Bump the bundler group with 3 updates by dependabot[bot] · Pull Request #53 · bboe/dolphin

dependabot · 2026-09-01T14:53:28Z

Bumps the bundler group with 3 updates: bootsnap, rubocop and rubocop-rails.

Updates bootsnap from 1.24.6 to 1.25.0

Release notes

v1.25.0

What's Changed

Improve YAML parsing cache to more efficiently handle Time, Date and DateTime.

Don't invalidate the compile cache when YJIT is toggled. YJIT is a runtime JIT and doesn't change the serialized instruction sequences that are cached, but enabling it (via --yjit, RUBYOPT, or RubyVM::YJIT.enable) adds a +YJIT marker to RUBY_DESCRIPTION ( +YJIT <token> on YJIT_SUPPORT builds), which is part of the cache key. This previously discarded the entire compile cache whenever YJIT was enabled at runtime but not at precompile time (or vice versa). The marker is now stripped before hashing.

Fix CompileCache::Native.fetch and .precompile reading a non-String path argument (e.g. a Pathname) with RSTRING_PTR. Regression from 1.24.0.

Full Changelog: rails/bootsnap@v1.24.6...v1.25.0

Changelog

Sourced from bootsnap's changelog.

1.25.0

Improve YAML parsing cache to more efficiently handle Time, Date and DateTime.

Don't invalidate the compile cache when YJIT is toggled. YJIT is a runtime JIT and doesn't change the serialized instruction sequences that are cached, but enabling it (via --yjit, RUBYOPT, or RubyVM::YJIT.enable) adds a +YJIT marker to RUBY_DESCRIPTION ( +YJIT <token> on YJIT_SUPPORT builds), which is part of the cache key. This previously discarded the entire compile cache whenever YJIT was enabled at runtime but not at precompile time (or vice versa). The marker is now stripped before hashing.

Fix CompileCache::Native.fetch and .precompile reading a non-String path argument (e.g. a Pathname) with RSTRING_PTR. Regression from 1.24.0.

Commits

e099ec7 Release 1.25.0
b694a11 Merge pull request #563 from stanhu/sh-ignore-yjit-in-compile-cache-key
51898f9 Ignore YJIT status in the compile cache key
1ad589b Merge pull request #560 from rails/hm-qnqlnylzkqkltqsz
21fbd65 Merge pull request #561 from jeremy/fix-path-conversion-entry-points
4898853 Convert the path argument in the frame that reads it
8ee47c4 Add MessagePack::Bigint type
49e3eb7 Replace Date Marshalling with recursive msgpack
711fd0b Bump minimum msgpack to 1.5.0
160fc10 Merge pull request #558 from viralpraxis/fix-yaml-cache-kwargs-mutation
Additional commits viewable in compare view

Updates rubocop from 1.88.2 to 1.90.0

Release notes

Sourced from rubocop's releases.

RuboCop v1.90.0

New features

#15073: Add AllowTrailingComment option to Style/DisableCopsWithinSourceCodeDirective. ([@bbatsov][])

#9505: Add disable-next directives scoped to the following statement. ([@bbatsov][])

#15550: Add --display-suppressed option to also report offenses suppressed by directive comments, including their -- justification in the JSON formatter. ([@bbatsov][])

#15523: Add new Lint/ArgumentMismatch cop. ([@bbatsov][])

#15594: Add new Lint/SuperArgumentMismatch cop. ([@bbatsov][])

#15581: Add new Style/TimeNow cop. ([@Starlexxx][])

#15111: Add NumberOfEmptyLines option to Layout/EmptyLineAfterMagicComment to configure the minimum number of empty lines required after magic comments. ([@alejofraga][])

#13037: Add --report-unused-todo-entries to catch rotting todo files. ([@bbatsov][])

#15559: Add new Style/DirectiveScope cop to flag disable/enable pairs and disable-only push/pop scopes that wrap a single statement and can use disable-next instead. ([@bbatsov][])

#15547: Make Lint/RedundantCopEnableDirective flag # rubocop:pop directives without a matching # rubocop:push. ([@bbatsov][])

Bug fixes

#15584: Fix a crash in Lint/NameTypo and Lint/UnusedPrivateMethod on string literals with invalid encoding. ([@bbatsov][])

#15541: Fix a false negative for Lint/OutOfRangeRegexpRef when a preceding element access with a non-string literal argument (e.g. hash[:key]) discarded the tracked capture count. ([@koic][])

#7958: Add todo comments for skipped unsafe corrections with --disable-uncorrectable. ([@bbatsov][])

#15569: Fix an error for the built-in language server when a workspace/executeCommand request has no document URI in its arguments. ([@koic][])

#15410: Fix an incorrect autocorrect for Naming/BinaryOperatorParameterName. ([@bbatsov][])

#15576: Fix an incorrect autocorrect for Style/Sample when shuffle is given a random: argument; the offense is still reported but no longer autocorrected, since shuffle and sample consume a seeded generator differently and would select different elements. ([@koic][])

#15590: Fix an infinite loop error for Layout/FirstArgumentIndentation when EnforcedStyle: with_fixed_indentation is specified for Layout/ArgumentAlignment and Layout/FirstMethodArgumentLineBreak is enabled with AllowMultilineFinalElement: true. ([@Starlexxx][])

#15588: Fix RuboCop::Cop::IgnoredMethods and RuboCop::Cop::IgnoredPattern being unreachable after require 'rubocop'. ([@SeanLF][])

#8349: Don't autocorrect away directives for unknown cops. ([@bbatsov][])

#7894: Don't flag disables of pending cops as redundant. ([@bbatsov][])

#9963: Fix false negatives for Layout/ExtraSpacing. ([@Starlexxx][])

#15525: Fix false negatives in Layout/LineLength when a constant path like Http::UploadedFile matches URISchemes case-insensitively. ([@koic][])

#13941: Fix false positives for Lint/UselessConstantScoping when assigning with Class.new, Module.new, Struct.new, or Data.define after private. ([@pdobb][])

#15526: Fix false positives in Layout/MultilineMethodCallIndentation when a line has multiple single-line blocks before a multiline block. ([@koic][])

#15538: Fix false positives in Lint/ConstantReassignment when a constant is assigned in compact-style namespaces (e.g. module A::B). ([@alex-tan][])

#15517: Fix false positives in Lint/RedundantSafeNavigation when InferNonNilReceiver is enabled and the receiver name is rebound by a nested block (it or a shadowed block parameter). ([@koic][])

#15572: Fix RuboCop::Cop::Registry#freeze to freeze its internal collections, so that registering a lazily loaded cop after the freeze fails fast at the registration site instead of corrupting the registry. ([@koic][])

#15585: Make Lint/DuplicateMethods honor silence_redefinition_of_method and redefine_method as intentional redefinitions. ([@bbatsov][])

#15558: Fix --display-suppressed reporting a nil justification when the offense is loaded from the result cache. ([@corsonknowles][])

#10449: Fix Layout/ClassStructure autocorrection producing a wrong order when an element cannot be moved, and make offenses report the category that actually blocks the expected order. ([@koic][])

#15568: Fix Lint/NameTypo registering false positives for names provided by a gem whose namespace the project reopens, and for constants read from a namespace with an unresolved ancestor. ([@HoneyryderChuck][])

#15556: Fix Lint/UnusedPrivateMethod retaining every past project_index object it has seen (and the index graph reachable from each), rather than only the most recent one. This caused unbounded memory growth in long-lived processes such as rubocop --server. ([@bquorning][])

#10046: Fix Lint/UselessMethodDefinition false positive for methods with **kwargs. ([@bbatsov][])

#15589: Fix --lsp and --mcp being silently ignored when the RuboCop server is running: they now start the protocol server in the current process instead of being forwarded to the server as a lint request. ([@koic][])

#11148: Merge department and cop-level Exclude settings. ([@bbatsov][])

#15531: Fix a regression in RuboCop 1.89 where the modifier cops could produce lines longer than Layout/LineLength Max when exemptions like AllowedPatterns matched the result. ([@bbatsov][])

#15574: Fix an incorrect warning such as AllCops does not support TargetRailsVersion parameter when a plugin declares a custom AllCops key with a nil value and another plugin is loaded after it. ([@koic][])

#9543: Preserve escape notation in Style/StringConcatenation autocorrect. ([@bbatsov][])

#11119: Preserve persistent cop instances across files. ([@Eljees][])

#13022: Fix rubocop . (and other relative directory arguments) needlessly traversing directories excluded by the configuration, which made it much slower than rubocop in projects with large ignored trees. ([@bbatsov][])

#15561: Fix Lint/RedundantCopDisableDirective and Lint/RedundantCopEnableDirective leaving a directive's -- reason behind when removing the directive. ([@corsonknowles][])

#15593: Fix false positives for Lint/UnusedPrivateMethod for private definitions of Ruby runtime hooks like inherited and const_missing. ([@bbatsov][])

#15547: Make Lint/MissingCopEnableDirective suggest # rubocop:pop instead of # rubocop:enable for an unclosed # rubocop:push. ([@bbatsov][])

#14379: Suppress multi-line offenses with a directive on any of their lines. ([@bbatsov][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.90.0 (2026-08-24)

New features

#15073: Add AllowTrailingComment option to Style/DisableCopsWithinSourceCodeDirective. ([@bbatsov][])

#9505: Add disable-next directives scoped to the following statement. ([@bbatsov][])

#15550: Add --display-suppressed option to also report offenses suppressed by directive comments, including their -- justification in the JSON formatter. ([@bbatsov][])

#15523: Add new Lint/ArgumentMismatch cop. ([@bbatsov][])

#15594: Add new Lint/SuperArgumentMismatch cop. ([@bbatsov][])

#15581: Add new Style/TimeNow cop. ([@Starlexxx][])

#15111: Add NumberOfEmptyLines option to Layout/EmptyLineAfterMagicComment to configure the minimum number of empty lines required after magic comments. ([@alejofraga][])

#13037: Add --report-unused-todo-entries to catch rotting todo files. ([@bbatsov][])

#15559: Add new Style/DirectiveScope cop to flag disable/enable pairs and disable-only push/pop scopes that wrap a single statement and can use disable-next instead. ([@bbatsov][])

#15547: Make Lint/RedundantCopEnableDirective flag # rubocop:pop directives without a matching # rubocop:push. ([@bbatsov][])

Bug fixes

#15584: Fix a crash in Lint/NameTypo and Lint/UnusedPrivateMethod on string literals with invalid encoding. ([@bbatsov][])

#15541: Fix a false negative for Lint/OutOfRangeRegexpRef when a preceding element access with a non-string literal argument (e.g. hash[:key]) discarded the tracked capture count. ([@koic][])

#7958: Add todo comments for skipped unsafe corrections with --disable-uncorrectable. ([@bbatsov][])

#15569: Fix an error for the built-in language server when a workspace/executeCommand request has no document URI in its arguments. ([@koic][])

#15410: Fix an incorrect autocorrect for Naming/BinaryOperatorParameterName. ([@bbatsov][])

#15576: Fix an incorrect autocorrect for Style/Sample when shuffle is given a random: argument; the offense is still reported but no longer autocorrected, since shuffle and sample consume a seeded generator differently and would select different elements. ([@koic][])

#15590: Fix an infinite loop error for Layout/FirstArgumentIndentation when EnforcedStyle: with_fixed_indentation is specified for Layout/ArgumentAlignment and Layout/FirstMethodArgumentLineBreak is enabled with AllowMultilineFinalElement: true. ([@Starlexxx][])

#15588: Fix RuboCop::Cop::IgnoredMethods and RuboCop::Cop::IgnoredPattern being unreachable after require 'rubocop'. ([@SeanLF][])

#8349: Don't autocorrect away directives for unknown cops. ([@bbatsov][])

#7894: Don't flag disables of pending cops as redundant. ([@bbatsov][])

#9963: Fix false negatives for Layout/ExtraSpacing. ([@Starlexxx][])

#15525: Fix false negatives in Layout/LineLength when a constant path like Http::UploadedFile matches URISchemes case-insensitively. ([@koic][])

#13941: Fix false positives for Lint/UselessConstantScoping when assigning with Class.new, Module.new, Struct.new, or Data.define after private. ([@pdobb][])

#15526: Fix false positives in Layout/MultilineMethodCallIndentation when a line has multiple single-line blocks before a multiline block. ([@koic][])

#15538: Fix false positives in Lint/ConstantReassignment when a constant is assigned in compact-style namespaces (e.g. module A::B). ([@alex-tan][])

#15517: Fix false positives in Lint/RedundantSafeNavigation when InferNonNilReceiver is enabled and the receiver name is rebound by a nested block (it or a shadowed block parameter). ([@koic][])

#15572: Fix RuboCop::Cop::Registry#freeze to freeze its internal collections, so that registering a lazily loaded cop after the freeze fails fast at the registration site instead of corrupting the registry. ([@koic][])

#15585: Make Lint/DuplicateMethods honor silence_redefinition_of_method and redefine_method as intentional redefinitions. ([@bbatsov][])

#15558: Fix --display-suppressed reporting a nil justification when the offense is loaded from the result cache. ([@corsonknowles][])

#10449: Fix Layout/ClassStructure autocorrection producing a wrong order when an element cannot be moved, and make offenses report the category that actually blocks the expected order. ([@koic][])

#15568: Fix Lint/NameTypo registering false positives for names provided by a gem whose namespace the project reopens, and for constants read from a namespace with an unresolved ancestor. ([@HoneyryderChuck][])

#15556: Fix Lint/UnusedPrivateMethod retaining every past project_index object it has seen (and the index graph reachable from each), rather than only the most recent one. This caused unbounded memory growth in long-lived processes such as rubocop --server. ([@bquorning][])

#10046: Fix Lint/UselessMethodDefinition false positive for methods with **kwargs. ([@bbatsov][])

#15589: Fix --lsp and --mcp being silently ignored when the RuboCop server is running: they now start the protocol server in the current process instead of being forwarded to the server as a lint request. ([@koic][])

#11148: Merge department and cop-level Exclude settings. ([@bbatsov][])

#15531: Fix a regression in RuboCop 1.89 where the modifier cops could produce lines longer than Layout/LineLength Max when exemptions like AllowedPatterns matched the result. ([@bbatsov][])

#15574: Fix an incorrect warning such as AllCops does not support TargetRailsVersion parameter when a plugin declares a custom AllCops key with a nil value and another plugin is loaded after it. ([@koic][])

#9543: Preserve escape notation in Style/StringConcatenation autocorrect. ([@bbatsov][])

#11119: Preserve persistent cop instances across files. ([@Eljees][])

#13022: Fix rubocop . (and other relative directory arguments) needlessly traversing directories excluded by the configuration, which made it much slower than rubocop in projects with large ignored trees. ([@bbatsov][])

#15561: Fix Lint/RedundantCopDisableDirective and Lint/RedundantCopEnableDirective leaving a directive's -- reason behind when removing the directive. ([@corsonknowles][])

#15593: Fix false positives for Lint/UnusedPrivateMethod for private definitions of Ruby runtime hooks like inherited and const_missing. ([@bbatsov][])

#15547: Make Lint/MissingCopEnableDirective suggest # rubocop:pop instead of # rubocop:enable for an unclosed # rubocop:push. ([@bbatsov][])

... (truncated)

Commits

f1b25e1 Cut 1.90
72895f6 Update Changelog
7042de6 Move op_method? before the shadowing helpers
4b14dd2 Fix an incorrect autocorrect for Naming/BinaryOperatorParameterName
5d221ac [Fix #10046] Fix Lint/UselessMethodDefinition false positive for methods wi...
5070fc3 [Fix #15111] Add NumberOfEmptyLines option to `Layout/EmptyLineAfterMagicCo...
496eb65 [Fix #9543] Preserve escape notation in Style/StringConcatenation autocorrect
75b3622 Remove a directive's -- reason along with the directive
858d8a8 Merge pull request #15596 from koic/add_real_last_column_to_offense
15557b0 Add Offense#real_last_column and use it in JSONFormatter
Additional commits viewable in compare view

Updates rubocop-rails from 2.36.0 to 2.37.0

Release notes

Sourced from rubocop-rails's releases.

RuboCop Rails v2.37.0

Changes

#1649: Allow frozen array/hash literal (e.g. [].freeze, {}.freeze) as :default value in Rails/AttributeDefaultBlockValue. (@kuboon)

#1652: Improve Rails/HttpPositionalArguments performance by checking for include Rack::Test::Methods once per file instead of once per HTTP call. (@moberegger)

#1650: Speed up loading rubocop-rails by lazily loading only the cops and mixins needed for a run. This requires RuboCop 1.89.0+. (@koic)

Changelog

Sourced from rubocop-rails's changelog.

2.37.0 (2026-08-16)

Changes

#1649: Allow frozen array/hash literal (e.g. [].freeze, {}.freeze) as :default value in Rails/AttributeDefaultBlockValue. ([@kuboon][])

#1652: Improve Rails/HttpPositionalArguments performance by checking for include Rack::Test::Methods once per file instead of once per HTTP call. ([@moberegger][])

#1650: Speed up loading rubocop-rails by lazily loading only the cops and mixins needed for a run. This requires RuboCop 1.89.0+. ([@koic][])

Commits

2ccba59 Cut 2.37.0
597f352 Update Changelog
a400494 Merge pull request #1652 from moberegger/moberegger/optimize-HttpPositionalAr...
cbc6157 Optimize HttpPositionalArguments cop
cb023b9 Suppress RuboCop offenses
166cfc6 Merge pull request #1650 from koic/lazy_load_cops
3dd6378 Load cops lazily
0b20dad Merge pull request #1649 from kuboon/copilot/attribute-default-block-value
7c76696 Allow frozen literal defaults in AttributeDefaultBlockValue
84fef55 Reset the docs version
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the bundler group with 3 updates: [bootsnap](https://github.com/rails/bootsnap), [rubocop](https://github.com/rubocop/rubocop) and [rubocop-rails](https://github.com/rubocop/rubocop-rails). Updates `bootsnap` from 1.24.6 to 1.25.0 - [Release notes](https://github.com/rails/bootsnap/releases) - [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md) - [Commits](rails/bootsnap@v1.24.6...v1.25.0) Updates `rubocop` from 1.88.2 to 1.90.0 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.88.2...v1.90.0) Updates `rubocop-rails` from 2.36.0 to 2.37.0 - [Release notes](https://github.com/rubocop/rubocop-rails/releases) - [Changelog](https://github.com/rubocop/rubocop-rails/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop-rails@v2.36.0...v2.37.0) --- updated-dependencies: - dependency-name: bootsnap dependency-version: 1.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bundler - dependency-name: rubocop dependency-version: 1.90.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler - dependency-name: rubocop-rails dependency-version: 2.37.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Sep 1, 2026

github-actions Bot enabled auto-merge September 1, 2026 14:53

github-actions Bot merged commit a9dff9a into main Sep 1, 2026
3 checks passed

dependabot Bot deleted the dependabot/bundler/bundler-073f9cb4c2 branch September 1, 2026 14:56

Navigation Menu

Repository navigation

Bump the bundler group with 3 updates - #53

Bump the bundler group with 3 updates#53
github-actions[bot] merged 1 commit into
mainfrom
dependabot/bundler/bundler-073f9cb4c2

dependabot Bot commented on behalf of github Sep 1, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 1, 2026

v1.25.0

What's Changed

1.25.0

RuboCop v1.90.0

New features

Bug fixes

1.90.0 (2026-08-24)

New features

Bug fixes

RuboCop Rails v2.37.0

Changes

2.37.0 (2026-08-16)

Changes

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants