Skip to content

chore(deps): bump the ruby-deps group with 6 updates#2618

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bundler/ruby-deps-6bd74763d7
Open

chore(deps): bump the ruby-deps group with 6 updates#2618
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bundler/ruby-deps-6bd74763d7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 18, 2026

Bumps the ruby-deps group with 6 updates:

Package From To
pagy 43.5.3 43.5.4
icalendar 2.12.2 2.12.3
faraday 2.14.1 2.14.2
view_component 4.9.0 4.10.0
rubocop 1.86.1 1.86.2
rubocop-rails 2.35.0 2.35.1

Updates pagy from 43.5.3 to 43.5.4

Release notes

Sourced from pagy's releases.

Version 43.5.4

Changes in 43.5.4

  • Fix SERIES_SLOTS loading error (close #902)

CHANGELOG

Version 43

We needed a leap version to unequivocally signal that it's not just a major version: it's a complete redesign of the legacy code at all levels, usage and API included.

Why 43? Because it's exactly one step beyond "The answer to the ultimate question of life, the Universe, and everything." 😉

Improvements

This version introduces several enhancements, such as new :countish and :keynav_js paginators and improved automation and configuration processes, reducing setup requirements by 99%. The update also includes a simpler API and new interactive development tools, making it a comprehensive upgrade from previous versions.

  • New :countish Paginator
    • Faster than OFFSET and supporting the full UI
  • New Keynav Pagination
    • The pagy-exclusive technique using the fastest keyset pagination alongside all frontend helpers.
  • New interactive dev-tools
    • New PagyWand to integrate the pagy CSS with your app themes.
    • New Pagy AI available right inside your own app.
  • Intelligent automation
  • Simpler API
    • You solely need the pagy method and the @​pagy instance to paginate any collection and use any navigation tag and helper.
    • Methods are autoloaded only if used, and consume no memory otherwise.
    • Methods have narrower scopes and can be overridden without deep knowledge.
  • New documentation
    • Very concise, straightforward, and easy to navigate and understand.

Upgrade to 43

See the Upgrade Guide

Changelog

Sourced from pagy's changelog.

Version 43.5.4

  • Fix SERIES_SLOTS loading error (close #902)
Commits

Updates icalendar from 2.12.2 to 2.12.3

Changelog

Sourced from icalendar's changelog.

2.12.3 - 2026-05-13

  • Memory use optimization - Jared Menard
  • Run CI against Ruby 4.0 - Artem Chubchenko
Commits
  • e9a6818 Bump version to 2.12.3
  • 0f68d60 Merge pull request #322 from edgartheunready/jm/add-guard-clause
  • a25996f revert(deps): remove memory_profiler dev dependency
  • 7f04f9f fix: move memory_profiler to a dev dependency
  • a49f62d perf: add guard clause to avoid allocating unused hash
  • 0f7bd6a perf(benchmark): add memory profiling harness for per-event calendar wrapping
  • 0582b6f Merge pull request #321 from chubchenko/ruby-4.0
  • c79c638 Remove bundler version
  • f534050 Add Ruby 4.0 to CI
  • See full diff in compare view

Updates faraday from 2.14.1 to 2.14.2

Release notes

Sourced from faraday's releases.

v2.14.2

Security Note

This release contains a security fix, we recommend all users to upgrade as soon as possible. A Security Advisory with more details will be posted shortly.

What's Changed

New Contributors

Full Changelog: lostisland/faraday@v2.14.1...v2.14.2

Commits

Updates view_component from 4.9.0 to 4.10.0

Release notes

Sourced from view_component's releases.

4.10.0

  • Fix NameError: uninitialized constant ViewComponent::SystemTestControllerNefariousPathError when booting in the test environment with eager_load = true.

    Joel Hawksley

  • Fix yielded content rendered at wrong location when using form helpers.

    Joel Hawksley, Markus

Changelog

Sourced from view_component's changelog.

4.10.0

  • Fix NameError: uninitialized constant ViewComponent::SystemTestControllerNefariousPathError when booting in the test environment with eager_load = true.

    Joel Hawksley

  • Fix yielded content rendered at wrong location when using form helpers.

    Joel Hawksley, Markus

Commits

Updates rubocop from 1.86.1 to 1.86.2

Release notes

Sourced from rubocop's releases.

RuboCop v1.86.2

New features

Bug fixes

  • #15156: Fix an error for Style/HashLookupMethod when chaining fetch (or []) calls on the same expression. (@​koic)
  • #15161: Fix an error for Style/ReduceToHash when nested each_with_object/inject/reduce calls would build hashes. (@​koic)
  • #15144: Fix an error in Style/SoleNestedConditional when autocorrecting nested conditionals containing comments. (@​koic)
  • #15040: Exclude constants from Style/ModuleMemberExistenceCheck. (@​t-daisuke)
  • #15155: Fix false negatives in Style/RedundantSelf when an explicit self receiver in one scope matches the LHS of an ||=, &&=, or op_asgn in another scope. (@​koic)
  • #15107: Fix false positives in Lint/RequireRelativeSelfPath when a non-.rb file uses require_relative with its own basename. (@​koic)
  • #15137: Fix incorrect "does not support IndentationWidth parameter" warning for Layout/ClosingParenthesisIndentation and Layout/CommentIndentation. (@​koic)
  • #15148: Fix false positives in Lint/RedundantSafeNavigation when safe navigation appears in rescue or ensure bodies. (@​koic)
  • #15147: Fix false positives in Lint/RedundantSafeNavigation when safe navigation appears in the body of unless. (@​koic)
  • #15163: Fix false positives in Style/Copyright when Notice pattern starts with \A#, uses \s metacharacters, or has multiple spaces after #. (@​koic)
  • #10179: Fix false positives in Style/DocumentDynamicEvalDefinition when the heredoc contains an escaped interpolation (\#{...}). (@​eyupcanakman)
  • #15154: Fix bug where specifying --out disables parallelization. (@​deivid-rodriguez)
  • #15106: Fix TargetFinder to work correctly inside hidden parent directories. (@​alpaca-tc)
  • #15102: Fix FrozenError in DisabledConfigFormatter for frozen array config parameters. (@​koic)
  • #15141: Fix incorrect autocorrect for Gemspec/RequireMFA causing an infinite loop when rubygems_mfa_required metadata uses a symbol key. (@​koic)
  • #15142: Fix infinite loop for --disable-uncorrectable and offense near heredoc. (@​jonas054)
  • #15054: Fix false positive for Layout/MultilineMethodCallIndentation when a dot-aligned method chain is inside a hash pair value. (@​nicolas-finary)
  • #15136: Fix false positive for Lint/MissingCopEnableDirective when # rubocop:disable is wrapped in a # rubocop:push / # rubocop:pop block. (@​koic)
  • #15115: Fix an incorrect autocorrect in Style/RegexpLiteral when the regexp contains unbalanced braces that conflict with the preferred %r delimiters. (@​koic)
  • #15130: Fix incorrect autocorrect in Style/Copyright when AutocorrectNotice lacks a # prefix or Notice pattern starts with ^#. (@​koic)
  • #14821: Fix Style/IfInsideElse autocorrect moving comments into the wrong branch when a comment precedes the nested if in an else. (@​hammadxcm)
  • #14583: Fix template extractor applying only the last fragment's autocorrection. (@​zeronosu77108)
  • #14971: Fix false positive for Style/WhileUntilModifier when the body is a conditional. (@​fujitanisora)
Changelog

Sourced from rubocop's changelog.

1.86.2 (2026-05-14)

New features

Bug fixes

  • #15156: Fix an error for Style/HashLookupMethod when chaining fetch (or []) calls on the same expression. ([@​koic][])
  • #15161: Fix an error for Style/ReduceToHash when nested each_with_object/inject/reduce calls would build hashes. ([@​koic][])
  • #15144: Fix an error in Style/SoleNestedConditional when autocorrecting nested conditionals containing comments. ([@​koic][])
  • #15040: Exclude constants from Style/ModuleMemberExistenceCheck. ([@​t-daisuke][])
  • #15155: Fix false negatives in Style/RedundantSelf when an explicit self receiver in one scope matches the LHS of an ||=, &&=, or op_asgn in another scope. ([@​koic][])
  • #15107: Fix false positives in Lint/RequireRelativeSelfPath when a non-.rb file uses require_relative with its own basename. ([@​koic][])
  • #15137: Fix incorrect "does not support IndentationWidth parameter" warning for Layout/ClosingParenthesisIndentation and Layout/CommentIndentation. ([@​koic][])
  • #15148: Fix false positives in Lint/RedundantSafeNavigation when safe navigation appears in rescue or ensure bodies. ([@​koic][])
  • #15147: Fix false positives in Lint/RedundantSafeNavigation when safe navigation appears in the body of unless. ([@​koic][])
  • #15163: Fix false positives in Style/Copyright when Notice pattern starts with \A#, uses \s metacharacters, or has multiple spaces after #. ([@​koic][])
  • #10179: Fix false positives in Style/DocumentDynamicEvalDefinition when the heredoc contains an escaped interpolation (\#{...}). ([@​eyupcanakman][])
  • #15154: Fix bug where specifying --out disables parallelization. ([@​deivid-rodriguez][])
  • #15106: Fix TargetFinder to work correctly inside hidden parent directories. ([@​alpaca-tc][])
  • #15102: Fix FrozenError in DisabledConfigFormatter for frozen array config parameters. ([@​koic][])
  • #15141: Fix incorrect autocorrect for Gemspec/RequireMFA causing an infinite loop when rubygems_mfa_required metadata uses a symbol key. ([@​koic][])
  • #15142: Fix infinite loop for --disable-uncorrectable and offense near heredoc. ([@​jonas054][])
  • #15054: Fix false positive for Layout/MultilineMethodCallIndentation when a dot-aligned method chain is inside a hash pair value. ([@​nicolas-finary][])
  • #15136: Fix false positive for Lint/MissingCopEnableDirective when # rubocop:disable is wrapped in a # rubocop:push / # rubocop:pop block. ([@​koic][])
  • #15115: Fix an incorrect autocorrect in Style/RegexpLiteral when the regexp contains unbalanced braces that conflict with the preferred %r delimiters. ([@​koic][])
  • #15130: Fix incorrect autocorrect in Style/Copyright when AutocorrectNotice lacks a # prefix or Notice pattern starts with ^#. ([@​koic][])
  • #14821: Fix Style/IfInsideElse autocorrect moving comments into the wrong branch when a comment precedes the nested if in an else. ([@​hammadxcm][])
  • #14583: Fix template extractor applying only the last fragment's autocorrection. ([@​zeronosu77108][])
  • #14971: Fix false positive for Style/WhileUntilModifier when the body is a conditional. ([@​fujitanisora][])
Commits
  • e513d33 Cut 1.86.2
  • 5fea1b5 Update Changelog
  • 2a3dfcd Don't use Registry#to_h
  • 836b275 Simplify registry internals
  • 90348d5 Fix false positives in Style/Copyright
  • 7419163 Fix extension suggestion documentation link
  • e467335 Merge pull request #15161 from koic/fix_an_error_for_style_reduce_to_hash.md
  • bd48b6b Merge pull request #15160 from lovro-bikic/autoload-mixins
  • b9cda61 Autoload mixins instead of requiring them
  • 55a8278 Fix an error for Style/ReduceToHash cop
  • Additional commits viewable in compare view

Updates rubocop-rails from 2.35.0 to 2.35.1

Release notes

Sourced from rubocop-rails's releases.

RuboCop Rails v2.35.1

Bug fixes

  • #1616: Fix false positives in Rails/StrongParametersExpect when using nil-safe conversion methods such as to_i, to_s, to_a, to_f, and to_h on params[:key]. (@​koic)
  • #1622: Fix false positives in Rails/StrongParametersExpect when using key-check methods such as key?, has_key?, include?, and member? on params[:key]. (@​koic)
  • #1620: Fix false positives in Rails/StrongParametersExpect when using type-check methods such as is_a?, kind_of?, and instance_of? on params[:key]. (@​koic)
Changelog

Sourced from rubocop-rails's changelog.

2.35.1 (2026-05-17)

Bug fixes

  • #1616: Fix false positives in Rails/StrongParametersExpect when using nil-safe conversion methods such as to_i, to_s, to_a, to_f, and to_h on params[:key]. ([@​koic][])
  • #1622: Fix false positives in Rails/StrongParametersExpect when using key-check methods such as key?, has_key?, include?, and member? on params[:key]. ([@​koic][])
  • #1620: Fix false positives in Rails/StrongParametersExpect when using type-check methods such as is_a?, kind_of?, and instance_of? on params[:key]. ([@​koic][])
Commits
  • 8bfc91e Cut 2.35.1
  • 90f8242 Update Changelog
  • 1346310 Merge pull request #1624 from koic/fix_false_positives_for_rails_strong_param...
  • 64422a9 [Fix #1622] Fix false positives in Rails/StrongParametersExpect
  • 9524ba1 Merge pull request #1623 from koic/fix_false_positives_for_rails_strong_param...
  • 4832b2d [Fix #1620] Fix false positives in Rails/StrongParametersExpect
  • e18a76b Merge pull request #1616 from koic/fix_false_positives_in_rails_strong_parame...
  • cf52bef [Fix #1618] Update the doc of Rails/RedundantActiveRecordAllMethod
  • 3f317b7 Fix false positives in Rails/StrongParametersExpect
  • 6e2e110 Reset the docs version
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ruby-deps group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [pagy](https://github.com/ddnexus/pagy) | `43.5.3` | `43.5.4` |
| [icalendar](https://github.com/icalendar/icalendar) | `2.12.2` | `2.12.3` |
| [faraday](https://github.com/lostisland/faraday) | `2.14.1` | `2.14.2` |
| [view_component](https://github.com/viewcomponent/view_component) | `4.9.0` | `4.10.0` |
| [rubocop](https://github.com/rubocop/rubocop) | `1.86.1` | `1.86.2` |
| [rubocop-rails](https://github.com/rubocop/rubocop-rails) | `2.35.0` | `2.35.1` |


Updates `pagy` from 43.5.3 to 43.5.4
- [Release notes](https://github.com/ddnexus/pagy/releases)
- [Changelog](https://github.com/ddnexus/pagy/blob/master/docs/CHANGELOG.md)
- [Commits](ddnexus/pagy@43.5.3...43.5.4)

Updates `icalendar` from 2.12.2 to 2.12.3
- [Changelog](https://github.com/icalendar/icalendar/blob/main/CHANGELOG.md)
- [Commits](icalendar/icalendar@v2.12.2...v2.12.3)

Updates `faraday` from 2.14.1 to 2.14.2
- [Release notes](https://github.com/lostisland/faraday/releases)
- [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md)
- [Commits](lostisland/faraday@v2.14.1...v2.14.2)

Updates `view_component` from 4.9.0 to 4.10.0
- [Release notes](https://github.com/viewcomponent/view_component/releases)
- [Changelog](https://github.com/ViewComponent/view_component/blob/main/docs/CHANGELOG.md)
- [Commits](ViewComponent/view_component@v4.9.0...v4.10.0)

Updates `rubocop` from 1.86.1 to 1.86.2
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.86.1...v1.86.2)

Updates `rubocop-rails` from 2.35.0 to 2.35.1
- [Release notes](https://github.com/rubocop/rubocop-rails/releases)
- [Changelog](https://github.com/rubocop/rubocop-rails/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop-rails@v2.35.0...v2.35.1)

---
updated-dependencies:
- dependency-name: pagy
  dependency-version: 43.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: icalendar
  dependency-version: 2.12.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: faraday
  dependency-version: 2.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: view_component
  dependency-version: 4.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ruby-deps
- dependency-name: rubocop
  dependency-version: 1.86.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
- dependency-name: rubocop-rails
  dependency-version: 2.35.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: ruby-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies ruby Pull requests that update Ruby code labels May 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants