Skip to content

Bump the development-dependencies group with 7 updates - #57

Closed
dependabot[bot] wants to merge 1 commit into
layerrail-rebrand-startfrom
dependabot/bundler/development-dependencies-25aae14f9a
Closed

Bump the development-dependencies group with 7 updates#57
dependabot[bot] wants to merge 1 commit into
layerrail-rebrand-startfrom
dependabot/bundler/development-dependencies-25aae14f9a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 7 updates:

Package From To
rubocop-capybara 2.23.0 3.0.0
rubocop-rspec 3.9.0 3.10.2
standard 1.54.0 1.56.0
brakeman 8.0.4 8.0.5
simplecov 0.22.0 1.0.1
ferrum 0.17.1 0.17.2
herb 0.9.4 0.10.2

Updates rubocop-capybara from 2.23.0 to 3.0.0

Release notes

Sourced from rubocop-capybara's releases.

RuboCop Capybara v3.0.0

  • Enable pending cops by default for the 3.0 release. (@​ydah)
  • Remove the deprecated Capybara/ClickLinkOrButtonStyle cop. (@​ydah)
  • Remove obsolete cop name migration config for the 2.x to 3.0 transition. (@​ydah)
Changelog

Sourced from rubocop-capybara's changelog.

3.0.0 (2026-06-22)

  • Enable pending cops by default for the 3.0 release. ([@​ydah])
  • Remove the deprecated Capybara/ClickLinkOrButtonStyle cop. ([@​ydah])
  • Remove obsolete cop name migration config for the 2.x to 3.0 transition. ([@​ydah])
Commits
  • a9b8f9a Merge pull request #177 from rubocop/v3.0.0
  • 6a4579d release v3.0.0
  • 75e7cda Merge pull request #176 from rubocop/docs/update-specific-matcher-readme
  • f02ff72 Update SpecificMatcher README example
  • ebe10e8 Merge pull request #174 from rubocop/enable-pending-capybara-cops
  • 20a5721 Enable pending Capybara cops
  • fee3774 Merge pull request #173 from rubocop/remove-obsolete-cop-name-migration
  • ea818bd Remove obsolete cop name migration config
  • 989fe3c Merge pull request #172 from rubocop/remove-click-link-or-button-style
  • 5d5a5b8 Merge pull request #175 from rubocop/dependabot/github_actions/actions/checko...
  • Additional commits viewable in compare view

Updates rubocop-rspec from 3.9.0 to 3.10.2

Release notes

Sourced from rubocop-rspec's releases.

RuboCop RSpec v3.10.2

  • Fix false positives for RSpec/SpecFilePathFormat when CustomTransform maps a namespace to an empty string. (@​sakuro)
  • Fix RSpec/MatchWithSimpleRegex to ignore regular expressions with options. (@​bquorning)

RuboCop RSpec v3.10.1

  • Add Strict option to RSpec/SharedContext to flag shared_context whenever it contains examples, even alongside setup code. (@​Darhazer)
  • Add NegatedMatcher configuration option RSpec/ExpectChange. (@​Darhazer)
  • Fix RSpec/MatchWithSimpleRegex to ignore regular expressions with interpolations. (@​bquorning)

RuboCop RSpec v3.10.0

  • Add new cop RSpec/MatchWithSimpleRegex to suggest include matcher when match is used with simple string literals without regex-specific features. (@​bquorning)
  • Add new cop RSpec/DiscardedMatcher to detect matchers in void context (e.g. missing .and between compound matchers). (@​ydakuka)
  • Add support for itblock nodes. (@​Darhazer)
  • RSpec/ScatteredLet now preserves the order of lets during auto-correction. (@​Darhazer)
  • Fix a false negative for RSpec/EmptyLineAfterFinalLet inside shared_examples / include_examples / it_behaves_like blocks. (@​Darhazer)
  • Fix a false positive for RSpec/ContainExactly when contain_exactly has multiple splat arguments. (@​ydah)
  • Add autocorrect support for RSpec/SubjectDeclaration. (@​eugeneius)
  • Fix false negatives for RSpec/SpecFilePathFormat when the expected class path only partially matches a path segment. (@​ydah)
  • Fix a false negative for RSpec/ExpectActual when the matcher takes no arguments (e.g. expect("foo").to be_present, expect(1).to be). (@​cvx)
Changelog

Sourced from rubocop-rspec's changelog.

3.10.2 (2026-06-06)

  • Fix false positives for RSpec/SpecFilePathFormat when CustomTransform maps a namespace to an empty string. ([@​sakuro])
  • Fix RSpec/MatchWithSimpleRegex to ignore regular expressions with options. ([@​bquorning])

3.10.1 (2026-06-05)

  • Add Strict option to RSpec/SharedContext to flag shared_context whenever it contains examples, even alongside setup code. ([@​Darhazer])
  • Add NegatedMatcher configuration option RSpec/ExpectChange. ([@​Darhazer])
  • Fix RSpec/MatchWithSimpleRegex to ignore regular expressions with interpolations. ([@​bquorning])

3.10.0 (2026-06-05)

  • Add new cop RSpec/MatchWithSimpleRegex to suggest include matcher when match is used with simple string literals without regex-specific features. ([@​bquorning])
  • Add new cop RSpec/DiscardedMatcher to detect matchers in void context (e.g. missing .and between compound matchers). ([@​ydakuka])
  • Add support for itblock nodes. ([@​Darhazer])
  • RSpec/ScatteredLet now preserves the order of lets during auto-correction. ([@​Darhazer])
  • Fix a false negative for RSpec/EmptyLineAfterFinalLet inside shared_examples / include_examples / it_behaves_like blocks. ([@​Darhazer])
  • Fix a false positive for RSpec/ContainExactly when contain_exactly has multiple splat arguments. ([@​ydah])
  • Add autocorrect support for RSpec/SubjectDeclaration. ([@​eugeneius])
  • Fix false negatives for RSpec/SpecFilePathFormat when the expected class path only partially matches a path segment. ([@​ydah])
  • Fix a false negative for RSpec/ExpectActual when the matcher takes no arguments (e.g. expect("foo").to be_present, expect(1).to be). ([@​cvx])
Commits
  • 2488441 Merge pull request #2189 from rubocop/release
  • c9e53cf Bump version to 3.10.2
  • 7ae0a42 Merge pull request #2186 from sakuro/fix/spec-file-path-format-empty-custom-t...
  • 8b0b5e9 Merge branch 'master' into fix/spec-file-path-format-empty-custom-transform
  • dc4465c Merge pull request #2188 from rubocop/fix-2185
  • d5de6b2 Consider regexp with options a non-simple regexp
  • bad0cb3 🐛 Fix RSpec/SpecFilePathFormat false positives when CustomTransform maps ...
  • ec3eeab Merge pull request #2183 from rubocop/fix-match-with-simple-regex-with-interp...
  • 16bbf49 Bump version to 3.10.1
  • 2a78abd Ignore interpolation in MatchWithSimpleRegex
  • Additional commits viewable in compare view

Updates standard from 1.54.0 to 1.56.0

Changelog

Sourced from standard's changelog.

1.56.0

1.55.0

Commits
  • d695ba0 🏆⚽️ v1.56.0
  • 86a92fa Merge pull request #823 from standardrb/upgrade-2026-07-15
  • dfcaef8 Fixes Parallel's overzealous update
  • 5e68710 Updates rubocop to 1.88
  • 95f959b Merge pull request #822 from standardrb/dependabot/bundler/ruby-lsp-0.26.10
  • 42c9d35 Bump ruby-lsp from 0.26.9 to 0.26.10
  • 79cd977 Merge pull request #818 from standardrb/dependabot/bundler/language_server-pr...
  • 3011204 Bump language_server-protocol from 3.17.0.5 to 3.17.0.6
  • 505e8e6 Merge pull request #797 from standardrb/dependabot/bundler/ruby-lsp-0.26.9
  • af5498a Merge pull request #816 from standardrb/dependabot/github_actions/step-securi...
  • Additional commits viewable in compare view

Updates brakeman from 8.0.4 to 8.0.5

Release notes

Sourced from brakeman's releases.

8.0.5

Changelog

Sourced from brakeman's changelog.

8.0.5 - 2026-06-12

  • Add quote_schema_name to safe quote method list (Zsolt Kozaroczy)
  • Fix SQL injection false positive for compact_blank/compact on permitted params (Arpit Jain)
  • Fix inline render false positive for local named text (Arpit Jain)
  • Fix HAML crash on .raw calls (Federico Franco)
  • Fix Ruby version parsing - especially for non-CRuby versions (Chris Southerland Jr)
  • Fix TemplateAliasProcessor#template_name arity (viralpraxis)
  • Reduce false positives when using shell escaping
Commits
  • 104443e Bump to 8.0.5
  • 8e61e2a Update CHANGES
  • f014c15 Merge pull request #2028 from kiskoza/fix/quote_schema_name
  • 9227822 Merge pull request #2027 from arpitjain099/fix/brakeman-1915-render-partial-t...
  • 6788d28 Merge pull request #2025 from arpitjain099/fix/sql-fp-compact-blank
  • b7c3906 Add quote_schema_name to safe quote method list
  • f95c500 test: update line number for still-warns SQL injection case after fixture shift
  • 4fba779 base_processor: skip hash render-type extraction when type set positionally
  • 1e63a41 Fix SQL injection false positive for compact_blank/compact on permitted params
  • 7ff9e49 Merge pull request #2023 from FFederi/fix-haml-chained-raw-crash
  • Additional commits viewable in compare view

Updates simplecov from 0.22.0 to 1.0.1

Release notes

Sourced from simplecov's releases.

v1.0.1

What's Changed

New Contributors

Full Changelog: simplecov-ruby/simplecov@v1.0.0...v1.0.1

v1.0.0

What's Changed

... (truncated)

Changelog

Sourced from simplecov's changelog.

1.0.1 (2026-07-14)

Enhancements

  • The gem now ships type signatures under sig/, covering the public API: the configuration DSL (including the criterion-scoped coverage block and the legacy deprecated verbs), the Result / FileList / SourceFile / CoverageStatistics read API that formatter authors consume, the formatter and filter class hierarchies, exit codes, and the ParallelAdapters::Base contract. Internal classes carry repository-only skeleton signatures (sig/internal/, excluded from the gem package) so the entire codebase type-checks under Steep in strict mode, while the shipped signature payload stays small. Signatures are checked with rbs validate and steep check as part of the default rake task. RBS and Steep users no longer need the third-party signatures from ruby/gem_rbs_collection, which cover the 0.22 API and predate 1.0's configuration redesign.

Bugfixes

  • Branch tuples synthesized for tracked-but-unloaded files now match Ruby's Coverage exactly for elsif and for if arms with empty bodies. StaticCoverageExtractor attributed the outer else arm of an elsif to the clause's body rather than the whole clause, and an empty if then-body to the whole node rather than Coverage's zero-width point at the predicate's end. Since resultset merges combine branch arms by their exact location, a simulated entry merging with a real one for the same file (parent and worker under Minitest's parallelize, or RSpec and Minitest suites collated together) produced phantom, permanently-missed branch arms. A new differential spec now pins every branch construct tuple-for-tuple against Ruby's Coverage — which promptly caught that CRuby 3.4 changed several of these conventions, so the extractor now emits whichever shape the running Ruby's Coverage uses (on 3.2/3.3: elsif clause ranges end at the chain's last content rather than the shared end, empty if/else/when bodies fall back to enclosing ranges, and empty while/in bodies collapse to points). Reported with an exemplary diagnosis by @​hasghari. See #1226.
  • merge_subprocesses no longer silently drops all worker coverage under Minitest's fork-based parallelize(workers: N) (the setup the rails profile exists for). When Minitest's autorun was armed before SimpleCov.start — which is how rails test loads — SimpleCov deferred its report to Minitest.after_run, and forked workers inherited that deferral even though Minitest pins its after_run hook to the parent's pid, so no exit path in the worker ever stored its resultset. Workers now reset the inherited at_exit state on fork and re-arm their own hook, so their resultsets are stored and merged as documented. Reported with an exemplary diagnosis by @​hasghari. See #1227.
  • Fixed SimpleCov.formatters= raising NoMethodError when given a single formatter instead of an Array — a regression from 0.22.x, where MultiFormatter.new normalized the value internally. This restores the long-documented SimpleCov.formatters = SimpleCov::Formatter::MultiFormatter.new([...]) pattern, in which MultiFormatter.new returns a Class rather than an Array. The regression surfaced in ruby/ruby's CI through net-imap's test helper. Thanks @​koic. See #1224.
  • Formatter status lines ("Coverage report generated for X") and threshold-enforcement output (violation reports, "SimpleCov failed with exit N") no longer route through Kernel#warn. They still print to stderr, but they are program output rather than Ruby warnings, so Warning.warn hooks — warning trackers and raise-on-warning test setups — no longer intercept them as unaddressable noise, and threshold failure explanations now survive ruby -W0, which previously reduced a failing check to a bare exit code with no explanation. Genuine warnings (deprecations, dropped-file notices, parse failures) still use warn. Suppression remains explicit: silent: true for formatter status lines, print_errors false for enforcement output. Thanks @​viralpraxis. See #1225.

1.0.0 (2026-07-12)

First stable release of the 1.0 line. The entries below consolidate release candidates rc1 through rc5 and describe all changes since 0.22.1.

Breaking Changes

  • Dropped support for Ruby 3.1 and JRuby 9.4. The minimum is now Ruby 3.2 (and JRuby 10, which reports RUBY_VERSION 3.4). Ruby 3.1 reached end of life in March 2025, and a recent i18n release calls Fiber[], a Ruby 3.2 API, at load time, so suites that load Rails no longer run on 3.1. Raising required_ruby_version to >= 3.2 also excludes JRuby 9.4, which reports RUBY_VERSION 3.1.x. See #1171.
  • JSON formatter: group stats changed from { "covered_percent": 80.0 } to full stats shape { "covered": 8, "missed": 2, "total": 10, "percent": 80.0, "strength": 0.0 }. The key covered_percent is renamed to percent.
  • JSON formatter: simplecov_json_formatter gem is now built in. require "simplecov_json_formatter" continues to work via a shim.
  • StringFilter now matches at path-segment boundaries. "lib" matches /lib/ but no longer matches /library/. Use a Regexp filter for substring matching.
  • SourceFile#project_filename now returns a truly relative path with no leading separator (e.g. lib/foo.rb instead of /lib/foo.rb). This also removes the leading / from file path keys in coverage.json and from the filename in minimum_coverage_by_file error messages. Anchored RegexFilters that relied on a leading / (e.g. %r{^/lib/}) should be rewritten (e.g. %r{\Alib/}).
  • Removed docile gem dependency. The SimpleCov.configure block is now evaluated via instance_exec with instance variable proxying.
  • Removed automatic activation of JSONFormatter when the CC_TEST_REPORTER_ID environment variable is set. The default HTMLFormatter now emits coverage.json alongside the HTML report (using JSONFormatter.build_hash to serialize the same payload JSONFormatter writes), so the env-var special case is no longer needed. Because of this, listing JSONFormatter alongside HTMLFormatter is redundant and can be removed.
  • SimpleCov.start now loads the test_frameworks profile by default, which filters paths under test/, spec/, features/, and autotest/. Running the suite always executes 100% of the test files themselves, which inflated the overall percentage and obscured application coverage. To opt back in (e.g. to surface dead test helpers), drop the filter with remove_filter %r{\A(test|features|spec|autotest)/}. See #816.
  • HTML and JSON formatters now write the "Coverage report generated for X to Y" status line (and the per-criterion totals beneath it) to stderr instead of stdout. The message is a diagnostic, not the program's output, and routing it to stdout polluted pipelines like rspec -f json. Suppress it entirely with silent: true on the formatter; redirect with 2>&1 if you want the old behavior. See #1060.
  • Under parallel_tests, SimpleCov now waits in the first started process (via ParallelTests.first_process?) rather than the last. This matches the convention parallel_tests's own README recommends for "do something once after all workers finish" hooks, so user code that has its own ParallelTests.wait_for_other_processes_to_finish in an RSpec.after(:suite) (or equivalent) no longer deadlocks against SimpleCov's wait when both pick the same process. As a side benefit, the previous PARALLEL_TEST_GROUPS=1 workaround for last_process?'s "" == "1" mismatch (#1066) is no longer needed — first_process? handles that case naturally. Migration: the rare project that wired its own wait via ParallelTests.last_process? now hits the symmetric deadlock and must switch to first_process?. See #922.
  • Removed SimpleCov.coverage_criterion. It was a reader/writer for a value nothing in SimpleCov ever consumed, so it duplicated primary_coverage without affecting any behavior. Use primary_coverage to choose the report's leading criterion (or the coverage :branch, primary: true form).

Deprecations

  • The configuration API has been redesigned around a smaller, more consistent set of verbs. The legacy methods continue to work but each emits a deprecation warning that names its replacement; a future release will remove them. Warnings are deduplicated by call site, so a deprecated method called in a loop or a configuration block re-evaluated once per parallel worker or spec file warns at most once per source location (see #1204). See the "Migrating from the legacy configuration API" section in the README for the full migration table and a before/after example.
    • add_filter → skip (identical matcher grammar; no behavior change)
    • add_group → group (identical matcher grammar; no behavior change)
    • track_files → cover (cover includes unloaded files like track_files did and restricts the report to the matching set; pass every directory you want reported, e.g. cover "lib/**/*.rb", "app/**/*.rb", to keep the old additive-only behavior)
    • use_merging → merging (same value)
    • enable_for_subprocesses → merge_subprocesses (same value)
    • enable_coverage_for_eval → enable_coverage :eval (folds into the same call that enables :line / :branch / :method)
    • print_error_status (reader) → print_errors (the print_error_status= writer is unaffected for now)
  • Calling SimpleCov.start from .simplecov is deprecated. Coverage tracking still begins for backward compatibility, but a one-time deprecation warning fires pointing the user at moving the call into spec_helper.rb / test_helper.rb; a future release will require the explicit SimpleCov.start from a test helper. The migration goes hand-in-hand with the bugfix below: once SimpleCov.start lives in the test helper, the parent process that auto-loads .simplecov never starts tracking and the empty-report-overwrite scenario can't arise. See #581.
  • # :nocov: toggle comments (and the configurable SimpleCov.nocov_token / SimpleCov.skip_token) are deprecated in favor of the new # simplecov:disable / # simplecov:enable directives. Each file that still uses # :nocov: emits a one-time deprecation warning to stderr at load time pointing at the recommended replacement, and any call to SimpleCov.nocov_token or SimpleCov.skip_token (getter or setter) likewise warns. The directive will be removed in a future release.
  • SimpleCov::SourceFile#branches_coverage_percent and #methods_coverage_percent are deprecated in favor of the uniform covered_percent(:branch) / covered_percent(:method). covered_percent (and covered_strength) now take a criterion argument (defaulting to :line), so the same call reaches any criterion instead of line being the unprefixed default while branch and method had their own differently-named methods. coverage_statistics also now accepts a criterion (e.g. coverage_statistics(:branch)) to return that one CoverageStatistics rather than the whole Hash.
  • minimum_coverage_by_file and minimum_coverage_by_group are deprecated in favor of the coverage method's minimum_per_file / minimum_per_group verbs. The legacy methods overloaded a single hash to carry both per-criterion defaults and per-path / per-group overrides, with minimum_coverage_by_file further distinguishing Symbol keys (criterion defaults) from String / Regexp keys (path overrides) and accepting either a bare number or a per-criterion hash as the value. The coverage block fixes the criterion so every threshold is a plain percentage with an only: target. The setter form emits a deprecation warning naming the replacement; the no-arg getter (read internally) is unchanged. Replace e.g. minimum_coverage_by_file line: 70, 'app/x.rb' => 100 with coverage(:line) { minimum_per_file 70; minimum_per_file 100, only: 'app/x.rb' }. See the "Per-criterion thresholds with coverage" README section.

Enhancements

  • simplecov uncovered gained --criterion line|branch|method (default line) so the lowest-coverage listing can rank by branch or method coverage, not just line.
  • Added the criterion-first coverage configuration method — a uniform way to configure each coverage criterion (:line, :branch, :method) in one place. coverage :line do minimum 90; minimum_per_file 80; maximum_drop 5 end (or the one-liner coverage :branch, minimum: 80) enables the criterion and declares its thresholds with identical syntax regardless of criterion, because the criterion is fixed by the enclosing call rather than smuggled into the argument as the historical "a bare number means line coverage, every other criterion needs a Hash" special case. Verbs: minimum, maximum, exact, maximum_drop, minimum_per_file (with only: String-path / Regexp overrides), and minimum_per_group. Options: primary: (the report's leading criterion), oneshot: (oneshot-lines mode for :line), and :eval. The flat minimum_coverage family remains as suite-wide sugar. Thresholds feed the same internal stores, so exit-code enforcement is unchanged. See the "Per-criterion thresholds with coverage" section in the README.
  • JSON formatter: coverage.json now carries a top-level $schema field holding the URL of the versioned canonical JSON Schema the document conforms to, plus a human-readable meta.schema_version ("major.minor", currently "1.0"). The versioned canonical lives at schemas/coverage-v1.0.schema.json and is immutable per version, an unversioned convenience alias at schemas/coverage.schema.json always tracks the latest. Downstream tools can validate inputs, generate types, or pin to a known shape, and the document-level $schema makes each payload self-describing. The schema version is independent of the gem version: additive changes bump minor, removals or shape changes bump major and ship as a new schemas/coverage-vX.0.schema.json file so prior-version consumers stay valid. meta.commit carries the git commit SHA the report was generated against (or null outside a git checkout), so tools can recover the exact source from history even when source_in_json false omits the per-file source arrays.
  • Added SimpleCov::ParallelAdapters — a pluggable adapter interface for parallel test runners. SimpleCov's coordination with parallel test runners (deciding which worker does final-result work, waiting for siblings, knowing how many resultsets to expect) now routes through an adapter chain rather than hard-coding the parallel_tests gem's API. Two adapters ship: ParallelTestsAdapter wraps the historical grosser/parallel_tests gem (precise, gem-API-based); GenericAdapter handles any runner that follows the TEST_ENV_NUMBER / PARALLEL_TEST_GROUPS env-var convention without shipping a Ruby API. The practical impact: parallel_rspec (and any similar env-var-only runner) now works out of the box — previously every worker thought it was the "final" one and they clobbered each other's resultsets. Custom runners can register their own adapter via SimpleCov::ParallelAdapters.register MyAdapter, where MyAdapter subclasses SimpleCov::ParallelAdapters::Base and overrides the four contract methods (active?, first_worker?, wait_for_siblings, expected_worker_count). See #1065.
  • Added SimpleCov.ignore_branches for opting out of synthetic :else branches that Ruby's Coverage library reports for constructs with no literal else keyword — exhaustive case/in pattern matches, case/when without else, ||= / &&=, and if / unless without else. Variadic; only :implicit_else is supported today, with room for future synthetic branch types. Calling it without (or before) enable_coverage :branch is harmless — the setting is stored and applies once branch coverage is enabled. Explicit else arms still count. See #1033.

... (truncated)

Commits
  • ab1b6d4 Bump version to 1.0.1
  • cfb58a2 Emit branch tuples matching the running Ruby's Coverage conventions
  • 56ed0be Match Coverage's branch tuples for elsif and empty if bodies
  • bee8c3e Store forked worker coverage when Minitest owns the exit hook
  • ead027d Keep enforcement output out of the Warning subsystem
  • 7274905 Explicitly write formatter's status message to STDERR
  • 26c8c42 Ship RBS signatures checked by Steep
  • c903a2a Fix NoMethodError in formatters= for non-Array arguments
  • 6690dae Bump version to 1.0.0
  • feaf13b Consolidate release candidate CHANGELOG entries into 1.0.0
  • Additional commits viewable in compare view

Updates ferrum from 0.17.1 to 0.17.2

Release notes

Sourced from ferrum's releases.

0.17.2

Added

  • Ferrum::Network::Response#body! returns body or throws error if implicable
  • Ferrum::Browser#new(dockerize: true) whether to add CLI flags to run a browser in a container, false by default
  • Initial support for RBS types #565

Changed

  • Ferrum::Network::Response#body returns body or nil in case of errors
  • Disable Chrome code sign clones #555
  • Ruby version required is >= 3.1 #565

Fixed

  • Proper handle wss urls, and fix session_id loss for undetermined order of CDP events #559
  • browser.reset tries to dispose default implicit context #566, #540
Changelog

Sourced from ferrum's changelog.

0.17.2 (March 23, 2026)

Added

  • Ferrum::Network::Response#body! returns body or throws error if implicable
  • Ferrum::Browser#new(dockerize: true) whether to add CLI flags to run a browser in a container, false by default
  • Initial support for RBS types #565

Changed

  • Ferrum::Network::Response#body returns body or nil in case of errors
  • Disable Chrome code sign clones #555
  • Ruby version required is >= 3.1 #565

Fixed

  • Proper handle wss urls, and fix session_id loss for undetermined order of CDP events #559
  • browser.reset tries to dispose default implicit context #566, #540

Removed

Commits
  • 2f0699d Bump up
  • aa0b7ad chore: revert default for :pending_connection_errors to true and update relat...
  • 3606d54 fix: undefined method `find_target' for nil (NoMethodError) #542
  • 25f68f8 chore: update CHANGELOG
  • 56a46cd fix: browser.reset tries to dispose default implicit context #540 (#566)
  • 0c4d14b Add RBS types (#565)
  • e1b51b1 chore: add CHANGELOG entry
  • 8c68153 fix: ensure session_id is set only if session is absent
  • de385e2 Fix wss urls and session_id lost (#559)
  • 1cd3d76 chore: move documentation to a dedicated website
  • Additional commits viewable in compare view

Updates herb from 0.9.4 to 0.10.2

Release notes

Sourced from herb's releases.

v0.10.2

Parser

Linter

New Linter Rules

Updates Rules

Formatter

Laguage Server

Core

JavaScript

Ruby

... (truncated)

Commits
  • b224454 JavaScript: Set unreleased rules to v0.10.2
  • 3f65710 v0.10.2 (#1853)
  • 722d53c Language Server: Fix comments inside multiline ERB tags (#1776)
  • a53af59 Bump @​types/node from 26.0.1 to 26.1.1 (#1848)
  • 4a174b9 Bump sorbet from 0.6.13323 to 0.6.13341 (

@dependabot
Bump the development-dependencies group with 7 updates
d57888c 
Bumps the development-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [rubocop-capybara](https://github.com/rubocop/rubocop-capybara) | `2.23.0` | `3.0.0` |
| [rubocop-rspec](https://github.com/rubocop/rubocop-rspec) | `3.9.0` | `3.10.2` |
| [standard](https://github.com/standardrb/standard) | `1.54.0` | `1.56.0` |
| [brakeman](https://github.com/presidentbeef/brakeman) | `8.0.4` | `8.0.5` |
| [simplecov](https://github.com/simplecov-ruby/simplecov) | `0.22.0` | `1.0.1` |
| [ferrum](https://github.com/rubycdp/ferrum) | `0.17.1` | `0.17.2` |
| [herb](https://github.com/marcoroth/herb) | `0.9.4` | `0.10.2` |


Updates `rubocop-capybara` from 2.23.0 to 3.0.0
- [Release notes](https://github.com/rubocop/rubocop-capybara/releases)
- [Changelog](https://github.com/rubocop/rubocop-capybara/blob/main/CHANGELOG.md)
- [Commits](rubocop/rubocop-capybara@v2.23.0...v3.0.0)

Updates `rubocop-rspec` from 3.9.0 to 3.10.2
- [Release notes](https://github.com/rubocop/rubocop-rspec/releases)
- [Changelog](https://github.com/rubocop/rubocop-rspec/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop-rspec@v3.9.0...v3.10.2)

Updates `standard` from 1.54.0 to 1.56.0
- [Release notes](https://github.com/standardrb/standard/releases)
- [Changelog](https://github.com/standardrb/standard/blob/main/CHANGELOG.md)
- [Commits](standardrb/standard@v1.54.0...v1.56.0)

Updates `brakeman` from 8.0.4 to 8.0.5
- [Release notes](https://github.com/presidentbeef/brakeman/releases)
- [Changelog](https://github.com/presidentbeef/brakeman/blob/main/CHANGES.md)
- [Commits](presidentbeef/brakeman@v8.0.4...v8.0.5)

Updates `simplecov` from 0.22.0 to 1.0.1
- [Release notes](https://github.com/simplecov-ruby/simplecov/releases)
- [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md)
- [Commits](simplecov-ruby/simplecov@v0.22.0...v1.0.1)

Updates `ferrum` from 0.17.1 to 0.17.2
- [Release notes](https://github.com/rubycdp/ferrum/releases)
- [Changelog](https://github.com/rubycdp/ferrum/blob/main/CHANGELOG.md)
- [Commits](rubycdp/ferrum@v0.17.1...v0.17.2)

Updates `herb` from 0.9.4 to 0.10.2
- [Release notes](https://github.com/marcoroth/herb/releases)
- [Commits](marcoroth/herb@v0.9.4...v0.10.2)

---
updated-dependencies:
- dependency-name: rubocop-capybara
  dependency-version: 3.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: rubocop-rspec
  dependency-version: 3.10.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: standard
  dependency-version: 1.56.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: brakeman
  dependency-version: 8.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: simplecov
  dependency-version: 1.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: ferrum
  dependency-version: 0.17.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: herb
  dependency-version: 0.10.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Jul 31, 2026
@github-actions

github-actions Bot commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

Thanks for taking the time to contribute to LayerRail.\n\nPull requests are temporarily closed while we complete core platform work and stabilize the public codebase. This is not a review of your contribution.\n\nPlease watch this repository for the reopening notice.

@github-actions github-actions Bot closed this Jul 31, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/bundler/development-dependencies-25aae14f9a branch July 31, 2026 16:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants