Skip to content

Bump the minor-and-patch group across 1 directory with 10 updates - #2686

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/minor-and-patch-ce0d13f09e
Open

Bump the minor-and-patch group across 1 directory with 10 updates#2686
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/minor-and-patch-ce0d13f09e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 8 updates in the / directory:

Package From To
rubocop-sorbet 0.13.1 0.13.2
yard 0.9.44 0.9.45
state_machines 0.201.0 0.202.0
graphql 2.6.5 2.6.6
sorbet-static 0.6.13341 0.6.13363
require-hooks 0.4.0 0.4.1
rubydex 0.2.9 0.3.0
spoom 1.7.16 1.8.4

Updates rubocop-sorbet from 0.13.1 to 0.13.2

Release notes

Sourced from rubocop-sorbet's releases.

v0.13.2

What's Changed

🛠 Other Changes

Full Changelog: Shopify/rubocop-sorbet@v0.13.1...v0.13.2

Commits
  • ed5feb5 Release v0.13.2
  • bdf44ef Merge pull request #386 from Shopify/rmf-rbs-attr
  • 041e4e3 Change test to be more realistic
  • 512502f Keep signature of the initialize method returning void
  • c5e0d71 Fix Sorbet/EnforceSignatures to generate correct RBS signature comments for a...
  • See full diff in compare view

Updates yard from 0.9.44 to 0.9.45

Release notes

Sourced from yard's releases.

Release v0.9.45

  • Use @param types to document generated Struct.new and Data.define members (#1684)
  • Add compatibility with RDoc 8
  • Fix TypesExplainer parsing of types following Hash collections (#1688)
  • Fix HTML generation for RBS constants without source values (#1686)
  • Fix method redefinition warnings when loading YARD with Ruby warnings enabled (#1687)
  • Improve sanitization of yard server request paths
Changelog

Sourced from yard's changelog.

0.9.45 - July 14th, 2026

  • Use @param types to document generated Struct.new and Data.define members (#1684)
  • Add compatibility with RDoc 8
  • Fix TypesExplainer parsing of types following Hash collections (#1688)
  • Fix HTML generation for RBS constants without source values (#1686)
  • Fix method redefinition warnings when loading YARD with Ruby warnings enabled (#1687)
  • Improve sanitization of yard server request paths
Commits
  • 2659ecd Release: v0.9.45
  • 2b467e0 Create a gh-fix skill
  • 2842ba7 Update changelog
  • 00fe9b1 Refactor server sanitization logic
  • c6fd371 Use @​param types for Struct and Data members (#1695)
  • d2a8883 Merge remote-tracking branch 'origin/main' into fix/issue-1684-struct-data-pa...
  • 674d0cf Fix parser method redefinition warnings (#1694)
  • 9483cd3 Use param types for Struct and Data members
  • 12ed8b7 Merge main into fix/issue-1687-method-redefined-warnings
  • 9b874e2 Fix HTML generation for RBS constants
  • Additional commits viewable in compare view

Updates state_machines from 0.201.0 to 0.202.0

Release notes

Sourced from state_machines's releases.

state_machines: v0.202.0

0.202.0 (2026-07-18)

Features

  • show owner class and source location in method conflict warnings (#171) (d6183d1)
Changelog

Sourced from state_machines's changelog.

0.202.0 (2026-07-18)

Features

  • show owner class and source location in method conflict warnings (#171) (d6183d1)
Commits
  • 219b43e chore(master): release state_machines 0.202.0 (#172)
  • d6183d1 feat: show owner class and source location in method conflict warnings (#171)
  • fcd6008 chore: update COSS version to 0.201.0
  • See full diff in compare view

Updates graphql from 2.6.5 to 2.6.6

Changelog

Sourced from graphql's changelog.

2.6.6 (21 Jul 2026)

  • Security: This version includes a remediation for a security issue in Execution::Next (GHSA-j7xr-4g94-r9h3).

New features

  • Support pattern matching non-null and list type definitions #5660

Bug fixes

  • SDL: properly apply directive argument default values #5659
  • Dataloader: fix Ruby version compatibility check #5662
  • Validation: apply query token limit in Schema.validate #5668
  • Dataloader: Use a queue for more efficient Source resolution #5666
  • Remove needless compat with Ruby 2.2 #5670
  • Schema: fix union memberships lookup #5663
  • Dataloader: unify lazy resolution code #5669
  • AsyncDataloader: improve task scheduling to fix deadlocks #5672
Commits
  • 9548947 2.6.6
  • 011203d Merge pull request #5673 from ydah/fix-operation-directive-finalizer
  • dd6f3f3 Merge pull request #5672 from rmosolgo/async-dataloader-error-handling
  • ac63800 Merge commit from fork
  • 741e379 Correctly handle UnauthorizedErrors raised by Resolvers in Execution::Next
  • eb230f8 Move spawn_tasks back to a method to preserve reference to pending_work
  • 8e8bf89 Use sequential calls instead of yield with next_lazies
  • 2fe9a62 Remove needless method
  • 726ff88 Clean up some internal APIs
  • 5bfae85 Skip lint
  • Additional commits viewable in compare view

Updates sorbet-static from 0.6.13341 to 0.6.13363

Release notes

Sourced from sorbet-static's releases.

sorbet 0.6.13362.20260725095227-f9dbf2a67

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13362', :group => :development
gem 'sorbet-runtime', '0.6.13362'

sorbet 0.6.13361.20260724153103-7ec459002

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13361', :group => :development
gem 'sorbet-runtime', '0.6.13361'

sorbet 0.6.13360.20260724165836-f37aafc87

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13360', :group => :development
gem 'sorbet-runtime', '0.6.13360'

sorbet 0.6.13359.20260723220324-faeea86cc

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13359', :group => :development
gem 'sorbet-runtime', '0.6.13359'

sorbet 0.6.13358.20260723152357-98e486957

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13358', :group => :development
gem 'sorbet-runtime', '0.6.13358'

sorbet 0.6.13357.20260723161646-1acd6887e

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13357', :group => :development
gem 'sorbet-runtime', '0.6.13357'

sorbet 0.6.13356.20260723144436-2a1c4b0a4

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13356', :group => :development
gem 'sorbet-runtime', '0.6.13356'

sorbet 0.6.13355.20260722182711-b4c6c383d

... (truncated)

Commits

Updates parallel from 1.28.0 to 2.1.0

Changelog

Sourced from parallel's changelog.

2.1.0

Added

  • support different serializers
  • support for HMac verified serializer to secure hardened environments

2.0.1

Added

  • require mfa for gem release

2.0.0

Changed

  • Require Ruby >= 3.3
  • Add Ruby 4 Ractor support
Commits

Updates require-hooks from 0.4.0 to 0.4.1

Changelog

Sourced from require-hooks's changelog.

0.4.1 (2026-07-22)

  • Bring back Ruby 2.3 compatibility.
Commits

Updates rubydex from 0.2.9 to 0.3.0

Release notes

Sourced from rubydex's releases.

v0.3.0

What's Changed

🚧 Breaking Changes

✨ Enhancements

🐛 Bug Fixes

🛠 Other Changes

New Contributors

Full Changelog: Shopify/rubydex@v0.2.9...v0.3.0

Commits
  • e319bbe Bump version to v0.3.0
  • 851a8e0 Remove stale .mcp.json configuration (#947)
  • 1690a97 Merge pull request #946 from Shopify/vs_move_early_singleton_return_earlier
  • c34d13a Move existing singleton check earlier
  • da0be76 Merge pull request #929 from Shopify/vs_avoid_id_string_allocations
  • 097b76b Add convenience macro to build byteslice IDs
  • 5a25309 Compute name ids from byte slices
  • 5f88068 Compute definition ids from byte slices
  • 6d0b8c9 Compute reference ids from byte slices
  • 93caccf Allow creating IDs from slices of byteslices
  • Additional commits viewable in compare view

Updates sorbet-static-and-runtime from 0.6.13341 to 0.6.13363

Release notes

Sourced from sorbet-static-and-runtime's releases.

sorbet 0.6.13362.20260725095227-f9dbf2a67

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13362', :group => :development
gem 'sorbet-runtime', '0.6.13362'

sorbet 0.6.13361.20260724153103-7ec459002

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13361', :group => :development
gem 'sorbet-runtime', '0.6.13361'

sorbet 0.6.13360.20260724165836-f37aafc87

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13360', :group => :development
gem 'sorbet-runtime', '0.6.13360'

sorbet 0.6.13359.20260723220324-faeea86cc

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13359', :group => :development
gem 'sorbet-runtime', '0.6.13359'

sorbet 0.6.13358.20260723152357-98e486957

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13358', :group => :development
gem 'sorbet-runtime', '0.6.13358'

sorbet 0.6.13357.20260723161646-1acd6887e

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13357', :group => :development
gem 'sorbet-runtime', '0.6.13357'

sorbet 0.6.13356.20260723144436-2a1c4b0a4

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13356', :group => :development
gem 'sorbet-runtime', '0.6.13356'

sorbet 0.6.13355.20260722182711-b4c6c383d

... (truncated)

Commits

Updates spoom from 1.7.16 to 1.8.4

Release notes

Sourced from spoom's releases.

v1.8.4

What's Changed

🛠 Other Changes

Full Changelog: Shopify/spoom@v1.8.3...v1.8.4

v1.8.3

What's Changed

🛠 Other Changes

Full Changelog: Shopify/spoom@v1.8.2...v1.8.3

v1.8.2

What's Changed

🐛 Bug Fixes

🛠 Other Changes

New Contributors

Full Changelog: Shopify/spoom@v1.8.1...v1.8.2

v1.8.1

Full Changelog: Shopify/spoom@v1.8.0...v1.8.1

v1.8.0

What's Changed

✨ Enhancements

... (truncated)

Commits
  • 1710923 Bump version to v1.8.4
  • 32a0046 Merge pull request #972 from Shopify/at-rbs-translate-preserve-rbs-sig
  • 85e6697 Update Spoom RBI
  • d03919a Add CLI option to preserve multiline sigs
  • fd2631c Preserve multiline sigs in RBS translator
  • 936552c Bump rbi to 0.3.15
  • 9c632ec Merge pull request #971 from Shopify/ko-fix-warnings
  • 292f17f Preserve Sorbet warnings in formatted srb output
  • f13a8a2 Merge pull request #970 from Shopify/at-fix-sig-loc
  • bd3406c Use correct RBI::Loc type for RBI::Sig#loc during translation
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [rubocop-sorbet](https://github.com/shopify/rubocop-sorbet) | `0.13.1` | `0.13.2` |
| [yard](https://github.com/lsegal/yard) | `0.9.44` | `0.9.45` |
| [state_machines](https://github.com/state-machines/state_machines) | `0.201.0` | `0.202.0` |
| [graphql](https://github.com/rmosolgo/graphql-ruby) | `2.6.5` | `2.6.6` |
| [sorbet-static](https://github.com/sorbet/sorbet) | `0.6.13341` | `0.6.13363` |
| [require-hooks](https://github.com/ruby-next/require-hooks) | `0.4.0` | `0.4.1` |
| [rubydex](https://github.com/Shopify/rubydex) | `0.2.9` | `0.3.0` |
| [spoom](https://github.com/Shopify/spoom) | `1.7.16` | `1.8.4` |



Updates `rubocop-sorbet` from 0.13.1 to 0.13.2
- [Release notes](https://github.com/shopify/rubocop-sorbet/releases)
- [Commits](Shopify/rubocop-sorbet@v0.13.1...v0.13.2)

Updates `yard` from 0.9.44 to 0.9.45
- [Release notes](https://github.com/lsegal/yard/releases)
- [Changelog](https://github.com/lsegal/yard/blob/main/CHANGELOG.md)
- [Commits](lsegal/yard@v0.9.44...v0.9.45)

Updates `state_machines` from 0.201.0 to 0.202.0
- [Release notes](https://github.com/state-machines/state_machines/releases)
- [Changelog](https://github.com/state-machines/state_machines/blob/master/CHANGELOG.md)
- [Commits](state-machines/state_machines@state_machines/v0.201.0...state_machines/v0.202.0)

Updates `graphql` from 2.6.5 to 2.6.6
- [Release notes](https://github.com/rmosolgo/graphql-ruby/releases)
- [Changelog](https://github.com/rmosolgo/graphql-ruby/blob/master/CHANGELOG.md)
- [Commits](rmosolgo/graphql-ruby@v2.6.5...v2.6.6)

Updates `sorbet-static` from 0.6.13341 to 0.6.13363
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `parallel` from 1.28.0 to 2.1.0
- [Changelog](https://github.com/grosser/parallel/blob/master/CHANGELOG.md)
- [Commits](grosser/parallel@v1.28.0...v2.1.0)

Updates `require-hooks` from 0.4.0 to 0.4.1
- [Changelog](https://github.com/ruby-next/require-hooks/blob/master/CHANGELOG.md)
- [Commits](ruby-next/require-hooks@v0.4.0...v0.4.1)

Updates `rubydex` from 0.2.9 to 0.3.0
- [Release notes](https://github.com/Shopify/rubydex/releases)
- [Commits](Shopify/rubydex@v0.2.9...v0.3.0)

Updates `sorbet-static-and-runtime` from 0.6.13341 to 0.6.13363
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `spoom` from 1.7.16 to 1.8.4
- [Release notes](https://github.com/Shopify/spoom/releases)
- [Commits](Shopify/spoom@v1.7.16...v1.8.4)

---
updated-dependencies:
- dependency-name: rubocop-sorbet
  dependency-version: 0.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: yard
  dependency-version: 0.9.45
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: state_machines
  dependency-version: 0.202.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: graphql
  dependency-version: 2.6.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: sorbet-static
  dependency-version: 0.6.13363
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: parallel
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: minor-and-patch
- dependency-name: require-hooks
  dependency-version: 0.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: rubydex
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: sorbet-static-and-runtime
  dependency-version: 0.6.13363
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: spoom
  dependency-version: 1.8.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jul 27, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 27, 2026 21:45
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jul 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants