Bump the "all" group with 2 updates across multiple ecosystems #1008

dependabot · 2025-12-29T08:26:20Z

Bumps the all group with 2 updates: github/codeql-action and docker/setup-buildx-action.

Updates github/codeql-action from 4.31.5 to 4.31.9

Release notes

Sourced from github/codeql-action's releases.

v4.31.9

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.9 - 16 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v4.31.8

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.8 - 11 Dec 2025

Update default CodeQL bundle version to 2.23.8. #3354

See the full CHANGELOG.md for more information.

v4.31.7

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.7 - 05 Dec 2025

Update default CodeQL bundle version to 2.23.7. #3343

See the full CHANGELOG.md for more information.

v4.31.6

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.6 - 01 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.31.9 - 16 Dec 2025

No user facing changes.

4.31.8 - 11 Dec 2025

Update default CodeQL bundle version to 2.23.8. #3354

4.31.7 - 05 Dec 2025

Update default CodeQL bundle version to 2.23.7. #3343

4.31.6 - 01 Dec 2025

No user facing changes.

4.31.5 - 24 Nov 2025

Update default CodeQL bundle version to 2.23.6. #3321

4.31.4 - 18 Nov 2025

No user facing changes.

4.31.3 - 13 Nov 2025

CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.

Update default CodeQL bundle version to 2.23.5. #3288

4.31.2 - 30 Oct 2025

No user facing changes.

4.31.1 - 30 Oct 2025

The add-snippets input has been removed from the analyze action. This input has been deprecated since CodeQL Action 3.26.4 in August 2024 when this removal was announced.

4.31.0 - 24 Oct 2025

Bump minimum CodeQL bundle version to 2.17.6. #3223

When SARIF files are uploaded by the analyze or upload-sarif actions, the CodeQL Action automatically performs post-processing steps to prepare the data for the upload. Previously, these post-processing steps were only performed before an upload took place. We are now changing this so that the post-processing steps will always be performed, even when the SARIF files are not uploaded. This does not change anything for the upload-sarif action. For analyze, this may affect Advanced Setup for CodeQL users who specify a value other than always for the upload input. #3222

... (truncated)

Commits

5d4e8d1 Merge pull request #3371 from github/update-v4.31.9-998798e34
1dc115f Update changelog for v4.31.9
998798e Merge pull request #3352 from github/nickrolfe/jar-min-ff-cleanup
5eb7519 Merge pull request #3358 from github/henrymercer/database-upload-telemetry
d29eddb Extract version number to constant
e962687 Merge branch 'main' into henrymercer/database-upload-telemetry
19c7f96 Rename isOverlayBase
ae5de9a Use getErrorMessage in log too
0cb8633 Prefer performance.now()
c07cc0d Merge pull request #3351 from github/henrymercer/ghec-dr-determine-tools-vers...
Additional commits viewable in compare view

Updates docker/setup-buildx-action from 3.11.1 to 3.12.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v3.12.0

Deprecate install input by @crazy-max in docker/setup-buildx-action#455

Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in docker/setup-buildx-action#434

Bump brace-expansion from 1.1.11 to 1.1.12 in docker/setup-buildx-action#436

Bump form-data from 2.5.1 to 2.5.5 in docker/setup-buildx-action#432

Bump undici from 5.28.4 to 5.29.0 in docker/setup-buildx-action#435

Full Changelog: docker/setup-buildx-action@v3.11.1...v3.12.0

Commits

8d2750c Merge pull request #455 from crazy-max/install-deprecated
e81846b deprecate install input
65d18f8 Merge pull request #454 from docker/dependabot/github_actions/actions/checkout-6
000d75d build(deps): bump actions/checkout from 5 to 6
1583c0f Merge pull request #443 from nicolasleger/patch-1
ed158e7 doc: bump actions/checkout from 4 to 5
4cc794f Merge pull request #441 from docker/dependabot/github_actions/actions/checkout-5
4dfc3d6 build(deps): bump actions/checkout from 4 to 5
af1b253 Merge pull request #440 from crazy-max/k3s-build
3c6ab92 ci: k3s test with latest buildx
Additional commits viewable in compare view

Bumps the all group with 11 updates:

Package	From	To
sorbet-runtime	`0.6.12865`	`0.6.12872`
rubocop	`1.81.7`	`1.82.0`
sorbet	`0.6.12865`	`0.6.12872`
sorbet-static-and-runtime	`0.6.12865`	`0.6.12872`
i18n	`1.14.7`	`1.14.8`
loofah	`2.24.1`	`2.25.0`
nokogiri	`1.18.10`	`1.19.0`
rdoc	`7.0.1`	`7.0.3`
rubocop-ast	`1.48.0`	`1.49.0`
sorbet-static	`0.6.12865`	`0.6.12872`
unicode-emoji	`4.1.0`	`4.2.0`

Updates sorbet-runtime from 0.6.12865 to 0.6.12872

Release notes

Sourced from sorbet-runtime's releases.

sorbet 0.6.12871.20251223085357-b3d0fbad9

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12871', :group => :development
gem 'sorbet-runtime', '0.6.12871'
sorbet 0.6.12870.20251223085338-5fd6d06e8

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12870', :group => :development
gem 'sorbet-runtime', '0.6.12870'
sorbet 0.6.12869.20251222163124-8985e1c4c

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12869', :group => :development
gem 'sorbet-runtime', '0.6.12869'
sorbet 0.6.12868.20251222091615-c6519ff18

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12868', :group => :development
gem 'sorbet-runtime', '0.6.12868'
sorbet 0.6.12867.20251222075851-f6dae0e60

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12867', :group => :development
gem 'sorbet-runtime', '0.6.12867'
sorbet 0.6.12866.20251221234711-0c2ee86c3

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12866', :group => :development
gem 'sorbet-runtime', '0.6.12866'
sorbet 0.6.12865.20251218215641-56cc5f64f

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12865', :group => :development
gem 'sorbet-runtime', '0.6.12865'

Commits

See full diff in compare view

Updates rubocop from 1.81.7 to 1.82.0

Release notes

Sourced from rubocop's releases.

RuboCop v1.82.0

New features

#14655: Add AllowRBSInlineAnnotation option to Layout/LineLength. (@koic)

#14569: Add IncludedMacroPatterns configuration option to Style/MethodCallWithArgsParentheses for pattern-based macro method enforcement. (@mmenanno)

#14670: Add new cop Style/ModuleMemberExistenceCheck. (@lovro-bikic)

#14644: Support TargetRubyVersion 4.0 (experimental). (@koic)

Bug fixes

#14649: Fix an error for Lint/LiteralAsCondition when there are literals in multiple branches. (@viralpraxis)

#14678: Fix an error when running deprecated rake rubocop:auto_correct task. (@koic)

#14650: Fix wrong autocorrect for Lint/RedundantSplatExpansion when splatting a single literal. (@earlopain)

#14703: Fix false negatives for Layout/RescueEnsureAlignment when using self class definition. (@koic)

#14706: Fix false negatives for Lint/NoReturnInBeginEndBlocks when assigning instance variable, class variable, global variable, or constant. (@koic)

#14715: Fix false positives for Layout/EmptyLineAfterGuardClause when a guard clause follows a multiline heredoc in a parenthesized method call. (@koic)

#14667: Fix false positives for Layout/EndAlignment when a conditional assignment is used on the same line and the end with a safe navigation method call is aligned. (@koic)

#14688: Fix false positives for Layout/EndAlignment when a conditional assignment is used on the same line and the end with a numbered block or it block method call is aligned. (@koic)

#14699: Fix false positives for Lint/RedundantSafeNavigation when the receiver is used outside the singleton method definition scope. (@koic)

#14663: Fix false positives for Style/EndlessMethod when multiline or xstring heredoc is used in method body. (@koic)

#10173: Fix false positives for Style/TrailingCommaInArguments when EnforcedStyleForMultiline is set to consistent_comma and a multiline braced hash argument appears after another argument. (@koic)

#14680: Handle all OptionParser errors when running rubocop with input that causes an error. (@dvandersluis)

#14658: Fix incorrect behavior when Layout/LineLength is disabled. (@koic)

#14704: Fix incorrect Position character value in LSP. (@tmtm)

#14619: Store remote configuration caches in cache root. ([@Jack12816][])

#14476: Fix Style/ClassAndModuleChildren to skip compact style definitions inside another class or module when EnforcedStyle: nested. ([@rscq][])

#14281: Update Layout/EndAlignment with EnforcedStyleAlignWith: variable to handle conditionals inside begin nodes properly. (@dvandersluis)

Changes

#14662: Add autocorrection for Lint/UselessOr. ([@r7kamura][])

#14668: Exclude Severity from configuration parameters. ([@r7kamura][])

#14684: Make Style/CaseEquality allow regexp case equality where the receiver is a regexp literal. (@koic)

#14645: Change Lint/CircularArgumentReference to detect offenses within long assignment chains. (@viralpraxis)

#14642: Make Gemspec/RubyVersionGlobalsUsage aware of Ruby::VERSION. (@koic)

#14695: Make Layout/EmptyLineAfterMagicComment aware of # rbs_inline magic comment. (@koic)

#10147: Make Lint/ElseLayout allow a single-line else body in then single-line conditional. (@koic)

#14661: Make Lint/RedundantRequireStatement aware of pathname when analyzing Ruby 4.0. (@koic)

#14698: Make Lint/UnreachableCode aware of singleton method redefinition. (@koic)

#14677: Make Style/RedundantArgument aware of to_i. (@koic)

#14660: Rename IgnoreCopDirectives to AllowCopDirectives in Layout/LineLength. (@koic)

#14492: Revert #14492, which added support for LSP positionEncoding 'utf-8' and 'utf-32' due to critical performance regression reports. (@koic)

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.82.0 (2025-12-17)

New features

#14655: Add AllowRBSInlineAnnotation option to Layout/LineLength. ([@koic][])

#14569: Add IncludedMacroPatterns configuration option to Style/MethodCallWithArgsParentheses for pattern-based macro method enforcement. ([@mmenanno][])

#14670: Add new cop Style/ModuleMemberExistenceCheck. ([@lovro-bikic][])

#14644: Support TargetRubyVersion 4.0 (experimental). ([@koic][])

Bug fixes

#14649: Fix an error for Lint/LiteralAsCondition when there are literals in multiple branches. ([@viralpraxis][])

#14678: Fix an error when running deprecated rake rubocop:auto_correct task. ([@koic][])

#14650: Fix wrong autocorrect for Lint/RedundantSplatExpansion when splatting a single literal. ([@earlopain][])

#14703: Fix false negatives for Layout/RescueEnsureAlignment when using self class definition. ([@koic][])

#14706: Fix false negatives for Lint/NoReturnInBeginEndBlocks when assigning instance variable, class variable, global variable, or constant. ([@koic][])

#14715: Fix false positives for Layout/EmptyLineAfterGuardClause when a guard clause follows a multiline heredoc in a parenthesized method call. ([@koic][])

#14667: Fix false positives for Layout/EndAlignment when a conditional assignment is used on the same line and the end with a safe navigation method call is aligned. ([@koic][])

#14688: Fix false positives for Layout/EndAlignment when a conditional assignment is used on the same line and the end with a numbered block or it block method call is aligned. ([@koic][])

#14699: Fix false positives for Lint/RedundantSafeNavigation when the receiver is used outside the singleton method definition scope. ([@koic][])

#14663: Fix false positives for Style/EndlessMethod when multiline or xstring heredoc is used in method body. ([@koic][])

#10173: Fix false positives for Style/TrailingCommaInArguments when EnforcedStyleForMultiline is set to consistent_comma and a multiline braced hash argument appears after another argument. ([@koic][])

#14680: Handle all OptionParser errors when running rubocop with input that causes an error. ([@dvandersluis][])

#14658: Fix incorrect behavior when Layout/LineLength is disabled. ([@koic][])

#14704: Fix incorrect Position character value in LSP. ([@tmtm][])

#14619: Store remote configuration caches in cache root. ([@Jack12816][])

#14476: Fix Style/ClassAndModuleChildren to skip compact style definitions inside another class or module when EnforcedStyle: nested. ([@rscq][])

#14281: Update Layout/EndAlignment with EnforcedStyleAlignWith: variable to handle conditionals inside begin nodes properly. ([@dvandersluis][])

Changes

#14662: Add autocorrection for Lint/UselessOr. ([@r7kamura][])

#14668: Exclude Severity from configuration parameters. ([@r7kamura][])

#14684: Make Style/CaseEquality allow regexp case equality where the receiver is a regexp literal. ([@koic][])

#14645: Change Lint/CircularArgumentReference to detect offenses within long assignment chains. ([@viralpraxis][])

#14642: Make Gemspec/RubyVersionGlobalsUsage aware of Ruby::VERSION. ([@koic][])

#14695: Make Layout/EmptyLineAfterMagicComment aware of # rbs_inline magic comment. ([@koic][])

#10147: Make Lint/ElseLayout allow a single-line else body in then single-line conditional. ([@koic][])

#14661: Make Lint/RedundantRequireStatement aware of pathname when analyzing Ruby 4.0. ([@koic][])

#14698: Make Lint/UnreachableCode aware of singleton method redefinition. ([@koic][])

#14677: Make Style/RedundantArgument aware of to_i. ([@koic][])

#14660: Rename IgnoreCopDirectives to AllowCopDirectives in Layout/LineLength. ([@koic][])

#14492: Revert #14492, which added support for LSP positionEncoding 'utf-8' and 'utf-32' due to critical performance regression reports. ([@koic][])

Commits

384aa2b Cut 1.82
f8a84fa Update Changelog
f8b40bc [Fix #13854 (Old issue)] add push/pop logic for handle local enable/disable
70f76b1 Add new cop Style/ModuleMemberExistenceCheck
acbdbda Fix false positives for Layout/EmptyLineAfterGuardClause
9cc142e Fix incorrect Position character value in LSP
5e07aa1 Merge pull request #14712 from moznion/fix_escaped_single_quote
8f5b029 [Fix #14711] Fix broken auto-correction in Style/RedundantRegexpArgument rule
bcfdf5f Add some specs for Style/RedundantCondition
2c9071d Merge pull request #14707 from koic/fix_false_negatives_for_lint_no_return_in...
Additional commits viewable in compare view

Updates sorbet from 0.6.12865 to 0.6.12872

Release notes

Sourced from sorbet's releases.

sorbet 0.6.12871.20251223085357-b3d0fbad9

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12871', :group => :development
gem 'sorbet-runtime', '0.6.12871'
sorbet 0.6.12870.20251223085338-5fd6d06e8

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12870', :group => :development
gem 'sorbet-runtime', '0.6.12870'
sorbet 0.6.12869.20251222163124-8985e1c4c

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12869', :group => :development
gem 'sorbet-runtime', '0.6.12869'
sorbet 0.6.12868.20251222091615-c6519ff18

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12868', :group => :development
gem 'sorbet-runtime', '0.6.12868'
sorbet 0.6.12867.20251222075851-f6dae0e60

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12867', :group => :development
gem 'sorbet-runtime', '0.6.12867'
sorbet 0.6.12866.20251221234711-0c2ee86c3

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12866', :group => :development
gem 'sorbet-runtime', '0.6.12866'
sorbet 0.6.12865.20251218215641-56cc5f64f

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12865', :group => :development
gem 'sorbet-runtime', '0.6.12865'

Commits

See full diff in compare view

Updates sorbet-static-and-runtime from 0.6.12865 to 0.6.12872

Release notes

Sourced from sorbet-static-and-runtime's releases.

sorbet 0.6.12871.20251223085357-b3d0fbad9

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12871', :group => :development
gem 'sorbet-runtime', '0.6.12871'
sorbet 0.6.12870.20251223085338-5fd6d06e8

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12870', :group => :development
gem 'sorbet-runtime', '0.6.12870'
sorbet 0.6.12869.20251222163124-8985e1c4c

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12869', :group => :development
gem 'sorbet-runtime', '0.6.12869'
sorbet 0.6.12868.20251222091615-c6519ff18

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12868', :group => :development
gem 'sorbet-runtime', '0.6.12868'
sorbet 0.6.12867.20251222075851-f6dae0e60

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12867', :group => :development
gem 'sorbet-runtime', '0.6.12867'
sorbet 0.6.12866.20251221234711-0c2ee86c3

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12866', :group => :development
gem 'sorbet-runtime', '0.6.12866'
sorbet 0.6.12865.20251218215641-56cc5f64f

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12865', :group => :development
gem 'sorbet-runtime', '0.6.12865'

Commits

See full diff in compare view

Updates i18n from 1.14.7 to 1.14.8

Release notes

Sourced from i18n's releases.

v1.14.8

Full Changelog: ruby-i18n/i18n@v1.14.7...v1.14.8

What's Changed

Remove unused cgi require for Ruby 3.5 compatibility by @Earlopain in ruby-i18n/i18n#713

Explicitly require pathname by @voxik in ruby-i18n/i18n#708

CI: Add Ruby 3.4 to CI Matrix by @taketo1113 in ruby-i18n/i18n#722

Fix: I18n.locale reset in Fiber context by using Thread#thread_variable by @lee266 in ruby-i18n/i18n#724

CI: Use actions/checkout@v5 by @olleolleolle in ruby-i18n/i18n#721

Fix compatibility with --enable-frozen-string-literal by @byroot in ruby-i18n/i18n#726

New Contributors

@Earlopain made their first contribution in ruby-i18n/i18n#713

@taketo1113 made their first contribution in ruby-i18n/i18n#722

@lee266 made their first contribution in ruby-i18n/i18n#724

@byroot made their first contribution in ruby-i18n/i18n#726

Full Changelog: ruby-i18n/i18n@v1.14.7...v1.14.8

Commits

f2fb6a5 Bump to 1.14.9
ef62253 Merge pull request #726 from byroot/fstr-compat
0022013 Merge branch 'master' into fstr-compat
dee96b6 Remove testing for EOL Rubies 3.1 + 3.0
c6873f9 Merge remote-tracking branch 'olleolleolle/patch-1'
2134338 Merge pull request #724 from lee266/fix/i18n-locale-thread-variable
3f9ae64 Fix compatibility with --enable-frozen-string-literal
d64a88d Merge pull request #722 from taketo1113/ci-ruby-3.4
0e5484f CI: Fix rails version specification in gemfiles to run with the specified min...
960ab2b CI: Add ruby 3.4 to CI Matrix
Additional commits viewable in compare view

Updates loofah from 2.24.1 to 2.25.0

Release notes

Sourced from loofah's releases.

2.25.0 / 2025-12-15

Extract Loofah::HTML5::Scrub.allowed_uri? which operates on a string. Previously this logic was coupled to the parsed tree in .scrub_uri_attribute. #300 @flavorjones

Tightened up how entities and control characters are handled when detecting allowed URIs. #301 @flavorjones

Full Changelog: flavorjones/loofah@v2.24.1...v2.25.0

Changelog

Sourced from loofah's changelog.

2.25.0 / 2025-12-15

Extract Loofah::HTML5::Scrub.allowed_uri? which operates on a string. Previously this logic was coupled to the parsed tree in .scrub_uri_attribute. #300 @flavorjones

Tightened up how entities and control characters are handled when detecting allowed URIs. #301 @flavorjones

Commits

e65bddd version bump to v2.25.0
462c717 doc: update CHANGELOG
75e2f33 Merge pull request #301 from flavorjones/flavorjones/better-allowed-uri-detec...
4addebd Scrub.allowed_uri? better handles entities and control characters
f8cdc59 Merge pull request #300 from flavorjones/flavorjones/extract-allowed-uri-method
2721a65 Extract Loofah::HTML5::Scrub.allowed_uri?
887c355 Merge pull request #298 from flavorjones/flavorjones/tests-libxml-2.14
c7d9ea3 test: update tests to accept output from libxml 2.14
See full diff in compare view

Updates nokogiri from 1.18.10 to 1.19.0

Release notes

Sourced from nokogiri's releases.

v1.19.0 / 2025-12-28

Ruby

This release is focused on changes to Ruby version support, and is otherwise functionally identical to v1.18.10.

Introduce native gem support for Ruby 4.0. #3590
End support for Ruby 3.1, for which upstream support ended 2025-03-26.
End support for JRuby 9.4 (which targets Ruby 3.1 compatibility).

11a97ecc3c0e7e5edcf395720b10860ef493b768f6aa80c539573530bc933767  nokogiri-1.19.0-aarch64-linux-gnu.gem
eb70507f5e01bc23dad9b8dbec2b36ad0e61d227b42d292835020ff754fb7ba9  nokogiri-1.19.0-aarch64-linux-musl.gem
572a259026b2c8b7c161fdb6469fa2d0edd2b61cd599db4bbda93289abefbfe5  nokogiri-1.19.0-arm-linux-gnu.gem
23ed90922f1a38aed555d3de4d058e90850c731c5b756d191b3dc8055948e73c  nokogiri-1.19.0-arm-linux-musl.gem
0811dfd936d5f6dd3f6d32ef790568bf29b2b7bead9ba68866847b33c9cf5810  nokogiri-1.19.0-arm64-darwin.gem
5f3a70e252be641d8a4099f7fb4cc25c81c632cb594eec9b4b8f2ca8be4374f3  nokogiri-1.19.0-java.gem
05d7ed2d95731edc9bef2811522dc396df3e476ef0d9c76793a9fca81cab056b  nokogiri-1.19.0-x64-mingw-ucrt.gem
1dad56220b603a8edb9750cd95798bffa2b8dd9dd9aa47f664009ee5b43e3067  nokogiri-1.19.0-x86_64-darwin.gem
f482b95c713d60031d48c44ce14562f8d2ce31e3a9e8dd0ccb131e9e5a68b58c  nokogiri-1.19.0-x86_64-linux-gnu.gem
1c4ca6b381622420073ce6043443af1d321e8ed93cc18b08e2666e5bd02ffae4  nokogiri-1.19.0-x86_64-linux-musl.gem
e304d21865f62518e04f2bf59f93bd3a97ca7b07e7f03952946d8e1c05f45695  nokogiri-1.19.0.gem

Changelog

Sourced from nokogiri's changelog.

v1.19.0 / 2025-12-28

Ruby

This release is focused on changes to Ruby version support, and is otherwise functionally identical to v1.18.10.

Introduce native gem support for Ruby 4.0. #3590

End support for Ruby 3.1, for which upstream support ended 2025-03-26.

End support for JRuby 9.4 (which targets Ruby 3.1 compatibility).

Commits

d77bfb6 version bump to v1.19.0
1eb5c2c dev: convert scripts/test-gem-set to use mise
88a120f dep: Add native Ruby 4 support, drop Ruby 3.1 support (v1.19.x) (#3592)
f8c8f74 Skip the parser compression test for Windows system libs
e91c0fc ci: temporarily pin to setup-ruby with windows ruby 4
1b08acc dep: update to minitest 6
404487d dep: require JRuby >= 10.0
19b22ea dep: add support for native Ruby 4.0 gem
ec57d11 ci: bump versions in CI images
f7b640f ci: avoid bundler collisions in downstream tests
Additional commits viewable in compare view

Updates rdoc from 7.0.1 to 7.0.3

Release notes

Sourced from rdoc's releases.

v7.0.3

What's Changed

🐛 Bug Fixes

Fix comment location marshalling in ClassModule by @st0012 in ruby/rdoc#1529

📚 Documentation

Mention the comment type annotations in docs by @vinistock in ruby/rdoc#1522

🛠 Other Changes

Bump ruby/setup-ruby from 1.270.0 to 1.275.0 by @dependabot[bot] in ruby/rdoc#1517

Fix "statement not reached" warnings by @nobu in ruby/rdoc#1518

Standardize table and heading markup elements by @vinistock in ruby/rdoc#1389

Standardize HardBreak markup by @vinistock in ruby/rdoc#1519

Standardize BlankLine markup by @vinistock in ruby/rdoc#1520

Standardize Raw markup by @vinistock in ruby/rdoc#1521

Full Changelog: ruby/rdoc@v7.0.2...v7.0.3

v7.0.2

What's Changed

🐛 Bug Fixes

Fix class/module alias document having wrong name by @tompng in ruby/rdoc#1515

Change sidebar hiding strategy to avoid flickering on mobile devices by @st0012 in ruby/rdoc#1516

Fix search dropdown behaviour by @st0012 in ruby/rdoc#1512

🛠 Other Changes

Fix herb linting errors in ERB templates by @st0012 in ruby/rdoc#1514

Reduce sidebar list item padding by @st0012 in ruby/rdoc#1513

Full Changelog: ruby/rdoc@v7.0.1...v7.0.2

Commits

d676630 Bump RDoc to 7.0.3
825d6e9 Fix comment location marshalling in ClassModule (#1529)
032024b Mention the comment type annotations in docs (#1522)
e74ce32 Standardize Raw markup (#1521)
255a95d Standardize BlankLine markup (#1520)
8ea57fb Standardize HardBreak markup (#1519)
61c1e8a Standardize table and heading markup elements (#1389)
513623b Fix "statement not reached" warnings (#1518)
ca8a0ad Bump ruby/setup-ruby from 1.270.0 to 1.275.0
fe2fe63 Fix search dropdown behaviour (#1512)
Additional commits viewable in compare view

Updates rubocop-ast from 1.48.0 to 1.49.0

Release notes

Sourced from rubocop-ast's releases.

RuboCop AST v1.49.0

New features

#394: Support Ruby 4.1 (experimental). (@koic)

Changelog

Sourced from rubocop-ast's changelog.

1.49.0 (2025-12-28)

New features

#394: Support Ruby 4.1 (experimental). ([@koic][])

Commits

ba542c8 Cut 1.49.0
60b64d0 Update Changelog
867c196 CI against Ruby 4.0 (#398)
a426fad Support Ruby 4.1
0d2f1f6 rubocop -a
b816bb4 bundle exec rubocop --auto-gen-config
76c439b Add missing relnotes
0023de3 Remove CI workaround for Ruby 2.7 (#395)
59fbdaa Suppress RuboCop's offense
82bdaee Don't require prism translation parser classes (#393)
Additional commits viewable in compare view

Updates sorbet-static from 0.6.12865 to 0.6.12872

Release notes

Sourced from sorbet-static's releases.

sorbet 0.6.12871.20251223085357-b3d0fbad9

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12871', :group => :development
gem 'sorbet-runtime', '0.6.12871'
sorbet 0.6.12870.20251223085338-5fd6d06e8

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12870', :group => :development
gem 'sorbet-runtime', '0.6.12870'
sorbet 0.6.12869.20251222163124-8985e1c4c

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12869', :group => :development
gem 'sorbet-runtime', '0.6.12869'
sorbet 0.6.12868.20251222091615-c6519ff18

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12868', :group => :development
gem 'sorbet-runtime', '0.6.12868'
sorbet 0.6.12867.20251222075851-f6dae0e60

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12867', :group => :development
gem 'sorbet-runtime', '0.6.12867'
sorbet 0.6.12866.20251221234711-0c2ee86c3

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12866', :group => :development
gem 'sorbet-runtime', '0.6.12866'
sorbet 0.6.12865.20251218215641-56cc5f64f

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.12865', :group => :development
gem 'sorbet-runtime', '0.6.12865'

Commits

See full diff in compare view

Updates unicode-emoji from 4.1.0 to 4.2.0

Changelog

Sourced from unicode-emoji's changelog.

4.2.0

Allow Ruby 4.0

Remove Non-Emoji pictographs from spec, since they have been removed in Unicode 17

Update valid subdivisions to CLDR 48 (no changes)

Commits

beff6fe Release v4.2.0
1980174 Update CLDR to v48
82fea37 Fix: Emoji file not actually cached
3a81e3b Remove Non-Emoji pictographs from spec, since they have been removed in Unico...
857589e Fix Rakefile: Run both spec files
6ba7e49 Add mutex_m and ostruct to Gemfile, since they are not a default gem anymore
3510dcf Merge pull request #17 from taketo1113/relax-require-ruby
3e80769 Relax required_ruby_version to support Ruby 4.0
dba9693 Add Unicode version and fix location of emoji test data #16
e31212a Add Ruby 3.4 to unix CI too
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

...

Description has been truncated

Bumps the all group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action) and [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action). Updates `github/codeql-action` from 4.31.5 to 4.31.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@fdbfb4d...5d4e8d1) Updates `docker/setup-buildx-action` from 3.11.1 to 3.12.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@e468171...8d2750c) build(deps): bump the all group with 11 updates Bumps the all group with 11 updates: | Package | From | To | | --- | --- | --- | | [sorbet-runtime](https://github.com/sorbet/sorbet) | `0.6.12865` | `0.6.12872` | | [rubocop](https://github.com/rubocop/rubocop) | `1.81.7` | `1.82.0` | | [sorbet](https://github.com/sorbet/sorbet) | `0.6.12865` | `0.6.12872` | | [sorbet-static-and-runtime](https://github.com/sorbet/sorbet) | `0.6.12865` | `0.6.12872` | | [i18n](https://github.com/ruby-i18n/i18n) | `1.14.7` | `1.14.8` | | [loofah](https://github.com/flavorjones/loofah) | `2.24.1` | `2.25.0` | | [nokogiri](https://github.com/sparklemotion/nokogiri) | `1.18.10` | `1.19.0` | | [rdoc](https://github.com/ruby/rdoc) | `7.0.1` | `7.0.3` | | [rubocop-ast](https://github.com/rubocop/rubocop-ast) | `1.48.0` | `1.49.0` | | [sorbet-static](https://github.com/sorbet/sorbet) | `0.6.12865` | `0.6.12872` | | [unicode-emoji](https://github.com/janlelis/unicode-emoji) | `4.1.0` | `4.2.0` | Updates `sorbet-runtime` from 0.6.12865 to 0.6.12872 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `rubocop` from 1.81.7 to 1.82.0 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.81.7...v1.82.0) Updates `sorbet` from 0.6.12865 to 0.6.12872 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `sorbet-static-and-runtime` from 0.6.12865 to 0.6.12872 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `i18n` from 1.14.7 to 1.14.8 - [Release notes](https://github.com/ruby-i18n/i18n/releases) - [Changelog](https://github.com/ruby-i18n/i18n/blob/master/CHANGELOG.md) - [Commits](ruby-i18n/i18n@v1.14.7...v1.14.8) Updates `loofah` from 2.24.1 to 2.25.0 - [Release notes](https://github.com/flavorjones/loofah/releases) - [Changelog](https://github.com/flavorjones/loofah/blob/main/CHANGELOG.md) - [Commits](flavorjones/loofah@v2.24.1...v2.25.0) Updates `nokogiri` from 1.18.10 to 1.19.0 - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md) - [Commits](sparklemotion/nokogiri@v1.18.10...v1.19.0) Updates `rdoc` from 7.0.1 to 7.0.3 - [Release notes](https://github.com/ruby/rdoc/releases) - [Changelog](https://github.com/ruby/rdoc/blob/master/History.rdoc) - [Commits](ruby/rdoc@v7.0.1...v7.0.3) Updates `rubocop-ast` from 1.48.0 to 1.49.0 - [Release notes](https://github.com/rubocop/rubocop-ast/releases) - [Changelog](https://github.com/rubocop/rubocop-ast/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop-ast@v1.48.0...v1.49.0) Updates `sorbet-static` from 0.6.12865 to 0.6.12872 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `unicode-emoji` from 4.1.0 to 4.2.0 - [Changelog](https://github.com/janlelis/unicode-emoji/blob/main/CHANGELOG.md) - [Commits](janlelis/unicode-emoji@v4.1.0...v4.2.0) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.31.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: docker/setup-buildx-action dependency-version: 3.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: sorbet-runtime dependency-version: 0.6.12872 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: rubocop dependency-version: 1.82.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: sorbet dependency-version: 0.6.12872 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: sorbet-static-and-runtime dependency-version: 0.6.12872 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: i18n dependency-version: 1.14.8 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all - dependency-name: loofah dependency-version: 2.25.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all - dependency-name: nokogiri dependency-version: 1.19.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all - dependency-name: rdoc dependency-version: 7.0.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all - dependency-name: rubocop-ast dependency-version: 1.49.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all - dependency-name: sorbet-static dependency-version: 0.6.12872 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all - dependency-name: unicode-emoji dependency-version: 4.2.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies github_actions Pull requests that update GitHub Actions code labels Dec 29, 2025

MikeMcQuaid force-pushed the dependabot/all-94b8815813 branch 2 times, most recently from 3d070f4 to 9e2d9f6 Compare December 29, 2025 08:42

Ruby 4.0.0

bc6c7be

MikeMcQuaid force-pushed the dependabot/all-94b8815813 branch from 9e2d9f6 to bc6c7be Compare December 29, 2025 08:51

MikeMcQuaid enabled auto-merge December 29, 2025 08:55

MikeMcQuaid merged commit 38867bd into main Dec 29, 2025
7 checks passed

MikeMcQuaid deleted the dependabot/all-94b8815813 branch December 29, 2025 08:56

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Bump the "all" group with 2 updates across multiple ecosystems #1008

Bump the "all" group with 2 updates across multiple ecosystems #1008

Uh oh!

dependabot bot commented on behalf of github Dec 29, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Bump the "all" group with 2 updates across multiple ecosystems #1008

Bump the "all" group with 2 updates across multiple ecosystems #1008

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 29, 2025

v4.31.9

CodeQL Action Changelog

4.31.9 - 16 Dec 2025

v4.31.8

CodeQL Action Changelog

4.31.8 - 11 Dec 2025

v4.31.7

CodeQL Action Changelog

4.31.7 - 05 Dec 2025

v4.31.6

CodeQL Action Changelog

4.31.6 - 01 Dec 2025

CodeQL Action Changelog

[UNRELEASED]

4.31.9 - 16 Dec 2025

4.31.8 - 11 Dec 2025

4.31.7 - 05 Dec 2025

4.31.6 - 01 Dec 2025

4.31.5 - 24 Nov 2025

4.31.4 - 18 Nov 2025

4.31.3 - 13 Nov 2025

4.31.2 - 30 Oct 2025

4.31.1 - 30 Oct 2025

4.31.0 - 24 Oct 2025

v3.12.0

sorbet 0.6.12871.20251223085357-b3d0fbad9

sorbet 0.6.12870.20251223085338-5fd6d06e8

sorbet 0.6.12869.20251222163124-8985e1c4c

sorbet 0.6.12868.20251222091615-c6519ff18

sorbet 0.6.12867.20251222075851-f6dae0e60

sorbet 0.6.12866.20251221234711-0c2ee86c3

sorbet 0.6.12865.20251218215641-56cc5f64f

RuboCop v1.82.0

New features

Bug fixes

Changes

1.82.0 (2025-12-17)

New features

Bug fixes

Changes

sorbet 0.6.12871.20251223085357-b3d0fbad9

sorbet 0.6.12870.20251223085338-5fd6d06e8

sorbet 0.6.12869.20251222163124-8985e1c4c

sorbet 0.6.12868.20251222091615-c6519ff18

sorbet 0.6.12867.20251222075851-f6dae0e60

sorbet 0.6.12866.20251221234711-0c2ee86c3

sorbet 0.6.12865.20251218215641-56cc5f64f

sorbet 0.6.12871.20251223085357-b3d0fbad9

sorbet 0.6.12870.20251223085338-5fd6d06e8

sorbet 0.6.12869.20251222163124-8985e1c4c

sorbet 0.6.12868.20251222091615-c6519ff18

sorbet 0.6.12867.20251222075851-f6dae0e60

sorbet 0.6.12866.20251221234711-0c2ee86c3

sorbet 0.6.12865.20251218215641-56cc5f64f

v1.14.8

What's Changed

New Contributors

2.25.0 / 2025-12-15

2.25.0 / 2025-12-15

v1.19.0 / 2025-12-28

Ruby

v1.19.0 / 2025-12-28

Ruby

v7.0.3

What's Changed

🐛 Bug Fixes

📚 Documentation

🛠 Other Changes

v7.0.2

What's Changed

🐛 Bug Fixes

🛠 Other Changes

RuboCop AST v1.49.0

New features