Skip to content

build(deps): bump the bundler group across 2 directories with 9 updates#22178

Merged
ZhongRuoyu merged 3 commits into
mainfrom
dependabot/bundler/Library/Homebrew/bundler-a5faaafb6e
May 8, 2026
Merged

build(deps): bump the bundler group across 2 directories with 9 updates#22178
ZhongRuoyu merged 3 commits into
mainfrom
dependabot/bundler/Library/Homebrew/bundler-a5faaafb6e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the bundler group with 5 updates in the /Library/Homebrew directory:

Package From To
minitest 6.0.5 6.0.6
sorbet-static-and-runtime 0.6.13164 0.6.13184
rbi 0.3.10 0.3.11
require-hooks 0.3.0 0.4.0
rubydex 0.1.0.beta13 0.2.1

Bumps the bundler group with 1 update in the /docs directory: nokogiri.

Updates minitest from 6.0.5 to 6.0.6

Changelog

Sourced from minitest's changelog.

=== 6.0.6 / 2026-04-30

  • 2 bug fixes:

    • Fix using assert_equal/same/nil w/ BasicObject by comparing w/ nil == exp. (mtasaka)
    • Removed private Assertions#_where as it is no longer used.
Commits
  • f6180b0 prepped for release
  • 23bc7f2 - Removed private Assertions#_where as it is no longer used.
  • c471347 - Fix using assert_equal/same/nil w/ BasicObject by comparing w/ nil == exp...
  • See full diff in compare view

Updates sorbet-static-and-runtime from 0.6.13164 to 0.6.13184

Release notes

Sourced from sorbet-static-and-runtime's releases.

sorbet 0.6.13182.20260429152943-66faf9aad

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13182', :group => :development
gem 'sorbet-runtime', '0.6.13182'

sorbet 0.6.13181.20260429134228-370a13143

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13181', :group => :development
gem 'sorbet-runtime', '0.6.13181'

sorbet 0.6.13180.20260429133332-5aeb0865e

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13180', :group => :development
gem 'sorbet-runtime', '0.6.13180'

sorbet 0.6.13179.20260429121833-c970d59c9

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13179', :group => :development
gem 'sorbet-runtime', '0.6.13179'

sorbet 0.6.13178.20260429105831-c277a406c

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13178', :group => :development
gem 'sorbet-runtime', '0.6.13178'

sorbet 0.6.13177.20260429103825-804b13150

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13177', :group => :development
gem 'sorbet-runtime', '0.6.13177'

sorbet 0.6.13176.20260429103405-4f72d89a1

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13176', :group => :development
gem 'sorbet-runtime', '0.6.13176'

sorbet 0.6.13175.20260429082924-65df4cf2e

... (truncated)

Commits

Updates sorbet-runtime from 0.6.13164 to 0.6.13184

Release notes

Sourced from sorbet-runtime's releases.

sorbet 0.6.13182.20260429152943-66faf9aad

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13182', :group => :development
gem 'sorbet-runtime', '0.6.13182'

sorbet 0.6.13181.20260429134228-370a13143

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13181', :group => :development
gem 'sorbet-runtime', '0.6.13181'

sorbet 0.6.13180.20260429133332-5aeb0865e

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13180', :group => :development
gem 'sorbet-runtime', '0.6.13180'

sorbet 0.6.13179.20260429121833-c970d59c9

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13179', :group => :development
gem 'sorbet-runtime', '0.6.13179'

sorbet 0.6.13178.20260429105831-c277a406c

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13178', :group => :development
gem 'sorbet-runtime', '0.6.13178'

sorbet 0.6.13177.20260429103825-804b13150

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13177', :group => :development
gem 'sorbet-runtime', '0.6.13177'

sorbet 0.6.13176.20260429103405-4f72d89a1

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13176', :group => :development
gem 'sorbet-runtime', '0.6.13176'

sorbet 0.6.13175.20260429082924-65df4cf2e

... (truncated)

Commits

Updates rbi from 0.3.10 to 0.3.11

Release notes

Sourced from rbi's releases.

v0.3.11

What's Changed

🛠 Other Changes

Full Changelog: Shopify/rbi@v0.3.10...v0.3.11

Commits
  • 2571717 Bump version to v0.3.11
  • 34852c2 Merge pull request #594 from Shopify/ko-fix-symbol
  • ca7d6f4 Merge pull request #598 from Shopify/dependabot/github_actions/ruby/setup-rub...
  • 3426dc9 Merge pull request #597 from Shopify/dependabot/bundler/minor-and-patch-97f1a...
  • 2215640 Bump ruby/setup-ruby from 1.302.0 to 1.306.0
  • 46c0431 Bump the minor-and-patch group with 2 updates
  • 63c298f Merge pull request #596 from Shopify/dependabot/bundler/erb-6.0.4
  • c496eab Bump erb from 6.0.2 to 6.0.4
  • 06f0cd7 Add contract test for Symbol-name tolerance across rewriters
  • b6162c7 Coerce name to String in RBI node constructors
  • Additional commits viewable in compare view

Updates require-hooks from 0.3.0 to 0.4.0

Changelog

Sourced from require-hooks's changelog.

0.4.0 (2026-04-29)

  • Improved Bootsnap cache invalidation logic on hooks configuration changes.

  • Latest Bootsnap compatibility

  • Coverage compatibility (w/ some limitations)

Commits
  • 920bdd4 Bump 0.4.0
  • ee356c9 Merge pull request #2 from ruby-next/feat/bootsnap-cache-invalidation
  • d872b0f + bootsnap.c: improve cache invalidation
  • 539fbd0 - disable coverage transform specs in Ruby <3.4
  • c22b08f - bootsnap: compat with newer versions
  • b92ce5b * refactor coverage support
  • 7ad7643 * api: refactor callbacks registration
  • af90cee + coverage compat
  • See full diff in compare view

Updates rubydex from 0.1.0.beta13 to 0.2.1

Release notes

Sourced from rubydex's releases.

v0.2.1

What's Changed

✨ Enhancements

🐛 Bug Fixes

🛠 Other Changes

Full Changelog: Shopify/rubydex@v0.2.0...v0.2.1

v0.2.0

What's Changed

✨ Enhancements

🐛 Bug Fixes

New Contributors

Full Changelog: Shopify/rubydex@v0.1.0.beta14...v0.2.0

v0.1.0.beta14

What's Changed

✨ Enhancements

🐛 Bug Fixes

🛠 Other Changes

New Contributors

Full Changelog: Shopify/rubydex@v0.1.0.beta13...v0.1.0.beta14

Commits
  • 55ce2c0 Bump version to v0.2.1
  • 886dd6b Merge pull request #784 from Shopify/04-29-take_method_visibility_into_accoun...
  • 4ccebd3 Handle visibility in completion
  • 84fdfb6 Merge pull request #778 from Shopify/Expose_declaration_visibility_in_the_Rub...
  • 080c51c Expose declaration visibility in the Ruby API
  • 2fa9482 Resolve retroactive constant visibility changes (#766)
  • cc2fe72 Resolve retroactive constant visibility changes
  • 30336f9 Store the constant visibility target as a StringId (#769)
  • 4e20990 Re-queue definitions with missing receivers (#775)
  • cc2aa4a Merge pull request #767 from Shopify/04-21-take_method_definition_receiver_in...
  • Additional commits viewable in compare view

Updates sorbet from 0.6.13164 to 0.6.13184

Release notes

Sourced from sorbet's releases.

sorbet 0.6.13182.20260429152943-66faf9aad

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13182', :group => :development
gem 'sorbet-runtime', '0.6.13182'

sorbet 0.6.13181.20260429134228-370a13143

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13181', :group => :development
gem 'sorbet-runtime', '0.6.13181'

sorbet 0.6.13180.20260429133332-5aeb0865e

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13180', :group => :development
gem 'sorbet-runtime', '0.6.13180'

sorbet 0.6.13179.20260429121833-c970d59c9

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13179', :group => :development
gem 'sorbet-runtime', '0.6.13179'

sorbet 0.6.13178.20260429105831-c277a406c

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13178', :group => :development
gem 'sorbet-runtime', '0.6.13178'

sorbet 0.6.13177.20260429103825-804b13150

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13177', :group => :development
gem 'sorbet-runtime', '0.6.13177'

sorbet 0.6.13176.20260429103405-4f72d89a1

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13176', :group => :development
gem 'sorbet-runtime', '0.6.13176'

sorbet 0.6.13175.20260429082924-65df4cf2e

... (truncated)

Commits

Updates sorbet-static from 0.6.13164 to 0.6.13184

Release notes

Sourced from sorbet-static's releases.

sorbet 0.6.13182.20260429152943-66faf9aad

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13182', :group => :development
gem 'sorbet-runtime', '0.6.13182'

sorbet 0.6.13181.20260429134228-370a13143

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13181', :group => :development
gem 'sorbet-runtime', '0.6.13181'

sorbet 0.6.13180.20260429133332-5aeb0865e

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13180', :group => :development
gem 'sorbet-runtime', '0.6.13180'

sorbet 0.6.13179.20260429121833-c970d59c9

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13179', :group => :development
gem 'sorbet-runtime', '0.6.13179'

sorbet 0.6.13178.20260429105831-c277a406c

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13178', :group => :development
gem 'sorbet-runtime', '0.6.13178'

sorbet 0.6.13177.20260429103825-804b13150

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13177', :group => :development
gem 'sorbet-runtime', '0.6.13177'

sorbet 0.6.13176.20260429103405-4f72d89a1

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13176', :group => :development
gem 'sorbet-runtime', '0.6.13176'

sorbet 0.6.13175.20260429082924-65df4cf2e

... (truncated)

Commits

Updates nokogiri from 1.19.2 to 1.19.3

Release notes

Sourced from nokogiri's releases.

v1.19.3 / 2026-04-27

Fixed / Security

  • Address exponential regex backtracking in CSS selector tokenizer. See GHSA-c4rq-3m3g-8wgx for more information.
  • [CRuby] Address memory leak in XSLT::Stylesheet#transform. See GHSA-v2fc-qm4h-8hqv for more information.
46b89e5d7b9e844c2ee360794240c6ea2a4e6fa0c5892a4ed487db621224b639  nokogiri-1.19.3-aarch64-linux-gnu.gem
8392dfdcd21be7a94dbbe9ccc138dea01b97b24cb2dc02a114ca98bfb1d9a0b7  nokogiri-1.19.3-aarch64-linux-musl.gem
3919d5ffc334ad778a4a9eb88fda7dcb8b1fb58c8a52ac640c6dcd2f038e774f  nokogiri-1.19.3-arm-linux-gnu.gem
9ce1cb6346bb9c67b1550eb537aa183ead91e4b6eadb2f36ade02d8dd2a79fb6  nokogiri-1.19.3-arm-linux-musl.gem
71b9bd424b1b7abc18b05052a1a3cfd3627abdca62be280854cc411791357e42  nokogiri-1.19.3-arm64-darwin.gem
40ea6ebf5cf2005dae1dee26dd557d3afb41fb6de6c9764aca8cf06fdb841db1  nokogiri-1.19.3-java.gem
8bb7132cad356c879a1286eaabcb5e68326cb2490317984280fbc62f456d506a  nokogiri-1.19.3-x64-mingw-ucrt.gem
77f3fba57d46c53ab31e62fc6c28f705109d1bf6264356c76f132b2be5728d4d  nokogiri-1.19.3-x86_64-darwin.gem
2f5078620fe12e83669b5b17311b32532a8153d02eee7ad06948b926d6080976  nokogiri-1.19.3-x86_64-linux-gnu.gem
248c906d2166eca5efb56d52fdee5f9a1f51d69a72e2b64fdac647b4ce39ea3f  nokogiri-1.19.3-x86_64-linux-musl.gem
78312cbac32a40c812780d9678221b79d51288eec00054c1a8d15f7ce05960e8  nokogiri-1.19.3.gem
Changelog

Sourced from nokogiri's changelog.

v1.19.3 / 2026-04-27

Fixed / Security

  • Address exponential regex backtracking in CSS selector tokenizer. See GHSA-c4rq-3m3g-8wgx for more information.
  • [CRuby] Address memory leak in XSLT::Stylesheet#transform. See GHSA-v2fc-qm4h-8hqv for more information.
Commits
  • c139a3d version bump to v1.19.3
  • 7501a63 fix: backtracking in CSS tokenizer rules (v1.19.x backport) (#3627)
  • 03e7968 test: skip CSS tokenizer benchmarks on JRuby
  • b984b7e fix: ReDoS in CSS tokenizer ident rule
  • 0092623 fix: ReDoS in CSS tokenizer STRING rule
  • ee17d33 fix: memory leak in XSLT transform (backport to v1.19.x) (#3624)
  • ce188a3 doc: update CHANGELOG
  • caeaac4 fix: memory leak in XSLT transform
  • 25220bf dep(test): test against libxml-ruby v6 (#3618)
  • 0caeb21 doc: add security warnings for untrusted XSLT stylesheets
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the bundler group with 5 updates in the /Library/Homebrew directory:

| Package | From | To |
| --- | --- | --- |
| [minitest](https://github.com/minitest/minitest) | `6.0.5` | `6.0.6` |
| [sorbet-static-and-runtime](https://github.com/sorbet/sorbet) | `0.6.13164` | `0.6.13184` |
| [rbi](https://github.com/Shopify/rbi) | `0.3.10` | `0.3.11` |
| [require-hooks](https://github.com/ruby-next/require-hooks) | `0.3.0` | `0.4.0` |
| [rubydex](https://github.com/Shopify/rubydex) | `0.1.0.beta13` | `0.2.1` |

Bumps the bundler group with 1 update in the /docs directory: [nokogiri](https://github.com/sparklemotion/nokogiri).


Updates `minitest` from 6.0.5 to 6.0.6
- [Changelog](https://github.com/minitest/minitest/blob/master/History.rdoc)
- [Commits](minitest/minitest@v6.0.5...v6.0.6)

Updates `sorbet-static-and-runtime` from 0.6.13164 to 0.6.13184
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `sorbet-runtime` from 0.6.13164 to 0.6.13184
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `rbi` from 0.3.10 to 0.3.11
- [Release notes](https://github.com/Shopify/rbi/releases)
- [Commits](Shopify/rbi@v0.3.10...v0.3.11)

Updates `require-hooks` from 0.3.0 to 0.4.0
- [Changelog](https://github.com/ruby-next/require-hooks/blob/master/CHANGELOG.md)
- [Commits](ruby-next/require-hooks@v0.3.0...v0.4.0)

Updates `rubydex` from 0.1.0.beta13 to 0.2.1
- [Release notes](https://github.com/Shopify/rubydex/releases)
- [Commits](Shopify/rubydex@v0.1.0.beta13...v0.2.1)

Updates `sorbet` from 0.6.13164 to 0.6.13184
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `sorbet-static` from 0.6.13164 to 0.6.13184
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `nokogiri` from 1.19.2 to 1.19.3
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](sparklemotion/nokogiri@v1.19.2...v1.19.3)

---
updated-dependencies:
- dependency-name: minitest
  dependency-version: 6.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: sorbet-static-and-runtime
  dependency-version: 0.6.13184
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: sorbet-runtime
  dependency-version: 0.6.13184
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: rbi
  dependency-version: 0.3.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: require-hooks
  dependency-version: 0.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: rubydex
  dependency-version: 0.2.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: sorbet
  dependency-version: 0.6.13184
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: sorbet-static
  dependency-version: 0.6.13184
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: nokogiri
  dependency-version: 1.19.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Bumping Gemfile dependencies ruby Pull requests that update Ruby code labels May 8, 2026
@ZhongRuoyu ZhongRuoyu enabled auto-merge May 8, 2026 09:27
@ZhongRuoyu ZhongRuoyu added this pull request to the merge queue May 8, 2026
Merged via the queue into main with commit af5efa3 May 8, 2026
38 checks passed
@ZhongRuoyu ZhongRuoyu deleted the dependabot/bundler/Library/Homebrew/bundler-a5faaafb6e branch May 8, 2026 10:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Bumping Gemfile dependencies ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants