chore(deps-dev): bump the gemas-de-desarrollo group across 1 directory with 4 updates by dependabot[bot] · Pull Request #97 · proyectoFinalFRLP/proyecto-api

dependabot · 2026-10-01T14:31:09Z

Bumps the gemas-de-desarrollo group with 4 updates in the / directory: rubocop, rubocop-rails, lefthook and simplecov.

Updates rubocop from 1.90.0 to 1.91.0

Release notes

RuboCop v1.91.0

New features

#15631: Add a preview channel for unstable behavior. ([@bbatsov][])

#15627: Add a SARIF formatter. ([@bbatsov][])

#15686: Add AllCops: FailLevel, the configuration equivalent of --fail-level. ([@bbatsov][])

#15650: Add AllowedDirectives option to Style/DisableCopsWithinSourceCodeDirective, exempting directive kinds such as generated rubocop:todo comments. ([@bbatsov][])

#15629: Add --changed to inspect only the files git says changed. ([@bbatsov][])

#15628: Add --diff to preview autocorrection without writing files. ([@bbatsov][])

#15615: Add new Lint/MisplacedMagicComment cop to flag magic comments in positions where Ruby ignores them. ([@bbatsov][])

#15600: Add the rubocop:enable-next directive to re-enable cops for the next statement only. ([@bbatsov][])

#15600: Add the rubocop:next directive, combining push-style +/- arguments with disable-next's statement scope. ([@bbatsov][])

#15363: Let a cop's entry in the default configuration carry a Preview section with the defaults it is expected to adopt in the next major release, applied under Preview. ([@bbatsov][])

Bug fixes

#15349: Fix a false positive for Style/RedundantRegexpCharacterClass with \8/\9. ([@bbatsov][])

#15646: Fix an error for Layout/ElseAlignment when else is used with rescue in a class, module, or singleton class body. ([@viralpraxis][])

#15613: Fix an error for Layout/HashAlignment when a hash value starts on the line below its key. ([@viralpraxis][])

#15623: Fix an error for Layout/HashAlignment when the first pair of a hash omits its value, and an incorrect autocorrection when a later pair does. ([@viralpraxis][])

#15602: Fix an error for Layout/IndentationWidth on under-indented code with tab indentation. ([@Starlexxx][])

#15672: Fix an error for Lint/RedundantCopDisableDirective when a file contains more than one rubocop:push/rubocop:pop pair. ([@koic][])

#15625: Fix an error for Style/AccessModifierDeclarations when a body repeats the same access modifier. ([@viralpraxis][])

#15603: Fix an error for Style/AccessModifierDeclarations with EnforcedStyle: inline when an access modifier is the body of an if without an else branch. ([@viralpraxis][])

#15604: Fix an error for Style/ConstantVisibility when a visibility declaration splats anything other than an array literal, e.g. private_constant(*constants(false)). ([@viralpraxis][])

#15647: Fix an error for Style/DocumentationMethod when an inline module_function/ruby2_keywords def is preceded by another argument. ([@viralpraxis][])

#15680: Fix an error for Style/EndlessMethod when a method definition is nested inside another method definition. ([@viralpraxis][])

#15674: Fix an error for Style/FloatDivision when using EnforcedStyle: fdiv and one operand of a float division is itself a parenthesized float division. ([@viralpraxis][])

#15624: Fix an error for Style/HashLookupMethod when the looked-up key is itself a hash lookup. ([@viralpraxis][])

#15642: Fix an error for Style/HashSyntax when hash rockets are enforced and a hash value repeats its key. ([@viralpraxis][])

#15634: Fix an incorrect autocorrect for Lint/LiteralAsCondition when the other operand is a parenthesized return. ([@Starlexxx][])

#15648: Fix an incorrect autocorrect for Lint/ParenthesesAsGroupedExpression when the parentheses contain and, or, not, or a modifier expression. ([@Starlexxx][])

#15612: Fix an incorrect autocorrect for Naming/BlockForwarding with Style/MethodDefParentheses. ([@Starlexxx][])

#15680: Fix an incorrect autocorrect for Style/EndlessMethod when using EnforcedStyle: require_always and the method body has a rescue or ensure clause. ([@viralpraxis][])

#15669: Fix an incorrect autocorrect for Style/FloatDivision when using EnforcedStyle: fdiv and the divisor is a method call with parenthesized arguments. ([@viralpraxis][])

#15678: Fix an incorrect autocorrect for Style/For when using EnforcedStyle: for and the block body has a rescue or ensure clause. ([@viralpraxis][])

#15645: Fix an incorrect autocorrect for Style/GuardClause with Style/MissingElse. ([@Starlexxx][])

#15668: Fix an incorrect autocorrect for Style/MethodCallWithArgsParentheses when EnforcedStyle: omit_parentheses is used together with Style/TrailingCommaInArguments. ([@viralpraxis][])

#15347: Fix an incorrect autocorrect for Style/NestedModifier. ([@bbatsov][])

#15347: Fix an incorrect autocorrect for Style/NonNilCheck. ([@bbatsov][])

#15347: Fix an incorrect autocorrect for Style/Not with a flip-flop or assignment. ([@bbatsov][])

#15349: Fix an incorrect autocorrect for Style/RedundantDoubleSplatHashBraces with a braced merge argument. ([@bbatsov][])

#15349: Fix an incorrect autocorrect for Style/RedundantParentheses around and/or. ([@bbatsov][])

#15349: Fix an incorrect autocorrect for Style/RedundantRegexpConstructor with %r{} delimiters. ([@bbatsov][])

#15614: Fix an infinite loop between Layout/ArgumentAlignment and Layout/HashAlignment with separator style. ([@Starlexxx][])

#15599: Fix an infinite loop error for Layout/CommentIndentation when many comment blocks with the same indentation are separated by empty lines. ([@Starlexxx][])

#15597: Fix an infinite loop error for Layout/EmptyLinesAfterModuleInclusion when a module inclusion is directly before rescue. ([@Starlexxx][])

#15617: Fix an infinite loop between Layout/ExtraSpacing with ForceEqualSignAlignment and Layout/SpaceAroundOperators. ([@Starlexxx][])

#15638: Fix an infinite loop error for Layout/FirstArrayElementIndentation with Layout/ArrayAlignment when EnforcedStyle: with_fixed_indentation is configured. ([@RedZapdos123][])

#15639: Fix an infinite loop error for Layout/FirstParameterIndentation with Layout/ParameterAlignment when EnforcedStyle: with_fixed_indentation is configured. ([@RedZapdos123][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.91.0 (2026-09-10)

New features

#15631: Add a preview channel for unstable behavior. ([@bbatsov][])

#15627: Add a SARIF formatter. ([@bbatsov][])

#15686: Add AllCops: FailLevel, the configuration equivalent of --fail-level. ([@bbatsov][])

#15650: Add AllowedDirectives option to Style/DisableCopsWithinSourceCodeDirective, exempting directive kinds such as generated rubocop:todo comments. ([@bbatsov][])

#15629: Add --changed to inspect only the files git says changed. ([@bbatsov][])

#15628: Add --diff to preview autocorrection without writing files. ([@bbatsov][])

#15615: Add new Lint/MisplacedMagicComment cop to flag magic comments in positions where Ruby ignores them. ([@bbatsov][])

#15600: Add the rubocop:enable-next directive to re-enable cops for the next statement only. ([@bbatsov][])

#15600: Add the rubocop:next directive, combining push-style +/- arguments with disable-next's statement scope. ([@bbatsov][])

#15363: Let a cop's entry in the default configuration carry a Preview section with the defaults it is expected to adopt in the next major release, applied under Preview. ([@bbatsov][])

Bug fixes

#15349: Fix a false positive for Style/RedundantRegexpCharacterClass with \8/\9. ([@bbatsov][])

#15646: Fix an error for Layout/ElseAlignment when else is used with rescue in a class, module, or singleton class body. ([@viralpraxis][])

#15613: Fix an error for Layout/HashAlignment when a hash value starts on the line below its key. ([@viralpraxis][])

#15623: Fix an error for Layout/HashAlignment when the first pair of a hash omits its value, and an incorrect autocorrection when a later pair does. ([@viralpraxis][])

#15602: Fix an error for Layout/IndentationWidth on under-indented code with tab indentation. ([@Starlexxx][])

#15672: Fix an error for Lint/RedundantCopDisableDirective when a file contains more than one rubocop:push/rubocop:pop pair. ([@koic][])

#15625: Fix an error for Style/AccessModifierDeclarations when a body repeats the same access modifier. ([@viralpraxis][])

#15603: Fix an error for Style/AccessModifierDeclarations with EnforcedStyle: inline when an access modifier is the body of an if without an else branch. ([@viralpraxis][])

#15604: Fix an error for Style/ConstantVisibility when a visibility declaration splats anything other than an array literal, e.g. private_constant(*constants(false)). ([@viralpraxis][])

#15647: Fix an error for Style/DocumentationMethod when an inline module_function/ruby2_keywords def is preceded by another argument. ([@viralpraxis][])

#15680: Fix an error for Style/EndlessMethod when a method definition is nested inside another method definition. ([@viralpraxis][])

#15674: Fix an error for Style/FloatDivision when using EnforcedStyle: fdiv and one operand of a float division is itself a parenthesized float division. ([@viralpraxis][])

#15624: Fix an error for Style/HashLookupMethod when the looked-up key is itself a hash lookup. ([@viralpraxis][])

#15642: Fix an error for Style/HashSyntax when hash rockets are enforced and a hash value repeats its key. ([@viralpraxis][])

#15634: Fix an incorrect autocorrect for Lint/LiteralAsCondition when the other operand is a parenthesized return. ([@Starlexxx][])

#15648: Fix an incorrect autocorrect for Lint/ParenthesesAsGroupedExpression when the parentheses contain and, or, not, or a modifier expression. ([@Starlexxx][])

#15612: Fix an incorrect autocorrect for Naming/BlockForwarding with Style/MethodDefParentheses. ([@Starlexxx][])

#15680: Fix an incorrect autocorrect for Style/EndlessMethod when using EnforcedStyle: require_always and the method body has a rescue or ensure clause. ([@viralpraxis][])

#15669: Fix an incorrect autocorrect for Style/FloatDivision when using EnforcedStyle: fdiv and the divisor is a method call with parenthesized arguments. ([@viralpraxis][])

#15678: Fix an incorrect autocorrect for Style/For when using EnforcedStyle: for and the block body has a rescue or ensure clause. ([@viralpraxis][])

#15645: Fix an incorrect autocorrect for Style/GuardClause with Style/MissingElse. ([@Starlexxx][])

#15668: Fix an incorrect autocorrect for Style/MethodCallWithArgsParentheses when EnforcedStyle: omit_parentheses is used together with Style/TrailingCommaInArguments. ([@viralpraxis][])

#15347: Fix an incorrect autocorrect for Style/NestedModifier. ([@bbatsov][])

#15347: Fix an incorrect autocorrect for Style/NonNilCheck. ([@bbatsov][])

#15347: Fix an incorrect autocorrect for Style/Not with a flip-flop or assignment. ([@bbatsov][])

#15349: Fix an incorrect autocorrect for Style/RedundantDoubleSplatHashBraces with a braced merge argument. ([@bbatsov][])

#15349: Fix an incorrect autocorrect for Style/RedundantParentheses around and/or. ([@bbatsov][])

#15349: Fix an incorrect autocorrect for Style/RedundantRegexpConstructor with %r{} delimiters. ([@bbatsov][])

#15614: Fix an infinite loop between Layout/ArgumentAlignment and Layout/HashAlignment with separator style. ([@Starlexxx][])

#15599: Fix an infinite loop error for Layout/CommentIndentation when many comment blocks with the same indentation are separated by empty lines. ([@Starlexxx][])

#15597: Fix an infinite loop error for Layout/EmptyLinesAfterModuleInclusion when a module inclusion is directly before rescue. ([@Starlexxx][])

#15617: Fix an infinite loop between Layout/ExtraSpacing with ForceEqualSignAlignment and Layout/SpaceAroundOperators. ([@Starlexxx][])

#15638: Fix an infinite loop error for Layout/FirstArrayElementIndentation with Layout/ArrayAlignment when EnforcedStyle: with_fixed_indentation is configured. ([@RedZapdos123][])

... (truncated)

Commits

6eee0af Cut 1.91
ed0572d Update Changelog
3181272 Fix an infinite loop for Style/NumericLiteralPrefix with signed literals
b87652a Fix Layout/LineLength SplitStrings loop on trailing-space split point
fce7a33 [Fix #15638] Fix first array indentation loop
321bd65 #15347 Fix an incorrect autocorrect for Style/NestedModifier
a464cba #15347 Fix incorrect autocorrects for Style/NilComparison with precedence...
3192b70 #15347 Fix an incorrect autocorrect for Style/NonNilCheck
f747cab #15347 Fix an incorrect autocorrect for Style/Not with a flip-flop or ass...
3f52020 Add CHANGELOG entry for the preview fail level
Additional commits viewable in compare view

Updates rubocop-rails from 2.37.0 to 2.38.0

Release notes

Sourced from rubocop-rails's releases.

RuboCop Rails v2.38.0

Bug fixes

#1662: Fix an error for Rails/ReadWriteAttribute when a read_attribute call is nested inside another attribute call. (@viralpraxis)

#1660: Fix an incorrect autocorrect for Rails/RakeEnvironment when a task declares its arguments without an array literal, or declares an empty dependency list. (@viralpraxis)

#1657: Fix version-gated cops using minimum_target_rails_version to respect AllCops: TargetRailsVersion so that an explicitly configured version takes precedence over the lockfile and enables these cops in projects without a lockfile. (@koic)

Changes

#1655: Resolve AllCops: TargetRailsVersion within RuboCop Rails itself instead of relying on RuboCop core, in preparation for the removal of TargetRailsVersion support from RuboCop core in RuboCop 2.0. (@koic)

Changelog

Sourced from rubocop-rails's changelog.

2.38.0 (2026-09-20)

Bug fixes

#1662: Fix an error for Rails/ReadWriteAttribute when a read_attribute call is nested inside another attribute call. ([@viralpraxis][])

#1660: Fix an incorrect autocorrect for Rails/RakeEnvironment when a task declares its arguments without an array literal, or declares an empty dependency list. ([@viralpraxis][])

#1657: Fix version-gated cops using minimum_target_rails_version to respect AllCops: TargetRailsVersion so that an explicitly configured version takes precedence over the lockfile and enables these cops in projects without a lockfile. ([@koic][])

Changes

#1655: Resolve AllCops: TargetRailsVersion within RuboCop Rails itself instead of relying on RuboCop core, in preparation for the removal of TargetRailsVersion support from RuboCop core in RuboCop 2.0. ([@koic][])

Commits

9b25387 Cut 2.38.0
3bf4e62 Update Changelog
e3df883 Merge pull request #1662 from viralpraxis/fix-an-error-for-rails-read-write-a...
74464cd Fix an error for Rails/ReadWriteAttribute cop
38949cd Merge pull request #1660 from viralpraxis/fix-an-incorrect-autocorrect-for-ra...
f504da1 Fix an incorrect autocorrect for Rails/RakeEnvironment cop
5e2998e Merge pull request #1657 from koic/fix_version_gated_cops_to_respect_target_r...
72dfac3 Fix version-gated cops to respect AllCops: TargetRailsVersion
a4655cb Merge pull request #1655 from koic/extract_target_rails_version_resolution
fd01923 Resolve TargetRailsVersion within RuboCop Rails itself
Additional commits viewable in compare view

Updates lefthook from 2.1.12 to 2.1.14

Release notes

Sourced from lefthook's releases.

v2.1.14

Changelog

Changelog

Sourced from lefthook's changelog.

2.1.13/2.1.14 (2026-09-14)

fix: error when --job/--command matches nothing (#1512) by @nityanand123gupta

fix: disable tty things when stdout is not TTY (#1545) by @mrexox

docs: document files inheritance for grouped jobs (#1536) by @chiliec

fix: force colors when colors are explicitly enabled (#1538) by @Yash121l

fix: resolve file_types paths from the repo root (#1537) by @Yash121l

fix: don't force-install hooks from the npm postinstall (#1510) by @hamodywe

docs: quote template run examples (#1472) by @Guflly

Commits

1e23553 2.1.14: small fixes and spinner improvements
a2c9d37 2.1.13: small fixes and spinner improvements
c7b4983 fix(run): error when --job/--command matches nothing (#1512)
e4ca4a1 fix: disable tty things when stdout is not TTY (#1545)
aa3fa89 docs: document files inheritance for grouped jobs (#1536)
250f028 fix: force colors when colors are explicitly enabled (#1538)
62f4d5e fix: resolve file_types paths from the repo root (#1537)
ef092eb fix(npm) don't force past core.hooksPath guard in npm postinstall (#1475)
3667aeb fix: don't force-install hooks from the npm postinstall (#1510)
354df23 docs: quote template run examples (#1472)
See full diff in compare view

Updates simplecov from 1.3.0 to 1.3.1

Release notes

Sourced from simplecov's releases.

v1.3.1

Bugfixes

cover_views compiles templates on Rails main again. Rails removed ActionView::Template.registered_template_handler; the lookup reads ActionView::Template::Handlers.template_handlers and still skips an extension with no handler. See simplecov-ruby/simplecov#1300.

require "simplecov" works again on JRuby on Windows, where 1.3.0 raised LoadError: Could not open library '.../libprism.dll'. Prism's FFI backend cannot open its native library there, and 1.3.0 required Prism as soon as SimpleCov loaded. Prism now loads only when branch or method coverage needs the static extractor, which a line-only run never does. Where it cannot load at all, the extractor falls back to empty branch and method tables for never-loaded files, as it did before 1.3.0. See simplecov-ruby/simplecov#1299.

simplecov affected --run works on JRuby on Windows, where it crashed with NoMethodError because Process.wait2 answers no status there. On that platform the runner starts through Kernel#system instead.

simplecov serve refuses a symlink that points outside the report on JRuby on Windows too. JRuby's File.realpath follows no symlinks there, so serve would have served the file the link pointed to, and simplecov clean and the coverage.json lookup compared paths that were never resolved. On JRuby the CLI now resolves paths through the JDK.

Changelog

Sourced from simplecov's changelog.

1.3.1 (2026-09-24)

Bugfixes

cover_views compiles templates on Rails main again. Rails removed ActionView::Template.registered_template_handler; the lookup reads ActionView::Template::Handlers.template_handlers and still skips an extension with no handler. See simplecov-ruby/simplecov#1300.

require "simplecov" works again on JRuby on Windows, where 1.3.0 raised LoadError: Could not open library '.../libprism.dll'. Prism's FFI backend cannot open its native library there, and 1.3.0 required Prism as soon as SimpleCov loaded. Prism now loads only when branch or method coverage needs the static extractor, which a line-only run never does. Where it cannot load at all, the extractor falls back to empty branch and method tables for never-loaded files, as it did before 1.3.0. See simplecov-ruby/simplecov#1299.

simplecov affected --run works on JRuby on Windows, where it crashed with NoMethodError because Process.wait2 answers no status there. On that platform the runner starts through Kernel#system instead.

simplecov serve refuses a symlink that points outside the report on JRuby on Windows too. JRuby's File.realpath follows no symlinks there, so serve would have served the file the link pointed to, and simplecov clean and the coverage.json lookup compared paths that were never resolved. On JRuby the CLI now resolves paths through the JDK.

Commits

4ee7894 Bump version to 1.3.1
486e55e bundle update
d2a62a8 Resolve paths and wait on runners correctly on JRuby on Windows
3a2e08e Load Prism only when the static extractor runs
08006c4 Look up Action View handlers on the new registry
0e0b168 Bump oxlint from 1.82.0 to 1.83.0 in /html_frontend
c1641b7 Bump @happy-dom/global-registrator in /html_frontend
26920af Bump ruby/setup-ruby from 1.321.0 to 1.323.0
b18f50d Bump oxlint from 1.81.0 to 1.82.0 in /html_frontend
a7fa17e Bump @types/bun from 1.4.1 to 1.4.2 in /html_frontend
See full diff in compare view

…y with 4 updates Bumps the gemas-de-desarrollo group with 4 updates in the / directory: [rubocop](https://github.com/rubocop/rubocop), [rubocop-rails](https://github.com/rubocop/rubocop-rails), [lefthook](https://github.com/evilmartians/lefthook) and [simplecov](https://github.com/simplecov-ruby/simplecov). Updates `rubocop` from 1.90.0 to 1.91.0 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.90.0...v1.91.0) Updates `rubocop-rails` from 2.37.0 to 2.38.0 - [Release notes](https://github.com/rubocop/rubocop-rails/releases) - [Changelog](https://github.com/rubocop/rubocop-rails/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop-rails@v2.37.0...v2.38.0) Updates `lefthook` from 2.1.12 to 2.1.14 - [Release notes](https://github.com/evilmartians/lefthook/releases) - [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md) - [Commits](evilmartians/lefthook@v2.1.12...v2.1.14) Updates `simplecov` from 1.3.0 to 1.3.1 - [Release notes](https://github.com/simplecov-ruby/simplecov/releases) - [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md) - [Commits](simplecov-ruby/simplecov@v1.3.0...v1.3.1) --- updated-dependencies: - dependency-name: lefthook dependency-version: 2.1.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: gemas-de-desarrollo - dependency-name: rubocop dependency-version: 1.91.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: gemas-de-desarrollo - dependency-name: rubocop-rails dependency-version: 2.38.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: gemas-de-desarrollo - dependency-name: simplecov dependency-version: 1.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: gemas-de-desarrollo ... Signed-off-by: dependabot[bot] <support@github.com>

Sanntinat

Revisión — Dependabot (PR #97) · Gemas de desarrollo: RuboCop 1.91, rubocop-rails 2.38, lefthook, simplecov

Revisión de dependabot/bundler/gemas-de-desarrollo-8960840dd6, contra origin/master de proyecto-api.

Check	Resultado
CI (GitHub Actions)	`test` en rojo: 1567 ejemplos, 1449 fallas
Rama vs `master`	12 commits atrás. Mergea limpio
Reproducido en local	Sí: el mismo `ArgumentError` en los specs de modelos

🔴 El grupo «de desarrollo» sube una gem de runtime de versión mayor

Además de las cuatro gems del grupo, el lock trae json 2.21.2 → 3.0.2, que entra de arrastre (RuboCop pide json >= 2.3 y Dependabot resolvió a la última). json no es de desarrollo: la usa Rails en runtime, también en producción.

Con Rails 8.1.3.1, que es el de master, json 3 rompe la serialización:

ArgumentError:
  wrong number of arguments (given 2, expected 1)
# ./spec/avo/filters_spec.rb:16  Company.create!(...)

Se cae todo lo que guarda o serializa JSON (columnas jsonb, serializers, mappers): 1449 de 1567 ejemplos.

Cómo sale

Rails 8.1.4 soporta json 3, y lo trae #96 (el grupo de producción). Lo probé de dos maneras:

#96 primero y después estas cuatro gems encima (lo que va a hacer Dependabot al rebasear): 1744 ejemplos, 0 fallas, y RuboCop 1.91 / rubocop-rails 2.38 sin ninguna ofensa nueva en los 314 archivos.
Sólo las cuatro gems sobre master, sin tocar json (bundle lock --update rubocop rubocop-rails lefthook simplecov --conservative): json queda en 2.21.2, y también da 1744 ejemplos en verde.

Lo más simple es mergear #96 y pedirle a Dependabot que rebasee este PR. Si por algún motivo #96 se demora, la segunda opción sirve igual.

⚪ Para la configuración de Dependabot

Vale la pena que un grupo «de desarrollo» no pueda subir de versión mayor una dependencia de runtime. Una regla ignore para json con update-types: ["version-update:semver-major"] en el grupo de desarrollo lo evita. El grupo de producción la va a seguir subiendo junto con Rails, que es donde corresponde.

Veredicto

REQUEST CHANGES (para que no se mergee así): con el lock actual se cae la suite. Después de #96 y del rebase, apruebo.

The group bump carried `json` from 2.21.2 to 3.0.2 and the suite went red in places that have nothing to do with the gems being updated: the Avo filters, the adapter errors, the shipment errors. All of them with the same `ArgumentError: wrong number of arguments (given 2, expected 1)`. It is not our code. `json` 3.0 dropped the two-positional form `JSON.parse(source, options_hash)`, and `ActiveSupport::JSON.decode` still calls it that way (activesupport 8.1.3.1, `active_support/json/decoding.rb:25`). With 3.x installed, reading any `json` or `jsonb` column raises: webhook payloads, integration credentials, the template mappers, the Avo panel. `json` is not in the Gemfile -- it arrives through rubocop -- so the constraint goes in explicitly, with the reason, to stop Dependabot from raising it again on its own. The other four updates in this group land as they came. 1567 examples, 0 failures. RuboCop clean. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012xAtddb53LRNVLuyTXyELp

The production group (#96) landed first and both PRs write Gemfile.lock, so this one went into conflict. The lock is rebuilt from master's and the four dev updates re-applied on top, which also picks up what moved since the bump was opened: parallel 2.3.0, simplecov 1.3.2 and lefthook 2.1.17. `json` stays on 2.21.2 for the reason in the Gemfile: ActiveSupport 8.1 calls `JSON.parse` with two positionals and 3.x dropped that form. 1753 examples, 0 failures. RuboCop clean on 314 files. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012xAtddb53LRNVLuyTXyELp

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Oct 1, 2026

dependabot Bot requested a review from a team as a code owner October 1, 2026 14:31

dependabot Bot requested a review from Sanntinat October 1, 2026 14:31

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Oct 1, 2026

LauAubert mentioned this pull request Oct 2, 2026

chore: [TESIS-157] bump brakeman to 8.1.0 so the security scan runs again #112

Merged

dependabot Bot changed the title ~~chore(deps-dev): bump the gemas-de-desarrollo group with 4 updates~~ chore(deps-dev): bump the gemas-de-desarrollo group across 1 directory with 4 updates Oct 2, 2026

dependabot Bot force-pushed the dependabot/bundler/gemas-de-desarrollo-8960840dd6 branch from 8df4176 to 71d3423 Compare October 2, 2026 12:26

Sanntinat mentioned this pull request Oct 5, 2026

chore(deps): bump the gemas-de-produccion group across 1 directory with 4 updates #96

Merged

Sanntinat requested changes Oct 5, 2026

View reviewed changes

TomasMartin2004 and others added 2 commits October 5, 2026 10:29

Navigation Menu

chore(deps-dev): bump the gemas-de-desarrollo group across 1 directory with 4 updates - #97

chore(deps-dev): bump the gemas-de-desarrollo group across 1 directory with 4 updates#97
dependabot[bot] wants to merge 3 commits into
masterfrom
dependabot/bundler/gemas-de-desarrollo-8960840dd6

dependabot Bot commented on behalf of github Oct 1, 2026 •

edited

Loading

Uh oh!

Sanntinat left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

RuboCop v1.91.0

New features

Bug fixes

1.91.0 (2026-09-10)

New features

Bug fixes

RuboCop Rails v2.38.0

Bug fixes

Changes

2.38.0 (2026-09-20)

Bug fixes

Changes

v2.1.14

Changelog

2.1.13/2.1.14 (2026-09-14)

v1.3.1

Bugfixes

1.3.1 (2026-09-24)

Bugfixes

Uh oh!

Sanntinat left a comment

Choose a reason for hiding this comment

Revisión — Dependabot (PR #97) · Gemas de desarrollo: RuboCop 1.91, rubocop-rails 2.38, lefthook, simplecov

🔴 El grupo «de desarrollo» sube una gem de runtime de versión mayor

Cómo sale

⚪ Para la configuración de Dependabot

Veredicto

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot Bot commented on behalf of github Oct 1, 2026 •

edited

Loading