Skip to content

Bump the rubygems group with 2 updates - #53

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/rubygems-86ebb246ff
Open

Bump the rubygems group with 2 updates#53
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/rubygems-86ebb246ff

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the rubygems group with 2 updates: rubocop and oauth2.

Updates rubocop from 1.87.0 to 1.88.1

Release notes

Sourced from rubocop's releases.

RuboCop v1.88.1

Bug fixes

  • #15408: Fix a crash for Bundler/GemComment with a non-literal gem option key. ([@​bbatsov][])
  • #9571: Fix a crash for Layout/ClassStructure when a class body is a single safe-navigation call (e.g. test&.private_methods(def foo; end)). ([@​bbatsov][])
  • #15413: Fix a crash for Gemspec/DevelopmentDependencies when AllowedGems is nil. ([@​bbatsov][])
  • #15404: Fix a crash for Metrics/MethodLength with an anonymous define_method. ([@​bbatsov][])
  • #15414: Fix a crash for Naming/InclusiveLanguage with nil or empty FlaggedTerms. ([@​bbatsov][])
  • #15405: Fix a crash for Security/IoMethods with a non-string-literal argument. ([@​bbatsov][])
  • #15330: Fix a crash for Style/EmptyStringInsideInterpolation with a modifier conditional. ([@​bbatsov][])
  • #15351: Fix a crash for Style/OpenStructUse with a bare OpenStruct root node. ([@​bbatsov][])
  • #15379: Fix a crash for Style/TrailingUnderscoreVariable when a nested destructuring group consists only of underscore variables. ([@​bbatsov][])
  • #15412: Fix a false negative for Security/MarshalLoad with a proc argument. ([@​bbatsov][])
  • #15386: Fix a false negative for Style/MethodDefParentheses with named rest arguments under EnforcedStyle: require_no_parentheses. ([@​bbatsov][])
  • #15396: Fix a false negative for Style/MultilineMethodSignature where a signature that fits on one line was skipped because the multi-line source length was measured instead of the collapsed width. ([@​bbatsov][])
  • #15386: Fix a false negative for Style/OptionalArguments with singleton methods. ([@​bbatsov][])
  • #15383: Fix a false negative for Style/RedundantFilterChain with numbered-parameter blocks. ([@​bbatsov][])
  • #15290: Fix a false negative for Lint/ToEnumArguments when a braced hash is passed to keyword parameters (e.g. to_enum(:m, { required: required })), which raises ArgumentError when the enumerator is used. ([@​RedZapdos123][])
  • #11956: Fix a false positive for Naming/FileName when a class or module name contains multiple consecutive AllowedAcronyms. ([@​camallen][])
  • #15324: Fix a false positive for Style/DirEmpty with a block. ([@​bbatsov][])
  • #15326: Fix a false positive for Style/EmptyLiteral with numbered and it block parameters. ([@​bbatsov][])
  • #15335: Fix a false positive for Style/EnvHome. ([@​bbatsov][])
  • #15345: Fix a false positive for Style/InlineComment with rubocop:todo directives. ([@​bbatsov][])
  • #15348: Fix a false positive for Style/MultilineIfThen. ([@​bbatsov][])
  • #15383: Fix a false positive for Style/NumericPredicate when an allowed method encloses a numbered-parameter or it block. ([@​bbatsov][])
  • #15389: Fix a false positive for Style/OptionHash when the options hash is forwarded with an explicit super. ([@​bbatsov][])
  • #15350: Fix a false positive for Style/RedundantFormat with a lone format sequence. ([@​bbatsov][])
  • #15374: Fix a false positive for Style/RedundantSelf with a rescue exception variable. ([@​bbatsov][])
  • #15376: Fix a false positive for Style/Semicolon with a semicolon inside a string literal. ([@​bbatsov][])
  • #15398: Fix an incorrect autocorrect for Layout/ConditionPosition that dropped a body statement sharing the condition's line via a semicolon. ([@​bbatsov][])
  • #15399: Fix an incorrect autocorrect for Layout/EmptyComment that deleted a heredoc when removing an empty comment trailing its opener. ([@​bbatsov][])
  • #15400: Fix an incorrect autocorrect for Layout/EmptyLineBetweenDefs that inserted a blank line inside a heredoc body when an endless method's body was a heredoc. ([@​bbatsov][])
  • #15401: Fix an incorrect autocorrect for Layout/SpaceAroundOperators that turned **= and /= compound assignments into **//, dropping the assignment. ([@​bbatsov][])
  • #15406: Fix an incorrect autocorrect for Naming/MemoizedInstanceVariableName. ([@​bbatsov][])
  • #15411: Fix an incorrect autocorrect for Naming/RescuedExceptionsVariableName. ([@​bbatsov][])
  • #15319: Fix an incorrect autocorrect for Style/DataInheritance with a brace block. ([@​bbatsov][])
  • #15323: Fix an incorrect autocorrect for Style/EmptyCaseCondition as a yield/super argument. ([@​bbatsov][])
  • #15323: Fix an incorrect autocorrect for Style/EmptyCaseCondition with low-precedence when values. ([@​bbatsov][])
  • #15322: Fix an incorrect autocorrect for Style/EmptyClassDefinition with a namespaced constant. ([@​bbatsov][])
  • #15336: Fix an incorrect autocorrect for Style/EmptyHeredoc. ([@​bbatsov][])
  • #15332: Fix an incorrect autocorrect for Style/EvenOdd. ([@​bbatsov][])
  • #15329: Fix an incorrect autocorrect for Style/ExactRegexpMatch with a single quote. ([@​bbatsov][])
  • #15333: Fix an incorrect autocorrect for Style/FileNull. ([@​bbatsov][])
  • #15334: Fix an incorrect autocorrect for Style/For. ([@​bbatsov][])
  • #15331: Fix an incorrect autocorrect for Style/FormatString with a low-precedence argument. ([@​bbatsov][])
  • #15331: Fix an incorrect autocorrect for Style/FormatString with a splat argument. ([@​bbatsov][])
  • #15337: Fix an incorrect autocorrect for Style/HashSlice. ([@​bbatsov][])
  • #15327: Fix an incorrect autocorrect for Style/HashSyntax with a multi-pair braceless return. ([@​bbatsov][])
  • #15368: Fix an incorrect autocorrect for Style/IfWithSemicolon that changed semantics when the condition was an assignment, by parenthesizing it in the resulting ternary. ([@​bbatsov][])
  • #15340: Fix an incorrect autocorrect for Style/KeywordArgumentsMerging with a block-pass argument. ([@​bbatsov][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.88.1 (2026-07-01)

Bug fixes

  • #15408: Fix a crash for Bundler/GemComment with a non-literal gem option key. ([@​bbatsov][])
  • #9571: Fix a crash for Layout/ClassStructure when a class body is a single safe-navigation call (e.g. test&.private_methods(def foo; end)). ([@​bbatsov][])
  • #15413: Fix a crash for Gemspec/DevelopmentDependencies when AllowedGems is nil. ([@​bbatsov][])
  • #15404: Fix a crash for Metrics/MethodLength with an anonymous define_method. ([@​bbatsov][])
  • #15414: Fix a crash for Naming/InclusiveLanguage with nil or empty FlaggedTerms. ([@​bbatsov][])
  • #15405: Fix a crash for Security/IoMethods with a non-string-literal argument. ([@​bbatsov][])
  • #15330: Fix a crash for Style/EmptyStringInsideInterpolation with a modifier conditional. ([@​bbatsov][])
  • #15351: Fix a crash for Style/OpenStructUse with a bare OpenStruct root node. ([@​bbatsov][])
  • #15379: Fix a crash for Style/TrailingUnderscoreVariable when a nested destructuring group consists only of underscore variables. ([@​bbatsov][])
  • #15412: Fix a false negative for Security/MarshalLoad with a proc argument. ([@​bbatsov][])
  • #15386: Fix a false negative for Style/MethodDefParentheses with named rest arguments under EnforcedStyle: require_no_parentheses. ([@​bbatsov][])
  • #15396: Fix a false negative for Style/MultilineMethodSignature where a signature that fits on one line was skipped because the multi-line source length was measured instead of the collapsed width. ([@​bbatsov][])
  • #15386: Fix a false negative for Style/OptionalArguments with singleton methods. ([@​bbatsov][])
  • #15383: Fix a false negative for Style/RedundantFilterChain with numbered-parameter blocks. ([@​bbatsov][])
  • #15290: Fix a false negative for Lint/ToEnumArguments when a braced hash is passed to keyword parameters (e.g. to_enum(:m, { required: required })), which raises ArgumentError when the enumerator is used. ([@​RedZapdos123][])
  • #11956: Fix a false positive for Naming/FileName when a class or module name contains multiple consecutive AllowedAcronyms. ([@​camallen][])
  • #15324: Fix a false positive for Style/DirEmpty with a block. ([@​bbatsov][])
  • #15326: Fix a false positive for Style/EmptyLiteral with numbered and it block parameters. ([@​bbatsov][])
  • #15335: Fix a false positive for Style/EnvHome. ([@​bbatsov][])
  • #15345: Fix a false positive for Style/InlineComment with rubocop:todo directives. ([@​bbatsov][])
  • #15348: Fix a false positive for Style/MultilineIfThen. ([@​bbatsov][])
  • #15383: Fix a false positive for Style/NumericPredicate when an allowed method encloses a numbered-parameter or it block. ([@​bbatsov][])
  • #15389: Fix a false positive for Style/OptionHash when the options hash is forwarded with an explicit super. ([@​bbatsov][])
  • #15350: Fix a false positive for Style/RedundantFormat with a lone format sequence. ([@​bbatsov][])
  • #15374: Fix a false positive for Style/RedundantSelf with a rescue exception variable. ([@​bbatsov][])
  • #15376: Fix a false positive for Style/Semicolon with a semicolon inside a string literal. ([@​bbatsov][])
  • #15398: Fix an incorrect autocorrect for Layout/ConditionPosition that dropped a body statement sharing the condition's line via a semicolon. ([@​bbatsov][])
  • #15399: Fix an incorrect autocorrect for Layout/EmptyComment that deleted a heredoc when removing an empty comment trailing its opener. ([@​bbatsov][])
  • #15400: Fix an incorrect autocorrect for Layout/EmptyLineBetweenDefs that inserted a blank line inside a heredoc body when an endless method's body was a heredoc. ([@​bbatsov][])
  • #15401: Fix an incorrect autocorrect for Layout/SpaceAroundOperators that turned **= and /= compound assignments into **//, dropping the assignment. ([@​bbatsov][])
  • #15406: Fix an incorrect autocorrect for Naming/MemoizedInstanceVariableName. ([@​bbatsov][])
  • #15411: Fix an incorrect autocorrect for Naming/RescuedExceptionsVariableName. ([@​bbatsov][])
  • #15319: Fix an incorrect autocorrect for Style/DataInheritance with a brace block. ([@​bbatsov][])
  • #15323: Fix an incorrect autocorrect for Style/EmptyCaseCondition as a yield/super argument. ([@​bbatsov][])
  • #15323: Fix an incorrect autocorrect for Style/EmptyCaseCondition with low-precedence when values. ([@​bbatsov][])
  • #15322: Fix an incorrect autocorrect for Style/EmptyClassDefinition with a namespaced constant. ([@​bbatsov][])
  • #15336: Fix an incorrect autocorrect for Style/EmptyHeredoc. ([@​bbatsov][])
  • #15332: Fix an incorrect autocorrect for Style/EvenOdd. ([@​bbatsov][])
  • #15329: Fix an incorrect autocorrect for Style/ExactRegexpMatch with a single quote. ([@​bbatsov][])
  • #15333: Fix an incorrect autocorrect for Style/FileNull. ([@​bbatsov][])
  • #15334: Fix an incorrect autocorrect for Style/For. ([@​bbatsov][])
  • #15331: Fix an incorrect autocorrect for Style/FormatString with a low-precedence argument. ([@​bbatsov][])
  • #15331: Fix an incorrect autocorrect for Style/FormatString with a splat argument. ([@​bbatsov][])
  • #15337: Fix an incorrect autocorrect for Style/HashSlice. ([@​bbatsov][])
  • #15327: Fix an incorrect autocorrect for Style/HashSyntax with a multi-pair braceless return. ([@​bbatsov][])
  • #15368: Fix an incorrect autocorrect for Style/IfWithSemicolon that changed semantics when the condition was an assignment, by parenthesizing it in the resulting ternary. ([@​bbatsov][])

... (truncated)

Commits
  • d35b321 Cut 1.88.1
  • b4cb565 Update Changelog
  • 3988056 Merge pull request #15352 from rubocop/fix-parallel-assignment-literal-escaping
  • 3abe081 Merge pull request #15365 from rubocop/fix-redundant-line-continuation-eof
  • f391d5a Merge pull request #15394 from rubocop/fix-nil-lambda-proc-return
  • 37b29a9 Merge pull request #15398 from rubocop/fix-condition-position-semicolon-body
  • 839d492 Merge pull request #15399 from rubocop/fix-empty-comment-heredoc
  • 2d191a4 Merge pull request #15412 from rubocop/fix-marshal-load-extra-args
  • 1767e56 Merge pull request #15406 from rubocop/fix-memoized-ivar-operator-method
  • c923d29 Merge pull request #15368 from rubocop/fix-if-with-semicolon-assignment
  • Additional commits viewable in compare view

Updates oauth2 from 2.0.22 to 2.0.24

Release notes

Sourced from oauth2's releases.

v2.0.24

2.0.24 - 2026-06-18

  • TAG: v2.0.24
  • COVERAGE: 100.00% -- 558/558 lines in 15 files
  • BRANCH COVERAGE: 97.89% -- 186/190 branches in 15 files
  • 88.35% documented

Changed

  • Raised the anonymous_loader runtime dependency floor to >= 0.1.1.
  • Raised the auth-sanitizer runtime dependency floor to >= 0.2.2 and switched isolated sanitizer loading to the released anonymous_loader gem, including local workspace wiring for the new runtime dependency.

Fixed

  • Fixed isolated auth-sanitizer loading when Bundler standalone setup makes auth_sanitizer/loader.rb available on $LOAD_PATH without adding auth-sanitizer to Gem.loaded_specs or GEM_PATH.

Official Discord 👉️ [![Live Chat on Discord][✉️discord-invite-img]][✉️discord-invite]

Many paths lead to being a sponsor or a backer of this project. Are you on such a path?

OpenCollective Backers OpenCollective Sponsors Sponsor Me on Github Liberapay Goal Progress Donate on PayPal

Buy me a coffee Donate on Polar Donate to my FLOSS efforts at ko-fi.com Donate to my FLOSS efforts using Patreon

... (truncated)

Changelog

Sourced from oauth2's changelog.

[2.0.24] - 2026-06-18

  • TAG: [v2.0.24][2.0.24t]
  • COVERAGE: 100.00% -- 558/558 lines in 15 files
  • BRANCH COVERAGE: 97.89% -- 186/190 branches in 15 files
  • 88.35% documented

Changed

  • Raised the anonymous_loader runtime dependency floor to >= 0.1.1.
  • Raised the auth-sanitizer runtime dependency floor to >= 0.2.2 and switched isolated sanitizer loading to the released anonymous_loader gem, including local workspace wiring for the new runtime dependency.

Fixed

  • Fixed isolated auth-sanitizer loading when Bundler standalone setup makes auth_sanitizer/loader.rb available on $LOAD_PATH without adding auth-sanitizer to Gem.loaded_specs or GEM_PATH.

[2.0.23] - 2026-06-13

  • TAG: [v2.0.23][2.0.23t]
  • COVERAGE: 100.00% -- 562/562 lines in 15 files
  • BRANCH COVERAGE: 97.89% -- 186/190 branches in 15 files
  • 88.35% documented

Changed

  • Upgraded to snaky_hash v2.0.6 by @​pboling
  • Refreshed generated GHA workflow action SHA pins by @​pboling

Fixed

  • Addressed Reek code-quality checks with targeted cleanup and documented compatibility exclusions by @​pboling
  • Fixed deprecation warning from MultiXML by @​robzolkos
  • Fixed head appraisal dependency conflicts and Ruby 2.4 protocol-relative redirect handling by @​pboling
Commits
  • 4f239dc 🧪 Fix head and old TruffleRuby CI appraisals
  • de0636f 📝 Prune internal changelog entries
  • 2f643a5 🧪 Isolate auth sanitizer subprocess environment
  • 21deed4 📝 Update CHANGELOG.md
  • 844f143 🧪 Disable RubyGems prelude in auth sanitizer load spec
  • 7064cc5 📝 Update CHANGELOG.md
  • e0858bd 🧪 Isolate auth sanitizer load path spec from Bundler
  • 7032b58 🔖 Prepare release v2.0.24
  • bf06b5f 🧩 Regenerate anonymous loader template output
  • f46551c ⬆️ Raise anonymous_loader floor to 0.1.1
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rubygems group with 2 updates: [rubocop](https://github.com/rubocop/rubocop) and [oauth2](https://github.com/ruby-oauth/oauth2).


Updates `rubocop` from 1.87.0 to 1.88.1
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.87.0...v1.88.1)

Updates `oauth2` from 2.0.22 to 2.0.24
- [Release notes](https://github.com/ruby-oauth/oauth2/releases)
- [Changelog](https://github.com/ruby-oauth/oauth2/blob/main/CHANGELOG.md)
- [Commits](ruby-oauth/oauth2@v2.0.22...v2.0.24)

---
updated-dependencies:
- dependency-name: rubocop
  dependency-version: 1.88.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: rubygems
- dependency-name: oauth2
  dependency-version: 2.0.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rubygems
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added review Please look at my code team-ow Operations & Workflow labels Aug 1, 2026
Copilot AI review requested due to automatic review settings August 1, 2026 05:43
@dependabot dependabot Bot added review Please look at my code team-ow Operations & Workflow labels Aug 1, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates Ruby development/tooling dependencies (notably RuboCop) and refreshes the lockfile to match the new resolved versions.

Changes:

  • Bump rubocop requirement in Gemfile from ~> 1.87 to ~> 1.88
  • Update Gemfile.lock with the newly resolved dependency set (including updated rubocop, rubocop-ast, oauth2, and transitive deps)

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
Gemfile Updates the RuboCop version constraint to ~> 1.88
Gemfile.lock Refreshes resolved gem versions/transitive dependencies to match the updated constraints

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

review Please look at my code team-ow Operations & Workflow

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant