Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 29, 2025

Bumps the all group with 1 update: actions/attest-build-provenance.

Updates actions/attest-build-provenance from 2.4.0 to 3.0.0

Release notes

Sourced from actions/attest-build-provenance's releases.

v3.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1 Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/attest-build-provenance@v2.4.0...v3.0.0

Commits

Bumps the all group with 4 updates in the /Library/Homebrew directory: rubocop, simplecov-cobertura, sorbet-static-and-runtime and rexml.

Updates rubocop from 1.80.0 to 1.80.1

Release notes

Sourced from rubocop's releases.

RuboCop v1.80.1

Bug fixes

  • #14479: Don't invalidate cache when --display-time option is used on the CLI. (@​lovro-bikic)
  • #14473: Fix a false negative for Style/RedundantBegin using begin with multiple statements without rescue or ensure. (@​koic)
  • #14475: Fix cop errors during autocorrect for the build in LSP when analyzing as Ruby 3.4. (@​earlopain)

Changes

  • #14474: Fix false negative for Layout/EndAlignment when end is not on a separate line. (@​lovro-bikic)
Changelog

Sourced from rubocop's changelog.

1.80.1 (2025-08-27)

Bug fixes

  • #14479: Don't invalidate cache when --display-time option is used on the CLI. ([@​lovro-bikic][])
  • #14473: Fix a false negative for Style/RedundantBegin using begin with multiple statements without rescue or ensure. ([@​koic][])
  • #14475: Fix cop errors during autocorrect for the build in LSP when analyzing as Ruby 3.4. ([@​earlopain][])

Changes

  • #14474: Fix false negative for Layout/EndAlignment when end is not on a separate line. ([@​lovro-bikic][])
Commits
  • d56f11a Cut 1.80.1
  • 3ac19eb Update Changelog
  • f5c5e75 Merge pull request #14479 from lovro-bikic/display-time-shouldnt-impact-cache
  • d500cc9 Prevent display-time CLI option from invalidating cache
  • 161ba26 Don't use keyword argument for get_processed_source
  • d7972b6 [Fix #14475] Fix cop errors during autocorrect for the buildin LSP when analy...
  • 6e5c599 Merge pull request #14474 from lovro-bikic/false-negative-end-alignment
  • 49b7248 Fix false negative for Layout/EndAlignment when end is not on a separate line
  • 103f3ab Merge pull request #14473 from koic/fix_false_negative_for_style_redundant_begin
  • 6b5c6ac Fix a false negative for Style/RedundantBegin
  • Additional commits viewable in compare view

Updates simplecov-cobertura from 3.0.0 to 3.1.0

Release notes

Sourced from simplecov-cobertura's releases.

v3.1.0

What's Changed

New Contributors

Full Changelog: jessebs/simplecov-cobertura@v3.0.0...v3.1.0

Commits
  • 43b010a 3.1.0 release
  • c15e846 Fix failing tests with rexml 3.4.2 (#44)
  • 1e4c022 Increase precision to match what's provided by Simplecov results (#42)
  • 4f45fbd Bump version to 3.0.1-dev for development
  • See full diff in compare view

Updates sorbet-static-and-runtime from 0.5.12434 to 0.6.12466

Release notes

Sourced from sorbet-static-and-runtime's releases.

sorbet 0.6.12465.20250828154606-d769985c1

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12465', :group => :development
gem 'sorbet-runtime', '0.6.12465'

sorbet 0.6.12464.20250828141320-522ebbf5d

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12464', :group => :development
gem 'sorbet-runtime', '0.6.12464'

sorbet 0.6.12463.20250828131301-6dc99dda6

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12463', :group => :development
gem 'sorbet-runtime', '0.6.12463'

sorbet 0.6.12462.20250828143335-98dfe0766

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12462', :group => :development
gem 'sorbet-runtime', '0.6.12462'

sorbet 0.6.12461.20250828135357-e098b1364

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12461', :group => :development
gem 'sorbet-runtime', '0.6.12461'

sorbet 0.6.12460.20250828132838-9c7c4d737

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12460', :group => :development
gem 'sorbet-runtime', '0.6.12460'

sorbet 0.6.12459.20250828071722-bb79ad419

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12459', :group => :development
gem 'sorbet-runtime', '0.6.12459'

sorbet 0.6.12458.20250827164435-80de2307f

... (truncated)

Commits

Updates rexml from 3.4.1 to 3.4.2

Release notes

Sourced from rexml's releases.

REXML 3.4.2 - 2025-08-26

Improvement

  • Improved performance.

  • Raise appropriate exception when failing to match start tag in DOCTYPE

  • Deprecate accepting array as an element in XPath.match, first and each

    • GH-252
    • Patch by tomoya ishida
  • Don't call needless encoding_updated

    • GH-259
    • Patch by Sutou Kouhei
  • Reuse XPath::match

  • Cache redundant calls for doctype

  • Use Safe Navigation (&.) from Ruby 2.3

  • Remove redundant return statements

  • Added XML declaration check & Source#skip_spaces method

    • GH-282
    • Patch by NAITOH Jun
    • Reported by Sofi Aberegg

Fixes

  • Fix docs typo
    • GH-248
    • Patch by James Coleman

... (truncated)

Changelog

Sourced from rexml's changelog.

3.4.2 - 2025-08-26 {#version-3-4-2}

Improvement

  • Improved performance.

  • Raise appropriate exception when failing to match start tag in DOCTYPE

  • Deprecate accepting array as an element in XPath.match, first and each

    • GH-252
    • Patch by tomoya ishida
  • Don't call needless encoding_updated

    • GH-259
    • Patch by Sutou Kouhei
  • Reuse XPath::match

  • Cache redundant calls for doctype

  • Use Safe Navigation (&.) from Ruby 2.3

  • Remove redundant return statements

  • Added XML declaration check & Source#skip_spaces method

    • GH-282
    • Patch by NAITOH Jun
    • Reported by Sofi Aberegg

Fixes

  • Fix docs typo
    • GH-248
    • Patch by James Coleman

... (truncated)

Commits

Updates sorbet-runtime from 0.5.12434 to 0.6.12466

Release notes

Sourced from sorbet-runtime's releases.

sorbet 0.6.12465.20250828154606-d769985c1

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12465', :group => :development
gem 'sorbet-runtime', '0.6.12465'

sorbet 0.6.12464.20250828141320-522ebbf5d

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12464', :group => :development
gem 'sorbet-runtime', '0.6.12464'

sorbet 0.6.12463.20250828131301-6dc99dda6

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12463', :group => :development
gem 'sorbet-runtime', '0.6.12463'

sorbet 0.6.12462.20250828143335-98dfe0766

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12462', :group => :development
gem 'sorbet-runtime', '0.6.12462'

sorbet 0.6.12461.20250828135357-e098b1364

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12461', :group => :development
gem 'sorbet-runtime', '0.6.12461'

sorbet 0.6.12460.20250828132838-9c7c4d737

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12460', :group => :development
gem 'sorbet-runtime', '0.6.12460'

sorbet 0.6.12459.20250828071722-bb79ad419

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12459', :group => :development
gem 'sorbet-runtime', '0.6.12459'

sorbet 0.6.12458.20250827164435-80de2307f

... (truncated)

Commits

Updates sorbet from 0.5.12434 to 0.6.12466

Release notes

Sourced from sorbet's releases.

sorbet 0.6.12465.20250828154606-d769985c1

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12465', :group => :development
gem 'sorbet-runtime', '0.6.12465'

sorbet 0.6.12464.20250828141320-522ebbf5d

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12464', :group => :development
gem 'sorbet-runtime', '0.6.12464'

sorbet 0.6.12463.20250828131301-6dc99dda6

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12463', :group => :development
gem 'sorbet-runtime', '0.6.12463'

sorbet 0.6.12462.20250828143335-98dfe0766

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12462', :group => :development
gem 'sorbet-runtime', '0.6.12462'

sorbet 0.6.12461.20250828135357-e098b1364

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12461', :group => :development
gem 'sorbet-runtime', '0.6.12461'

sorbet 0.6.12460.20250828132838-9c7c4d737

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12460', :group => :development
gem 'sorbet-runtime', '0.6.12460'

sorbet 0.6.12459.20250828071722-bb79ad419

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12459', :group => :development
gem 'sorbet-runtime', '0.6.12459'

sorbet 0.6.12458.20250827164435-80de2307f

... (truncated)

Commits

Updates sorbet-static from 0.5.12434 to 0.6.12466

Release notes

Sourced from sorbet-static's releases.

sorbet 0.6.12465.20250828154606-d769985c1

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12465', :group => :development
gem 'sorbet-runtime', '0.6.12465'

sorbet 0.6.12464.20250828141320-522ebbf5d

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12464', :group => :development
gem 'sorbet-runtime', '0.6.12464'

sorbet 0.6.12463.20250828131301-6dc99dda6

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12463', :group => :development
gem 'sorbet-runtime', '0.6.12463'

sorbet 0.6.12462.20250828143335-98dfe0766

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12462', :group => :development
gem 'sorbet-runtime', '0.6.12462'

sorbet 0.6.12461.20250828135357-e098b1364

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12461', :group => :development
gem 'sorbet-runtime', '0.6.12461'

sorbet 0.6.12460.20250828132838-9c7c4d737

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12460', :group => :development
gem 'sorbet-runtime', '0.6.12460'

sorbet 0.6.12459.20250828071722-bb79ad419

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12459', :group => :development
gem 'sorbet-runtime', '0.6.12459'

sorbet 0.6.12458.20250827164435-80de2307f

... (truncated)

Commits

Bumps the all group with 1 update in the /Library/Homebrew/formula-analytics directory: typing-extensions.

Updates typing-extensions from 4.14.1 to 4.15.0

Release notes

Sourced from typing-extensions's releases.

4.15.0

No user-facing changes since 4.15.0rc1.

New features since 4.14.1:

  • Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.
  • Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.
  • Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.

4.15.0rc1

  • Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.
  • Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.
  • Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.
Changelog

Sourced from typing-extensions's changelog.

Release 4.15.0 (August 25, 2025)

No user-facing changes since 4.15.0rc1.

Release 4.15.0rc1 (August 18, 2025)

  • Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.
  • Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.
  • Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 1 update: [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance).


Updates `actions/attest-build-provenance` from 2.4.0 to 3.0.0
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@e8998f9...977bb37)
build(deps): bump the all group across 1 directory with 7 updates

Bumps the all group with 4 updates in the /Library/Homebrew directory: [rubocop](https://github.com/rubocop/rubocop), [simplecov-cobertura](https://github.com/jessebs/simplecov-cobertura), [sorbet-static-and-runtime](https://github.com/sorbet/sorbet) and [rexml](https://github.com/ruby/rexml).


Updates `rubocop` from 1.80.0 to 1.80.1
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.80.0...v1.80.1)

Updates `simplecov-cobertura` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/jessebs/simplecov-cobertura/releases)
- [Commits](jessebs/simplecov-cobertura@v3.0.0...v3.1.0)

Updates `sorbet-static-and-runtime` from 0.5.12434 to 0.6.12466
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `rexml` from 3.4.1 to 3.4.2
- [Release notes](https://github.com/ruby/rexml/releases)
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md)
- [Commits](ruby/rexml@v3.4.1...v3.4.2)

Updates `sorbet-runtime` from 0.5.12434 to 0.6.12466
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `sorbet` from 0.5.12434 to 0.6.12466
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `sorbet-static` from 0.5.12434 to 0.6.12466
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)
build(deps): bump typing-extensions

Bumps the all group with 1 update in the /Library/Homebrew/formula-analytics directory: [typing-extensions](https://github.com/python/typing_extensions).


Updates `typing-extensions` from 4.14.1 to 4.15.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](python/typing_extensions@4.14.1...4.15.0)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: rubocop
  dependency-version: 1.80.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: simplecov-cobertura
  dependency-version: 3.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: sorbet-static-and-runtime
  dependency-version: 0.6.12466
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: rexml
  dependency-version: 3.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: sorbet-runtime
  dependency-version: 0.6.12466
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: sorbet
  dependency-version: 0.6.12466
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: sorbet-static
  dependency-version: 0.6.12466
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: typing-extensions
  dependency-version: 4.15.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Bumping Gemfile dependencies github_actions Pull requests that update GitHub Actions code python Homebrew/brew's python support ruby Pull requests that update Ruby code labels Aug 29, 2025
@ZhongRuoyu ZhongRuoyu enabled auto-merge August 29, 2025 08:41
@ZhongRuoyu ZhongRuoyu added this pull request to the merge queue Aug 29, 2025
Merged via the queue into main with commit e10038b Aug 29, 2025
38 checks passed
@ZhongRuoyu ZhongRuoyu deleted the dependabot/all-b88d22238a branch August 29, 2025 09:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Bumping Gemfile dependencies github_actions Pull requests that update GitHub Actions code python Homebrew/brew's python support ruby Pull requests that update Ruby code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants