Skip to content

chore(deps): bump the ruby-deps group across 1 directory with 6 updates - #3050

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bundler/ruby-deps-fde4037d22
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bundler/ruby-deps-fde4037d22

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the ruby-deps group with 6 updates in the / directory:

Package From To
pagy 43.7.0 43.7.1
icalendar 2.12.5 2.13.0
rubocop 1.91.0 1.92.0
bullet 8.2.0 8.3.0
capybara-playwright-driver 0.5.12 0.5.13
webmock 3.26.4 3.34.0

Updates pagy from 43.7.0 to 43.7.1

Release notes

Sourced from pagy's releases.

Version 43.7.1

Changes in 43.7.1

  • Fix the database error on an out-of-range page with a huge page number (#929)

CHANGELOG

Version 43

We needed a leap version to unequivocally signal that it's not just a major version: it's a complete redesign of the legacy code at all levels, usage and API included.

Why 43? Because it's exactly one step beyond "The answer to the ultimate question of life, the Universe, and everything." 😉

Improvements

This version introduces several enhancements, such as new :countish and :keynav_js paginators and improved automation and configuration processes, reducing setup requirements by 99%. The update also includes a simpler API and new interactive development tools, making it a comprehensive upgrade from previous versions.

  • New :countish Paginator
    • Faster than OFFSET and supporting the full UI
  • New Keynav Pagination
    • The pagy-exclusive technique using the fastest keyset pagination alongside all frontend helpers.
  • New interactive dev-tools
    • New PagyWand to integrate the pagy CSS with your app themes.
    • New Pagy AI available right inside your own app.
  • Intelligent automation
  • Simpler API
    • You solely need the pagy method and the @​pagy instance to paginate any collection and use any navigation tag and helper.
    • Methods are autoloaded only if used, and consume no memory otherwise.
    • Methods have narrower scopes and can be overridden without deep knowledge.
  • New documentation
    • Very concise, straightforward, and easy to navigate and understand.

Upgrade to 43

See the Upgrade Guide

Changelog

Sourced from pagy's changelog.

Version 43.7.1

  • Fix the database error on an out-of-range page with a huge page number (#929)
Commits
  • ebfa409 Merge branch 'dev'
  • 5a51e89 Version 43.7.1
  • 7ce3e02 Update gems and packages
  • fddac83 💎 Fix the database error on an out-of-range page with a huge page number (#929)
  • 8c49d4c Bump actions/upload-artifact from 4 to 7 (#927)
  • 27fbf69 Bump rubygems/configure-rubygems-credentials from 1.0.0 to 2.1.0 (#926)
  • b7b6a83 Fix the docs url override when Publish Docs is triggered by the Release workflow
  • See full diff in compare view

Updates icalendar from 2.12.5 to 2.13.0

Changelog

Sourced from icalendar's changelog.

2.13.0 - 2026-10-11

  • Generate CATEGORIES as a single comma-separated line instead of one line per value, matching how Google Calendar and Nextcloud expect it (#226). Setting categories = [...] now stores the joined value as one item, so code that reads #categories expecting one entry per category will see a single combined entry instead; append_categories is unaffected and still adds a separate line. - Carlos Kvasir
  • Replace OpenStruct with Structs in Duration, Recur and UtcOffset values and drop the ostruct dependency (#329). Requires Ruby 2.5 or newer, for Struct's keyword_init:. The parts keep the same readers and setters, but #value is now a Struct, so assigning an attribute that isn't one of its parts raises NoMethodError. - David Corson-Knowles
  • Correct negative fractional-hour TZInfo offsets - ac1982
Commits
  • 41d3889 Bump version to 2.13.0
  • d726dd3 Merge pull request #332 from ac1982/fix/negative-fractional-timezone-offsets
  • 2d093aa Merge pull request #330 from corsonknowles/remove-ostruct
  • 65e8026 Use keyword_init Structs and require Ruby 2.5
  • 23215c4 Correct negative fractional-hour TZInfo offsets
  • 426ea97 Merge pull request #331 from carloskvasir/categories-single-line
  • 5207402 Generate CATEGORIES as a single comma-separated line
  • 97fa1f4 Replace OpenStruct with Structs in Duration, Recur and UtcOffset
  • See full diff in compare view

Updates rubocop from 1.91.0 to 1.92.0

Release notes

Sourced from rubocop's releases.

RuboCop v1.92.0

New features

  • #15895: Add an MCP tool that explains what cops do. (@​bbatsov)
  • #15700: Add --explain COP to describe what a cop does, how it is configured, and the examples from its documentation. (@​bbatsov)
  • #15699: Add --max-offenses-per-cop to cap how many offenses a single cop reports. (@​bbatsov)
  • #15948: Let MCP autocorrection apply the corrections of AutoCorrect: contextual cops when asked to. (@​bbatsov)
  • #15945: Let MCP autocorrection preview its changes as a diff. (@​bbatsov)
  • #15915: Let MCP inspection cap how many offenses each cop reports. (@​bbatsov)
  • #15930: Let MCP tools choose which cops run and which files they check. (@​bbatsov)
  • #14666: Make Lint/UselessAssignment register an offense for a block-captured variable that is never referenced. (@​IslamElsayed)
  • #15695: Report autocorrection edits in the JSON formatter. (@​bbatsov)
  • #15940: Report cop errors and warnings per file in --format json. (@​bbatsov)
  • #15945: Report the offenses MCP autocorrection leaves behind. (@​bbatsov)

Bug fixes

  • #15780: Fix an error for Lint/MissingCopEnableDirective when an enable-next or next +Cop directive suspends an open rubocop:disable, and a false positive for next -Cop scopes larger than MaxRangeSize. (@​bbatsov)
  • #16005: Fix a false negative for Security/JSONLoad with create_additions as the second argument. (@​bbatsov)
  • #15994: Fix a false positive for Layout/LineEndStringConcatenationIndentation with an already aligned part. (@​bbatsov)
  • #15842: Fix a false positive for Style/ExplicitBlockArgument when the method uses argument forwarding (...). (@​bbatsov)
  • #15843: Fix a false positive for Style/NegativeArrayIndex with a different length receiver. (@​bbatsov)
  • #15841: Fix a false positive for Style/RedundantFreeze with an arithmetic operation on a non-numeric receiver. (@​bbatsov)
  • #15843: Fix a false positive for Style/Sample with an endless range, which was corrected to a sample call of the wrong size. (@​bbatsov)
  • #15842: Fix a false positive for Style/SuperArguments when the method has a destructuring parameter. (@​bbatsov)
  • #15740: Fix an error for Layout/EmptyLinesAroundMethodBody when a method's arguments span multiple lines and the method ends on the last argument's line. (@​viralpraxis)
  • #15860: Fix an error for Layout/HeredocIndentation with a heredoc nested in another heredoc. (@​Starlexxx)
  • #15876: Fix an error for Lint/EmptyConditionalBody with else on the condition line. (@​koic)
  • #16008: Fix an error for Lint/UnescapedBracketInRegexp when using regexp_parser 2.11.2 and earlier. (@​bbatsov)
  • #15897: Fix an error for Metrics/ClassLength with a long singleton class in LSP mode. (@​bbatsov)
  • #15749: Fix an error for Style/ClassAndModuleChildren when a compact class or module definition appears in an expression, such as an assignment value or a method argument. (@​viralpraxis)
  • #15750: Fix an error for Style/ClassAndModuleChildren when using EnforcedStyle: compact and the nested body is indented less than Layout/IndentationWidth's Width. (@​viralpraxis)
  • #15764: Fix an error for Style/ClassAndModuleChildren when EnforcedStyle: compact compacts an irregularly indented definition and Layout/IndentationStyle enforces tabs. (@​viralpraxis)
  • #15946: Fix an error for Style/ExplicitBlockArgument with the shorthand call syntax. (@​Starlexxx)
  • #15861: Fix an error for Style/FormatString with format nested in format. (@​Starlexxx)
  • #15694: Fix an error for Style/HashSyntax when a no_mixed_keys style forces hash rockets on a hash whose value repeats its key. (@​viralpraxis)
  • #16007: Fix an error for Style/IfInsideElse when the nested if shares a line with other code. (@​bbatsov)
  • #15867: Fix an error for Style/MapIntoArray when pushing into a numbered or it block parameter. (@​Starlexxx)
  • #15949: Fix an error for Style/Next with a modifier condition wrapping a block that has its own offense. (@​Starlexxx)
  • #15797: Fix an error for Style/RedundantCondition when autocorrecting a redundant condition nested in the else branch of another one. (@​koic)
  • #15928: Fix an error for Style/Semicolon when a semicolon follows an unparenthesized keyword parameter or hash pattern. (@​viralpraxis)
  • #15714: Fix an error for Style/YodaCondition when one operand of a comparison contains another comparison the cop also corrects. (@​viralpraxis)
  • #16011: Fix an error for the pacman formatter, which crashed with undefined method 'winsize' whether or not the output was a terminal. (@​bbatsov)
  • #15731: Fix an error when caching offenses whose correction or justification cannot be represented as UTF-8. (@​viralpraxis)
  • #16015: Fix an error when cleaning up a result cache that can't be written. (@​bbatsov)
  • #15702: Fix an error when interrupting RuboCop with Ctrl-C. (@​viralpraxis)
  • #16015: Fix an error when the cache directory or config can't be accessed under a sandbox. (@​bbatsov)
  • #16015: Fix an error when the result cache directory exists but can't be written. (@​bbatsov)
  • #15817: Fix an incorrect autocorrect for Gemspec/OrderedDependencies when the same dependency declaration appears more than once in the gemspec. (@​viralpraxis)
  • #15903: Fix an incorrect autocorrect for Layout/ClassStructure with blank line cops. (@​koic)

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.92.0 (2026-10-10)

New features

  • #15895: Add an MCP tool that explains what cops do. ([@​bbatsov][])
  • #15700: Add --explain COP to describe what a cop does, how it is configured, and the examples from its documentation. ([@​bbatsov][])
  • #15699: Add --max-offenses-per-cop to cap how many offenses a single cop reports. ([@​bbatsov][])
  • #15948: Let MCP autocorrection apply the corrections of AutoCorrect: contextual cops when asked to. ([@​bbatsov][])
  • #15945: Let MCP autocorrection preview its changes as a diff. ([@​bbatsov][])
  • #15915: Let MCP inspection cap how many offenses each cop reports. ([@​bbatsov][])
  • #15930: Let MCP tools choose which cops run and which files they check. ([@​bbatsov][])
  • #14666: Make Lint/UselessAssignment register an offense for a block-captured variable that is never referenced. ([@​IslamElsayed][])
  • #15695: Report autocorrection edits in the JSON formatter. ([@​bbatsov][])
  • #15940: Report cop errors and warnings per file in --format json. ([@​bbatsov][])
  • #15945: Report the offenses MCP autocorrection leaves behind. ([@​bbatsov][])

Bug fixes

  • #15780: Fix an error for Lint/MissingCopEnableDirective when an enable-next or next +Cop directive suspends an open rubocop:disable, and a false positive for next -Cop scopes larger than MaxRangeSize. ([@​bbatsov][])
  • #16005: Fix a false negative for Security/JSONLoad with create_additions as the second argument. ([@​bbatsov][])
  • #15994: Fix a false positive for Layout/LineEndStringConcatenationIndentation with an already aligned part. ([@​bbatsov][])
  • #15842: Fix a false positive for Style/ExplicitBlockArgument when the method uses argument forwarding (...). ([@​bbatsov][])
  • #15843: Fix a false positive for Style/NegativeArrayIndex with a different length receiver. ([@​bbatsov][])
  • #15841: Fix a false positive for Style/RedundantFreeze with an arithmetic operation on a non-numeric receiver. ([@​bbatsov][])
  • #15843: Fix a false positive for Style/Sample with an endless range, which was corrected to a sample call of the wrong size. ([@​bbatsov][])
  • #15842: Fix a false positive for Style/SuperArguments when the method has a destructuring parameter. ([@​bbatsov][])
  • #15740: Fix an error for Layout/EmptyLinesAroundMethodBody when a method's arguments span multiple lines and the method ends on the last argument's line. ([@​viralpraxis][])
  • #15860: Fix an error for Layout/HeredocIndentation with a heredoc nested in another heredoc. ([@​Starlexxx][])
  • #15876: Fix an error for Lint/EmptyConditionalBody with else on the condition line. ([@​koic][])
  • #16008: Fix an error for Lint/UnescapedBracketInRegexp when using regexp_parser 2.11.2 and earlier. ([@​bbatsov][])
  • #15897: Fix an error for Metrics/ClassLength with a long singleton class in LSP mode. ([@​bbatsov][])
  • #15749: Fix an error for Style/ClassAndModuleChildren when a compact class or module definition appears in an expression, such as an assignment value or a method argument. ([@​viralpraxis][])
  • #15750: Fix an error for Style/ClassAndModuleChildren when using EnforcedStyle: compact and the nested body is indented less than Layout/IndentationWidth's Width. ([@​viralpraxis][])
  • #15764: Fix an error for Style/ClassAndModuleChildren when EnforcedStyle: compact compacts an irregularly indented definition and Layout/IndentationStyle enforces tabs. ([@​viralpraxis][])
  • #15946: Fix an error for Style/ExplicitBlockArgument with the shorthand call syntax. ([@​Starlexxx][])
  • #15861: Fix an error for Style/FormatString with format nested in format. ([@​Starlexxx][])
  • #15694: Fix an error for Style/HashSyntax when a no_mixed_keys style forces hash rockets on a hash whose value repeats its key. ([@​viralpraxis][])
  • #16007: Fix an error for Style/IfInsideElse when the nested if shares a line with other code. ([@​bbatsov][])
  • #15867: Fix an error for Style/MapIntoArray when pushing into a numbered or it block parameter. ([@​Starlexxx][])
  • #15949: Fix an error for Style/Next with a modifier condition wrapping a block that has its own offense. ([@​Starlexxx][])
  • #15797: Fix an error for Style/RedundantCondition when autocorrecting a redundant condition nested in the else branch of another one. ([@​koic][])
  • #15928: Fix an error for Style/Semicolon when a semicolon follows an unparenthesized keyword parameter or hash pattern. ([@​viralpraxis][])
  • #15714: Fix an error for Style/YodaCondition when one operand of a comparison contains another comparison the cop also corrects. ([@​viralpraxis][])
  • #16011: Fix an error for the pacman formatter, which crashed with undefined method 'winsize' whether or not the output was a terminal. ([@​bbatsov][])
  • #15731: Fix an error when caching offenses whose correction or justification cannot be represented as UTF-8. ([@​viralpraxis][])
  • #16015: Fix an error when cleaning up a result cache that can't be written. ([@​bbatsov][])
  • #15702: Fix an error when interrupting RuboCop with Ctrl-C. ([@​viralpraxis][])
  • #16015: Fix an error when the cache directory or config can't be accessed under a sandbox. ([@​bbatsov][])
  • #16015: Fix an error when the result cache directory exists but can't be written. ([@​bbatsov][])
  • #15817: Fix an incorrect autocorrect for Gemspec/OrderedDependencies when the same dependency declaration appears more than once in the gemspec. ([@​viralpraxis][])

... (truncated)

Commits
  • 4172ce5 Cut 1.92
  • 7e75867 Require net/http in the references:verify task
  • 7c107cb Update Changelog
  • 81c7d42 Fix an error when cleaning up a result cache that can't be written
  • 3b70129 Fix an error when the result cache directory exists but can't be written
  • 830275f Fix an error when the cache directory or config can't be accessed under a san...
  • 38b43fc Remove a check from Style/SingleLineMethods that the shared endless method ...
  • 9897fb1 Fix an incorrect autocorrect for Style/EndlessMethod and `Style/SingleLineM...
  • 1a2221e Fix an incorrect autocorrect for Style/ReturnNilInPredicateMethodDefinition...
  • f2f4fac Fix an incorrect autocorrect for Style/EndlessMethod with a modifier condit...
  • Additional commits viewable in compare view

Updates bullet from 8.2.0 to 8.3.0

Changelog

Sourced from bullet's changelog.

8.3.0 (10/10/2026)

  • Add support for ActiveRecord 8.2
Commits

Updates capybara-playwright-driver from 0.5.12 to 0.5.13

Commits
  • bd4ef63 0.5.13
  • 547db05 Merge pull request #168 from YusukeIwaki/fix-164-stale-error-translation
  • d6c5027 Translate stale errors in tag_name, == and predicates
  • 1212615 Merge pull request #167 from YusukeIwaki/classify-js-handle-null
  • fdcbb6d Check null separately when classifying a JSHandle
  • 2a0a821 Merge pull request #165 from MatheusRich/fix-wrap-node-null
  • e20faa9 Return nil for JavaScript null from evaluate_script
  • See full diff in compare view

Updates webmock from 3.26.4 to 3.34.0

Changelog

Sourced from webmock's changelog.

3.34.0

  • Allow with(query: :any) to match any query string (#1099)

    stub_request(:get, "www.example.com").with(query: :any) matches requests with any query string, or none. RSpec's anything works the same way. Previously, this raised NoMethodError, and you had to write with(query: hash_including({})).

    Use a URL without query parameters when passing query: :any. Otherwise, WebMock raises ArgumentError.

    Thanks to nightpool

  • Raise a clear ArgumentError for an unsupported query option

    Previously, a value such as with(query: :all) raised NoMethodError (undefined method split). The new error lists the supported values.

  • Show anything for keys given without a value to hash_including or hash_excluding outside RSpec

    Previously, with Minitest or Test::Unit, messages showed #<WebMock::Matchers::AnyArgMatcher:0x...>, for example for with(query: hash_including(:a)). RSpec's own matchers already showed anything.

  • Provide HTTP_HOST to to_rack apps when the client has not supplied a Host header (#1084)

    Previously, requests from some HTTP clients reached the Rack app without HTTP_HOST. This caused host checks such as Sinatra's HostAuthorization to see an empty host.

    WebMock now fills in the host from the request URL, including the port when it is not the default. An explicit Host header is preserved.

    Thanks to Benoit Tigeot

  • Fix Rack compatibility for to_rack apps

    The request environment now passes Rack::Lint.

    SERVER_PORT and CONTENT_LENGTH are now strings. If your app or tests read them directly, use string comparisons, such as env['SERVER_PORT'] == "80". The environment also includes SERVER_PROTOCOL.

    CONTENT_TYPE is omitted when the request has no content type. The Content-Length header is passed only as CONTENT_LENGTH, without an extra HTTP_CONTENT_LENGTH entry. Transfer-Encoding is removed because the body has already been decoded.

    Repeated header values are joined into one string. Header values and the body read from rack.input now use binary (ASCII-8BIT) strings.

3.33.0

  • Return effective_url as a String for stubbed Typhoeus responses (#869)

    Previously, this was an Addressable::URI. If your code calls methods such as effective_url.host, parse the returned string into a URI first.

    The URL keeps the request's port, query order and encoding. It follows curl's formatting: for example, http://example.com:80 becomes http://example.com:80/. Stubbed timeouts now provide an effective_url too.

    Thanks to Tom Brammar

  • Fix incorrect removal of default ports from displayed URLs

    WebMock could accidentally remove :80 or :443 from a URL's path or query. For example, an error message could show /foo/bar instead of /foo:80/bar.

... (truncated)

Commits
  • 11392e4 Version 3.34.0
  • eabc151 Close the gaps a review found in the Rack env
  • 38f08be Make the Rack env for to_rack apps follow the Rack spec
  • 732328b Tidy the Rack host fallback and its specs
  • 3d831ce Set HTTP_HOST in the Rack env instead of the Net::HTTP signature
  • aa71fc1 Merge pull request #1084 from benoittgt/prevent-empty-host
  • 5fbb394 Reject query :any with a URI query and accept anything matchers
  • d94e918 Reject unsupported query options and describe :any as anything
  • 0b56b62 Merge pull request #1099 from nightpool/add-any-query-option
  • 78d1078 Version 3.33.0
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies ruby Pull requests that update Ruby code labels Oct 22, 2026
@mroderick

mroderick commented Oct 22, 2026 •

Copy link
Copy Markdown
Collaborator

Dependency Upgrade Review

Verdict: Compatible (head 038ea18dfb1c652680452f170fce010365153a84) · Confidence: Medium

Identical gem set to the prior review round plus one extra: sprockets 4.2.2 → 4.4.1 (already merged on master via #3053), a purely additive release (ignore_mtime option, cache limits opt-out, GZip header mtime change, json 3 compat). All six direct and transitive bumps target code paths the planner exercises only through unchanged APIs, and all three verification suites (planner-suite, auth-suite, probe) pass at head — Compatible.

Checks

Check Result
planner suite pass
auth suite pass
round-trip probe pass

Contracts

Contract Status Basis
ICS VTIMEZONE TZOFFSETTO in codebar.ics email attachments Partially verified icalendar 2.12.5...2.13.0 diff hunks read end-to-end; consumer side is external mail-calendar clients, untraceable locally.
Precompiled asset gzip header mtime field Partially verified v4.4.1 release changelog and compare 4.2.2...4.4.1 commits reviewed; no repo spec asserts gzip mtime behavior.
Pagy pagination links on public and admin views Partially verified v43.7.1 release body only; planner-suite exercises series_nav views but not the huge-page branch directly.
Playwright native bundle pairing with cached headless shell Partially verified Commit messages reviewed and full suites green; no diff-level check of the 1.64 driver bundle against the cached headless shell binary.
WebMock stubbing of Flodesk outbound HTTP in specs Partially verified spec/spec_helper.rb stubs run green under 3.34.0 in all suites; not line-traced in webmock source.
Compatibility analysis — 13 packages
  • sprockets 4.2.2 → 4.4.1 (via chore(deps): bump sprockets from 4.2.2 to 4.4.1 #3053 rebase): Diff (4.2.2...4.4.1) is additive: new ignore_mtime option, cache-limit opt-out, GZip no longer writes an mtime field in the header, json 3+ compatibility. Repo uses sprockets via sprockets-rails (default pipeline, config/initializers/assets.rb precompile list, digest asset tags memoized in ApplicationHelper); only effect visible here is the gzip header mtime of precompiled .gz assets — cosmetic metadata, not body content.
  • bullet 8.2.0 → 8.3.0: Patch release (adds AR 8.2 support, actionpack/railties 8.1.3.1 vs 8.1.4 sources compared directly first round); no API the repo calls changed.
  • capybara-playwright-driver 0.5.12 → 0.5.13: evaluate_script/evaluate_async_script JS-null fix; repo uses execute_script only in spec support.
  • icalendar 2.12.5 → 2.13.0: OpenStruct→Struct in Duration/Recur/UtcOffset, CATEGORIES single-line (unused by repo), and icalendarTimezone negative-fractional-hour TZOFFSETTO fix; only negative fractional zones change emitted bytes.
  • pagy 43.7.0 → 43.7.1: One patch fix (Update broken link to native installation instructions in README #929 huge out-of-range page); pagination surface untouched.
  • playwright-ruby-client 1.63.0 → 1.64.0: Transport stability and 1.64 native driver bump; actionable for cached headless-shell pairing only, but with no repo tests to query.
  • rack-test 2.2.0 → 2.3.0: CI/docs-only commits; rack-test 2.3.0 exercised transitively only.
  • rubocop 1.91.0 → 1.92.0: Lint-only bumping; regexp_parser 2.11.3 floor satisfied by locked 2.13.1.
  • uniform_notifier 1.18.0 → 1.18.1: Packaging-only release; bullet's notifier config untouched.
  • webmock 3.26.4 → 3.34.0: Jumps seven minors; used surface (disable_net_connect! allow_localhost, :any Flodesk stubbing, omniauth spec) unchanged APIs, suites green.
  • marcel 1.0.4 → 1.2.1 (via activestorage): Adds regex magic + table refinements; ActiveStorage configured but no attachments in models (use of Carrierwave instead) so effectively unused.
  • crass/date/io-console/net-imap/net-protocol/net-smtp/prettyprint/rdoc: Transitive hygiene bumps (crass, date, io-console, net-imap, net-protocol, net-smtp, prettyprint, rdoc); no direct app use.
  • ostruct (removed): Removed with the icalendar bump; verified that no repo code requires or uses OpenStruct and no other lockfile gem required it.
Usage of 8 dependencies
  • sprockets (runtime, infra): wired via sprockets-rails (Gemfile; no direct require), config/initializers/assets.rb precompile list, memoized digest asset tags in app/helpers/application_helper.rb
  • rails (runtime): whole app; raw_payload path and canonical-log payload fields (path/path_template) in config/initializers/canonical_log.rb — unchanged gem-source-wise across 8.1.3.1→8.1.4
  • icalendar: app/serializers/workshop_calendar.rb, lib/services/event_calendar.rb, three invitation mailers attaching codebar.ics
  • pagy: application_controller include Pagy::Method, ~10 admin/public controllers, shared/_pagination.html.haml
  • playwright-ruby-client / capybara-playwright-driver: spec/support/capybara.rb (executablePath to cached headless shell), spec/spec_helper.rb:101
  • webmock: spec/spec_helper.rb:4/44/74, spec/lib/omniauth/strategies/codebar_spec.rb
  • bullet (dev/test): config/environments/development.rb:92–95, test.rb:66–68
  • uniform_notifier / rack-test / marcel / crass / date / io-console / net-imap / net-protocol / net-smtp / prettyprint / rdoc (transitive): no direct app usage
Test coverage
  • Strong: the canonical log spec harness previously failing (prior round) passes here (all suites green, including spec/requests); digest asset tags and gzip header behavior exercised via planner-suite.
  • Strong: full-suite coverage of 1746 examples for all WebMock, omniauth, flodesk-stub and pagination request paths with green suite results at head.
  • Thin/Gap: no spec for negative fractional-hour VTIMEZONE emitted content (the one runtime payload that changes — icalendar 2.13.0 TimezoneOffset fix).
  • Gap: Playwright 1.64 native bundle vs cached Chromium headless-shell executables is not directly tested by a spec in this repo; trusted via the locally-passing system suite.
Calibration and confidence

Confidence: Medium — All three verification suites pass at this head; every diff hemisphere traced per dependency against the repo's actual call shapes; but the two external consumer-side contracts (calendar-client side of the ICS payload and Playwright 1.64 bundle/cached-shell pairing) are not fully proof of agreement — contract checks cap confidence at Medium.

  1. Weakest claim: The Playwright 1.64 bundle/cached-shell compatibility: only evidence is the passing suites; the executablePath override spec/support/capybara.rb:14–26 was picked from .max of glob patterns, which works for both 1228 and 1243 shells here but is unproven against precompiled per-locale CI environments without pinned installs.
  2. Relied on but unverified: That the Playwright 1.64 native bundle still pairs with the repo's cached headless shell executablePath (spec/support/capybara.rb), and that the ICS payload for negative fractional-hour zones is correct — trusted via passing suites and the read hunks, not full-to-end-to-end end proofs.
  3. Falsifier: A workshop in a negative fractional-hour zone whose codebar.ics VTIMEZONE differs from the 2.13.0 HR spec, or a failing :js system spec citing a Playwright 1.64 driver/executable mismatch, would invalidate Compatible.

Failure diagnosis

Failing tests: none named
Likely cause: None; all suites pass at this head (the prior round's planner-suite canonical log failure did not recur — it was an environment-specific flake). Only open items are the partially verified external consumer-side contracts under the Medium confidence cap.
Location: n/a

Previous verdicts
  • 2026-10-22T14:04:33.815Z head a8b209408d1d7c08ffa65f36952fe465ebda70d5: Compatible (Medium)

@dependabot dependabot Bot changed the title chore(deps): bump the ruby-deps group with 6 updates chore(deps): bump the ruby-deps group across 1 directory with 6 updates Oct 22, 2026
@dependabot
dependabot Bot force-pushed the dependabot/bundler/ruby-deps-fde4037d22 branch from a8b2094 to 5f528c4 Compare October 22, 2026 13:38
Bumps the ruby-deps group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pagy](https://github.com/ddnexus/pagy) | `43.7.0` | `43.7.1` |
| [icalendar](https://github.com/icalendar/icalendar) | `2.12.5` | `2.13.0` |
| [rubocop](https://github.com/rubocop/rubocop) | `1.91.0` | `1.92.0` |
| [bullet](https://github.com/flyerhzm/bullet) | `8.2.0` | `8.3.0` |
| [capybara-playwright-driver](https://github.com/YusukeIwaki/capybara-playwright-driver) | `0.5.12` | `0.5.13` |
| [webmock](https://github.com/bblimke/webmock) | `3.26.4` | `3.34.0` |



Updates `pagy` from 43.7.0 to 43.7.1
- [Release notes](https://github.com/ddnexus/pagy/releases)
- [Changelog](https://github.com/ddnexus/pagy/blob/master/docs/CHANGELOG.md)
- [Commits](ddnexus/pagy@43.7.0...43.7.1)

Updates `icalendar` from 2.12.5 to 2.13.0
- [Changelog](https://github.com/icalendar/icalendar/blob/main/CHANGELOG.md)
- [Commits](icalendar/icalendar@v2.12.5...v2.13.0)

Updates `rubocop` from 1.91.0 to 1.92.0
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.91.0...v1.92.0)

Updates `bullet` from 8.2.0 to 8.3.0
- [Changelog](https://github.com/flyerhzm/bullet/blob/main/CHANGELOG.md)
- [Commits](flyerhzm/bullet@8.2.0...8.3.0)

Updates `capybara-playwright-driver` from 0.5.12 to 0.5.13
- [Commits](YusukeIwaki/capybara-playwright-driver@0.5.12...0.5.13)

Updates `webmock` from 3.26.4 to 3.34.0
- [Changelog](https://github.com/bblimke/webmock/blob/master/CHANGELOG.md)
- [Commits](bblimke/webmock@v3.26.4...v3.34.0)

---
updated-dependencies:
- dependency-name: bullet
  dependency-version: 8.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: capybara-playwright-driver
  dependency-version: 0.5.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: icalendar
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: pagy
  dependency-version: 43.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: rubocop
  dependency-version: 1.92.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: webmock
  dependency-version: 3.34.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bundler/ruby-deps-fde4037d22 branch from 5f528c4 to 038ea18 Compare October 22, 2026 15:29

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant