Bump the minor-and-patch group across 1 directory with 9 updates #2415

dependabot · 2025-10-20T21:03:57Z

Bumps the minor-and-patch group with 9 updates in the / directory:

Package	From	To
minitest	`5.25.5`	`5.26.0`
rubocop-sorbet	`0.10.5`	`0.11.0`
state_machines	`0.100.2`	`0.100.4`
google-protobuf	`4.32.1`	`4.33.0`
graphql	`2.5.13`	`2.5.14`
sidekiq	`8.0.7`	`8.0.8`
rbi	`0.3.6`	`0.3.7`
sorbet-static-and-runtime	`0.6.12556`	`0.6.12650`
spoom	`1.7.6`	`1.7.9`

Updates minitest from 5.25.5 to 5.26.0

Changelog

Sourced from minitest's changelog.

=== 5.26.0 / 2025-10-07

The Seattle.rb Nerd Party, Slightly Tipsy Edition!

2 minor enhancements:

Added extra documentation to Minitest::TestTask options.

Make parallelize_me! a no-op when n_threads=1.

9 bug fixes:

Bypass parallel_executor entirely when n_threads=1.

Don't require rubygems in Rakefile... it is 2025.

Ensure that minitest exits non-zero on Interrupt. (tavianator)

Fix Minitest.run sequence rdoc to include loop vars and read consistently.

Fix call to parallel_executor.shutdown when it isn't defined.

Removed some 1.8/1.9-based code from the assertions and expectations.

Still fighting with rdoc? Yup. Still fighting with rdoc...

Switched assert_equal's diff from Tempfile.open to Tempfile.create.

Use Regexp.escape for BASE_RE in case pwd has special chars. (astra_1993)

Commits

f78aa72 prepped for release
5faf12f - Use Regexp.escape for BASE_RE in case pwd has special chars. (astra_1993)
839c5f0 - Bypass parallel_executor entirely when n_threads=1.
7c90742 - Switched assert_equal's diff from Tempfile.open to Tempfile.create.
b3dcd38 clarify an assert_equal + newline + backslash n test output to be more readable
14c87ef Improve let tests to no longer be order dependent.
6c995cf - Ensure that minitest exits non-zero on Interrupt. (tavianator)
42ce806 - Removed some 1.8/1.9-based code from the assertions and expectations.
a17393e - Still fighting with rdoc? Yup. Still fighting with rdoc...
68b3d0c - Don't require rubygems in Rakefile... it is 2025.
Additional commits viewable in compare view

Updates rubocop-sorbet from 0.10.5 to 0.11.0

Release notes

Sourced from rubocop-sorbet's releases.

v0.11.0

What's Changed

🛠 Other Changes

Add style (sig | rbs | both) to EnforceSignature cop by @TobiasBales in Shopify/rubocop-sorbet#328

Fix docs url for lsp by @Earlopain in Shopify/rubocop-sorbet#349

Add Sorbet/ForbidTSig and Sorbet/ForbidTHelpers cops by @burke in Shopify/rubocop-sorbet#355

Add ForbidTAnyWithNilClass cop by @botantony in Shopify/rubocop-sorbet#356

New Contributors

@TobiasBales made their first contribution in Shopify/rubocop-sorbet#328

@burke made their first contribution in Shopify/rubocop-sorbet#355

@botantony made their first contribution in Shopify/rubocop-sorbet#356

Full Changelog: Shopify/rubocop-sorbet@v0.10.4...v0.11.0

Commits

1388eb5 Release v0.11.0
5e42112 Merge pull request #356 from botantony/add_forbid_t_any_with_nilclass_cop
4a1000d Add ForbidTAnyWithNilClass cop
44344b3 Merge pull request #355 from Shopify/forbid-t-sig
ec15f93 Add Sorbet/ForbidTSig and Sorbet/ForbidTHelpers cops
c943302 Merge pull request #354 from Shopify/dependabot/github_actions/actions/stale-...
0cbe100 Bump actions/stale from 10.0.0 to 10.1.0
ea81b48 Merge pull request #349 from Earlopain/fix-docs-url-for-lsp
00a7604 Bump actions/stale from 9.1.0 to 10.0.0 (#351)
e58fa58 Bump actions/github-script from 7.0.1 to 8.0.0 (#350)
Additional commits viewable in compare view

Updates state_machines from 0.100.2 to 0.100.4

Release notes

Sourced from state_machines's releases.

state_machines: v0.100.4

0.100.4 (2025-10-10)

Bug Fixes

export and restore Thread.current storage from Fiber to after callbacks (#152) (38ba8ca)

state_machines: v0.100.3

0.100.3 (2025-09-27)

Bug Fixes

preserve Thread.current storage object identity across Fiber boundaries (#152) (#156) (ff79cd4), closes #157

Changelog

Sourced from state_machines's changelog.

0.100.4 (2025-10-10)

Bug Fixes

export and restore Thread.current storage from Fiber to after callbacks (#152) (38ba8ca)

0.100.3 (2025-09-27)

Bug Fixes

preserve Thread.current storage object identity across Fiber boundaries (#152) (#156) (ff79cd4), closes #157

Commits

32405b0 Merge pull request #162 from state-machines/release-please--branches--master-...
3b892ed chore(master): release state_machines 0.100.4
668ebe3 Merge pull request #161 from state-machines/co/issue-152
38ba8ca fix: export and restore Thread.current storage from Fiber to after callbacks ...
e38c7e4 Repro test case for #152
76a709e chore: update COSS version to 0.100.3
e0bac8b chore(master): release state_machines 0.100.3 (#158)
ff79cd4 fix: preserve Thread.current storage object identity across Fiber boundaries ...
e90f771 chore: update COSS version to 0.100.2
See full diff in compare view

Updates google-protobuf from 4.32.1 to 4.33.0

Commits

See full diff in compare view

Updates graphql from 2.5.13 to 2.5.14

Changelog

Sourced from graphql's changelog.

2.5.14 (8 Oct 2025)

Bug fixes

Fix error when GraphQL-Batch is used (???) #5444

Commits

ffc6ff3 2.5.14
54614ab Merge pull request #5445 from rmosolgo/after-lazy-cleanup
5129fd5 Disambiguate result variable in runtime code; move depth calculation to method
636a154 Merge pull request #5433 from redterror/bug/tracing-no-selected-operation
57449ad don't assume query.selected_operation is defined
See full diff in compare view

Updates sidekiq from 8.0.7 to 8.0.8

Changelog

Sourced from sidekiq's changelog.

8.0.8

Allow an optional global iteration max runtime. After executing for this length of time, Sidekiq will re-queue the job to continue execution at a later time [#6819, fatkodima]
Sidekiq.configure_server do |cfg|
  cfg[:max_iteration_runtime] = 600 # ten minutes
end
Add discarded_at attribute when discarding a job so death handlers can distinguish between a job which was killed and one that was discarded. [#6820, gstokkink]

perform_bulk now accepts an :at array of times to schedule each job at the corresponding time. perform_bulk(args: [[1], [2]], at: [Time.now, Time.now + 1]) [#6790, fatkodima]

perform_bulk now accepts a :spread_interval value to schedule jobs over the next N seconds. perform_bulk(..., spread_interval: 60) [#6792, fatkodima]

Fix unintended display of flash messages in the Web UI due to session key collision

Add support for lazy load hooks #6825

Commits

96f867c Use community gem server
bfc4b8d Adjust loader API to be thread-safe and account for errors (#6826)
042f1eb Add ability to extend sidekiq/api when it is loaded (#6825)
0f15082 doc(changes)
fa920aa Update restricted uses section in COMM-LICENSE.txt (#6821)
9421c20 Track discarded_at in job payload when job is discarded. (#6820)
5981d1a Allow to configure max job runtime for iterable jobs (#6819)
d639564 doc(recent changes), bump
0b0b282 remove outdated comment, fixes #6806
61e27d2 Handle ActiveSupport::Logger.broadcast deprication (#6802)
Additional commits viewable in compare view

Updates rbi from 0.3.6 to 0.3.7

Release notes

Sourced from rbi's releases.

v0.3.7

What's Changed

✨ Enhancements

Add support for override(allow_incompatible: :visibility) by @Morriar in Shopify/rbi#520

🛠 Other Changes

Raise NotImplementedError from abstract methods by @Morriar in Shopify/rbi#484

Update Sorbet config to new RBS option by @Morriar in Shopify/rbi#487

Translate a leftover T.absurd by @Morriar in Shopify/rbi#488

Add type alias support by @paracycle in Shopify/rbi#501

Remove outdated field in dev.yml by @KaanOzkan in Shopify/rbi#518

Migrate long RBS signature comments to multiline sigs by @Morriar in Shopify/rbi#521

Full Changelog: Shopify/rbi@v0.3.6...v0.3.7

Commits

10756d1 Bump version to v0.3.7
63c85c6 Merge pull request #520 from Shopify/at-allow-incompatible-override-visibility
f5fa0b8 Merge pull request #524 from Shopify/dependabot/github_actions/ruby/setup-rub...
5259e67 Bump ruby/setup-ruby from 1.263.0 to 1.265.0
45727a5 Merge pull request #522 from Shopify/dependabot/bundler/minor-and-patch-eed4f...
8b46e70 Bump the minor-and-patch group with 3 updates
c39bf9b Update exported RBI
b06b1b6 Add RBS support for allow_incompatible_override_visibility modifier
32ab743 Parse allow_incompatible_override_visibility modifier
7f69b0b Print allow_incompatible_override_visibility modifier
Additional commits viewable in compare view

Updates sorbet-static-and-runtime from 0.6.12556 to 0.6.12650

Release notes

Sourced from sorbet-static-and-runtime's releases.

sorbet 0.6.12649.20251016173128-27b93cc66

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12649', :group => :development
gem 'sorbet-runtime', '0.6.12649'
sorbet 0.6.12648.20251016142819-f6aa4dc10

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12648', :group => :development
gem 'sorbet-runtime', '0.6.12648'
sorbet 0.6.12647.20251016141834-ed0f11c39

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12647', :group => :development
gem 'sorbet-runtime', '0.6.12647'
sorbet 0.6.12646.20251016121338-4f0fcdbaf

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12646', :group => :development
gem 'sorbet-runtime', '0.6.12646'
sorbet 0.6.12645.20251014173456-23e5ba096

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12645', :group => :development
gem 'sorbet-runtime', '0.6.12645'
sorbet 0.6.12644.20251014170504-fbba5cd44

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12644', :group => :development
gem 'sorbet-runtime', '0.6.12644'
sorbet 0.6.12643.20251014162319-f3424245d

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12643', :group => :development
gem 'sorbet-runtime', '0.6.12643'
sorbet 0.6.12642.20251013175745-ece52e5e2

... (truncated)

Commits

See full diff in compare view

Updates spoom from 1.7.6 to 1.7.9

Release notes

Sourced from spoom's releases.

v1.7.9

What's Changed

🛠 Other Changes

Rewrite type aliases by @paracycle in Shopify/spoom#791

Full Changelog: Shopify/spoom@v1.7.8...v1.7.9

v1.7.8

What's Changed

✨ Enhancements

Add support for override(allow_incompatible: :visibility) by @Morriar in Shopify/spoom#804

🛠 Other Changes

Migrate long RBS signature comments to multiline sigs by @Morriar in Shopify/spoom#805

Full Changelog: Shopify/spoom@v1.7.7...v1.7.8

v1.7.7

What's Changed

🛠 Other Changes

Fix spoom srb assertions translate to preserve trailing comments in correct order by @burke in Shopify/spoom#803

New Contributors

@burke made their first contribution in Shopify/spoom#803

Full Changelog: Shopify/spoom@v1.7.6...v1.7.7

Commits

b15cfe6 Bump version to v1.7.9
3f4ce87 Merge pull request #791 from Shopify/uk-type-alias-rewriting
5fbfe87 Refactor parse_ruby to always attach & return comments
7f232cf Update exported RBI file
2d24ccf Rewrite type aliases
f86c7c2 Bump version to v1.7.8
05f1642 Merge pull request #804 from Shopify/at-rbs-override-allow-incompatible-visib...
d4170fc Add support for override(allow_incompatible: :visibility)
526bb6a Bump rbi to v0.3.7
0bef5d6 Merge pull request #807 from Shopify/dependabot/github_actions/ruby/setup-rub...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [minitest](https://github.com/minitest/minitest) | `5.25.5` | `5.26.0` | | [rubocop-sorbet](https://github.com/shopify/rubocop-sorbet) | `0.10.5` | `0.11.0` | | [state_machines](https://github.com/state-machines/state_machines) | `0.100.2` | `0.100.4` | | [google-protobuf](https://github.com/protocolbuffers/protobuf) | `4.32.1` | `4.33.0` | | [graphql](https://github.com/rmosolgo/graphql-ruby) | `2.5.13` | `2.5.14` | | [sidekiq](https://github.com/sidekiq/sidekiq) | `8.0.7` | `8.0.8` | | [rbi](https://github.com/Shopify/rbi) | `0.3.6` | `0.3.7` | | [sorbet-static-and-runtime](https://github.com/sorbet/sorbet) | `0.6.12556` | `0.6.12650` | | [spoom](https://github.com/Shopify/spoom) | `1.7.6` | `1.7.9` | Updates `minitest` from 5.25.5 to 5.26.0 - [Changelog](https://github.com/minitest/minitest/blob/master/History.rdoc) - [Commits](minitest/minitest@v5.25.5...v5.26.0) Updates `rubocop-sorbet` from 0.10.5 to 0.11.0 - [Release notes](https://github.com/shopify/rubocop-sorbet/releases) - [Commits](Shopify/rubocop-sorbet@v0.10.5...v0.11.0) Updates `state_machines` from 0.100.2 to 0.100.4 - [Release notes](https://github.com/state-machines/state_machines/releases) - [Changelog](https://github.com/state-machines/state_machines/blob/master/CHANGELOG.md) - [Commits](state-machines/state_machines@state_machines/v0.100.2...state_machines/v0.100.4) Updates `google-protobuf` from 4.32.1 to 4.33.0 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `graphql` from 2.5.13 to 2.5.14 - [Release notes](https://github.com/rmosolgo/graphql-ruby/releases) - [Changelog](https://github.com/rmosolgo/graphql-ruby/blob/master/CHANGELOG.md) - [Commits](rmosolgo/graphql-ruby@v2.5.13...v2.5.14) Updates `sidekiq` from 8.0.7 to 8.0.8 - [Changelog](https://github.com/sidekiq/sidekiq/blob/main/Changes.md) - [Commits](sidekiq/sidekiq@v8.0.7...v8.0.8) Updates `rbi` from 0.3.6 to 0.3.7 - [Release notes](https://github.com/Shopify/rbi/releases) - [Commits](Shopify/rbi@v0.3.6...v0.3.7) Updates `sorbet-static-and-runtime` from 0.6.12556 to 0.6.12650 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `spoom` from 1.7.6 to 1.7.9 - [Release notes](https://github.com/Shopify/spoom/releases) - [Commits](Shopify/spoom@v1.7.6...v1.7.9) --- updated-dependencies: - dependency-name: minitest dependency-version: 5.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: rubocop-sorbet dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: state_machines dependency-version: 0.100.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: google-protobuf dependency-version: 4.33.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: graphql dependency-version: 2.5.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: sidekiq dependency-version: 8.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: rbi dependency-version: 0.3.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: sorbet-static-and-runtime dependency-version: 0.6.12650 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: spoom dependency-version: 1.7.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-10-27T21:03:21Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Oct 20, 2025

dependabot bot requested a review from a team as a code owner October 20, 2025 21:03

dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Oct 20, 2025

dependabot bot closed this Oct 27, 2025

dependabot bot deleted the dependabot/bundler/minor-and-patch-67b34bc441 branch October 27, 2025 21:03

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the minor-and-patch group across 1 directory with 9 updates #2415

Bump the minor-and-patch group across 1 directory with 9 updates #2415

Uh oh!

dependabot bot commented on behalf of github Oct 20, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Oct 27, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the minor-and-patch group across 1 directory with 9 updates #2415

Bump the minor-and-patch group across 1 directory with 9 updates #2415

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.11.0

What's Changed

🛠 Other Changes

New Contributors

state_machines: v0.100.4

0.100.4 (2025-10-10)

Bug Fixes

state_machines: v0.100.3

0.100.3 (2025-09-27)

Bug Fixes

0.100.4 (2025-10-10)

Bug Fixes

0.100.3 (2025-09-27)

Bug Fixes

2.5.14 (8 Oct 2025)

Bug fixes

8.0.8

v0.3.7

What's Changed

✨ Enhancements

🛠 Other Changes

sorbet 0.6.12649.20251016173128-27b93cc66

sorbet 0.6.12648.20251016142819-f6aa4dc10

sorbet 0.6.12647.20251016141834-ed0f11c39

sorbet 0.6.12646.20251016121338-4f0fcdbaf

sorbet 0.6.12645.20251014173456-23e5ba096

sorbet 0.6.12644.20251014170504-fbba5cd44

sorbet 0.6.12643.20251014162319-f3424245d

sorbet 0.6.12642.20251013175745-ece52e5e2

v1.7.9

What's Changed

🛠 Other Changes

v1.7.8

What's Changed

✨ Enhancements

🛠 Other Changes

v1.7.7

What's Changed

🛠 Other Changes

New Contributors

Uh oh!

dependabot bot commented on behalf of github Oct 27, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Oct 20, 2025 •

edited

Loading