead of go-task, with the toolchain pinned to the xberg-io/toolchains v1.12.1 baseline in mise.toml and mise.lock; task names are unchanged.

Security

• Update ctutils, Tokio, and Zstandard dependencies to resolve six security advisories (RUSTSEC-2026-0385, RUSTSEC-2026-0386, RUSTSEC-2026-0391, RUSTSEC-2026-0398, RUSTSEC-2026-0403, RUSTSEC-2026-0410).

• Update TLS certificate validation and bundled roots to reject distrusted emSign intermediates (RUSTSEC-2026-0381, RUSTSEC-2026-0382, RUSTSEC-2026-0383).

• Update Rustls to 0.23.46 to address TLS session secret exposure and handshake/certificate handling advisories (RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, RUSTSEC-2026-0349).

Fixed

• Load native Node bindings on Windows using the upstream capsule fix (#208, #213).
• Stop Reason line-comment scanning at end of input instead of looping indefinitely.

... (truncated)

Changelog

Sourced from tree_sitter_language_pack's changelog.

[1.24.0] - 2026-11-05

Changed

• Breaking for macOS 25 and earlier: every macOS binary now targets macOS 26, the minimum Package.swift declares, and no longer loads on earlier macOS releases; the Swift bundle targeted 13.0 and the other macOS artifacts used toolchain defaults.
• Minimum supported versions raised: Node.js 22, Ruby 3.3, PHP 8.3, Elixir 1.17, Go 1.27, Java 25, Android API 24, Dart 3.13, macOS 26.
• Regenerate the bindings with Alef 0.124.1, so the generated manifests declare the raised minimums. The Zig package stays on Zig 0.16, which upstream tree-sitter's build still requires.
• Python 3.11 is now the minimum supported version; Python 3.10 reached end of life.

Fixed

• Clone a grammar whose pinned commit no branch or tag reaches any more by fetching that commit directly. Upstream tree-sitter-abl force-pushed master, and every fresh source build failed with unable to read tree.
• Keep the core release tag immutable when publishing Swift: the new Prepare Swift release workflow (the shared xberg-io/actions workflow) builds the artifact bundle once, pins its checksum into Package.swift on main and tags that commit, and Publish Release verifies the tag instead of committing a checksum and force-moving the tag and release/swift/<version> (#215).
• Pin the Jinja2 grammar to upstream main (a4f8f18), which keeps bare identifiers such as {{ variable }} parsing without errors; the previous pin was an unmerged branch commit (#214).
• Parse for name do, the <> redirect in Bash, __has_include(<header>) in C and spaced legacy ENV values in Dockerfiles without errors. The bash, c and dockerfile grammars now come from xberg-io forks that carry the open upstream fixes (tree-sitter-bash#368, tree-sitter-c#334, tree-sitter-dockerfile#72) (#216).

Removed

• Drop the Cylc grammar: its upstream repository (elliotfontaine/tree-sitter-cylc) no longer exists, so its pinned source can no longer be fetched, built or license-verified.

[1.23.1] - 2026-10-31

Fixed

• Keep the Elixir NIF core dependency aligned with the release version after version corrections.
• Restore iOS Dart builds with libc 0.2.191.
• Trap Swift scanner allocation failures on WASM without importing unsupported stdio or exit symbols; retain the native allocation-failure diagnostic.
• Generate Elixir release checksums with the system Bash on macOS.
• Resolve the grammar generator from the project Mise toolchain before entering upstream repositories. Preserve bounded failure diagnostics and terminate owned descendants even after their leader exits.
• Refresh the grammar query table and coding-agent plugin provenance.

Security

• Update Zstandard, Rustls, certificate validation and root certificates in the independent Elixir, Ruby and Rust consumer lockfiles; audit all five Cargo resolutions in CI.

... (truncated)

Commits

• a8816e9 chore(release): pin the Swift artifact bundle checksum for v1.24.0
• cb123e6 chore(ai-rulez): relock the served public skills
• b680727 test(py): probe the GIL guard with a grammar no wheel bundles
• 9c13dcc fix(release): refresh the public skills export in version:sync
• 696d347 chore(skills): resync the public skills export for 1.24.0
• ebf64f8 fix(vendors): fetch a pinned grammar commit that no ref reaches
• 8252e06 chore(release): prepare 1.24.0
• 9723662 fix(ci): lint Go with golangci-lint v2.15.0 on Go 1.27
• b7b0963 test(mise): expect refresh:all to run gau from the mise pin
• 7edf5ab chore(plugin): relock the plugin's ai-rulez sources
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions