Skip to content

Bump the bundler group with 6 updates - #78

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/bundler-2495f43d87
Open

Bump the bundler group with 6 updates#78
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/bundler-2495f43d87

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the bundler group with 6 updates:

Package From To
code_ownership 2.1.4 2.2.1
parse_packwerk 0.27.0 0.28.0
sorbet-runtime 0.6.13506 0.6.13594
pry 0.16.0 0.16.1
rubocop-gusto 11.9.0 11.10.0
sorbet 0.6.13506 0.6.13594

Updates code_ownership from 2.1.4 to 2.2.1

Release notes

Sourced from code_ownership's releases.

v2.2.1

Upgrading

  • validate stages .github/CODEOWNERS by default again, and --skip-stage / stage_changes: false no longer stages it (#187). This was inverted in every release since the Rust extension landed (#126). A CI step that runs validate and then git diff --exit-code will stop catching a stale CODEOWNERS, because the file is now staged. Use bin/codeownership validate --skip-autocorrect, which fails when CODEOWNERS is stale, or pass --skip-stage.

CodeOwnership v2.2.1

📦 Published Gems

  • Source gem: code_ownership-2.2.1.gem
  • Platform gems: Published for all supported platforms

🎯 Supported Platforms

  • aarch64-linux-musl
  • aarch64-linux
  • aarch64-mingw-ucrt
  • arm64-darwin
  • x64-mingw-ucrt
  • x86_64-darwin
  • x86_64-linux-musl
  • x86_64-linux

What's Changed

New Contributors

Full Changelog: rubyatscale/code_ownership@v2.2.0...v2.2.1

v2.2.0

Upgrading

  • Regenerate CODEOWNERS if you use file annotations. The "Annotations at the top of file" section is now written last, so GitHub's review routing agrees with for_filerubyatscale/codeowners-rs#130bin/codeownership validate autocorrects and stages it; CI that passes --skip-autocorrect will fail, with the diff, until the regenerated file is committed.
  • validate is stricter. It now reports .codeownerrubyatscale/codeowners-rs#116
  • gitignore no longer hides tracked filesrubyatscale/codeowners-rs#110validate may flag files it used to skip.
  • for_file(..., from_codeowners: false) honors metadata.owner in a Ruby package.yml (#141). It also returns no package owner for a package.ymlrubyatscale/codeowners-rs#131
  • Team files are loaded once per process for for_file(..., from_codeowners: false), making lookups much faster. Call CodeOwnership.bust_caches! after changing team files in a long-lived process.

CodeOwnership v2.2.0

📦 Published Gems

... (truncated)

Commits
  • 6fc6342 Fix inverted stage_changes in CodeOwnership.validate! (#187)
  • 8ac6a59 Bump the cargo group with 4 updates (#186)
  • b2d1513 Have Dependabot update the extension's Rust dependencies (#185)
  • df512f5 Bump the github-actions group with 3 updates (#184)
  • b96c60a Add zizmor and fix its findings (#183)
  • 803a52a List full platform names in release notes (#182)
  • cf1bbc4 Enable Style/FrozenStringLiteralComment (#181)
  • ddbce0a Exclude arm-linux-musl from native gem builds (#180)
  • c5b4efa Update codeowners-rs to v0.5.0 and clear its team cache in bust_caches! (#179)
  • 2832572 Bump .ruby-version to 4.0.7 (#178)
  • Additional commits viewable in compare view

Updates parse_packwerk from 0.27.0 to 0.28.0

Release notes

Sourced from parse_packwerk's releases.

v0.28.0

What's Changed

New Contributors

Full Changelog: rubyatscale/parse_packwerk@v0.27.0...v0.28.0

Commits
  • 5dc0a6b Read and set a package's top-level owner (#65)
  • fad8f3e Enable Style/FrozenStringLiteralComment (#64)
  • d83cc24 Bump the bundler group with 3 updates (#63)
  • d1eb842 Add explicit GITHUB_TOKEN permissions to workflow callers
  • e9e31b5 Bump the bundler group with 3 updates (#60)
  • fb863d7 Use shared-config's reusable CodeQL workflow (#59)
  • c899a24 Fix code scanning issues: CodeQL setup and workflow permissions (#58)
  • 3211f4e Bump the bundler group with 2 updates (#57)
  • feadce4 Bump the bundler group with 8 updates (#56)
  • 1b4c065 Add Dependabot config for monthly Bundler updates (#54)
  • Additional commits viewable in compare view

Updates sorbet-runtime from 0.6.13506 to 0.6.13594

Release notes

Sourced from sorbet-runtime's releases.

sorbet 0.6.13593.20261023140651-708de34b2

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13593', :group => :development
gem 'sorbet-runtime', '0.6.13593'

sorbet 0.6.13592.20261023140642-13130e7d1

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13592', :group => :development
gem 'sorbet-runtime', '0.6.13592'

sorbet 0.6.13591.20261022085540-2654508b3

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13591', :group => :development
gem 'sorbet-runtime', '0.6.13591'

sorbet 0.6.13590.20261021182532-7205a3df0

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13590', :group => :development
gem 'sorbet-runtime', '0.6.13590'

sorbet 0.6.13589.20261021174657-2c6ca7ae6

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13589', :group => :development
gem 'sorbet-runtime', '0.6.13589'

sorbet 0.6.13588.20261021173622-d96b88bdd

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13588', :group => :development
gem 'sorbet-runtime', '0.6.13588'

sorbet 0.6.13587.20261021153930-4cbdeb85a

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13587', :group => :development
gem 'sorbet-runtime', '0.6.13587'

sorbet 0.6.13586.20261021111057-3e23dd205

... (truncated)

Commits

Updates pry from 0.16.0 to 0.16.1

Release notes

Sourced from pry's releases.

v0.16.1

What's Changed

New Contributors

Full Changelog: pry/pry@v0.16.0...v0.16.1

Changelog

Sourced from pry's changelog.

https://github.com/pry/pry/blob/master/v0.16.1 (October 19, 2026)

Bug Fixes

  • Fix ls -G grep filtering across all variable types (#2363)
  • Fix Readline call on Ruby 4+ with SimplePager (#2366) (#2373)
  • Fix test failures when TERM and EDITOR are unset (#2367)
Commits
  • fdae472 Prep for v0.16.1
  • f7e110b Merge pull request #2373 from datibbaw/fix/ruby4-simple-pager-input
  • ae4e480 fix(pager): use active input backend at page breaks
  • 0b3c7dc Merge pull request #2374 from andrehjr/ci/add-ruby-4.0
  • 113c48c Add Ruby 4.0 to the matrix
  • 1356402 Merge pull request #2367 from nicolasva/fix_tests_TERM_EDITOR
  • 3e2a2c6 Split specs for testing TERM=nil on windows
  • f59f1a4 Test failures if TERM and EDITOR are unset #2364
  • f469a6b Merge pull request #2369 from andrehjr/rubocop-pinned-version
  • 8ad404f Pin rubocop version to avoid failing lint between versions
  • Additional commits viewable in compare view

Updates rubocop-gusto from 11.9.0 to 11.10.0

Release notes

Sourced from rubocop-gusto's releases.

v11.10.0

11.10.0 (2026-10-22)

Features

  • add Gusto/TimeoutTimeout cop (#195) (ef28938)
  • per-group scoping for Gusto/UnreferencedLet (de8504c)
  • per-group UnreferencedLet scoping (#187) (de8504c)

v11.9.1

11.9.1 (2026-09-28)

Bug Fixes

  • port upstream review of Gusto/HardcodedAbsentRecordId (#180) (6198928)

Features

  • Gusto/DiscouragedGem reads the lockfile beside a Gemfile/gems.rb and flags discouraged gems pulled in transitively, on the line of the dependency that pulls them in; it is now enabled for all projects and discourages ostruct (#188) (3fb0a2c)

Note: #188 landed in this patch release because the release PR was merged right after it. If your RuboCop run now reports Gusto/DiscouragedGem offenses for ostruct, baseline the existing ones with bundle exec rubocop --only Gusto/DiscouragedGem --autocorrect --disable-uncorrectable (adds # rubocop:todo Gusto/DiscouragedGem to each parent gem line), or drop the dependency.

Changelog

Sourced from rubocop-gusto's changelog.

11.10.0 (2026-10-22)

Features

  • add Gusto/TimeoutTimeout cop (#195) (ef28938)
  • per-group scoping for Gusto/UnreferencedLet (de8504c)
  • per-group UnreferencedLet scoping (#187) (de8504c)

11.9.1 (2026-09-28)

Features

  • flag transitive discouraged gems via the lockfile and discourage ostruct (#188) (3fb0a2c)

Bug Fixes

  • port upstream review of Gusto/HardcodedAbsentRecordId (#180) (6198928)
Commits
  • 461cd24 chore(main): release 11.10.0 (#193)
  • ef28938 feat: add Gusto/TimeoutTimeout cop (#195)
  • de8504c feat: per-group UnreferencedLet scoping (#187)
  • a155ac8 docs: add #188 to the 11.9.1 changelog (#189)
  • 865f408 chore(main): release 11.9.1 (#181)
  • 3fb0a2c feat: flag transitive discouraged gems via the lockfile and discourage ostruc...
  • 6198928 fix: port upstream review of Gusto/HardcodedAbsentRecordId (#180)
  • b02ef8c chore: correct reason InternalAffairs/UndefinedConfig is disabled (#179)
  • See full diff in compare view

Updates sorbet from 0.6.13506 to 0.6.13594

Release notes

Sourced from sorbet's releases.

sorbet 0.6.13593.20261023140651-708de34b2

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13593', :group => :development
gem 'sorbet-runtime', '0.6.13593'

sorbet 0.6.13592.20261023140642-13130e7d1

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13592', :group => :development
gem 'sorbet-runtime', '0.6.13592'

sorbet 0.6.13591.20261022085540-2654508b3

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13591', :group => :development
gem 'sorbet-runtime', '0.6.13591'

sorbet 0.6.13590.20261021182532-7205a3df0

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13590', :group => :development
gem 'sorbet-runtime', '0.6.13590'

sorbet 0.6.13589.20261021174657-2c6ca7ae6

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13589', :group => :development
gem 'sorbet-runtime', '0.6.13589'

sorbet 0.6.13588.20261021173622-d96b88bdd

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13588', :group => :development
gem 'sorbet-runtime', '0.6.13588'

sorbet 0.6.13587.20261021153930-4cbdeb85a

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13587', :group => :development
gem 'sorbet-runtime', '0.6.13587'

sorbet 0.6.13586.20261021111057-3e23dd205

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the bundler group with 6 updates
b250a1e 
Bumps the bundler group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [code_ownership](https://github.com/rubyatscale/code_ownership) | `2.1.4` | `2.2.1` |
| [parse_packwerk](https://github.com/rubyatscale/parse_packwerk) | `0.27.0` | `0.28.0` |
| [sorbet-runtime](https://github.com/sorbet/sorbet) | `0.6.13506` | `0.6.13594` |
| [pry](https://github.com/pry/pry) | `0.16.0` | `0.16.1` |
| [rubocop-gusto](https://github.com/gusto/rubocop-gusto) | `11.9.0` | `11.10.0` |
| [sorbet](https://github.com/sorbet/sorbet) | `0.6.13506` | `0.6.13594` |


Updates `code_ownership` from 2.1.4 to 2.2.1
- [Release notes](https://github.com/rubyatscale/code_ownership/releases)
- [Commits](rubyatscale/code_ownership@v2.1.4...v2.2.1)

Updates `parse_packwerk` from 0.27.0 to 0.28.0
- [Release notes](https://github.com/rubyatscale/parse_packwerk/releases)
- [Commits](rubyatscale/parse_packwerk@v0.27.0...v0.28.0)

Updates `sorbet-runtime` from 0.6.13506 to 0.6.13594
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `pry` from 0.16.0 to 0.16.1
- [Release notes](https://github.com/pry/pry/releases)
- [Changelog](https://github.com/pry/pry/blob/master/CHANGELOG.md)
- [Commits](pry/pry@v0.16.0...v0.16.1)

Updates `rubocop-gusto` from 11.9.0 to 11.10.0
- [Release notes](https://github.com/gusto/rubocop-gusto/releases)
- [Changelog](https://github.com/Gusto/rubocop-gusto/blob/main/CHANGELOG.md)
- [Commits](Gusto/rubocop-gusto@v11.9.0...v11.10.0)

Updates `sorbet` from 0.6.13506 to 0.6.13594
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

---
updated-dependencies:
- dependency-name: code_ownership
  dependency-version: 2.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: parse_packwerk
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: sorbet-runtime
  dependency-version: 0.6.13594
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: pry
  dependency-version: 0.16.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: rubocop-gusto
  dependency-version: 11.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: sorbet
  dependency-version: 0.6.13594
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Nov 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner November 1, 2026 22:09
@github-project-automation github-project-automation Bot moved this to Triage in Modularity Nov 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

Modularity
Status: Triage

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants