Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 24, 2025

Bumps the all group with 1 update: github/codeql-action.

Updates github/codeql-action from 4.30.8 to 4.30.9

Release notes

Sourced from github/codeql-action's releases.

v4.30.9

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.9 - 17 Oct 2025

  • Update default CodeQL bundle version to 2.23.3. #3205
  • Experimental: A new setup-codeql action has been added which is similar to init, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #3204

See the full CHANGELOG.md for more information.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.30.9 - 17 Oct 2025

  • Update default CodeQL bundle version to 2.23.3. #3205
  • Experimental: A new setup-codeql action has been added which is similar to init, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #3204

4.30.8 - 10 Oct 2025

No user facing changes.

4.30.7 - 06 Oct 2025

  • [v4+ only] The CodeQL Action now runs on Node.js v24. #3169

3.30.6 - 02 Oct 2025

  • Update default CodeQL bundle version to 2.23.2. #3168

3.30.5 - 26 Sep 2025

  • We fixed a bug that was introduced in 3.30.4 with upload-sarif which resulted in files without a .sarif extension not getting uploaded. #3160

3.30.4 - 25 Sep 2025

  • We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the codeql-action/init step. #3099 and #3100
  • We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. #3107
  • You can now run the latest CodeQL nightly bundle by passing tools: nightly to the init action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. #3130
  • Update default CodeQL bundle version to 2.23.1. #3118

3.30.3 - 10 Sep 2025

No user facing changes.

3.30.2 - 09 Sep 2025

  • Fixed a bug which could cause language autodetection to fail. #3084
  • Experimental: The quality-queries input that was added in 3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new analysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #3064

3.30.1 - 05 Sep 2025

  • Update default CodeQL bundle version to 2.23.0. #3077

3.30.0 - 01 Sep 2025

... (truncated)

Commits
  • 16140ae Merge pull request #3213 from github/update-v4.30.9-70205d3d1
  • 30db5fe Update changelog for v4.30.9
  • 70205d3 Merge pull request #3211 from github/mbg/init/starting-partial-config
  • 697c209 Merge remote-tracking branch 'origin/main' into mbg/init/starting-partial-config
  • 1bd53ba Merge pull request #3205 from github/update-bundle/codeql-bundle-v2.23.3
  • cac4df0 Rebuild
  • 77e5c0d Merge branch 'main' into update-bundle/codeql-bundle-v2.23.3
  • 97a4f75 Merge pull request #3204 from github/mbg/setup-codeql
  • 2d5512b Merge remote-tracking branch 'origin/main' into mbg/init/starting-partial-config
  • fa7bdf0 Call getAnalysisKinds a second time, and ignore exceptions thrown during th...
  • Additional commits viewable in compare view

Bumps the all group with 7 updates in the /Library/Homebrew directory:

Package From To
rubocop 1.81.1 1.81.6
rubocop-performance 1.26.0 1.26.1
rspec 3.13.1 3.13.2
rspec-core 3.13.5 3.13.6
sorbet-static-and-runtime 0.6.12649 0.6.12656
spoom 1.7.8 1.7.9
tapioca 0.17.7 0.17.8

Updates rubocop from 1.81.1 to 1.81.6

Release notes

Sourced from rubocop's releases.

RuboCop v1.81.6

Bug fixes

  • #14587: Fix an error for Lint/SelfAssignment when using []= assignment with no arguments. (@​koic)
  • #14572: Fix an error for Style/ArrayIntersect when intersection(other).any? is called without a receiver. (@​koic)
  • #14599: Fix a crash when Style/ConditionalAssignment is configured with assign_inside_conditional and the conditional contains a multi-line regex. (@​martinemde)
  • #14574: Fix false positives for Style/RedundantInterpolation when using a one-line => pattern matching. (@​koic)
  • #14602: Fix false positives for Style/EndlessMethod when heredoc is used in method body. (@​koic)
  • #14594: Fix false positives for Style/EndlessMethod when the endless method would exceed the maximum line length. (@​koic)
  • #14605: Fix false positive for Lint/EmptyInterpolation when interpolation is inside a %W literal. (@​dvandersluis)
  • #14604: Fix Style/RedundantFormat false positive when a interpolated value is given to a specifier with a width or precision. (@​dvandersluis)
  • #14607: Fix Style/RedundantFormat handling control characters like \n. (@​dvandersluis)
  • #14577: Fix an incorrect autocorrect for Style/Semicolon when a method call using hash value omission without parentheses is terminated with a semicolon. (@​koic)
  • #14552: Fix a false positive for Security/JSONLoad when create_additions is explicitly specified. (@​earlopain)

Changes

  • #14566: Enhance Lint::ConstantOverwrittenInRescue cop to detect offenses within fully qualified constants. (@​viralpraxis)
  • #14575: Enhance Lint/ConstantOverwrittenInRescue cop to detect offenses within nested constants. (@​viralpraxis)
  • #14596: Change Lint/ConstantOverwrittenInRescue to detect any constant assignment. (@​viralpraxis)
  • #14568: Make Style/LambdaCall autocorrection contextual. (@​koic)
Changelog

Sourced from rubocop's changelog.

1.81.6 (2025-10-21)

Bug fixes

  • #14587: Fix an error for Lint/SelfAssignment when using []= assignment with no arguments. ([@​koic][])
  • #14572: Fix an error for Style/ArrayIntersect when intersection(other).any? is called without a receiver. ([@​koic][])
  • #14599: Fix a crash when Style/ConditionalAssignment is configured with assign_inside_conditional and the conditional contains a multi-line regex. ([@​martinemde][])
  • #14574: Fix false positives for Style/RedundantInterpolation when using a one-line => pattern matching. ([@​koic][])
  • #14602: Fix false positives for Style/EndlessMethod when heredoc is used in method body. ([@​koic][])
  • #14594: Fix false positives for Style/EndlessMethod when the endless method would exceed the maximum line length. ([@​koic][])
  • #14605: Fix false positive for Lint/EmptyInterpolation when interpolation is inside a %W literal. ([@​dvandersluis][])
  • #14604: Fix Style/RedundantFormat false positive when a interpolated value is given to a specifier with a width or precision. ([@​dvandersluis][])
  • #14607: Fix Style/RedundantFormat handling control characters like \n. ([@​dvandersluis][])
  • #14577: Fix an incorrect autocorrect for Style/Semicolon when a method call using hash value omission without parentheses is terminated with a semicolon. ([@​koic][])
  • #14552: Fix a false positive for Security/JSONLoad when create_additions is explicitly specified. ([@​earlopain][])

Changes

  • #14566: Enhance Lint::ConstantOverwrittenInRescue cop to detect offenses within fully qualified constants. ([@​viralpraxis][])
  • #14575: Enhance Lint/ConstantOverwrittenInRescue cop to detect offenses within nested constants. ([@​viralpraxis][])
  • #14596: Change Lint/ConstantOverwrittenInRescue to detect any constant assignment. ([@​viralpraxis][])
  • #14568: Make Style/LambdaCall autocorrection contextual. ([@​koic][])
Commits
  • 8c98655 Cut 1.81.6
  • f5431f5 Update broken link
  • 3d76fb0 Update Changelog
  • fe019a8 Merge pull request #14611 from r7kamura/CopDirectiveSyntax-comment-improve
  • df813a3 Improve Lint/CopDirectiveSyntax cop documentation examples
  • 905c991 Merge pull request #14606 from dvandersluis/issue/14605
  • f7f653f Merge pull request #14608 from dvandersluis/issue/14604
  • 91ed4aa [Fix #14604] Fix Style/RedundantFormat false positive when a interpolated v...
  • bb5d1a3 [Fix #14605] Fix false positive for Lint/EmptyInterpolation when interpolat...
  • 783a4bf Merge pull request #14607 from dvandersluis/redundant-format-control-chars
  • Additional commits viewable in compare view

Updates rubocop-performance from 1.26.0 to 1.26.1

Release notes

Sourced from rubocop-performance's releases.

RuboCop Performance v1.26.1

Bug fixes

  • #517: Fix false positives for Performance/RedundantStringChars when using str.chars[0, 2]. (@​koic)

Changes

  • #520: Disable Performance/BigDecimalWithNumericArgument by default. (@​earlopain)
Changelog

Sourced from rubocop-performance's changelog.

1.26.1 (2025-10-18)

Bug fixes

  • #517: Fix false positives for Performance/RedundantStringChars when using str.chars[0, 2]. ([@​koic][])

Changes

  • #520: Disable Performance/BigDecimalWithNumericArgument by default. ([@​earlopain][])
Commits
  • 4783c90 Cut 1.26.1
  • d3f1806 Update Changelog
  • a63df04 Merge pull request #521 from Earlopain/disable-bigdecimal
  • 7a5499f [Fix #520] Disable Performance/BigDecimalWithNumericArgument by default
  • 03a6071 Merge pull request #518 from koic/fix_false_positives_for_performance_redunda...
  • a1ef194 [Fix #517] Fix false positives for Performance/RedundantStringChars
  • 6e1afeb Tweak bug report template
  • 60ff474 Suppress RuboCop's offense
  • 955429a Switch back docs version to master
  • See full diff in compare view

Updates rspec from 3.13.1 to 3.13.2

Commits

Updates rspec-core from 3.13.5 to 3.13.6

Changelog

Sourced from rspec-core's changelog.

3.13.6 / 2025-10-19

Full Changelog

Bug Fixes:

Commits
  • 4d8e9c3 rspec-core-v3.13.6
  • f55a7d3 Merge pull request #240 from viralpraxis/fix-unused-block-warning
  • 72949df Continue removing :if / :unless and fix broken skip
  • 3fbe74e Adjust specs to be deprecation warning-free
  • f5cb8cf Use :skip instead of :if/:else in specs
  • See full diff in compare view

Updates sorbet-static-and-runtime from 0.6.12649 to 0.6.12656

Release notes

Sourced from sorbet-static-and-runtime's releases.

sorbet 0.6.12655.20251022124514-04568a2dd

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12655', :group => :development
gem 'sorbet-runtime', '0.6.12655'

sorbet 0.6.12654.20251022123820-6e0342fef

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12654', :group => :development
gem 'sorbet-runtime', '0.6.12654'

sorbet 0.6.12653.20251022121005-4b75ddd63

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12653', :group => :development
gem 'sorbet-runtime', '0.6.12653'

sorbet 0.6.12652.20251021202248-3eeeb7aa0

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12652', :group => :development
gem 'sorbet-runtime', '0.6.12652'

sorbet 0.6.12651.20251020155103-8a0290f85

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12651', :group => :development
gem 'sorbet-runtime', '0.6.12651'

sorbet 0.6.12650.20251017065549-f491ad543

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12650', :group => :development
gem 'sorbet-runtime', '0.6.12650'

sorbet 0.6.12649.20251016173128-27b93cc66

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12649', :group => :development
gem 'sorbet-runtime', '0.6.12649'
Commits

Updates spoom from 1.7.8 to 1.7.9

Release notes

Sourced from spoom's releases.

v1.7.9

What's Changed

🛠 Other Changes

Full Changelog: Shopify/spoom@v1.7.8...v1.7.9

Commits
  • b15cfe6 Bump version to v1.7.9
  • 3f4ce87 Merge pull request #791 from Shopify/uk-type-alias-rewriting
  • 5fbfe87 Refactor parse_ruby to always attach & return comments
  • 7f232cf Update exported RBI file
  • 2d24ccf Rewrite type aliases
  • See full diff in compare view

Updates tapioca from 0.17.7 to 0.17.8

Release notes

Sourced from tapioca's releases.

v0.17.8

What's Changed

✨ Enhancements

🐛 Bug Fixes

New Contributors

Full Changelog: Shopify/tapioca@v0.17.7...v0.17.8

Commits
  • 0a9b43b Bump version to v0.17.8
  • 897ea69 Merge pull request #2397 from Shopify/dependabot/bundler/rack-3.2.2
  • baff5ab Bump rack gem RBI
  • d524065 Bump rack from 3.2.0 to 3.2.2
  • 6bf27f3 Merge pull request #2395 from cub8/output-currently-compiling-gems
  • 3864d7a Pass verbose parameter to gems command. Print currently compiled gems.
  • c082032 Merge pull request #2394 from Shopify/ko/remove-include-kernel-from-modules
  • 248119c Do not mixin Kernel for modules
  • 2ad6511 Merge pull request #2392 from Shopify/dependabot/bundler/minor-and-patch-9c1f...
  • 6c480d6 Regenerate gem RBIs
  • Additional commits viewable in compare view

Updates sorbet-runtime from 0.6.12649 to 0.6.12656

Release notes

Sourced from sorbet-runtime's releases.

sorbet 0.6.12655.20251022124514-04568a2dd

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12655', :group => :development
gem 'sorbet-runtime', '0.6.12655'

sorbet 0.6.12654.20251022123820-6e0342fef

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12654', :group => :development
gem 'sorbet-runtime', '0.6.12654'

sorbet 0.6.12653.20251022121005-4b75ddd63

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12653', :group => :development
gem 'sorbet-runtime', '0.6.12653'

sorbet 0.6.12652.20251021202248-3eeeb7aa0

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12652', :group => :development
gem 'sorbet-runtime', '0.6.12652'

sorbet 0.6.12651.20251020155103-8a0290f85

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12651', :group => :development
gem 'sorbet-runtime', '0.6.12651'

sorbet 0.6.12650.20251017065549-f491ad543

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12650', :group => :development
gem 'sorbet-runtime', '0.6.12650'

sorbet 0.6.12649.20251016173128-27b93cc66

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12649', :group => :development
gem 'sorbet-runtime', '0.6.12649'
Commits

Updates benchmark from 0.4.1 to 0.5.0

Release notes

Sourced from benchmark's releases.

v0.5.0

What's Changed

New Contributors

Full Changelog: ruby/benchmark@v0.4.1...v0.5.0

Commits
  • efa6e61 v0.5.0
  • 7ba0632 Merge pull request #39 from ruby/dependabot/github_actions/step-security/hard...
  • 837ba3c Bump step-security/harden-runner from 2.13.0 to 2.13.1
  • 3857561 Update ruby/setup-ruby
  • fc27ad1 Merge pull request #38 from Shopify/add-ms-function-and-pass-unit-arg-to-real...
  • 6a3fe1f Add Benchmark.ms method and enhance realtime with unit parameter
  • 4e39de6 Merge pull request #37 from ruby/dependabot/github_actions/actions/checkout-5
  • 15a756a Bump actions/checkout from 4 to 5
  • 9e80d1b Merge pull request #36 from ruby/dependabot/github_actions/step-security/hard...
  • ef259f4 Bump step-security/harden-runner from 2.12.2 to 2.13.0
  • Additional commits viewable in compare view

Updates sorbet from 0.6.12649 to 0.6.12656

Release notes

Sourced from sorbet's releases.

sorbet 0.6.12655.20251022124514-04568a2dd

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12655', :group => :development
gem 'sorbet-runtime', '0.6.12655'

sorbet 0.6.12654.20251022123820-6e0342fef

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12654', :group => :development
gem 'sorbet-runtime', '0.6.12654'

sorbet 0.6.12653.20251022121005-4b75ddd63

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12653', :group => :development
gem 'sorbet-runtime', '0.6.12653'

sorbet 0.6.12652.20251021202248-3eeeb7aa0

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12652', :group => :development
gem 'sorbet-runtime', '0.6.12652'

sorbet 0.6.12651.20251020155103-8a0290f85

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12651', :group => :development
gem 'sorbet-runtime', '0.6.12651'

sorbet 0.6.12650.20251017065549-f491ad543

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12650', :group => :development
gem 'sorbet-runtime', '0.6.12650'

sorbet 0.6.12649.20251016173128-27b93cc66

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12649', :group => :development
gem 'sorbet-runtime', '0.6.12649'
Commits

Updates sorbet-static from 0.6.12649 to 0.6.12656

Release notes

Sourced from sorbet-static's releases.

sorbet 0.6.12655.20251022124514-04568a2dd

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12655', :group => :development
gem 'sorbet-runtime', '0.6.12655'

sorbet 0.6.12654.20251022123820-6e0342fef

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12654', :group => :development
gem 'sorbet-runtime', '0.6.12654'

sorbet 0.6.12653.20251022121005-4b75ddd63

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12653', :group => :development
gem 'sorbet-runtime', '0.6.12653'

sorbet 0.6.12652.20251021202248-3eeeb7aa0

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12652', :group => :development
gem 'sorbet-runtime', '0.6.12652'

sorbet 0.6.12651.20251020155103-8a0290f85

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12651', :group => :development
gem 'sorbet-runtime', '0.6.12651'

sorbet 0.6.12650.20251017065549-f491ad543

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12650', :group => :development
gem 'sorbet-runtime', '0.6.12650'

sorbet 0.6.12649.20251016173128-27b93cc66

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12649', :group => :development
gem 'sorbet-runtime', '0.6.12649'
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).


Updates `github/codeql-action` from 4.30.8 to 4.30.9
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@f443b60...16140ae)
build(deps): bump the all group across 1 directory with 11 updates

Bumps the all group with 7 updates in the /Library/Homebrew directory:

| Package | From | To |
| --- | --- | --- |
| [rubocop](https://github.com/rubocop/rubocop) | `1.81.1` | `1.81.6` |
| [rubocop-performance](https://github.com/rubocop/rubocop-performance) | `1.26.0` | `1.26.1` |
| [rspec](https://github.com/rspec/rspec) | `3.13.1` | `3.13.2` |
| [rspec-core](https://github.com/rspec/rspec) | `3.13.5` | `3.13.6` |
| [sorbet-static-and-runtime](https://github.com/sorbet/sorbet) | `0.6.12649` | `0.6.12656` |
| [spoom](https://github.com/Shopify/spoom) | `1.7.8` | `1.7.9` |
| [tapioca](https://github.com/Shopify/tapioca) | `0.17.7` | `0.17.8` |



Updates `rubocop` from 1.81.1 to 1.81.6
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.81.1...v1.81.6)

Updates `rubocop-performance` from 1.26.0 to 1.26.1
- [Release notes](https://github.com/rubocop/rubocop-performance/releases)
- [Changelog](https://github.com/rubocop/rubocop-performance/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop-performance@v1.26.0...v1.26.1)

Updates `rspec` from 3.13.1 to 3.13.2
- [Commits](rspec/rspec@rspec-v3.13.1...rspec-v3.13.2)

Updates `rspec-core` from 3.13.5 to 3.13.6
- [Changelog](https://github.com/rspec/rspec/blob/rspec-core-v3.13.6/rspec-core/Changelog.md)
- [Commits](rspec/rspec@rspec-core-v3.13.5...rspec-core-v3.13.6)

Updates `sorbet-static-and-runtime` from 0.6.12649 to 0.6.12656
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `spoom` from 1.7.8 to 1.7.9
- [Release notes](https://github.com/Shopify/spoom/releases)
- [Commits](Shopify/spoom@v1.7.8...v1.7.9)

Updates `tapioca` from 0.17.7 to 0.17.8
- [Release notes](https://github.com/Shopify/tapioca/releases)
- [Commits](Shopify/tapioca@v0.17.7...v0.17.8)

Updates `sorbet-runtime` from 0.6.12649 to 0.6.12656
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `benchmark` from 0.4.1 to 0.5.0
- [Release notes](https://github.com/ruby/benchmark/releases)
- [Commits](ruby/benchmark@v0.4.1...v0.5.0)

Updates `sorbet` from 0.6.12649 to 0.6.12656
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `sorbet-static` from 0.6.12649 to 0.6.12656
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.30.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: rubocop
  dependency-version: 1.81.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: rubocop-performance
  dependency-version: 1.26.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: rspec
  dependency-version: 3.13.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: rspec-core
  dependency-version: 3.13.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: sorbet-static-and-runtime
  dependency-version: 0.6.12656
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: spoom
  dependency-version: 1.7.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: tapioca
  dependency-version: 0.17.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: sorbet-runtime
  dependency-version: 0.6.12656
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: benchmark
  dependency-version: 0.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: sorbet
  dependency-version: 0.6.12656
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: sorbet-static
  dependency-version: 0.6.12656
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Bumping Gemfile dependencies github_actions Pull requests that update GitHub Actions code labels Oct 24, 2025
@ZhongRuoyu ZhongRuoyu added this pull request to the merge queue Oct 24, 2025
Merged via the queue into main with commit 7d0d5d7 Oct 24, 2025
39 checks passed
@ZhongRuoyu ZhongRuoyu deleted the dependabot/all-d910ee9d0c branch October 24, 2025 09:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Bumping Gemfile dependencies github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants