Skip to content

[rb] Update dependencies#17111

Merged
cgoldberg merged 5 commits intoSeleniumHQ:trunkfrom
cgoldberg:rb-update-deps
Feb 19, 2026
Merged

[rb] Update dependencies#17111
cgoldberg merged 5 commits intoSeleniumHQ:trunkfrom
cgoldberg:rb-update-deps

Conversation

@cgoldberg
Copy link
Copy Markdown
Member

@cgoldberg cgoldberg commented Feb 18, 2026

🔗 Related Issues

Fixes https://github.com/SeleniumHQ/selenium/security/dependabot/250
Fixes https://github.com/SeleniumHQ/selenium/security/dependabot/251

💥 What does this PR do?

Update Ruby dependencies to latest versions.

🔄 Types of changes

  • Dev/CI/Packaging

@qodo-code-review
Copy link
Copy Markdown
Contributor

qodo-code-review bot commented Feb 18, 2026

PR Type

Enhancement

Description

  • Update Ruby gem dependencies to latest versions

  • Update irb, json, parser, prism, rack, rbs, rdoc, rubocop, rspec-support

  • Update RBS collection lock file with latest gem revisions

  • Addresses security vulnerabilities in dependencies

File Walkthrough

Relevant files
Dependencies
MODULE.bazel
Update Ruby gem versions and checksums                                     

MODULE.bazel

  • Updated multiple Ruby gem versions including irb (1.16.0 → 1.17.0),
    json (2.18.0 → 2.18.1), parser (3.3.10.1 → 3.3.10.2), prism (1.8.0 →
    1.9.0), rack (2.2.21 → 2.2.22), rbs (3.10.2 → 3.10.3), rdoc (7.1.0 →
    7.2.0), rubocop (1.82.1 → 1.84.2), and rspec-support (3.13.6 → 3.13.7)
  • Updated corresponding SHA256 checksums for all updated gems
 +10/-10 
rbs_collection.lock.yaml
Update RBS collection lock file revisions                               

rb/rbs_collection.lock.yaml

  • Updated gem_rbs_collection revision from
    d07edeb13c53de1c65b2bede98a720ac52d497a2 to
    f17b218ad76ff3800d651e9bc42a15ba311095b4 across all gems
  • Updated prism version from 1.8.0 to 1.9.0
 +17/-17 

@qodo-code-review
Copy link
Copy Markdown
Contributor

qodo-code-review bot commented Feb 18, 2026 •
edited
Loading

PR Compliance Guide 🔍

Below is a summary of compliance checks for this PR:

Security Compliance
🟢
No security concerns identified No security vulnerabilities detected by AI analysis. Human verification advised for critical code.
Ticket Compliance
⚪
🎫 No ticket provided
  • Create ticket/issue
Codebase Duplication Compliance
⚪
Codebase context is not defined

Follow the guide to enable codebase context checks.

Custom Compliance
⚪
No custom compliance provided

Follow the guide to enable custom compliance check.

  • Update
Compliance status legend 🟢 - Fully Compliant
🟡 - Partial Compliant
🔴 - Not Compliant
⚪ - Requires Further Human Verification
🏷️ - Compliance label

@selenium-ci selenium-ci added C-rb Ruby Bindings B-build Includes scripting, bazel and CI integrations and removed Review effort 2/5 labels Feb 18, 2026
@qodo-code-review
Copy link
Copy Markdown
Contributor

qodo-code-review bot commented Feb 18, 2026 •
edited
Loading

PR Code Suggestions ✨

Explore these optional code suggestions:

CategorySuggestion                                                                                                                                    Impact
Possible issue
Bump rubocop lock version

Update the rubocop version in rbs_collection.lock.yaml from '1.57' to '1.84.2'
to match the version specified in MODULE.bazel.

rb/rbs_collection.lock.yaml [141]

-version: '1.57'
+version: '1.84.2'

[To ensure code accuracy, apply this suggestion manually]

Suggestion importance[1-10]: 8

__

Why: This suggestion correctly identifies a version mismatch for the rubocop gem between MODULE.bazel (1.84.2) and rbs_collection.lock.yaml (1.57), which is a critical issue for dependency consistency.

Medium
Update parser lock version

Update the parser gem version in rbs_collection.lock.yaml from '3.2' to '3.3' to
align with the version bump in MODULE.bazel.

rb/rbs_collection.lock.yaml [93]

-version: '3.2'
+version: '3.3'
  • Apply / Chat
Suggestion importance[1-10]: 8

__

Why: This suggestion correctly points out a version discrepancy for the parser gem between MODULE.bazel (3.3.10.2) and rbs_collection.lock.yaml (3.2), which is important for maintaining dependency consistency.

Medium
Align rack lock version

Update the rack version in rbs_collection.lock.yaml from '2.2' to '2.2.22' to
match the version specified in MODULE.bazel.

rb/rbs_collection.lock.yaml [105]

-version: '2.2'
+version: '2.2.22'
  • Apply / Chat
Suggestion importance[1-10]: 8

__

Why: This suggestion correctly identifies a version mismatch for the rack gem between MODULE.bazel (2.2.22) and rbs_collection.lock.yaml (2.2), which is a critical issue for dependency consistency.

Medium
  • Update

@cgoldberg cgoldberg merged commit 02ec15f into SeleniumHQ:trunk Feb 19, 2026
29 checks passed
@cgoldberg cgoldberg deleted the rb-update-deps branch February 19, 2026 14:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@titusfortner titusfortner Awaiting requested review from titusfortner

Assignees

No one assigned

Labels

B-build Includes scripting, bazel and CI integrations C-rb Ruby Bindings

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@cgoldberg @selenium-ci