Bump the development-dependencies group with 2 updates by dependabot[bot] · Pull Request #19 · boringcache/dagger_ruby

dependabot · 2026-10-16T12:34:18Z

Bumps the development-dependencies group with 2 updates: rubocop and webmock.

Updates rubocop from 1.91.0 to 1.92.0

Release notes

RuboCop v1.92.0

New features

#15895: Add an MCP tool that explains what cops do. (@bbatsov)

#15700: Add --explain COP to describe what a cop does, how it is configured, and the examples from its documentation. (@bbatsov)

#15699: Add --max-offenses-per-cop to cap how many offenses a single cop reports. (@bbatsov)

#15948: Let MCP autocorrection apply the corrections of AutoCorrect: contextual cops when asked to. (@bbatsov)

#15945: Let MCP autocorrection preview its changes as a diff. (@bbatsov)

#15915: Let MCP inspection cap how many offenses each cop reports. (@bbatsov)

#15930: Let MCP tools choose which cops run and which files they check. (@bbatsov)

#14666: Make Lint/UselessAssignment register an offense for a block-captured variable that is never referenced. (@IslamElsayed)

#15695: Report autocorrection edits in the JSON formatter. (@bbatsov)

#15940: Report cop errors and warnings per file in --format json. (@bbatsov)

#15945: Report the offenses MCP autocorrection leaves behind. (@bbatsov)

Bug fixes

#15780: Fix an error for Lint/MissingCopEnableDirective when an enable-next or next +Cop directive suspends an open rubocop:disable, and a false positive for next -Cop scopes larger than MaxRangeSize. (@bbatsov)

#16005: Fix a false negative for Security/JSONLoad with create_additions as the second argument. (@bbatsov)

#15994: Fix a false positive for Layout/LineEndStringConcatenationIndentation with an already aligned part. (@bbatsov)

#15842: Fix a false positive for Style/ExplicitBlockArgument when the method uses argument forwarding (...). (@bbatsov)

#15843: Fix a false positive for Style/NegativeArrayIndex with a different length receiver. (@bbatsov)

#15841: Fix a false positive for Style/RedundantFreeze with an arithmetic operation on a non-numeric receiver. (@bbatsov)

#15843: Fix a false positive for Style/Sample with an endless range, which was corrected to a sample call of the wrong size. (@bbatsov)

#15842: Fix a false positive for Style/SuperArguments when the method has a destructuring parameter. (@bbatsov)

#15740: Fix an error for Layout/EmptyLinesAroundMethodBody when a method's arguments span multiple lines and the method ends on the last argument's line. (@viralpraxis)

#15860: Fix an error for Layout/HeredocIndentation with a heredoc nested in another heredoc. (@Starlexxx)

#15876: Fix an error for Lint/EmptyConditionalBody with else on the condition line. (@koic)

#16008: Fix an error for Lint/UnescapedBracketInRegexp when using regexp_parser 2.11.2 and earlier. (@bbatsov)

#15897: Fix an error for Metrics/ClassLength with a long singleton class in LSP mode. (@bbatsov)

#15749: Fix an error for Style/ClassAndModuleChildren when a compact class or module definition appears in an expression, such as an assignment value or a method argument. (@viralpraxis)

#15750: Fix an error for Style/ClassAndModuleChildren when using EnforcedStyle: compact and the nested body is indented less than Layout/IndentationWidth's Width. (@viralpraxis)

#15764: Fix an error for Style/ClassAndModuleChildren when EnforcedStyle: compact compacts an irregularly indented definition and Layout/IndentationStyle enforces tabs. (@viralpraxis)

#15946: Fix an error for Style/ExplicitBlockArgument with the shorthand call syntax. (@Starlexxx)

#15861: Fix an error for Style/FormatString with format nested in format. (@Starlexxx)

#15694: Fix an error for Style/HashSyntax when a no_mixed_keys style forces hash rockets on a hash whose value repeats its key. (@viralpraxis)

#16007: Fix an error for Style/IfInsideElse when the nested if shares a line with other code. (@bbatsov)

#15867: Fix an error for Style/MapIntoArray when pushing into a numbered or it block parameter. (@Starlexxx)

#15949: Fix an error for Style/Next with a modifier condition wrapping a block that has its own offense. (@Starlexxx)

#15797: Fix an error for Style/RedundantCondition when autocorrecting a redundant condition nested in the else branch of another one. (@koic)

#15928: Fix an error for Style/Semicolon when a semicolon follows an unparenthesized keyword parameter or hash pattern. (@viralpraxis)

#15714: Fix an error for Style/YodaCondition when one operand of a comparison contains another comparison the cop also corrects. (@viralpraxis)

#16011: Fix an error for the pacman formatter, which crashed with undefined method 'winsize' whether or not the output was a terminal. (@bbatsov)

#15731: Fix an error when caching offenses whose correction or justification cannot be represented as UTF-8. (@viralpraxis)

#16015: Fix an error when cleaning up a result cache that can't be written. (@bbatsov)

#15702: Fix an error when interrupting RuboCop with Ctrl-C. (@viralpraxis)

#16015: Fix an error when the cache directory or config can't be accessed under a sandbox. (@bbatsov)

#16015: Fix an error when the result cache directory exists but can't be written. (@bbatsov)

#15817: Fix an incorrect autocorrect for Gemspec/OrderedDependencies when the same dependency declaration appears more than once in the gemspec. (@viralpraxis)

#15903: Fix an incorrect autocorrect for Layout/ClassStructure with blank line cops. (@koic)

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.92.0 (2026-10-10)

New features

#15895: Add an MCP tool that explains what cops do. ([@bbatsov][])

#15700: Add --explain COP to describe what a cop does, how it is configured, and the examples from its documentation. ([@bbatsov][])

#15699: Add --max-offenses-per-cop to cap how many offenses a single cop reports. ([@bbatsov][])

#15948: Let MCP autocorrection apply the corrections of AutoCorrect: contextual cops when asked to. ([@bbatsov][])

#15945: Let MCP autocorrection preview its changes as a diff. ([@bbatsov][])

#15915: Let MCP inspection cap how many offenses each cop reports. ([@bbatsov][])

#15930: Let MCP tools choose which cops run and which files they check. ([@bbatsov][])

#14666: Make Lint/UselessAssignment register an offense for a block-captured variable that is never referenced. ([@IslamElsayed][])

#15695: Report autocorrection edits in the JSON formatter. ([@bbatsov][])

#15940: Report cop errors and warnings per file in --format json. ([@bbatsov][])

#15945: Report the offenses MCP autocorrection leaves behind. ([@bbatsov][])

Bug fixes

#15780: Fix an error for Lint/MissingCopEnableDirective when an enable-next or next +Cop directive suspends an open rubocop:disable, and a false positive for next -Cop scopes larger than MaxRangeSize. ([@bbatsov][])

#16005: Fix a false negative for Security/JSONLoad with create_additions as the second argument. ([@bbatsov][])

#15994: Fix a false positive for Layout/LineEndStringConcatenationIndentation with an already aligned part. ([@bbatsov][])

#15842: Fix a false positive for Style/ExplicitBlockArgument when the method uses argument forwarding (...). ([@bbatsov][])

#15843: Fix a false positive for Style/NegativeArrayIndex with a different length receiver. ([@bbatsov][])

#15841: Fix a false positive for Style/RedundantFreeze with an arithmetic operation on a non-numeric receiver. ([@bbatsov][])

#15843: Fix a false positive for Style/Sample with an endless range, which was corrected to a sample call of the wrong size. ([@bbatsov][])

#15842: Fix a false positive for Style/SuperArguments when the method has a destructuring parameter. ([@bbatsov][])

#15740: Fix an error for Layout/EmptyLinesAroundMethodBody when a method's arguments span multiple lines and the method ends on the last argument's line. ([@viralpraxis][])

#15860: Fix an error for Layout/HeredocIndentation with a heredoc nested in another heredoc. ([@Starlexxx][])

#15876: Fix an error for Lint/EmptyConditionalBody with else on the condition line. ([@koic][])

#16008: Fix an error for Lint/UnescapedBracketInRegexp when using regexp_parser 2.11.2 and earlier. ([@bbatsov][])

#15897: Fix an error for Metrics/ClassLength with a long singleton class in LSP mode. ([@bbatsov][])

#15749: Fix an error for Style/ClassAndModuleChildren when a compact class or module definition appears in an expression, such as an assignment value or a method argument. ([@viralpraxis][])

#15750: Fix an error for Style/ClassAndModuleChildren when using EnforcedStyle: compact and the nested body is indented less than Layout/IndentationWidth's Width. ([@viralpraxis][])

#15764: Fix an error for Style/ClassAndModuleChildren when EnforcedStyle: compact compacts an irregularly indented definition and Layout/IndentationStyle enforces tabs. ([@viralpraxis][])

#15946: Fix an error for Style/ExplicitBlockArgument with the shorthand call syntax. ([@Starlexxx][])

#15861: Fix an error for Style/FormatString with format nested in format. ([@Starlexxx][])

#15694: Fix an error for Style/HashSyntax when a no_mixed_keys style forces hash rockets on a hash whose value repeats its key. ([@viralpraxis][])

#16007: Fix an error for Style/IfInsideElse when the nested if shares a line with other code. ([@bbatsov][])

#15867: Fix an error for Style/MapIntoArray when pushing into a numbered or it block parameter. ([@Starlexxx][])

#15949: Fix an error for Style/Next with a modifier condition wrapping a block that has its own offense. ([@Starlexxx][])

#15797: Fix an error for Style/RedundantCondition when autocorrecting a redundant condition nested in the else branch of another one. ([@koic][])

#15928: Fix an error for Style/Semicolon when a semicolon follows an unparenthesized keyword parameter or hash pattern. ([@viralpraxis][])

#15714: Fix an error for Style/YodaCondition when one operand of a comparison contains another comparison the cop also corrects. ([@viralpraxis][])

#16011: Fix an error for the pacman formatter, which crashed with undefined method 'winsize' whether or not the output was a terminal. ([@bbatsov][])

#15731: Fix an error when caching offenses whose correction or justification cannot be represented as UTF-8. ([@viralpraxis][])

#16015: Fix an error when cleaning up a result cache that can't be written. ([@bbatsov][])

#15702: Fix an error when interrupting RuboCop with Ctrl-C. ([@viralpraxis][])

#16015: Fix an error when the cache directory or config can't be accessed under a sandbox. ([@bbatsov][])

#16015: Fix an error when the result cache directory exists but can't be written. ([@bbatsov][])

#15817: Fix an incorrect autocorrect for Gemspec/OrderedDependencies when the same dependency declaration appears more than once in the gemspec. ([@viralpraxis][])

... (truncated)

Commits

4172ce5 Cut 1.92
7e75867 Require net/http in the references:verify task
7c107cb Update Changelog
81c7d42 Fix an error when cleaning up a result cache that can't be written
3b70129 Fix an error when the result cache directory exists but can't be written
830275f Fix an error when the cache directory or config can't be accessed under a san...
38b43fc Remove a check from Style/SingleLineMethods that the shared endless method ...
9897fb1 Fix an incorrect autocorrect for Style/EndlessMethod and `Style/SingleLineM...
1a2221e Fix an incorrect autocorrect for Style/ReturnNilInPredicateMethodDefinition...
f2f4fac Fix an incorrect autocorrect for Style/EndlessMethod with a modifier condit...
Additional commits viewable in compare view

Updates webmock from 3.26.4 to 3.30.0

Release notes

Sourced from webmock's releases.

3.30.0

Allow narrowing an RSpec expectation on a stub with with, as in expect(stub).to have_been_requested.once.with(body: "abc") (#1128)

The expectation counts only the requests that match both the stub and the conditions given to with. The stub itself does not change.

Thanks to Sébastien S.

Show the JSON body hint for expectations narrowed with with too, and no longer show it when a block is given to the stub or expectation, since checking would mean calling the block

Allow a full URL with a path in disable_net_connect!(allow: ...), as in allow: "https://github.com/mozilla/geckodriver/releases/latest" (#977)

URLs are compared the same way as in stubs, so the default port, letter case in the host, and the order and encoding of query parameters don't matter. A URL without a path or query allows every path on that scheme, host and port; a trailing slash restricts requests to / with no query string. Credentials in either URL are ignored.

Thanks to Henry Blyth

3.29.0

Show a body diff for JSON requests whose content type has a +json suffix, such as application/vnd.api+json, and for the other content types WebMock already matches as JSON (#734)

Thanks to Olivier Brisse

Ignore the case of JSON, XML and url-encoded content types when matching request bodies, and match bodies of any +json or +xml media type, such as image/svg+xml, as JSON or XML

Suggest declaring a JSON body as a hash when a request fails to match only because the JSON is formatted differently (#649)

A body declared as a string must match the request body exactly, including key order and whitespace. When that is the only difference, the error for an unregistered request and the failure message of a request expectation now say so, and suggest with(body: JSON.parse(json_string)). Matching JSON strings regardless of key order by default is planned for the next major version (#485).

3.28.0

Fix to_rack apps receiving a rack.session they did not set up (#985)

WebMock used to add a session hash to the Rack env, shared by every request to the same stub. This confused apps that check whether a session is present, such as Rails API-only apps, and carried session data over between requests. WebMock now leaves rack.session and rack.session.options unset, as a real server does. If your app needs a session, include session middleware in the app you pass to to_rack. RackResponse#session and RackResponse#session_options have been removed.

Thanks to Jan Graichen

Fix crash when matching a hash body pattern against a JSON or XML request that has no body

Thanks to Chris

No longer warn about curb versions newer than the last one tested

Document regexp values in hash_including

Thanks to Christian Bruckmayer

Remove unused RequestSignatureSnippet#request_params

Thanks to Daniel Pepper

3.27.0

Fix crash in async-http adapter when a request header has a nil value

... (truncated)

Changelog

Sourced from webmock's changelog.

3.30.0

Allow narrowing an RSpec expectation on a stub with with, as in expect(stub).to have_been_requested.once.with(body: "abc") (#1128)

The expectation counts only the requests that match both the stub and the conditions given to with. The stub itself does not change.

Thanks to Sébastien S.

Show the JSON body hint for expectations narrowed with with too, and no longer show it when a block is given to the stub or expectation, since checking would mean calling the block

Allow a full URL with a path in disable_net_connect!(allow: ...), as in allow: "https://github.com/mozilla/geckodriver/releases/latest" (#977)

URLs are compared the same way as in stubs, so the default port, letter case in the host, and the order and encoding of query parameters don't matter. A URL without a path or query allows every path on that scheme, host and port; a trailing slash restricts requests to / with no query string. Credentials in either URL are ignored.

Thanks to Henry Blyth

3.29.0

Show a body diff for JSON requests whose content type has a +json suffix, such as application/vnd.api+json, and for the other content types WebMock already matches as JSON (#734)

Thanks to Olivier Brisse

Ignore the case of JSON, XML and url-encoded content types when matching request bodies, and match bodies of any +json or +xml media type, such as image/svg+xml, as JSON or XML

Suggest declaring a JSON body as a hash when a request fails to match only because the JSON is formatted differently (#649)

A body declared as a string must match the request body exactly, including key order and whitespace. When that is the only difference, the error for an unregistered request and the failure message of a request expectation now say so, and suggest with(body: JSON.parse(json_string)). Matching JSON strings regardless of key order by default is planned for the next major version (#485).

3.28.0

Fix to_rack apps receiving a rack.session they did not set up (#985)

WebMock used to add a session hash to the Rack env, shared by every request to the same stub. This confused apps that check whether a session is present, such as Rails API-only apps, and carried session data over between requests. WebMock now leaves rack.session and rack.session.options unset, as a real server does. If your app needs a session, include session middleware in the app you pass to to_rack. RackResponse#session and RackResponse#session_options have been removed.

Thanks to Jan Graichen

Fix crash when matching a hash body pattern against a JSON or XML request that has no body

Thanks to Chris

No longer warn about curb versions newer than the last one tested

Document regexp values in hash_including

Thanks to Christian Bruckmayer

Remove unused RequestSignatureSnippet#request_params

Thanks to Daniel Pepper

... (truncated)

Commits

d57be75 Version 3.30.0
37ab875 Compare allowed URLs in the net connect allow list the same way as stub URLs
686f411 Keep allowing every path for scheme://host in the net connect allow list
76b020c Merge pull request #978 from henrahmagix/patch-1
0a6b7f4 Show the JSON body hint for expectations narrowed with with
71acb1b Stop with on stub expectations from changing the stub
8369a56 Merge pull request #1128 from inkstak/feature-have_been_requested_with_body
664309c Version 3.29.0
5fc01c3 Only check that an oddly encoded JSON body does not raise
b8dfa96 Suggest declaring a JSON body as a hash when only its formatting differs
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-dependencies group with 2 updates: [rubocop](https://github.com/rubocop/rubocop) and [webmock](https://github.com/bblimke/webmock). Updates `rubocop` from 1.91.0 to 1.92.0 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.91.0...v1.92.0) Updates `webmock` from 3.26.4 to 3.30.0 - [Release notes](https://github.com/bblimke/webmock/releases) - [Changelog](https://github.com/bblimke/webmock/blob/master/CHANGELOG.md) - [Commits](bblimke/webmock@v3.26.4...v3.30.0) --- updated-dependencies: - dependency-name: rubocop dependency-version: 1.92.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: webmock dependency-version: 3.30.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Oct 16, 2026

Navigation Menu

Repository navigation

Bump the development-dependencies group with 2 updates - #19

Bump the development-dependencies group with 2 updates#19
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/development-dependencies-cba5e8d0fc

dependabot Bot commented on behalf of github Oct 16, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 16, 2026

RuboCop v1.92.0

New features

Bug fixes

1.92.0 (2026-10-10)

New features

Bug fixes

3.30.0

3.29.0

3.28.0

3.27.0

3.30.0

3.29.0

3.28.0

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants