Skip to content

build(deps): bump the bundler group across 1 directory with 10 updates #21282

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
MikeMcQuaid merged 4 commits into from
Dec 19, 2025
Merged

build(deps): bump the bundler group across 1 directory with 10 updates #21282

MikeMcQuaid merged 4 commits into from
Dec 19, 2025

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 19, 2025

Bumps the bundler group with 5 updates in the /Library/Homebrew directory:

Package From To
yard 0.9.37 0.9.38
minitest 5.26.2 5.27.0
json_schemer 2.4.0 2.5.0
sorbet-static-and-runtime 0.6.12815 0.6.12845
tapioca 0.17.9 0.17.10

Updates yard from 0.9.37 to 0.9.38

Release notes

Sourced from yard's releases.

Release v0.9.38

  • Add support for complex constant assignment (#1599)
  • Add support for Data type structs (#1600)
  • Support multi method duck type syntax in type explainer (#1631)
  • Improve Ruby 3.5 compatibility (#1616)
  • Update documentation for various type annotations (#1615)
  • JavaScript frontend updates (resizer, JS bugs, reduce console verbosity) for default template
  • Fix beginless/endless range errors (#1549, #1625)
  • Fix path structure in Templates.md documentation (#1588)
  • Fix signature handling in overload (#1590)
  • Fix handling of **nil with named block (#1623)
  • Fix directives in empty class bodies (#1624)
  • Fix parsing of array within array syntax (#1604)
  • Fix parsing of visibility keywords in front of class methods (#1632)
Changelog

Sourced from yard's changelog.

0.9.38 - December 5th, 2025

  • Add support for complex constant assignment (#1599)
  • Add support for Data type structs (#1600)
  • Support multi method duck type syntax in type explainer (#1631)
  • Improve Ruby 3.5 compatibility (#1616)
  • Update documentation for various type annotations (#1615)
  • JavaScript frontend updates (resizer, JS bugs, reduce console verbosity) for default template
  • Fix beginless/endless range errors (#1549, #1625)
  • Fix path structure in Templates.md documentation (#1588)
  • Fix signature handling in overload (#1590)
  • Fix handling of **nil with named block (#1623)
  • Fix directives in empty class bodies (#1624)
  • Fix parsing of array within array syntax (#1604)
  • Fix parsing of visibility keywords in front of class methods (#1632)
Commits
  • 34796c5 Update version / changelog
  • e946455 Add support for duck types with multiple methods to TypesExplainer (#1631)
  • 2aedf50 Respect Ruby semantics for bare visibility with singleton defs (#1632)
  • c29c0cd Fix directives in empty class bodies (#1624)
  • d4c6174 Handle **nil with named block without errors (#1623)
  • 1a4f63d Fix unexpected empty source map stacks (#1625)
  • c92f02a Fix frozen string literal mutation
  • 63e7995 Respect Ruby semantics for bare visibility with singleton defs
  • 3987200 Support duck types with multiple methods
  • c6b0b16 Fix unexpected empty source map stacks
  • Additional commits viewable in compare view

Updates minitest from 5.26.2 to 5.27.0

Changelog

Sourced from minitest's changelog.

=== 5.27.0 / 2025-12-11

  • 1 major enhancement:

    • Adding post install message announcing the EOL for minitest 5!

  • 2 minor enhancements:

    • Removed TestTask::Work#initialize since Queue can now initialize with an Enumerable! AMAZING!
    • Use Kernel#warn uplevel argument for nicer warnings. (byroot)

  • 5 bug fixes:

    • Cleaned up option aliasing a tad.
    • Removed obsolete conditional for prerecord
    • Removed obsolete guards around Warning.
    • Removed obsolete version guards for pattern matching assertions.
    • Switched all internal requires to require_relative.
Commits
  • 819e9b5 Branching minitest to version 5.27.0
  • e9a9fc3 ! Adding post install message announcing the EOL for minitest 5.
  • 4525c88 REVERTED: Removed obsolete conditional for prerecord. For now... Wait for MT6.
  • 6b3fb6c - Removed obsolete guards around Warning.
  • 72b90c3 - Removed obsolete version guards for pattern matching assertions.
  • a8143f2 - Removed obsolete conditional for prerecord
  • f6fffa1 + Use Kernel#warn uplevel argument for nicer warnings. (byroot)
  • a0e9289 Fixed reporter test shape variation warning. (havenwood)
  • 15394fc + Removed TestTask::Work#initialize since Queue can now initialize with an En...
  • 8a4d7ee - Switched all internal requires to require_relative.
  • Additional commits viewable in compare view

Updates json_schemer from 2.4.0 to 2.5.0

Changelog

Sourced from json_schemer's changelog.

2.5.0 - 2025-12-08

Bug Fixes

Features

Commits
  • 7f1b816 Merge pull request #226 from davishmcclurg/2.5.0
  • 847b2d3 2.5.0
  • 70af1d4 Update fixtures for json-schema-test-suite pull
  • ef7e9fb Support all RFC 3490 label separators
  • 3e0157f Limit full hostname size
  • 88a8771 Disallow trailing dot in hostname format
  • 572d413 Update hostname character classes
  • 0aa5b7c Temporarily(?) add openssl as dev dependency
  • a86a975 Merge commit 'fcba99761dcab691a56fc4bba1e23a72df9f7c82'
  • fcba997 Squashed 'JSON-Schema-Test-Suite/' changes from 48461fc3..d69537ac
  • Additional commits viewable in compare view

Updates sorbet-static-and-runtime from 0.6.12815 to 0.6.12845

Release notes

Sourced from sorbet-static-and-runtime's releases.

sorbet 0.6.12844.20251211165921-6f1095091

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12844', :group => :development
gem 'sorbet-runtime', '0.6.12844'

sorbet 0.6.12843.20251211151720-b7a517c80

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12843', :group => :development
gem 'sorbet-runtime', '0.6.12843'

sorbet 0.6.12842.20251211150809-c00a614d9

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12842', :group => :development
gem 'sorbet-runtime', '0.6.12842'

sorbet 0.6.12838.20251210171322-3c55af646

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12838', :group => :development
gem 'sorbet-runtime', '0.6.12838'

sorbet 0.6.12837.20251210160434-36e0a7097

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12837', :group => :development
gem 'sorbet-runtime', '0.6.12837'

sorbet 0.6.12836.20251210153612-171707271

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12836', :group => :development
gem 'sorbet-runtime', '0.6.12836'

sorbet 0.6.12835.20251210151200-0319404a5

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12835', :group => :development
gem 'sorbet-runtime', '0.6.12835'

sorbet 0.6.12834.20251210144948-a5c1796e0

... (truncated)

Commits

Updates tapioca from 0.17.9 to 0.17.10

Release notes

Sourced from tapioca's releases.

v0.17.10

What's Changed

🐛 Bug Fixes

🛠 Other Changes

New Contributors

Full Changelog: Shopify/tapioca@v0.17.9...v0.17.10

Commits
  • 0e35b26 Bump version to 0.17.10
  • 841044d Merge pull request #2446 from Shopify/stop-generating-rbi-for-insert-methods
  • 2bd8e5a Stop generating RBI for insert/upsert related methods
  • 1d0e62c Merge pull request #2440 from Shopify/dependabot/bundler/minor-and-patch-6873...
  • d11443d Update gem rbis for connection_pool and sidekiq
  • f88f645 Bump the minor-and-patch group with 2 updates
  • cbf46a3 Merge pull request #2428 from Shopify/dependabot/github_actions/ruby/setup-ru...
  • bafc911 Merge pull request #2438 from Shopify/Alex/drop-T-prefix-in-RBS
  • 6b4fa23 Drop T:: prefixes from RBS comments
  • fcabf6b Bump ruby/setup-ruby from 1.267.0 to 1.268.0
  • Additional commits viewable in compare view

Updates sorbet-runtime from 0.6.12815 to 0.6.12845

Release notes

Sourced from sorbet-runtime's releases.

sorbet 0.6.12844.20251211165921-6f1095091

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12844', :group => :development
gem 'sorbet-runtime', '0.6.12844'

sorbet 0.6.12843.20251211151720-b7a517c80

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12843', :group => :development
gem 'sorbet-runtime', '0.6.12843'

sorbet 0.6.12842.20251211150809-c00a614d9

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12842', :group => :development
gem 'sorbet-runtime', '0.6.12842'

sorbet 0.6.12838.20251210171322-3c55af646

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12838', :group => :development
gem 'sorbet-runtime', '0.6.12838'

sorbet 0.6.12837.20251210160434-36e0a7097

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12837', :group => :development
gem 'sorbet-runtime', '0.6.12837'

sorbet 0.6.12836.20251210153612-171707271

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12836', :group => :development
gem 'sorbet-runtime', '0.6.12836'

sorbet 0.6.12835.20251210151200-0319404a5

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12835', :group => :development
gem 'sorbet-runtime', '0.6.12835'

sorbet 0.6.12834.20251210144948-a5c1796e0

... (truncated)

Commits

Updates bigdecimal from 3.3.1 to 4.0.1

Release notes

Sourced from bigdecimal's releases.

v4.0.1

What's Changed

Full Changelog: ruby/bigdecimal@v4.0.0...v4.0.1

v4.0.0

What's Changed

New Contributors

Full Changelog: ruby/bigdecimal@v3.3.1...v4.0.0

Changelog

Sourced from bigdecimal's changelog.

4.0.1

4.0.0

Commits
  • 6d01c36 Bump version to v4.0.1 (#477)
  • 4914cc3 Remove "Which version should you select" section (#476)
  • 4120325 Remove unused variable (and add test for it) (#475)
  • f0bf63f Merge pull request #474 from ruby/exclude-dependabot-update
  • d93ef2b Exclude dependabot updates from release note
  • d9914c9 Bump version to v4.0.0 (#472)
  • 45d203a Deprecate ludcmp, jacobian and newton (#471)
  • 8146336 Remove deprecated method BigDecimal#precs (#470)
  • b7e93bf Better rounding of BigMath.atan(nearly_one, prec) (#469)
  • cef76eb Merge pull request #468 from ruby/dependabot/github_actions/step-security/har...
  • Additional commits viewable in compare view

Updates prism from 1.6.0 to 1.7.0

Release notes

Sourced from prism's releases.

v1.7.0

Added

  • Support 4.1 as a version option.
  • Add equal_loc to CallNode.
  • Add len()/is_empty() to ConstantList and NodeList in the Rust API.

Changed

  • Rename version 3.5 to version 4.0.
  • Fix compiling the gem from source on Windows.
  • Fix parsing of unary method calls like 42.~@.
  • Reject def f a, (b) = 1.
  • Reject endless method as a block parameter default.
  • Reject variable capture in alternative pattern.
  • Many fixes in regards to memory safety, found through fuzzing.
  • Many fixes to better handle invalid syntax, also found through fuzzing.
  • Fix the ruby version used by the ripper translator.
  • Fix ruby_parser translation comment processing.
Changelog

Sourced from prism's changelog.

[1.7.0] - 2025-12-18

Added

  • Support 4.1 as a version option.
  • Add equal_loc to CallNode.
  • Add len()/is_empty() to ConstantList and NodeList in the Rust API.

Changed

  • Rename version 3.5 to version 4.0.
  • Fix compiling the gem from source on Windows.
  • Fix parsing of unary method calls like 42.~@.
  • Reject def f a, (b) = 1.
  • Reject endless method as a block parameter default.
  • Reject variable capture in alternative pattern.
  • Many fixes in regards to memory safety, found through fuzzing.
  • Many fixes to better handle invalid syntax, also found through fuzzing.
  • Fix the ruby version used by the ripper translator.
  • Fix ruby_parser translation comment processing.
Commits
  • df55403 Merge pull request #3819 from ruby/bump-version
  • 21c499d Bump to v1.7.0
  • 0fa754e Merge pull request #3743 from Earlopain/bare-hash-command-call-v2
  • 48b403e Reject p(p a, &block => value) and similar
  • 61e45d5 Merge pull request #3817 from Earlopain/target-4.1
  • 849f726 Merge pull request #3813 from ruby/dependabot/maven/java-wasm/java-deps-6679a...
  • 095115f Merge pull request #3814 from ruby/dependabot/github_actions/action-deps-35b2...
  • 3b0b771 Merge pull request #3815 from ruby/dependabot/bundler/gemfiles/2.7/ruby-deps-...
  • 66e99e0 Merge pull request #3816 from eregon/fix-location_test
  • 138db9c Add Ruby 4.1 as a version specifier
  • Additional commits viewable in compare view

Updates sorbet from 0.6.12815 to 0.6.12845

Release notes

Sourced from sorbet's releases.

sorbet 0.6.12844.20251211165921-6f1095091

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12844', :group => :development
gem 'sorbet-runtime', '0.6.12844'

sorbet 0.6.12843.20251211151720-b7a517c80

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12843', :group => :development
gem 'sorbet-runtime', '0.6.12843'

sorbet 0.6.12842.20251211150809-c00a614d9

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12842', :group => :development
gem 'sorbet-runtime', '0.6.12842'

sorbet 0.6.12838.20251210171322-3c55af646

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12838', :group => :development
gem 'sorbet-runtime', '0.6.12838'

sorbet 0.6.12837.20251210160434-36e0a7097

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12837', :group => :development
gem 'sorbet-runtime', '0.6.12837'

sorbet 0.6.12836.20251210153612-171707271

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12836', :group => :development
gem 'sorbet-runtime', '0.6.12836'

sorbet 0.6.12835.20251210151200-0319404a5

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12835', :group => :development
gem 'sorbet-runtime', '0.6.12835'

sorbet 0.6.12834.20251210144948-a5c1796e0

... (truncated)

Commits

Updates sorbet-static from 0.6.12815 to 0.6.12845

Release notes

Sourced from sorbet-static's releases.

sorbet 0.6.12844.20251211165921-6f1095091

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12844', :group => :development
gem 'sorbet-runtime', '0.6.12844'

sorbet 0.6.12843.20251211151720-b7a517c80

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12843', :group => :development
gem 'sorbet-runtime', '0.6.12843'

sorbet 0.6.12842.20251211150809-c00a614d9

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12842', :group => :development
gem 'sorbet-runtime', '0.6.12842'

sorbet 0.6.12838.20251210171322-3c55af646

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12838', :group => :development
gem 'sorbet-runtime', '0.6.12838'

sorbet 0.6.12837.20251210160434-36e0a7097

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12837', :group => :development
gem 'sorbet-runtime', '0.6.12837'

sorbet 0.6.12836.20251210153612-171707271

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12836', :group => :development
gem 'sorbet-runtime', '0.6.12836'

sorbet 0.6.12835.20251210151200-0319404a5

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12835', :group => :development
gem 'sorbet-runtime', '0.6.12835'

sorbet 0.6.12834.20251210144948-a5c1796e0

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the bundler group across 1 directory with 10 updates
fee3ac2 
Bumps the bundler group with 5 updates in the /Library/Homebrew directory:

| Package | From | To |
| --- | --- | --- |
| [yard](https://github.com/lsegal/yard) | `0.9.37` | `0.9.38` |
| [minitest](https://github.com/minitest/minitest) | `5.26.2` | `5.27.0` |
| [json_schemer](https://github.com/davishmcclurg/json_schemer) | `2.4.0` | `2.5.0` |
| [sorbet-static-and-runtime](https://github.com/sorbet/sorbet) | `0.6.12815` | `0.6.12845` |
| [tapioca](https://github.com/Shopify/tapioca) | `0.17.9` | `0.17.10` |



Updates `yard` from 0.9.37 to 0.9.38
- [Release notes](https://github.com/lsegal/yard/releases)
- [Changelog](https://github.com/lsegal/yard/blob/main/CHANGELOG.md)
- [Commits](lsegal/yard@v0.9.37...v0.9.38)

Updates `minitest` from 5.26.2 to 5.27.0
- [Changelog](https://github.com/minitest/minitest/blob/master/History.rdoc)
- [Commits](minitest/minitest@v5.26.2...v5.27.0)

Updates `json_schemer` from 2.4.0 to 2.5.0
- [Changelog](https://github.com/davishmcclurg/json_schemer/blob/main/CHANGELOG.md)
- [Commits](davishmcclurg/json_schemer@v2.4.0...v2.5.0)

Updates `sorbet-static-and-runtime` from 0.6.12815 to 0.6.12845
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `tapioca` from 0.17.9 to 0.17.10
- [Release notes](https://github.com/Shopify/tapioca/releases)
- [Commits](Shopify/tapioca@v0.17.9...v0.17.10)

Updates `sorbet-runtime` from 0.6.12815 to 0.6.12845
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `bigdecimal` from 3.3.1 to 4.0.1
- [Release notes](https://github.com/ruby/bigdecimal/releases)
- [Changelog](https://github.com/ruby/bigdecimal/blob/master/CHANGES.md)
- [Commits](ruby/bigdecimal@v3.3.1...v4.0.1)

Updates `prism` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/ruby/prism/releases)
- [Changelog](https://github.com/ruby/prism/blob/main/CHANGELOG.md)
- [Commits](ruby/prism@v1.6.0...v1.7.0)

Updates `sorbet` from 0.6.12815 to 0.6.12845
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `sorbet-static` from 0.6.12815 to 0.6.12845
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

---
updated-dependencies:
- dependency-name: yard
  dependency-version: 0.9.38
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: minitest
  dependency-version: 5.27.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: json_schemer
  dependency-version: 2.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: sorbet-static-and-runtime
  dependency-version: 0.6.12845
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: tapioca
  dependency-version: 0.17.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: sorbet-runtime
  dependency-version: 0.6.12845
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: bigdecimal
  dependency-version: 4.0.1
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: bundler
- dependency-name: prism
  dependency-version: 1.7.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: sorbet
  dependency-version: 0.6.12845
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: sorbet-static
  dependency-version: 0.6.12845
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Bumping Gemfile dependencies ruby Pull requests that update Ruby code labels Dec 19, 2025
@p-linnane
prism: fix Sorbet error for Parser35 alias
2991586 
Signed-off-by: Patrick Linnane <patrick@linnane.io>
@MikeMcQuaid MikeMcQuaid added this pull request to the merge queue Dec 19, 2025
Merged via the queue into main with commit b64029d Dec 19, 2025
39 checks passed
@MikeMcQuaid MikeMcQuaid deleted the dependabot/bundler/Library/Homebrew/bundler-bb4f7fe41f branch December 19, 2025 17:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@MikeMcQuaid MikeMcQuaid MikeMcQuaid approved these changes

Assignees

No one assigned

Labels

dependencies Bumping Gemfile dependencies ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@MikeMcQuaid @BrewTestBot @p-linnane