chore(deps): bump the dependencies group across 1 directory with 4 updates by dependabot[bot] · Pull Request #5422 · github/explore

dependabot · 2026-10-19T08:53:02Z

Bumps the dependencies group with 4 updates in the / directory: faraday, json, rubocop and httparty.

Updates faraday from 2.14.4 to 2.15.0

Release notes

v2.15.0

What's Changed

[LOW] Keep Coveralls token out of pull-request code by @OskarEichler in lostisland/faraday#1711

[LOW] Remove vulnerable docs preview dependencies by @OskarEichler in lostisland/faraday#1714

chore: Use Docsify 5, to avoid the dropped 4.x version series by @olleolleolle in lostisland/faraday#1670

Fix typo in Faraday::Connection#options doc by @Bo98 in lostisland/faraday#1674

Preserve request ports for no_proxy matching by @OskarEichler in lostisland/faraday#1705

Preserve parallel manager across nested batches by @OskarEichler in lostisland/faraday#1704

Reject adapter changes after locking the stack by @OskarEichler in lostisland/faraday#1701

Preserve literal plus signs when decoding URI userinfo by @OskarEichler in lostisland/faraday#1694

Preserve explicit proxy settings when duplicating connections by @OskarEichler in lostisland/faraday#1693

Add GitHub Agentic Workflow for new-issue triage by @iMacTia with @Copilot in lostisland/faraday#1720

Remove unused RackBuilder#adapter_set? by @dpep in lostisland/faraday#1719

Fetch current option values after mutation by @OskarEichler in lostisland/faraday#1690

gemspec: Relax faraday-net_http to < 3.6 by @olleolleolle in lostisland/faraday#1722

New Contributors

@Bo98 made their first contribution in lostisland/faraday#1674

Full Changelog: lostisland/faraday@v2.14.4...v2.15.0

Commits

af2db2d v2.15.0
8456969 gemspec: Relax faraday-net_http to < 3.6
dc8c26b test: cover Options fetch after mutation
a2a95dd Fetch current option values after mutation
19a9968 Remove unused RackBuilder#adapter_set?
9e369d2 Add issue triage agentic workflow (#1720)
deeb6ef Test that Connection#dup preserves manually set proxy
bbb8ab5 Preserve explicit proxy settings when duplicating connections
fb42726 Add tests for literal plus signs in URI userinfo
5755083 Preserve literal plus signs when decoding URI userinfo
Additional commits viewable in compare view

Updates json from 3.0.2 to 3.1.0

Changelog

Sourced from json's changelog.

2026-10-13 (3.1.0)

Added rfc8785 generator option to canonicalize the output. Replaces the json-canonicalization with numerous correctness fixes.

Use the rb_len_t type introduced in Ruby 4.1 to allow for proper 64bit support on LP64 platforms (Windows).

JRuby: parser errors now include the position (line, column and the message suffix) as well as json_path, matching the C extension.

Improved the accuracy of parser error's line, column and snipets in presence of multibyte characters.

Fix JSON.load to work correctly when provided a Zlib::GzipReader as IO source.

Reject non-ASCII BINARY strings during JSON generation. This was deprecated since a long time and scheduled to be removed for 3.0.

Commits

a15b2ba Release 3.1.0
d09e383 Refactor rfc8785_sort_keys_proc
e19f7d7 Handle invalid encoding in JSON path keys
78d6a83 parser.c: only update the stack once fully spilled
6ea6201 Fix parsing of number with out of range negative exponents
1b67eb3 Fix parsing of unescaped NULL bytes in strings
c1a4372 ResumableParser: fix handling of incomplete unicode escape
429c109 More hardening against adversarial encode methods
8df32ab Index the generated JSON array by rb_len_t
21193d0 Match rb_hash_bulk_insert fallback to Ruby's declaration
Additional commits viewable in compare view

Updates rubocop from 1.91.0 to 1.92.0

Release notes

Sourced from rubocop's releases.

RuboCop v1.92.0

New features

#15895: Add an MCP tool that explains what cops do. (@bbatsov)

#15700: Add --explain COP to describe what a cop does, how it is configured, and the examples from its documentation. (@bbatsov)

#15699: Add --max-offenses-per-cop to cap how many offenses a single cop reports. (@bbatsov)

#15948: Let MCP autocorrection apply the corrections of AutoCorrect: contextual cops when asked to. (@bbatsov)

#15945: Let MCP autocorrection preview its changes as a diff. (@bbatsov)

#15915: Let MCP inspection cap how many offenses each cop reports. (@bbatsov)

#15930: Let MCP tools choose which cops run and which files they check. (@bbatsov)

#14666: Make Lint/UselessAssignment register an offense for a block-captured variable that is never referenced. (@IslamElsayed)

#15695: Report autocorrection edits in the JSON formatter. (@bbatsov)

#15940: Report cop errors and warnings per file in --format json. (@bbatsov)

#15945: Report the offenses MCP autocorrection leaves behind. (@bbatsov)

Bug fixes

#15780: Fix an error for Lint/MissingCopEnableDirective when an enable-next or next +Cop directive suspends an open rubocop:disable, and a false positive for next -Cop scopes larger than MaxRangeSize. (@bbatsov)

#16005: Fix a false negative for Security/JSONLoad with create_additions as the second argument. (@bbatsov)

#15994: Fix a false positive for Layout/LineEndStringConcatenationIndentation with an already aligned part. (@bbatsov)

#15842: Fix a false positive for Style/ExplicitBlockArgument when the method uses argument forwarding (...). (@bbatsov)

#15843: Fix a false positive for Style/NegativeArrayIndex with a different length receiver. (@bbatsov)

#15841: Fix a false positive for Style/RedundantFreeze with an arithmetic operation on a non-numeric receiver. (@bbatsov)

#15843: Fix a false positive for Style/Sample with an endless range, which was corrected to a sample call of the wrong size. (@bbatsov)

#15842: Fix a false positive for Style/SuperArguments when the method has a destructuring parameter. (@bbatsov)

#15740: Fix an error for Layout/EmptyLinesAroundMethodBody when a method's arguments span multiple lines and the method ends on the last argument's line. (@viralpraxis)

#15860: Fix an error for Layout/HeredocIndentation with a heredoc nested in another heredoc. (@Starlexxx)

#15876: Fix an error for Lint/EmptyConditionalBody with else on the condition line. (@koic)

#16008: Fix an error for Lint/UnescapedBracketInRegexp when using regexp_parser 2.11.2 and earlier. (@bbatsov)

#15897: Fix an error for Metrics/ClassLength with a long singleton class in LSP mode. (@bbatsov)

#15749: Fix an error for Style/ClassAndModuleChildren when a compact class or module definition appears in an expression, such as an assignment value or a method argument. (@viralpraxis)

#15750: Fix an error for Style/ClassAndModuleChildren when using EnforcedStyle: compact and the nested body is indented less than Layout/IndentationWidth's Width. (@viralpraxis)

#15764: Fix an error for Style/ClassAndModuleChildren when EnforcedStyle: compact compacts an irregularly indented definition and Layout/IndentationStyle enforces tabs. (@viralpraxis)

#15946: Fix an error for Style/ExplicitBlockArgument with the shorthand call syntax. (@Starlexxx)

#15861: Fix an error for Style/FormatString with format nested in format. (@Starlexxx)

#15694: Fix an error for Style/HashSyntax when a no_mixed_keys style forces hash rockets on a hash whose value repeats its key. (@viralpraxis)

#16007: Fix an error for Style/IfInsideElse when the nested if shares a line with other code. (@bbatsov)

#15867: Fix an error for Style/MapIntoArray when pushing into a numbered or it block parameter. (@Starlexxx)

#15949: Fix an error for Style/Next with a modifier condition wrapping a block that has its own offense. (@Starlexxx)

#15797: Fix an error for Style/RedundantCondition when autocorrecting a redundant condition nested in the else branch of another one. (@koic)

#15928: Fix an error for Style/Semicolon when a semicolon follows an unparenthesized keyword parameter or hash pattern. (@viralpraxis)

#15714: Fix an error for Style/YodaCondition when one operand of a comparison contains another comparison the cop also corrects. (@viralpraxis)

#16011: Fix an error for the pacman formatter, which crashed with undefined method 'winsize' whether or not the output was a terminal. (@bbatsov)

#15731: Fix an error when caching offenses whose correction or justification cannot be represented as UTF-8. (@viralpraxis)

#16015: Fix an error when cleaning up a result cache that can't be written. (@bbatsov)

#15702: Fix an error when interrupting RuboCop with Ctrl-C. (@viralpraxis)

#16015: Fix an error when the cache directory or config can't be accessed under a sandbox. (@bbatsov)

#16015: Fix an error when the result cache directory exists but can't be written. (@bbatsov)

#15817: Fix an incorrect autocorrect for Gemspec/OrderedDependencies when the same dependency declaration appears more than once in the gemspec. (@viralpraxis)

#15903: Fix an incorrect autocorrect for Layout/ClassStructure with blank line cops. (@koic)

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.92.0 (2026-10-10)

New features

#15895: Add an MCP tool that explains what cops do. ([@bbatsov][])

#15700: Add --explain COP to describe what a cop does, how it is configured, and the examples from its documentation. ([@bbatsov][])

#15699: Add --max-offenses-per-cop to cap how many offenses a single cop reports. ([@bbatsov][])

#15948: Let MCP autocorrection apply the corrections of AutoCorrect: contextual cops when asked to. ([@bbatsov][])

#15945: Let MCP autocorrection preview its changes as a diff. ([@bbatsov][])

#15915: Let MCP inspection cap how many offenses each cop reports. ([@bbatsov][])

#15930: Let MCP tools choose which cops run and which files they check. ([@bbatsov][])

#14666: Make Lint/UselessAssignment register an offense for a block-captured variable that is never referenced. ([@IslamElsayed][])

#15695: Report autocorrection edits in the JSON formatter. ([@bbatsov][])

#15940: Report cop errors and warnings per file in --format json. ([@bbatsov][])

#15945: Report the offenses MCP autocorrection leaves behind. ([@bbatsov][])

Bug fixes

#15780: Fix an error for Lint/MissingCopEnableDirective when an enable-next or next +Cop directive suspends an open rubocop:disable, and a false positive for next -Cop scopes larger than MaxRangeSize. ([@bbatsov][])

#16005: Fix a false negative for Security/JSONLoad with create_additions as the second argument. ([@bbatsov][])

#15994: Fix a false positive for Layout/LineEndStringConcatenationIndentation with an already aligned part. ([@bbatsov][])

#15842: Fix a false positive for Style/ExplicitBlockArgument when the method uses argument forwarding (...). ([@bbatsov][])

#15843: Fix a false positive for Style/NegativeArrayIndex with a different length receiver. ([@bbatsov][])

#15841: Fix a false positive for Style/RedundantFreeze with an arithmetic operation on a non-numeric receiver. ([@bbatsov][])

#15843: Fix a false positive for Style/Sample with an endless range, which was corrected to a sample call of the wrong size. ([@bbatsov][])

#15842: Fix a false positive for Style/SuperArguments when the method has a destructuring parameter. ([@bbatsov][])

#15740: Fix an error for Layout/EmptyLinesAroundMethodBody when a method's arguments span multiple lines and the method ends on the last argument's line. ([@viralpraxis][])

#15860: Fix an error for Layout/HeredocIndentation with a heredoc nested in another heredoc. ([@Starlexxx][])

#15876: Fix an error for Lint/EmptyConditionalBody with else on the condition line. ([@koic][])

#16008: Fix an error for Lint/UnescapedBracketInRegexp when using regexp_parser 2.11.2 and earlier. ([@bbatsov][])

#15897: Fix an error for Metrics/ClassLength with a long singleton class in LSP mode. ([@bbatsov][])

#15749: Fix an error for Style/ClassAndModuleChildren when a compact class or module definition appears in an expression, such as an assignment value or a method argument. ([@viralpraxis][])

#15750: Fix an error for Style/ClassAndModuleChildren when using EnforcedStyle: compact and the nested body is indented less than Layout/IndentationWidth's Width. ([@viralpraxis][])

#15764: Fix an error for Style/ClassAndModuleChildren when EnforcedStyle: compact compacts an irregularly indented definition and Layout/IndentationStyle enforces tabs. ([@viralpraxis][])

#15946: Fix an error for Style/ExplicitBlockArgument with the shorthand call syntax. ([@Starlexxx][])

#15861: Fix an error for Style/FormatString with format nested in format. ([@Starlexxx][])

#15694: Fix an error for Style/HashSyntax when a no_mixed_keys style forces hash rockets on a hash whose value repeats its key. ([@viralpraxis][])

#16007: Fix an error for Style/IfInsideElse when the nested if shares a line with other code. ([@bbatsov][])

#15867: Fix an error for Style/MapIntoArray when pushing into a numbered or it block parameter. ([@Starlexxx][])

#15949: Fix an error for Style/Next with a modifier condition wrapping a block that has its own offense. ([@Starlexxx][])

#15797: Fix an error for Style/RedundantCondition when autocorrecting a redundant condition nested in the else branch of another one. ([@koic][])

#15928: Fix an error for Style/Semicolon when a semicolon follows an unparenthesized keyword parameter or hash pattern. ([@viralpraxis][])

#15714: Fix an error for Style/YodaCondition when one operand of a comparison contains another comparison the cop also corrects. ([@viralpraxis][])

#16011: Fix an error for the pacman formatter, which crashed with undefined method 'winsize' whether or not the output was a terminal. ([@bbatsov][])

#15731: Fix an error when caching offenses whose correction or justification cannot be represented as UTF-8. ([@viralpraxis][])

#16015: Fix an error when cleaning up a result cache that can't be written. ([@bbatsov][])

#15702: Fix an error when interrupting RuboCop with Ctrl-C. ([@viralpraxis][])

#16015: Fix an error when the cache directory or config can't be accessed under a sandbox. ([@bbatsov][])

#16015: Fix an error when the result cache directory exists but can't be written. ([@bbatsov][])

#15817: Fix an incorrect autocorrect for Gemspec/OrderedDependencies when the same dependency declaration appears more than once in the gemspec. ([@viralpraxis][])

... (truncated)

Commits

4172ce5 Cut 1.92
7e75867 Require net/http in the references:verify task
7c107cb Update Changelog
81c7d42 Fix an error when cleaning up a result cache that can't be written
3b70129 Fix an error when the result cache directory exists but can't be written
830275f Fix an error when the cache directory or config can't be accessed under a san...
38b43fc Remove a check from Style/SingleLineMethods that the shared endless method ...
9897fb1 Fix an incorrect autocorrect for Style/EndlessMethod and `Style/SingleLineM...
1a2221e Fix an incorrect autocorrect for Style/ReturnNilInPredicateMethodDefinition...
f2f4fac Fix an incorrect autocorrect for Style/EndlessMethod with a modifier condit...
Additional commits viewable in compare view

Updates httparty from 0.24.2 to 0.24.3

Release notes

Sourced from httparty's releases.

v0.24.3

Full Changelog: jnunemaker/httparty@v0.24.2...v0.24.3

Bug Fixes

Support the json gem 3.x, which removed the quirks_mode parser option. (#846)

Fix the MultiXml deprecation warning with multi_xml 0.9+. (#838, thanks @robzolkos)

A UTF-8 byte order mark (BOM) is now stripped from responses that don't declare a charset. Before, a BOM-prefixed JSON response without a charset raised JSON::ParserError. (#852)

A response body that is only a BOM, or a BOM followed by whitespace, now parses to nil like any other blank body, instead of raising or returning the whitespace. (#851, thanks @januththedev)

parsed_response and response.body are separate strings for UTF-8 text responses, as in 0.24.2. (#854)

Performance

raise_on with a Range (e.g. 500..599) checks the range directly instead of building a regex for every code in it. (#843, thanks @MaxLap)

Parsing allocates fewer objects per response. (#854)

Behavior Changes

For text/plain, text/html and text/csv responses without a charset, a leading BOM is now removed from parsed_response, matching what already happened when charset=utf-8 was set. If you worked around the BOM by matching it (for example a CSV header of "\xEF\xBB\xBFid"), that match will now be "id". Workarounds like delete_prefix("") keep working.

These are unchanged: response.body and to_s (raw bytes), application/octet-stream and other formats HTTParty doesn't parse, and bodies declared in other charsets such as ISO-8859-1 or UTF-16.

Other

Specs no longer need a UTF-8 locale. (#853)

README and example updates. (#836, thanks @harland-davis; #837, thanks @zed-0xff)

Commits

781fc54 Merge pull request #855 from jnunemaker/release-0.24.3
354efac Merge pull request #856 from jnunemaker/fix-apache-formatter-time-flake
d0a08e5 Freeze time in the Apache formatter spec
f9e61f8 Release 0.24.3
215ca29 Merge pull request #854 from jnunemaker/fix/utf8-parsed-response-copy
8445772 Check for the BOM without allocating
11ac82c Clarify which encodings Parser#parse copies and cover more paths
5276cbd Return a copy of UTF-8 bodies from Parser#parse again
cd10b5e Merge pull request #852 from jnunemaker/fix/bom-without-charset
10d81c4 Merge pull request #853 from jnunemaker/fix-spec-fixture-encoding
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates Bumps the dependencies group with 4 updates in the / directory: [faraday](https://github.com/lostisland/faraday), [json](https://github.com/ruby/json), [rubocop](https://github.com/rubocop/rubocop) and [httparty](https://github.com/jnunemaker/httparty). Updates `faraday` from 2.14.4 to 2.15.0 - [Release notes](https://github.com/lostisland/faraday/releases) - [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md) - [Commits](lostisland/faraday@v2.14.4...v2.15.0) Updates `json` from 3.0.2 to 3.1.0 - [Release notes](https://github.com/ruby/json/releases) - [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md) - [Commits](ruby/json@v3.0.2...v3.1.0) Updates `rubocop` from 1.91.0 to 1.92.0 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.91.0...v1.92.0) Updates `httparty` from 0.24.2 to 0.24.3 - [Release notes](https://github.com/jnunemaker/httparty/releases) - [Changelog](https://github.com/jnunemaker/httparty/blob/main/Changelog.md) - [Commits](jnunemaker/httparty@v0.24.2...v0.24.3) --- updated-dependencies: - dependency-name: faraday dependency-version: 2.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: json dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: rubocop dependency-version: 1.92.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: httparty dependency-version: 0.24.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from a team as a code owner October 19, 2026 08:53

dependabot Bot added bundler dependabot dependencies labels Oct 19, 2026

Navigation Menu

Repository navigation

chore(deps): bump the dependencies group across 1 directory with 4 updates - #5422

chore(deps): bump the dependencies group across 1 directory with 4 updates#5422
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/dependencies-607d4b93a2

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 19, 2026

v2.15.0

What's Changed

New Contributors

2026-10-13 (3.1.0)

RuboCop v1.92.0

New features

Bug fixes

1.92.0 (2026-10-10)

New features

Bug fixes

v0.24.3

Bug Fixes

Performance

Behavior Changes

Other

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants