Bump the "all" group with 1 updates across multiple ecosystems by dependabot[bot] · Pull Request #918 · licensee/licensed

dependabot · 2025-11-24T08:59:10Z

Bumps the all group with 6 updates:

Package	From	To
json	`2.15.2`	`2.16.0`
minitest	`5.26.1`	`5.26.2`
mocha	`2.7.1`	`2.8.2`
net-http	`0.7.0`	`0.8.0`
rubocop-ast	`1.47.1`	`1.48.0`
rubocop-rails	`2.33.4`	`2.34.1`

Updates json from 2.15.2 to 2.16.0

Release notes

Sourced from json's releases.

v2.16.0

What's Changed

Deprecate JSON::State#[] and JSON::State#[]=. Consider using JSON::Coder instead.

JSON::Coder now also yields to the block when encountering strings with invalid encoding.

Fix GeneratorError messages to be UTF-8 encoded.

Fix memory leak when Exception is raised, or throw is used during JSON generation.

Optimized floating point number parsing by integrating the ryu algorithm (thanks to Josef Šimánek).

Optimized numbers parsing using SWAR (thanks to Scott Myron).

Optimized parsing of pretty printed documents using SWAR (thanks to Scott Myron).

Full Changelog: ruby/json@v2.15.2...v2.16.0

Changelog

Sourced from json's changelog.

2025-11-07 (2.16.0)

Deprecate JSON::State#[] and JSON::State#[]=. Consider using JSON::Coder instead.

JSON::Coder now also yields to the block when encountering strings with invalid encoding.

Fix GeneratorError messages to be UTF-8 encoded.

Fix memory leak when Exception is raised, or throw is used during JSON generation.

Optimized floating point number parsing by integrating the ryu algorithm (thanks to Josef Šimánek).

Optimized numbers parsing using SWAR (thanks to Scott Myron).

Optimized parsing of pretty printed documents using SWAR (thanks to Scott Myron).

Commits

5a12067 Release 2.16.0
e9fbc89 Deprecate JSON::State#[] and JSON::State#[]=
826cb2a Get rid of JSON.deep_const_get (private API)
fce1c7e Tentative fix for RHEL8 compiler
a67d1a1 Micro-optimize rstring_cache_fetch
ddad00b Extract JSON_CPU_LITTLE_ENDIAN_64BITS definition
3bc1787 ext/json/ext/json.h: Add missing newline at end of file
5915103 Fix duplicate 'inline' declaration specifier
043880f parser.c: Always inline json_eat_whitespace
21284ea parser.c: use rb_str_to_interned_str over rb_funcall
Additional commits viewable in compare view

Updates minitest from 5.26.1 to 5.26.2

Changelog

Sourced from minitest's changelog.

=== 5.26.2 / 2025-11-17

5 bug fixes:

Bumped minimum ruby to 3.1.

Alias Spec#name to #inspect for cleaner output in repls.

Fix pathing for Hoe::Minitest initialization to be more generic.

Fixed refute_in_epsilon to use min of abs values. (wtn)

Improved options processing and usage output to be more clear.

Commits

25f78c0 prepped for release
1284a3f Dropped extra 2.7 compatibility code.
adfb01d Dropped extra 2.7 compatibility code.
aa1c3fa - Fix pathing for Hoe::Minitest initialization to be more generic.
cb3a345 - Bumped minimum ruby to 3.1.
1f47bc6 - Fixed refute_in_epsilon to use min of abs values. (wtn)
a52e727 Fuuuuck I am SO tired of ruby 2.7!
33259e4 - Alias Spec#name to #inspect for cleaner output in repls.
e2bc84c - Improved options processing and usage output to be more clear.
See full diff in compare view

Updates mocha from 2.7.1 to 2.8.2

Changelog

Sourced from mocha's changelog.

Release Notes

3.0.0-rc.2

External changes

Fix compatibility with Ruby 3.5 (#755) - thanks to @Earlopain

Add missing quotes to docs for Mocha::ParameterMatchers::Methods#equivalent_uri (#757) - thanks to @bensherman

Increment assertion count on never expected invocation (#763 & #764)

Remove deprecated ParameterMatchers::Base class; include ParameterMatchers::BaseMethods module instead (415ae768)

Remove deprecated ParameterMatcher methods now available in ParameterMatcher::Methods (8de49979)

Removed deprecated access to ParameterMatcher classes (6ea9e3f5)

Internal changes

Remove workaround for JRuby jar-dependencies issue (#737)

Add benchmark to Gemfile to fix warning (#733 & #740) - thanks to @nitishr

Add documentation coverage check (#707, #743 & #745) - thanks to @nitishr

Fix Lint/LiteralAsCondition violation (#746) - thanks to @nitishr

Fix rdoc-related warning when running doc rake task (#741 & #747)

Fail fast in CI builds on any Ruby warnings (#729 & #741) - thanks to @nitishr

Add ObjectMethods#stubba_respond_to? and use instead of Object#respond_to? (#713, #742 & #750) - thanks to @nitishr

Rename #stubbee -> #stubba_object and #mock_owner -> #stubbee (#463 & #751) - thanks to @nitishr

Fix enable-frozen-string-literal in CI build (#752) - thanks to @nitishr

Various rubocop fixed (#754 & #756)

Fix Layout/EmptyLinesAfterModuleInclusion violations (3f683220)

Auto-correct Style/RedundantParentheses violations (0277a592)

Automatically retry failed CI builds (9bbdbc66)

3.0.0-rc.1

External changes

Improvements to docs for cardinality-related methods (#700)

Drop support for Ruby v2.1 (#628 & #695)

Improve gemspec description (#692 & #696)

Remove docs for use_test_unit_gem option (eaf03493)

Correct docs for MOCHA_OPTIONS "debug" value (69ef41c0)

Use built-in Ruby debug option vs custom module (#714 & #715)

Enable strict keyword argument matching by default in Ruby >= v3 (#697 & #718)

Use Ruby v1.9 Hash syntax in Hash#mocha_inspect used in failure messages (#651 & #719)

Improve #mocha_inspect for empty keyword argument Hash (#588 & #720) - thanks to @herwinw for reporting

Improve error if Mockery.teardown called before Mockery.setup (#611, #646 & #721) - thanks to @riniculous for reporting

Freeze string literals (#722)

Remove support for running tests with Minitest < v5 (#727)

Allow keyword arguments to match an expectation expecting only positional arguments (#593 & #732) - thanks to @seandilda for reporting

Internal changes

... (truncated)

Commits

3b3e41b [skip ci] Update documentation for v2.8.2
d40a1ee Bump version to 2.8.2 & prepare for release
c517148 Improve matcher class deprecation warning location
df40c51 [skip ci] Update documentation for v2.8.1
30f82ba Bump version to 2.8.1 & prepare for release
8a89856 Restore unqualified access to ParameterMatchers::BaseMethods
5231a4f Restore unqualified access to matcher classes
f21a927 [skip ci] Update documentation for v2.8.0
66a88e8 Bump version to 2.8.0 & prepare for release
ba21a7a Extract ParameterMatchers::Methods & add deprecations
Additional commits viewable in compare view

Updates net-http from 0.7.0 to 0.8.0

Release notes

Sourced from net-http's releases.

v0.8.0

Breaking changes

Minimum Ruby version raised to 2.7 along with the raise of minimum uri gem version (0.11.1)

What's Changed

[DOC] Fix too stopped documentations by @nobu in ruby/net-http#244

Replace Timeout.timeout with TCPSocket.open(open_timeout:) when available by @osyoyu in ruby/net-http#224

Replace Ruby 3.5 with Ruby 4.0 by @yahonda in ruby/net-http#246

Fix handling of IPv6 literal hosts in Net::HTTPGenericRequest by @taketo1113 in ruby/net-http#237

This fixes compatibility issue with uri gem 1.1.0+, which made relevant validations strict.

New Contributors

@yahonda made their first contribution in ruby/net-http#246

@taketo1113 made their first contribution in ruby/net-http#237

Full Changelog: ruby/net-http@v0.7.0...v0.8.0

Commits

9d65391 releng v0.8.0
4ca74fd Merge pull request #237 from taketo1113/fix-ipv6-uri
a3a5bc4 Drop support for Ruby 2.6
3d4f06b Fix handling of IPv6 literal hosts in Net::HTTPGenericRequest
6ff130b Merge pull request #246 from yahonda/replace-ruby35-with-ruby40
1e48cfa Replace Ruby 3.5 with Ruby 4.0
b7f5c85 Merge pull request #245 from ruby/dependabot/github_actions/step-security/har...
312a8de Bump step-security/harden-runner from 2.13.1 to 2.13.2
b7c5869 [DOC] Suppress documentation for internals
1903ced Merge pull request #224 from osyoyu/tcpsocket-open-timeout
Additional commits viewable in compare view

Updates rubocop-ast from 1.47.1 to 1.48.0

Release notes

Sourced from rubocop-ast's releases.

RuboCop AST v1.48.0

New features

#391: Support Ruby 4.0 (experimental). (@koic)

Changelog

Sourced from rubocop-ast's changelog.

1.48.0 (2025-11-08)

New features

#391: Support Ruby 4.0 (experimental). ([@koic][])

Commits

217ad92 Cut 1.48.0
d227b98 Update Changelog
d8da066 Support Ruby 4.0 (#391)
88ad2ae Remove bundler gem from Gemfile (#390)
df014ef Restore docs/antora.yml
See full diff in compare view

Updates rubocop-rails from 2.33.4 to 2.34.1

Release notes

Sourced from rubocop-rails's releases.

RuboCop Rails v2.34.1

Bug fixes

#1556: Fix an error for Rails/Env when assigning Rails.env. (@koic)

#1557: Fix false positives for Rails/Presence with comparison and assignment operators. (@davidenglishmusic)

#1558: This PR fixes incorrect autocorrect for Rails/RedirectBackOrTo when additional options as double splat are used. (@koic)

#1561: Fix incorrect autocorrect for Rails/RedirectBackOrTo when fallback_location argument is a hash and the call has no argument parentheses. (@koic)

RuboCop Rails v2.34.0

New features

#1520: New Rails/HttpStatusNameConsistency cop. (@tuxagon)

#1376: Add new Rails/Env cop. (@cdudas17)

#1541: Add new Rails/RedirectBackOrTo cop to suggest using redirect_back_or_to instead of redirect_back with fallback_location. (@davidenglishmusic)

Bug fixes

#1539: Fix an error in Rails/ActionControllerFlashBeforeRender when flash is used inside a block followed by method chaining. (@koic)

#1553: Fix false positives for Rails/OutputSafety when using non-interpolated multiline heredoc. (@koic)

#1532: Fix false positives for Rails/FindByOrAssignmentMemoization when assigning a memoization instance variable at initialize method. (@koic)

#1549: Fix Rails/InverseOf cop false positives when using dynamic association options. (@viralpraxis)

Changes

#1537: Add abort to the Rails/Exit cop. (@adamstegman)

#932: Add support for chained method calls in Rails/Presence. (@vlad-pisanov)

#1525: Change Rails::HelperInstanceVariable not to detect offenses for instance variables within classes. (@viralpraxis)

#1481: Recognize Rails.env.to_sym in Rails/EnvironmentComparison. (@lovro-bikic)

Changelog

Sourced from rubocop-rails's changelog.

2.34.1 (2025-11-24)

Bug fixes

#1556: Fix an error for Rails/Env when assigning Rails.env. ([@koic][])

#1557: Fix false positives for Rails/Presence with comparison and assignment operators. ([@davidenglishmusic][])

#1558: This PR fixes incorrect autocorrect for Rails/RedirectBackOrTo when additional options as double splat are used. ([@koic][])

#1561: Fix incorrect autocorrect for Rails/RedirectBackOrTo when fallback_location argument is a hash and the call has no argument parentheses. ([@koic][])

2.34.0 (2025-11-16)

New features

#1520: New Rails/HttpStatusNameConsistency cop. ([@tuxagon][])

#1376: Add new Rails/Env cop. ([@cdudas17][])

#1541: Add new Rails/RedirectBackOrTo cop to suggest using redirect_back_or_to instead of redirect_back with fallback_location. ([@davidenglishmusic][])

Bug fixes

#1539: Fix an error in Rails/ActionControllerFlashBeforeRender when flash is used inside a block followed by method chaining. ([@koic][])

#1553: Fix false positives for Rails/OutputSafety when using non-interpolated multiline heredoc. ([@koic][])

#1532: Fix false positives for Rails/FindByOrAssignmentMemoization when assigning a memoization instance variable at initialize method. ([@koic][])

#1549: Fix Rails/InverseOf cop false positives when using dynamic association options. ([@viralpraxis][])

Changes

#1537: Add abort to the Rails/Exit cop. ([@adamstegman][])

#932: Add support for chained method calls in Rails/Presence. ([@vlad-pisanov][])

#1525: Change Rails::HelperInstanceVariable not to detect offenses for instance variables within classes. ([@viralpraxis][])

#1481: Recognize Rails.env.to_sym in Rails/EnvironmentComparison. ([@lovro-bikic][])

Commits

f7d588c Cut 2.34.1
91780db Update Changelog
cf897f3 Merge pull request #1562 from koic/fix_incorrect_autocorrect_for_rails_redire...
e9daa98 Merge pull request #1560 from davidenglishmusic/presence-cop-comparison-assig...
768096c [Fix #1561] Fix incorrect autocorrect for Rails/RedirectBackOrTo
b50f629 Merge pull request #1559 from koic/fix_incorrect_autocorrect_for_rails_redire...
391f7a4 [Fix #1557] Fix false positives for Rails/Presence with comparison and assign...
a78a026 [Fix #1558] Fix incorrect autocorrect for Rails/RedirectBackOrTo
0f0be1c Merge pull request #1556 from koic/fix_an_error_for_rails_env
7702dbf Fix an error for Rails/Env
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 6 updates: | Package | From | To | | --- | --- | --- | | [json](https://github.com/ruby/json) | `2.15.2` | `2.16.0` | | [minitest](https://github.com/minitest/minitest) | `5.26.1` | `5.26.2` | | [mocha](https://github.com/freerange/mocha) | `2.7.1` | `2.8.2` | | [net-http](https://github.com/ruby/net-http) | `0.7.0` | `0.8.0` | | [rubocop-ast](https://github.com/rubocop/rubocop-ast) | `1.47.1` | `1.48.0` | | [rubocop-rails](https://github.com/rubocop/rubocop-rails) | `2.33.4` | `2.34.1` | Updates `json` from 2.15.2 to 2.16.0 - [Release notes](https://github.com/ruby/json/releases) - [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md) - [Commits](ruby/json@v2.15.2...v2.16.0) Updates `minitest` from 5.26.1 to 5.26.2 - [Changelog](https://github.com/minitest/minitest/blob/master/History.rdoc) - [Commits](minitest/minitest@v5.26.1...v5.26.2) Updates `mocha` from 2.7.1 to 2.8.2 - [Changelog](https://github.com/freerange/mocha/blob/main/RELEASE.md) - [Commits](freerange/mocha@v2.7.1...v2.8.2) Updates `net-http` from 0.7.0 to 0.8.0 - [Release notes](https://github.com/ruby/net-http/releases) - [Commits](ruby/net-http@v0.7.0...v0.8.0) Updates `rubocop-ast` from 1.47.1 to 1.48.0 - [Release notes](https://github.com/rubocop/rubocop-ast/releases) - [Changelog](https://github.com/rubocop/rubocop-ast/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop-ast@v1.47.1...v1.48.0) Updates `rubocop-rails` from 2.33.4 to 2.34.1 - [Release notes](https://github.com/rubocop/rubocop-rails/releases) - [Changelog](https://github.com/rubocop/rubocop-rails/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop-rails@v2.33.4...v2.34.1) --- updated-dependencies: - dependency-name: json dependency-version: 2.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: minitest dependency-version: 5.26.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: mocha dependency-version: 2.8.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: net-http dependency-version: 0.8.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all - dependency-name: rubocop-ast dependency-version: 1.48.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all - dependency-name: rubocop-rails dependency-version: 2.34.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>

Generated by https://github.com/licensee/licensed/blob/main/.github/workflows/licensed.yml

github-actions · 2025-11-24T09:00:57Z

The licensed-ci GitHub Action has created a pull request containing license metadata updates based on the changes in this branch.

Please review the pull request for any additional changes required and merge when ready.

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Nov 24, 2025

Auto-update license files for PR #918

3860120

Generated by https://github.com/licensee/licensed/blob/main/.github/workflows/licensed.yml

github-actions Bot mentioned this pull request Nov 24, 2025

License updates for dependabot/all-7c44cef7ca #919

Merged

Merge pull request #919 from licensee/dependabot/all-7c44cef7ca-licenses

a3bbcb3

MikeMcQuaid enabled auto-merge November 24, 2025 09:25

MikeMcQuaid merged commit 50d41a5 into main Nov 24, 2025
46 checks passed

MikeMcQuaid deleted the dependabot/all-7c44cef7ca branch November 24, 2025 09:28

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the "all" group with 1 updates across multiple ecosystems#918

Bump the "all" group with 1 updates across multiple ecosystems#918
MikeMcQuaid merged 3 commits into
mainfrom
dependabot/all-7c44cef7ca

dependabot Bot commented on behalf of github Nov 24, 2025

Uh oh!

github-actions Bot commented Nov 24, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Nov 24, 2025

v2.16.0

What's Changed

2025-11-07 (2.16.0)

Release Notes

3.0.0-rc.2

External changes

Internal changes

3.0.0-rc.1

External changes

Internal changes

v0.8.0

Breaking changes

What's Changed

New Contributors

RuboCop AST v1.48.0

New features

1.48.0 (2025-11-08)

New features

RuboCop Rails v2.34.1

Bug fixes

RuboCop Rails v2.34.0

New features

Bug fixes

Changes

2.34.1 (2025-11-24)

Bug fixes

2.34.0 (2025-11-16)

New features

Bug fixes

Changes

Uh oh!

github-actions Bot commented Nov 24, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

1 participant