Bump the dev-ruby-dependencies group across 1 directory with 7 updates by dependabot[bot] · Pull Request #130 · github/hooks

dependabot · 2026-10-14T04:42:00Z

Bumps the dev-ruby-dependencies group with 7 updates in the / directory:

Package	From	To
irb	`1.15.3`	`1.18.0`
rubocop	`1.81.7`	`1.92.0`
rubocop-performance	`1.26.1`	`1.27.0`
rubocop-rspec	`3.8.0`	`3.10.2`
sigstore-cli	`0.2.2`	`0.2.3`
vcr	`6.3.1`	`6.4.0`
webmock	`3.26.1`	`3.29.0`

Updates irb from 1.15.3 to 1.18.0

Release notes

Sourced from irb's releases.

v1.18.0

What's Changed

✨ Enhancements

Completely migrate to prism by @tompng in ruby/irb#1160

Suppress error highlight for some incomplete code by @tompng in ruby/irb#1173

Display command description in doc dialog on tab completion by @st0012 in ruby/irb#1180

Add startup banner with Ruby logo, version info, and tips by @st0012 in ruby/irb#1183

Highlight the method name in method calls by @shugo in ruby/irb#1189

Add --nobanner option to suppress startup banner by @st0012 in ruby/irb#1200

🐛 Bug Fixes

Make ls command work for BasicObjects by @eikes in ruby/irb#1177

Fix IRB crash when typing string literal with control/meta sequence by @tompng in ruby/irb#1182

Wait for pager to terminate by @tompng in ruby/irb#1192

Fix incorrect dash in startup message by @st0012 in ruby/irb#1206

Colorize KEYWORD_DO_BLOCK (added in head Prism) by @tompng in ruby/irb#1207

🛠 Other Changes

Silence default_external warning in tests by @Earlopain in ruby/irb#1172

Ruby >= 4.1.0 allows trailing comma in method signature by @eikes in ruby/irb#1178

Fix display_document test fails in tty environment by @tompng in ruby/irb#1185

Use Prism::ParseResult#continuable? if possible by @tompng in ruby/irb#1184

Do not open nesting for character literals by @shugo in ruby/irb#1190

Fix random EPIPE failure in SIGINT restore tests by @k0kubun in ruby/irb#1191

Bump version to 1.18.0 by @st0012 in ruby/irb#1208

New Contributors

@Earlopain made their first contribution in ruby/irb#1172

@eikes made their first contribution in ruby/irb#1178

@shugo made their first contribution in ruby/irb#1190

Full Changelog: ruby/irb@v1.17.0...v1.18.0

v1.17.0

What's Changed

🐛 Bug Fixes

Support copy command on windows and wsl by @hogelog in ruby/irb#1153

Fix incorrect history handling in nested session with debug.gem by @st0012 in ruby/irb#1158

Treat frame.path as nilable in frame filtering by @st0012 in ruby/irb#1161

🛠 Other Changes

Exclude dependabot updates from release note by @hsbt in ruby/irb#1151

Fix test_rendering flaky pager test by @tompng in ruby/irb#1152

Syntax Highlight using Prism by @tompng in ruby/irb#1091

Nesting analysis using Prism by @tompng in ruby/irb#1092

Add missing keyword to colorize by @tompng in ruby/irb#1163

Stop pointing rbs to git source by @st0012 in ruby/irb#1165

Support slices change in Prism by @tompng in ruby/irb#1168

Bump version to 1.17.0 by @st0012 in ruby/irb#1169

... (truncated)

Commits

31e068a Bump version to 1.18.0 (#1208)
f49d6b5 Colorize KEYWORD_DO_BLOCK (added in head Prism) (#1207)
96342e7 Fix incorrect dash in startup message (#1206)
9b930c8 Add --nobanner option to suppress startup banner (#1200)
9dc2a85 Bump rubygems/release-gem from 1.1.4 to 1.2.0
454964c Bump actions/upload-pages-artifact from 4 to 5
b9719d1 Bump step-security/harden-runner from 2.16.0 to 2.17.0
ee2af9f Highlight the method name in method calls (#1189)
75ad68d Bump actions/configure-pages from 5 to 6
6f757b9 Bump actions/deploy-pages from 4 to 5
Additional commits viewable in compare view

Updates rubocop from 1.81.7 to 1.92.0

Release notes

Sourced from rubocop's releases.

RuboCop v1.92.0

New features

#15895: Add an MCP tool that explains what cops do. (@bbatsov)

#15700: Add --explain COP to describe what a cop does, how it is configured, and the examples from its documentation. (@bbatsov)

#15699: Add --max-offenses-per-cop to cap how many offenses a single cop reports. (@bbatsov)

#15948: Let MCP autocorrection apply the corrections of AutoCorrect: contextual cops when asked to. (@bbatsov)

#15945: Let MCP autocorrection preview its changes as a diff. (@bbatsov)

#15915: Let MCP inspection cap how many offenses each cop reports. (@bbatsov)

#15930: Let MCP tools choose which cops run and which files they check. (@bbatsov)

#14666: Make Lint/UselessAssignment register an offense for a block-captured variable that is never referenced. (@IslamElsayed)

#15695: Report autocorrection edits in the JSON formatter. (@bbatsov)

#15940: Report cop errors and warnings per file in --format json. (@bbatsov)

#15945: Report the offenses MCP autocorrection leaves behind. (@bbatsov)

Bug fixes

#15780: Fix an error for Lint/MissingCopEnableDirective when an enable-next or next +Cop directive suspends an open rubocop:disable, and a false positive for next -Cop scopes larger than MaxRangeSize. (@bbatsov)

#16005: Fix a false negative for Security/JSONLoad with create_additions as the second argument. (@bbatsov)

#15994: Fix a false positive for Layout/LineEndStringConcatenationIndentation with an already aligned part. (@bbatsov)

#15842: Fix a false positive for Style/ExplicitBlockArgument when the method uses argument forwarding (...). (@bbatsov)

#15843: Fix a false positive for Style/NegativeArrayIndex with a different length receiver. (@bbatsov)

#15841: Fix a false positive for Style/RedundantFreeze with an arithmetic operation on a non-numeric receiver. (@bbatsov)

#15843: Fix a false positive for Style/Sample with an endless range, which was corrected to a sample call of the wrong size. (@bbatsov)

#15842: Fix a false positive for Style/SuperArguments when the method has a destructuring parameter. (@bbatsov)

#15740: Fix an error for Layout/EmptyLinesAroundMethodBody when a method's arguments span multiple lines and the method ends on the last argument's line. (@viralpraxis)

#15860: Fix an error for Layout/HeredocIndentation with a heredoc nested in another heredoc. (@Starlexxx)

#15876: Fix an error for Lint/EmptyConditionalBody with else on the condition line. (@koic)

#16008: Fix an error for Lint/UnescapedBracketInRegexp when using regexp_parser 2.11.2 and earlier. (@bbatsov)

#15897: Fix an error for Metrics/ClassLength with a long singleton class in LSP mode. (@bbatsov)

#15749: Fix an error for Style/ClassAndModuleChildren when a compact class or module definition appears in an expression, such as an assignment value or a method argument. (@viralpraxis)

#15750: Fix an error for Style/ClassAndModuleChildren when using EnforcedStyle: compact and the nested body is indented less than Layout/IndentationWidth's Width. (@viralpraxis)

#15764: Fix an error for Style/ClassAndModuleChildren when EnforcedStyle: compact compacts an irregularly indented definition and Layout/IndentationStyle enforces tabs. (@viralpraxis)

#15946: Fix an error for Style/ExplicitBlockArgument with the shorthand call syntax. (@Starlexxx)

#15861: Fix an error for Style/FormatString with format nested in format. (@Starlexxx)

#15694: Fix an error for Style/HashSyntax when a no_mixed_keys style forces hash rockets on a hash whose value repeats its key. (@viralpraxis)

#16007: Fix an error for Style/IfInsideElse when the nested if shares a line with other code. (@bbatsov)

#15867: Fix an error for Style/MapIntoArray when pushing into a numbered or it block parameter. (@Starlexxx)

#15949: Fix an error for Style/Next with a modifier condition wrapping a block that has its own offense. (@Starlexxx)

#15797: Fix an error for Style/RedundantCondition when autocorrecting a redundant condition nested in the else branch of another one. (@koic)

#15928: Fix an error for Style/Semicolon when a semicolon follows an unparenthesized keyword parameter or hash pattern. (@viralpraxis)

#15714: Fix an error for Style/YodaCondition when one operand of a comparison contains another comparison the cop also corrects. (@viralpraxis)

#16011: Fix an error for the pacman formatter, which crashed with undefined method 'winsize' whether or not the output was a terminal. (@bbatsov)

#15731: Fix an error when caching offenses whose correction or justification cannot be represented as UTF-8. (@viralpraxis)

#16015: Fix an error when cleaning up a result cache that can't be written. (@bbatsov)

#15702: Fix an error when interrupting RuboCop with Ctrl-C. (@viralpraxis)

#16015: Fix an error when the cache directory or config can't be accessed under a sandbox. (@bbatsov)

#16015: Fix an error when the result cache directory exists but can't be written. (@bbatsov)

#15817: Fix an incorrect autocorrect for Gemspec/OrderedDependencies when the same dependency declaration appears more than once in the gemspec. (@viralpraxis)

#15903: Fix an incorrect autocorrect for Layout/ClassStructure with blank line cops. (@koic)

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.92.0 (2026-10-10)

New features

#15895: Add an MCP tool that explains what cops do. ([@bbatsov][])

#15700: Add --explain COP to describe what a cop does, how it is configured, and the examples from its documentation. ([@bbatsov][])

#15699: Add --max-offenses-per-cop to cap how many offenses a single cop reports. ([@bbatsov][])

#15948: Let MCP autocorrection apply the corrections of AutoCorrect: contextual cops when asked to. ([@bbatsov][])

#15945: Let MCP autocorrection preview its changes as a diff. ([@bbatsov][])

#15915: Let MCP inspection cap how many offenses each cop reports. ([@bbatsov][])

#15930: Let MCP tools choose which cops run and which files they check. ([@bbatsov][])

#14666: Make Lint/UselessAssignment register an offense for a block-captured variable that is never referenced. ([@IslamElsayed][])

#15695: Report autocorrection edits in the JSON formatter. ([@bbatsov][])

#15940: Report cop errors and warnings per file in --format json. ([@bbatsov][])

#15945: Report the offenses MCP autocorrection leaves behind. ([@bbatsov][])

Bug fixes

#15780: Fix an error for Lint/MissingCopEnableDirective when an enable-next or next +Cop directive suspends an open rubocop:disable, and a false positive for next -Cop scopes larger than MaxRangeSize. ([@bbatsov][])

#16005: Fix a false negative for Security/JSONLoad with create_additions as the second argument. ([@bbatsov][])

#15994: Fix a false positive for Layout/LineEndStringConcatenationIndentation with an already aligned part. ([@bbatsov][])

#15842: Fix a false positive for Style/ExplicitBlockArgument when the method uses argument forwarding (...). ([@bbatsov][])

#15843: Fix a false positive for Style/NegativeArrayIndex with a different length receiver. ([@bbatsov][])

#15841: Fix a false positive for Style/RedundantFreeze with an arithmetic operation on a non-numeric receiver. ([@bbatsov][])

#15843: Fix a false positive for Style/Sample with an endless range, which was corrected to a sample call of the wrong size. ([@bbatsov][])

#15842: Fix a false positive for Style/SuperArguments when the method has a destructuring parameter. ([@bbatsov][])

#15740: Fix an error for Layout/EmptyLinesAroundMethodBody when a method's arguments span multiple lines and the method ends on the last argument's line. ([@viralpraxis][])

#15860: Fix an error for Layout/HeredocIndentation with a heredoc nested in another heredoc. ([@Starlexxx][])

#15876: Fix an error for Lint/EmptyConditionalBody with else on the condition line. ([@koic][])

#16008: Fix an error for Lint/UnescapedBracketInRegexp when using regexp_parser 2.11.2 and earlier. ([@bbatsov][])

#15897: Fix an error for Metrics/ClassLength with a long singleton class in LSP mode. ([@bbatsov][])

#15749: Fix an error for Style/ClassAndModuleChildren when a compact class or module definition appears in an expression, such as an assignment value or a method argument. ([@viralpraxis][])

#15750: Fix an error for Style/ClassAndModuleChildren when using EnforcedStyle: compact and the nested body is indented less than Layout/IndentationWidth's Width. ([@viralpraxis][])

#15764: Fix an error for Style/ClassAndModuleChildren when EnforcedStyle: compact compacts an irregularly indented definition and Layout/IndentationStyle enforces tabs. ([@viralpraxis][])

#15946: Fix an error for Style/ExplicitBlockArgument with the shorthand call syntax. ([@Starlexxx][])

#15861: Fix an error for Style/FormatString with format nested in format. ([@Starlexxx][])

#15694: Fix an error for Style/HashSyntax when a no_mixed_keys style forces hash rockets on a hash whose value repeats its key. ([@viralpraxis][])

#16007: Fix an error for Style/IfInsideElse when the nested if shares a line with other code. ([@bbatsov][])

#15867: Fix an error for Style/MapIntoArray when pushing into a numbered or it block parameter. ([@Starlexxx][])

#15949: Fix an error for Style/Next with a modifier condition wrapping a block that has its own offense. ([@Starlexxx][])

#15797: Fix an error for Style/RedundantCondition when autocorrecting a redundant condition nested in the else branch of another one. ([@koic][])

#15928: Fix an error for Style/Semicolon when a semicolon follows an unparenthesized keyword parameter or hash pattern. ([@viralpraxis][])

#15714: Fix an error for Style/YodaCondition when one operand of a comparison contains another comparison the cop also corrects. ([@viralpraxis][])

#16011: Fix an error for the pacman formatter, which crashed with undefined method 'winsize' whether or not the output was a terminal. ([@bbatsov][])

#15731: Fix an error when caching offenses whose correction or justification cannot be represented as UTF-8. ([@viralpraxis][])

#16015: Fix an error when cleaning up a result cache that can't be written. ([@bbatsov][])

#15702: Fix an error when interrupting RuboCop with Ctrl-C. ([@viralpraxis][])

#16015: Fix an error when the cache directory or config can't be accessed under a sandbox. ([@bbatsov][])

#16015: Fix an error when the result cache directory exists but can't be written. ([@bbatsov][])

#15817: Fix an incorrect autocorrect for Gemspec/OrderedDependencies when the same dependency declaration appears more than once in the gemspec. ([@viralpraxis][])

... (truncated)

Commits

4172ce5 Cut 1.92
7e75867 Require net/http in the references:verify task
7c107cb Update Changelog
81c7d42 Fix an error when cleaning up a result cache that can't be written
3b70129 Fix an error when the result cache directory exists but can't be written
830275f Fix an error when the cache directory or config can't be accessed under a san...
38b43fc Remove a check from Style/SingleLineMethods that the shared endless method ...
9897fb1 Fix an incorrect autocorrect for Style/EndlessMethod and `Style/SingleLineM...
1a2221e Fix an incorrect autocorrect for Style/ReturnNilInPredicateMethodDefinition...
f2f4fac Fix an incorrect autocorrect for Style/EndlessMethod with a modifier condit...
Additional commits viewable in compare view

Updates rubocop-performance from 1.26.1 to 1.27.0

Release notes

Sourced from rubocop-performance's releases.

RuboCop Performance v1.27.0

Bug fixes

#532: Fix false negatives for Performance/ChainArrayAllocation when using flat_map, filter_map, and collect_concat. (@koic)

Changes

#530: Speed up loading rubocop-performance by lazily loading only the cops needed for a run. This requires RuboCop 1.89.0+. (@koic)

Changelog

Sourced from rubocop-performance's changelog.

1.27.0 (2026-08-16)

Bug fixes

#532: Fix false negatives for Performance/ChainArrayAllocation when using flat_map, filter_map, and collect_concat. ([@koic][])

Changes

#530: Speed up loading rubocop-performance by lazily loading only the cops needed for a run. This requires RuboCop 1.89.0+. ([@koic][])

Commits

c07064d Cut 1.27.0
0e7abe8 Update Changelog
0d43a61 Suppress RuboCop offenses
72eb77d Merge pull request #533 from koic/fix_chain_array_allocation_false_negatives
9c60244 Merge pull request #528 from koic/fix_regexp_match_offense_message_for_bang_t...
c3515cb [Fix #532] Fix false negatives for Performance/ChainArrayAllocation
dba3d75 Merge pull request #530 from koic/lazy_load_cops
dd5f992 Load cops lazily
f1763dd [Fix #510] Clarify Performance/RegexpMatch message for !~
9c969a6 Fix JRuby CI failure caused by rbs native extension build
Additional commits viewable in compare view

Updates rubocop-rspec from 3.8.0 to 3.10.2

Release notes

Sourced from rubocop-rspec's releases.

RuboCop RSpec v3.10.2

Fix false positives for RSpec/SpecFilePathFormat when CustomTransform maps a namespace to an empty string. (@sakuro)

Fix RSpec/MatchWithSimpleRegex to ignore regular expressions with options. (@bquorning)

RuboCop RSpec v3.10.1

Add Strict option to RSpec/SharedContext to flag shared_context whenever it contains examples, even alongside setup code. (@Darhazer)

Add NegatedMatcher configuration option RSpec/ExpectChange. (@Darhazer)

Fix RSpec/MatchWithSimpleRegex to ignore regular expressions with interpolations. (@bquorning)

RuboCop RSpec v3.10.0

Add new cop RSpec/MatchWithSimpleRegex to suggest include matcher when match is used with simple string literals without regex-specific features. (@bquorning)

Add new cop RSpec/DiscardedMatcher to detect matchers in void context (e.g. missing .and between compound matchers). (@ydakuka)

Add support for itblock nodes. (@Darhazer)

RSpec/ScatteredLet now preserves the order of lets during auto-correction. (@Darhazer)

Fix a false negative for RSpec/EmptyLineAfterFinalLet inside shared_examples / include_examples / it_behaves_like blocks. (@Darhazer)

Fix a false positive for RSpec/ContainExactly when contain_exactly has multiple splat arguments. (@ydah)

Add autocorrect support for RSpec/SubjectDeclaration. (@eugeneius)

Fix false negatives for RSpec/SpecFilePathFormat when the expected class path only partially matches a path segment. (@ydah)

Fix a false negative for RSpec/ExpectActual when the matcher takes no arguments (e.g. expect("foo").to be_present, expect(1).to be). (@cvx)

RuboCop RSpec v3.9.0

Fix a false positive for RSpec/LeakyLocalVariable when variables are used only in example metadata (e.g., skip messages). (@ydah)

Fix a false positive for RSpec/ScatteredSetup when the hook is defined inside a class method. (@d4rky-pl)

Fix a false positive for RSpec/DescribedClass inside dynamically evaluated blocks (class_eval, module_eval, instance_eval, class_exec, module_exec, instance_exec). (@sucicfilip)

Add new cop RSpec/Output. (@kevinrobell-st)

Changelog

Sourced from rubocop-rspec's changelog.

3.10.2 (2026-06-06)

Fix false positives for RSpec/SpecFilePathFormat when CustomTransform maps a namespace to an empty string. ([@sakuro])

Fix RSpec/MatchWithSimpleRegex to ignore regular expressions with options. ([@bquorning])

3.10.1 (2026-06-05)

Add Strict option to RSpec/SharedContext to flag shared_context whenever it contains examples, even alongside setup code. ([@Darhazer])

Add NegatedMatcher configuration option RSpec/ExpectChange. ([@Darhazer])

Fix RSpec/MatchWithSimpleRegex to ignore regular expressions with interpolations. ([@bquorning])

3.10.0 (2026-06-05)

Add new cop RSpec/MatchWithSimpleRegex to suggest include matcher when match is used with simple string literals without regex-specific features. ([@bquorning])

Add new cop RSpec/DiscardedMatcher to detect matchers in void context (e.g. missing .and between compound matchers). ([@ydakuka])

Add support for itblock nodes. ([@Darhazer])

RSpec/ScatteredLet now preserves the order of lets during auto-correction. ([@Darhazer])

Fix a false negative for RSpec/EmptyLineAfterFinalLet inside shared_examples / include_examples / it_behaves_like blocks. ([@Darhazer])

Fix a false positive for RSpec/ContainExactly when contain_exactly has multiple splat arguments. ([@ydah])

Add autocorrect support for RSpec/SubjectDeclaration. ([@eugeneius])

Fix false negatives for RSpec/SpecFilePathFormat when the expected class path only partially matches a path segment. ([@ydah])

Fix a false negative for RSpec/ExpectActual when the matcher takes no arguments (e.g. expect("foo").to be_present, expect(1).to be). ([@cvx])

3.9.0 (2026-01-07)

Fix a false positive for RSpec/LeakyLocalVariable when variables are used only in example metadata (e.g., skip messages). ([@ydah])

Fix a false positive for RSpec/ScatteredSetup when the hook is defined inside a class method. ([@d4rky-pl])

Fix a false positive for RSpec/DescribedClass inside dynamically evaluated blocks (class_eval, module_eval, instance_eval, class_exec, module_exec, instance_exec). ([@sucicfilip])

Add new cop RSpec/Output. ([@kevinrobell-st])

Commits

2488441 Merge pull request #2189 from rubocop/release
c9e53cf Bump version to 3.10.2
7ae0a42 Merge pull request #2186 from sakuro/fix/spec-file-path-format-empty-custom-t...
8b0b5e9 Merge branch 'master' into fix/spec-file-path-format-empty-custom-transform
dc4465c Merge pull request #2188 from rubocop/fix-2185
d5de6b2 Consider regexp with options a non-simple regexp
bad0cb3 🐛 Fix RSpec/SpecFilePathFormat false positives when CustomTransform maps ...
ec3eeab Merge pull request #2183 from rubocop/fix-match-with-simple-regex-with-interp...
16bbf49 Bump version to 3.10.1
2a78abd Ignore interpolation in MatchWithSimpleRegex
Additional commits viewable in compare view

Updates sigstore-cli from 0.2.2 to 0.2.3

Release notes

Sourced from sigstore-cli's releases.

v0.2.3

What's Changed

bump setup-ruby action to support ruby v4 release in sigstore/sigstore-ruby#293

set library-specific User-Agent header on outbound http requests in sigstore/sigstore-ruby#292

Accept extensions for SCTs in sigstore/sigstore-ruby#296

Fix in-toto statement verification (GHSA-mhg6-2q2v-9h2c) in sigstore/sigstore-ruby#300

Fix lint failures, update rubocop in sigstore/sigstore-ruby#301

Bump version to prepare to release v0.2.3 in sigstore/sigstore-ruby#302

Full Changelog: sigstore/sigstore-ruby@v0.2.2...v0.2.3

Commits

26ffbe0 Bump version to prepare to release v0.2.3 (#302)
dd2df1a Fix lint failures, update rubocop (#301)
2d7dfa2 Fix in-toto statement verification (GHSA-mhg6-2q2v-9h2c) (#300)
bda3da0 Accept extensions for SCTs (#296)
d5f6657 set library-specific User-Agent header on outbound http requests (#292)
71a9085 bump setup-ruby action to support ruby v4 release (#293)
See full diff in compare view

Updates vcr from 6.3.1 to 6.4.0

Release notes

Sourced from vcr's releases.

v6.4.0

What's Changed

Fix typo in CHANGELOG [ci skip] by @olleolleolle in vcr/vcr#1035

Provide a 'Changelog' link on rubygems.org/gems/vcr by @mark-young-atg in vcr/vcr#1036

Remove unnecessary "".respond_to?(:encoding) checks by @andrehjr in vcr/vcr#1043

Do not raise an exception if the body is missing from the response by @andrehjr in vcr/vcr#1044

Add funding_uri to gemspec by @andrew in vcr/vcr#1041

Add Haskell VCR to README.md by @sol in vcr/vcr#1049

Add Vcr.HttpRecorder (C#/.NET) to README.md by @GeorgopoulosGiannis in vcr/vcr#1051

Migrate documentation from Relishapp to Github page by @benoittgt in vcr/vcr#968

Drop runtime dependency on base64 by @Earlopain in vcr/vcr#1014

Refresh Ruby support matrix in README by @tagliala in vcr/vcr#1056

Bump actions/checkout from 4 to 5 by @dependabot[bot] in vcr/vcr#1058

Replace CGI.parse with URI.decode_www_form for Ruby 3.5+ compatibility by @mmenanno in vcr/vcr#1059

Bump actions/checkout from 5 to 6 by @dependabot[bot] in vcr/vcr#1064

add Crystal ports to readme by @alexanderadam in vcr/vcr#1065

Release v6.4.0 by @olleolleolle in vcr/vcr#1066

New Contributors

@mark-young-atg made their first contribution in vcr/vcr#1036

@andrew made their first contribution in vcr/vcr#1041

@sol made their first contribution in vcr/vcr#1049

@GeorgopoulosGiannis made their first contribution in vcr/vcr#1051

@benoittgt made their first contribution in vcr/vcr#968

@Earlopain made their first contribution in vcr/vcr#1014

@tagliala made their first contribution in vcr/vcr#1056

@mmenanno made their first contribution in vcr/vcr#1059

@alexanderadam made their first contribution in vcr/vcr#1065

Full Changelog: vcr/vcr@v6.3.1...v6.4.0

Changelog

Sourced from vcr's changelog.

6.4.0 (Dec 11, 2025)

Full Changelog

[fix] Don't raise an exception if body is missing from the response. #1044. Thanks, @andrehjr!

[fix] Replace CGI.parse with URI.decode_www_form for Ruby 3.5+ compatibility #1059. Thanks, @mmenanno!

[docs] Migrate docs to GitHub Pages. #968. Thanks, @benoittgt!

No longer depend on base64 gem. #1014. Thanks, @Earlopain!

Commits

5dcacdf Release v6.4.0 (#1066)
81b06bf add Crystal ports to readme (#1065)
0bf676c Bump actions/checkout from 5 to 6 (#1064)
ce35c23 Replace CGI.parse with URI.decode_www_form for Ruby 3.5+ compatibility (#...
97f3682 Bump actions/checkout from 4 to 5 (#1058)
3b69506 Refresh Ruby support matrix in README (#1056)
882c0e0 Drop runtime dependency on base64 (#1014)
76c7e33 Migrate documentation from Relishapp to Github page (#968)
3719393 Add Vcr.HttpRecorder (C#/.NET) to README.md (#1051)
52329d1 Add Haskell VCR to README.md (#1049)
Additional commits viewable in compare view

Updates webmock from 3.26.1 to 3.29.0

Release notes

Sourced from webmock's releases.

3.29.0

Show a body diff for JSON requests whose content type has a +json suffix, such as application/vnd.api+json, and for the other content types WebMock already matches as JSON (#734)

Thanks to Olivier Brisse

Ignore the case of JSON, XML and url-encoded content types when matching request bodies, and match bodies of any +json or +xml media type, such as image/svg+xml, as JSON or XML

Suggest declaring a JSON body as a hash when a request fails to match only because the JSON is formatted differently (#649)

A body declared as a string must match the request body exactly, including key order and whitespace. When that is the only difference, the error for an unregistered request and the failure message of a request expectation now say so, and suggest with(body: JSON.parse(json_string)). Matching JSON strings regardless of key order by default is planned for the next major version (#485).

3.28.0

Fix to_rack apps receiving a rack.session they did not set up (#985)

WebMock used to add a session hash to the Rack env, shared by every request to the same stub. This confused apps that check whether a session is present, such as Rails API-only apps, and carried session data over between requests. WebMock now leaves rack.session and rack.session.options unset, as a real server does. If your app needs a session, include session middleware in the app you pass to to_rack. RackResponse#session and RackResponse#session_options have been removed.

Thanks to Jan Graichen

Fix crash when matching a hash body pattern against a JSON or XML request that has no body

Thanks to Chris

No longer warn about curb versions newer than the last one tested

Document regexp values in hash_including

Thanks to Christian Bruckmayer

Remove unused RequestSignatureSnippet#request_params

Thanks to Description has been truncated

Bumps the dev-ruby-dependencies group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [irb](https://github.com/ruby/irb) | `1.15.3` | `1.18.0` | | [rubocop](https://github.com/rubocop/rubocop) | `1.81.7` | `1.92.0` | | [rubocop-performance](https://github.com/rubocop/rubocop-performance) | `1.26.1` | `1.27.0` | | [rubocop-rspec](https://github.com/rubocop/rubocop-rspec) | `3.8.0` | `3.10.2` | | [sigstore-cli](https://github.com/sigstore/sigstore-ruby) | `0.2.2` | `0.2.3` | | [vcr](https://github.com/vcr/vcr) | `6.3.1` | `6.4.0` | | [webmock](https://github.com/bblimke/webmock) | `3.26.1` | `3.29.0` | Updates `irb` from 1.15.3 to 1.18.0 - [Release notes](https://github.com/ruby/irb/releases) - [Commits](ruby/irb@v1.15.3...v1.18.0) Updates `rubocop` from 1.81.7 to 1.92.0 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.81.7...v1.92.0) Updates `rubocop-performance` from 1.26.1 to 1.27.0 - [Release notes](https://github.com/rubocop/rubocop-performance/releases) - [Changelog](https://github.com/rubocop/rubocop-performance/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop-performance@v1.26.1...v1.27.0) Updates `rubocop-rspec` from 3.8.0 to 3.10.2 - [Release notes](https://github.com/rubocop/rubocop-rspec/releases) - [Changelog](https://github.com/rubocop/rubocop-rspec/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop-rspec@v3.8.0...v3.10.2) Updates `sigstore-cli` from 0.2.2 to 0.2.3 - [Release notes](https://github.com/sigstore/sigstore-ruby/releases) - [Commits](sigstore/sigstore-ruby@v0.2.2...v0.2.3) Updates `vcr` from 6.3.1 to 6.4.0 - [Release notes](https://github.com/vcr/vcr/releases) - [Changelog](https://github.com/vcr/vcr/blob/master/CHANGELOG.md) - [Commits](vcr/vcr@v6.3.1...v6.4.0) Updates `webmock` from 3.26.1 to 3.29.0 - [Release notes](https://github.com/bblimke/webmock/releases) - [Changelog](https://github.com/bblimke/webmock/blob/master/CHANGELOG.md) - [Commits](bblimke/webmock@v3.26.1...v3.29.0) --- updated-dependencies: - dependency-name: irb dependency-version: 1.18.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-ruby-dependencies - dependency-name: rubocop dependency-version: 1.92.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-ruby-dependencies - dependency-name: rubocop-performance dependency-version: 1.27.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-ruby-dependencies - dependency-name: rubocop-rspec dependency-version: 3.10.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-ruby-dependencies - dependency-name: sigstore-cli dependency-version: 0.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-ruby-dependencies - dependency-name: vcr dependency-version: 6.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-ruby-dependencies - dependency-name: webmock dependency-version: 3.29.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-ruby-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Oct 14, 2026

github-license-compliance Bot found potential problems Oct 14, 2026

View reviewed changes

Comment thread Gemfile.lock Fixed

Comment thread Gemfile.lock

Comment thread Gemfile.lock

Navigation Menu

Repository navigation

Bump the dev-ruby-dependencies group across 1 directory with 7 updates - #130

Bump the dev-ruby-dependencies group across 1 directory with 7 updates#130
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/dev-ruby-dependencies-a49a79fd0f

dependabot Bot commented on behalf of github Oct 14, 2026

Uh oh!

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 14, 2026

v1.18.0

What's Changed

✨ Enhancements

🐛 Bug Fixes

🛠 Other Changes

New Contributors

v1.17.0

What's Changed

🐛 Bug Fixes

🛠 Other Changes

RuboCop v1.92.0

New features

Bug fixes

1.92.0 (2026-10-10)

New features

Bug fixes

RuboCop Performance v1.27.0

Bug fixes

Changes

1.27.0 (2026-08-16)

Bug fixes

Changes

RuboCop RSpec v3.10.2

RuboCop RSpec v3.10.1

RuboCop RSpec v3.10.0

RuboCop RSpec v3.9.0

3.10.2 (2026-06-06)

3.10.1 (2026-06-05)

3.10.0 (2026-06-05)

3.9.0 (2026-01-07)

v0.2.3

What's Changed

v6.4.0

What's Changed

New Contributors

6.4.0 (Dec 11, 2025)

3.29.0

3.28.0

Uh oh!

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants