Bump the bundler group with 7 updates by dependabot[bot] · Pull Request #191 · rubyatscale/packs

dependabot · 2026-09-01T08:59:19Z

Bumps the bundler group with 7 updates:

Package	From	To
code_ownership	`2.1.3`	`2.1.4`
packwerk	`3.3.0`	`3.3.1`
sorbet-runtime	`0.6.13367`	`0.6.13454`
rubocop	`1.88.2`	`1.90.0`
sorbet	`0.6.13367`	`0.6.13454`
sorbet-static	`0.6.13367`	`0.6.13454`
spoom	`1.8.5`	`1.8.7`

Updates code_ownership from 2.1.3 to 2.1.4

Release notes

Sourced from code_ownership's releases.

v2.1.4

CodeOwnership v2.1.4

📦 Published Gems

Source gem: code_ownership-2.1.4.gem

Platform gems: Published for all supported platforms

🎯 Supported Platforms

musl

linux

ucrt

darwin

darwin

musl

linux

What's Changed

Resolve CI annotation warnings by @dduugg in rubyatscale/code_ownership#170

Require Ruby >= 3.3 and update CI Ruby versions by @dduugg in rubyatscale/code_ownership#173

Add Dependabot config for monthly Bundler updates by @dduugg in rubyatscale/code_ownership#172

Auto-trigger CD when CI passes and the gem version is bumped by @perryqh in rubyatscale/code_ownership#171

Add advanced CodeQL setup to replace broken default setup by @dduugg in rubyatscale/code_ownership#174

Use shared-config's reusable CodeQL workflow by @dduugg in rubyatscale/code_ownership#175

Fix the declared return type of RustCodeOwners.for_file by @dduugg in rubyatscale/code_ownership#176

Full Changelog: rubyatscale/code_ownership@v2.1.3...v2.1.4

Commits

b1726f5 Fix the declared return type of RustCodeOwners.for_file (#176)
5f3ed93 Use shared-config's reusable CodeQL workflow (#175)
85dc855 Fix code scanning issues: CodeQL setup / workflow permissions (#174)
44bd17f Auto-trigger CD when CI passes and the gem version is bumped (#171)
6cd5c42 Add Dependabot config for monthly Bundler updates (#172)
82eb2ac Require Ruby >= 3.3 and update CI Ruby versions (#173)
d861735 Resolve CI annotation warnings (#170)
See full diff in compare view

Updates packwerk from 3.3.0 to 3.3.1

Release notes

Sourced from packwerk's releases.

3.3.1

What's Changed

We should not ship the contents of the sorbet folder in the gem by @paracycle in Shopify/packwerk#463

Skip dynamic constant namespaces in class definitions by @Hashim1999164 in Shopify/packwerk#471

Allow parallel 2.x to be used by @rafaelfranca in Shopify/packwerk#472

New Contributors

@paracycle made their first contribution in Shopify/packwerk#463

@Hashim1999164 made their first contribution in Shopify/packwerk#471

Full Changelog: Shopify/packwerk@v3.3.0...v3.3.1

Commits

31e5342 Prepare for 3.3.1
580b1e7 Merge pull request #472 from Shopify/rmf-free-this-gem
aea187b Allow parallel 2.x to be used
2b3995a Merge pull request #465 from Shopify/dependabot/bundler/nokogiri-1.19.4
7e241ec Merge pull request #464 from Shopify/dependabot/github_actions/actions/checko...
fe6e274 Merge pull request #466 from Shopify/dependabot/bundler/concurrent-ruby-1.3.7
c4f2cc4 Merge pull request #471 from Hashim1999164/fix/skip-dynamic-namespace-in-clas...
32d8f28 Skip dynamic namespaces in class definitions so packwerk does not crash.
7b04959 Merge pull request #469 from Shopify/dependabot/bundler/rails-html-sanitizer-...
4483921 Merge pull request #468 from Shopify/dependabot/bundler/loofah-2.25.2
Additional commits viewable in compare view

Updates sorbet-runtime from 0.6.13367 to 0.6.13454

Release notes

Sourced from sorbet-runtime's releases.

sorbet 0.6.13453.20260827153016-8b0a71ff8

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13453', :group => :development
gem 'sorbet-runtime', '0.6.13453'
sorbet 0.6.13452.20260827121448-b0e749cd0

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13452', :group => :development
gem 'sorbet-runtime', '0.6.13452'
sorbet 0.6.13451.20260827114157-c8a7b977e

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13451', :group => :development
gem 'sorbet-runtime', '0.6.13451'
sorbet 0.6.13450.20260827112108-257c924ba

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13450', :group => :development
gem 'sorbet-runtime', '0.6.13450'
sorbet 0.6.13449.20260826113755-1b9d41e16

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13449', :group => :development
gem 'sorbet-runtime', '0.6.13449'
sorbet 0.6.13448.20260826140853-26a713681

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13448', :group => :development
gem 'sorbet-runtime', '0.6.13448'
sorbet 0.6.13447.20260826102833-3f35a9cc3

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13447', :group => :development
gem 'sorbet-runtime', '0.6.13447'
sorbet 0.6.13446.20260826092600-a46765e7c

... (truncated)

Commits

See full diff in compare view

Updates rubocop from 1.88.2 to 1.90.0

Release notes

Sourced from rubocop's releases.

RuboCop v1.90.0

New features

#15073: Add AllowTrailingComment option to Style/DisableCopsWithinSourceCodeDirective. ([@bbatsov][])

#9505: Add disable-next directives scoped to the following statement. ([@bbatsov][])

#15550: Add --display-suppressed option to also report offenses suppressed by directive comments, including their -- justification in the JSON formatter. ([@bbatsov][])

#15523: Add new Lint/ArgumentMismatch cop. ([@bbatsov][])

#15594: Add new Lint/SuperArgumentMismatch cop. ([@bbatsov][])

#15581: Add new Style/TimeNow cop. ([@Starlexxx][])

#15111: Add NumberOfEmptyLines option to Layout/EmptyLineAfterMagicComment to configure the minimum number of empty lines required after magic comments. ([@alejofraga][])

#13037: Add --report-unused-todo-entries to catch rotting todo files. ([@bbatsov][])

#15559: Add new Style/DirectiveScope cop to flag disable/enable pairs and disable-only push/pop scopes that wrap a single statement and can use disable-next instead. ([@bbatsov][])

#15547: Make Lint/RedundantCopEnableDirective flag # rubocop:pop directives without a matching # rubocop:push. ([@bbatsov][])

Bug fixes

#15584: Fix a crash in Lint/NameTypo and Lint/UnusedPrivateMethod on string literals with invalid encoding. ([@bbatsov][])

#15541: Fix a false negative for Lint/OutOfRangeRegexpRef when a preceding element access with a non-string literal argument (e.g. hash[:key]) discarded the tracked capture count. ([@koic][])

#7958: Add todo comments for skipped unsafe corrections with --disable-uncorrectable. ([@bbatsov][])

#15569: Fix an error for the built-in language server when a workspace/executeCommand request has no document URI in its arguments. ([@koic][])

#15410: Fix an incorrect autocorrect for Naming/BinaryOperatorParameterName. ([@bbatsov][])

#15576: Fix an incorrect autocorrect for Style/Sample when shuffle is given a random: argument; the offense is still reported but no longer autocorrected, since shuffle and sample consume a seeded generator differently and would select different elements. ([@koic][])

#15590: Fix an infinite loop error for Layout/FirstArgumentIndentation when EnforcedStyle: with_fixed_indentation is specified for Layout/ArgumentAlignment and Layout/FirstMethodArgumentLineBreak is enabled with AllowMultilineFinalElement: true. ([@Starlexxx][])

#15588: Fix RuboCop::Cop::IgnoredMethods and RuboCop::Cop::IgnoredPattern being unreachable after require 'rubocop'. ([@SeanLF][])

#8349: Don't autocorrect away directives for unknown cops. ([@bbatsov][])

#7894: Don't flag disables of pending cops as redundant. ([@bbatsov][])

#9963: Fix false negatives for Layout/ExtraSpacing. ([@Starlexxx][])

#15525: Fix false negatives in Layout/LineLength when a constant path like Http::UploadedFile matches URISchemes case-insensitively. ([@koic][])

#13941: Fix false positives for Lint/UselessConstantScoping when assigning with Class.new, Module.new, Struct.new, or Data.define after private. ([@pdobb][])

#15526: Fix false positives in Layout/MultilineMethodCallIndentation when a line has multiple single-line blocks before a multiline block. ([@koic][])

#15538: Fix false positives in Lint/ConstantReassignment when a constant is assigned in compact-style namespaces (e.g. module A::B). ([@alex-tan][])

#15517: Fix false positives in Lint/RedundantSafeNavigation when InferNonNilReceiver is enabled and the receiver name is rebound by a nested block (it or a shadowed block parameter). ([@koic][])

#15572: Fix RuboCop::Cop::Registry#freeze to freeze its internal collections, so that registering a lazily loaded cop after the freeze fails fast at the registration site instead of corrupting the registry. ([@koic][])

#15585: Make Lint/DuplicateMethods honor silence_redefinition_of_method and redefine_method as intentional redefinitions. ([@bbatsov][])

#15558: Fix --display-suppressed reporting a nil justification when the offense is loaded from the result cache. ([@corsonknowles][])

#10449: Fix Layout/ClassStructure autocorrection producing a wrong order when an element cannot be moved, and make offenses report the category that actually blocks the expected order. ([@koic][])

#15568: Fix Lint/NameTypo registering false positives for names provided by a gem whose namespace the project reopens, and for constants read from a namespace with an unresolved ancestor. ([@HoneyryderChuck][])

#15556: Fix Lint/UnusedPrivateMethod retaining every past project_index object it has seen (and the index graph reachable from each), rather than only the most recent one. This caused unbounded memory growth in long-lived processes such as rubocop --server. ([@bquorning][])

#10046: Fix Lint/UselessMethodDefinition false positive for methods with **kwargs. ([@bbatsov][])

#15589: Fix --lsp and --mcp being silently ignored when the RuboCop server is running: they now start the protocol server in the current process instead of being forwarded to the server as a lint request. ([@koic][])

#11148: Merge department and cop-level Exclude settings. ([@bbatsov][])

#15531: Fix a regression in RuboCop 1.89 where the modifier cops could produce lines longer than Layout/LineLength Max when exemptions like AllowedPatterns matched the result. ([@bbatsov][])

#15574: Fix an incorrect warning such as AllCops does not support TargetRailsVersion parameter when a plugin declares a custom AllCops key with a nil value and another plugin is loaded after it. ([@koic][])

#9543: Preserve escape notation in Style/StringConcatenation autocorrect. ([@bbatsov][])

#11119: Preserve persistent cop instances across files. ([@Eljees][])

#13022: Fix rubocop . (and other relative directory arguments) needlessly traversing directories excluded by the configuration, which made it much slower than rubocop in projects with large ignored trees. ([@bbatsov][])

#15561: Fix Lint/RedundantCopDisableDirective and Lint/RedundantCopEnableDirective leaving a directive's -- reason behind when removing the directive. ([@corsonknowles][])

#15593: Fix false positives for Lint/UnusedPrivateMethod for private definitions of Ruby runtime hooks like inherited and const_missing. ([@bbatsov][])

#15547: Make Lint/MissingCopEnableDirective suggest # rubocop:pop instead of # rubocop:enable for an unclosed # rubocop:push. ([@bbatsov][])

#14379: Suppress multi-line offenses with a directive on any of their lines. ([@bbatsov][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.90.0 (2026-08-24)

New features

#15073: Add AllowTrailingComment option to Style/DisableCopsWithinSourceCodeDirective. ([@bbatsov][])

#9505: Add disable-next directives scoped to the following statement. ([@bbatsov][])

#15550: Add --display-suppressed option to also report offenses suppressed by directive comments, including their -- justification in the JSON formatter. ([@bbatsov][])

#15523: Add new Lint/ArgumentMismatch cop. ([@bbatsov][])

#15594: Add new Lint/SuperArgumentMismatch cop. ([@bbatsov][])

#15581: Add new Style/TimeNow cop. ([@Starlexxx][])

#15111: Add NumberOfEmptyLines option to Layout/EmptyLineAfterMagicComment to configure the minimum number of empty lines required after magic comments. ([@alejofraga][])

#13037: Add --report-unused-todo-entries to catch rotting todo files. ([@bbatsov][])

#15559: Add new Style/DirectiveScope cop to flag disable/enable pairs and disable-only push/pop scopes that wrap a single statement and can use disable-next instead. ([@bbatsov][])

#15547: Make Lint/RedundantCopEnableDirective flag # rubocop:pop directives without a matching # rubocop:push. ([@bbatsov][])

Bug fixes

#15584: Fix a crash in Lint/NameTypo and Lint/UnusedPrivateMethod on string literals with invalid encoding. ([@bbatsov][])

#15541: Fix a false negative for Lint/OutOfRangeRegexpRef when a preceding element access with a non-string literal argument (e.g. hash[:key]) discarded the tracked capture count. ([@koic][])

#7958: Add todo comments for skipped unsafe corrections with --disable-uncorrectable. ([@bbatsov][])

#15569: Fix an error for the built-in language server when a workspace/executeCommand request has no document URI in its arguments. ([@koic][])

#15410: Fix an incorrect autocorrect for Naming/BinaryOperatorParameterName. ([@bbatsov][])

#15576: Fix an incorrect autocorrect for Style/Sample when shuffle is given a random: argument; the offense is still reported but no longer autocorrected, since shuffle and sample consume a seeded generator differently and would select different elements. ([@koic][])

#15590: Fix an infinite loop error for Layout/FirstArgumentIndentation when EnforcedStyle: with_fixed_indentation is specified for Layout/ArgumentAlignment and Layout/FirstMethodArgumentLineBreak is enabled with AllowMultilineFinalElement: true. ([@Starlexxx][])

#15588: Fix RuboCop::Cop::IgnoredMethods and RuboCop::Cop::IgnoredPattern being unreachable after require 'rubocop'. ([@SeanLF][])

#8349: Don't autocorrect away directives for unknown cops. ([@bbatsov][])

#7894: Don't flag disables of pending cops as redundant. ([@bbatsov][])

#9963: Fix false negatives for Layout/ExtraSpacing. ([@Starlexxx][])

#15525: Fix false negatives in Layout/LineLength when a constant path like Http::UploadedFile matches URISchemes case-insensitively. ([@koic][])

#13941: Fix false positives for Lint/UselessConstantScoping when assigning with Class.new, Module.new, Struct.new, or Data.define after private. ([@pdobb][])

#15526: Fix false positives in Layout/MultilineMethodCallIndentation when a line has multiple single-line blocks before a multiline block. ([@koic][])

#15538: Fix false positives in Lint/ConstantReassignment when a constant is assigned in compact-style namespaces (e.g. module A::B). ([@alex-tan][])

#15517: Fix false positives in Lint/RedundantSafeNavigation when InferNonNilReceiver is enabled and the receiver name is rebound by a nested block (it or a shadowed block parameter). ([@koic][])

#15572: Fix RuboCop::Cop::Registry#freeze to freeze its internal collections, so that registering a lazily loaded cop after the freeze fails fast at the registration site instead of corrupting the registry. ([@koic][])

#15585: Make Lint/DuplicateMethods honor silence_redefinition_of_method and redefine_method as intentional redefinitions. ([@bbatsov][])

#15558: Fix --display-suppressed reporting a nil justification when the offense is loaded from the result cache. ([@corsonknowles][])

#10449: Fix Layout/ClassStructure autocorrection producing a wrong order when an element cannot be moved, and make offenses report the category that actually blocks the expected order. ([@koic][])

#15568: Fix Lint/NameTypo registering false positives for names provided by a gem whose namespace the project reopens, and for constants read from a namespace with an unresolved ancestor. ([@HoneyryderChuck][])

#15556: Fix Lint/UnusedPrivateMethod retaining every past project_index object it has seen (and the index graph reachable from each), rather than only the most recent one. This caused unbounded memory growth in long-lived processes such as rubocop --server. ([@bquorning][])

#10046: Fix Lint/UselessMethodDefinition false positive for methods with **kwargs. ([@bbatsov][])

#15589: Fix --lsp and --mcp being silently ignored when the RuboCop server is running: they now start the protocol server in the current process instead of being forwarded to the server as a lint request. ([@koic][])

#11148: Merge department and cop-level Exclude settings. ([@bbatsov][])

#15531: Fix a regression in RuboCop 1.89 where the modifier cops could produce lines longer than Layout/LineLength Max when exemptions like AllowedPatterns matched the result. ([@bbatsov][])

#15574: Fix an incorrect warning such as AllCops does not support TargetRailsVersion parameter when a plugin declares a custom AllCops key with a nil value and another plugin is loaded after it. ([@koic][])

#9543: Preserve escape notation in Style/StringConcatenation autocorrect. ([@bbatsov][])

#11119: Preserve persistent cop instances across files. ([@Eljees][])

#13022: Fix rubocop . (and other relative directory arguments) needlessly traversing directories excluded by the configuration, which made it much slower than rubocop in projects with large ignored trees. ([@bbatsov][])

#15561: Fix Lint/RedundantCopDisableDirective and Lint/RedundantCopEnableDirective leaving a directive's -- reason behind when removing the directive. ([@corsonknowles][])

#15593: Fix false positives for Lint/UnusedPrivateMethod for private definitions of Ruby runtime hooks like inherited and const_missing. ([@bbatsov][])

#15547: Make Lint/MissingCopEnableDirective suggest # rubocop:pop instead of # rubocop:enable for an unclosed # rubocop:push. ([@bbatsov][])

... (truncated)

Commits

f1b25e1 Cut 1.90
72895f6 Update Changelog
7042de6 Move op_method? before the shadowing helpers
4b14dd2 Fix an incorrect autocorrect for Naming/BinaryOperatorParameterName
5d221ac [Fix #10046] Fix Lint/UselessMethodDefinition false positive for methods wi...
5070fc3 [Fix #15111] Add NumberOfEmptyLines option to `Layout/EmptyLineAfterMagicCo...
496eb65 [Fix #9543] Preserve escape notation in Style/StringConcatenation autocorrect
75b3622 Remove a directive's -- reason along with the directive
858d8a8 Merge pull request #15596 from koic/add_real_last_column_to_offense
15557b0 Add Offense#real_last_column and use it in JSONFormatter
Additional commits viewable in compare view

Updates sorbet from 0.6.13367 to 0.6.13454

Release notes

Sourced from sorbet's releases.

sorbet 0.6.13453.20260827153016-8b0a71ff8

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13453', :group => :development
gem 'sorbet-runtime', '0.6.13453'
sorbet 0.6.13452.20260827121448-b0e749cd0

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13452', :group => :development
gem 'sorbet-runtime', '0.6.13452'
sorbet 0.6.13451.20260827114157-c8a7b977e

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13451', :group => :development
gem 'sorbet-runtime', '0.6.13451'
sorbet 0.6.13450.20260827112108-257c924ba

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13450', :group => :development
gem 'sorbet-runtime', '0.6.13450'
sorbet 0.6.13449.20260826113755-1b9d41e16

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13449', :group => :development
gem 'sorbet-runtime', '0.6.13449'
sorbet 0.6.13448.20260826140853-26a713681

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13448', :group => :development
gem 'sorbet-runtime', '0.6.13448'
sorbet 0.6.13447.20260826102833-3f35a9cc3

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13447', :group => :development
gem 'sorbet-runtime', '0.6.13447'
sorbet 0.6.13446.20260826092600-a46765e7c

... (truncated)

Commits

See full diff in compare view

Updates sorbet-static from 0.6.13367 to 0.6.13454

Release notes

Sourced from sorbet-static's releases.

sorbet 0.6.13453.20260827153016-8b0a71ff8

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13453', :group => :development
gem 'sorbet-runtime', '0.6.13453'
sorbet 0.6.13452.20260827121448-b0e749cd0

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13452', :group => :development
gem 'sorbet-runtime', '0.6.13452'
sorbet 0.6.13451.20260827114157-c8a7b977e

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13451', :group => :development
gem 'sorbet-runtime', '0.6.13451'
sorbet 0.6.13450.20260827112108-257c924ba

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13450', :group => :development
gem 'sorbet-runtime', '0.6.13450'
sorbet 0.6.13449.20260826113755-1b9d41e16

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13449', :group => :development
gem 'sorbet-runtime', '0.6.13449'
sorbet 0.6.13448.20260826140853-26a713681

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13448', :group => :development
gem 'sorbet-runtime', '0.6.13448'
sorbet 0.6.13447.20260826102833-3f35a9cc3

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13447', :group => :development
gem 'sorbet-runtime', '0.6.13447'
sorbet 0.6.13446.20260826092600-a46765e7c

... (truncated)

Commits

See full diff in compare view

Updates spoom from 1.8.5 to 1.8.7

Release notes

Sourced from spoom's releases.

v1.8.7

What's Changed

🛠 Other Changes

Update RBI version to 0.4.2 by @dejmedus in Shopify/spoom#991

Full Changelog: Shopify/spoom@v1.8.6...v1.8.7

v1.8.6

What's Changed

🛠 Other Changes

Collect T::Struct and T::Enum code metrics by @Morriar in Shopify/spoom#989

Full Changelog: Shopify/spoom@v1.8.5...v1.8.6

Commits

817ff25 Bump version to v1.8.7
4d09df5 Merge pull request #991 from Shopify/jb-bump-rbi-0.4.2
1920e9c Update test after RBI translation fix
e260f8c Update RBI version to 0.4.2
ebf7f85 Bump version to v1.8.6
d69c832 Merge pull request #985 from Shopify/dependabot/bundler/rubocop-shopify-3.0.1
6a34df3 Fix RuboCop offenses after style guide bump
d224c2a Merge pull request #989 from Shopify/at-code-metrics-sorbet-types
08515a7 Prefix Sorbet type metric keys
e74024a Collect T::Struct and T::Enum metrics
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the bundler group with 7 updates: | Package | From | To | | --- | --- | --- | | [code_ownership](https://github.com/rubyatscale/code_ownership) | `2.1.3` | `2.1.4` | | [packwerk](https://github.com/Shopify/packwerk) | `3.3.0` | `3.3.1` | | [sorbet-runtime](https://github.com/sorbet/sorbet) | `0.6.13367` | `0.6.13454` | | [rubocop](https://github.com/rubocop/rubocop) | `1.88.2` | `1.90.0` | | [sorbet](https://github.com/sorbet/sorbet) | `0.6.13367` | `0.6.13454` | | [sorbet-static](https://github.com/sorbet/sorbet) | `0.6.13367` | `0.6.13454` | | [spoom](https://github.com/Shopify/spoom) | `1.8.5` | `1.8.7` | Updates `code_ownership` from 2.1.3 to 2.1.4 - [Release notes](https://github.com/rubyatscale/code_ownership/releases) - [Commits](rubyatscale/code_ownership@v2.1.3...v2.1.4) Updates `packwerk` from 3.3.0 to 3.3.1 - [Release notes](https://github.com/Shopify/packwerk/releases) - [Commits](Shopify/packwerk@v3.3.0...v3.3.1) Updates `sorbet-runtime` from 0.6.13367 to 0.6.13454 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `rubocop` from 1.88.2 to 1.90.0 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.88.2...v1.90.0) Updates `sorbet` from 0.6.13367 to 0.6.13454 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `sorbet-static` from 0.6.13367 to 0.6.13454 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `spoom` from 1.8.5 to 1.8.7 - [Release notes](https://github.com/Shopify/spoom/releases) - [Commits](Shopify/spoom@v1.8.5...v1.8.7) --- updated-dependencies: - dependency-name: code_ownership dependency-version: 2.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler - dependency-name: packwerk dependency-version: 3.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler - dependency-name: sorbet-runtime dependency-version: 0.6.13454 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler - dependency-name: rubocop dependency-version: 1.90.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler - dependency-name: sorbet dependency-version: 0.6.13454 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: bundler - dependency-name: sorbet-static dependency-version: 0.6.13454 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: bundler - dependency-name: spoom dependency-version: 1.8.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: bundler ... Signed-off-by: dependabot[bot] <support@github.com>

dduugg

Approving automated Dependabot dependency bump.

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Sep 1, 2026

dependabot Bot requested a review from a team as a code owner September 1, 2026 08:59

github-project-automation Bot added this to Modularity Sep 1, 2026

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Sep 1, 2026

github-project-automation Bot moved this to Triage in Modularity Sep 1, 2026

dduugg approved these changes Sep 1, 2026

View reviewed changes

dduugg merged commit eccf3e4 into main Sep 1, 2026
9 checks passed

dduugg deleted the dependabot/bundler/bundler-1d1d129ce2 branch September 1, 2026 17:39

github-project-automation Bot moved this from Triage to Done in Modularity Sep 1, 2026

Navigation Menu

Uh oh!

Bump the bundler group with 7 updates - #191

Bump the bundler group with 7 updates#191
dduugg merged 1 commit into
mainfrom
dependabot/bundler/bundler-1d1d129ce2

dependabot Bot commented on behalf of github Sep 1, 2026

Uh oh!

dduugg left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 1, 2026

v2.1.4

CodeOwnership v2.1.4

📦 Published Gems

🎯 Supported Platforms

What's Changed

3.3.1

What's Changed

New Contributors

sorbet 0.6.13453.20260827153016-8b0a71ff8

sorbet 0.6.13452.20260827121448-b0e749cd0

sorbet 0.6.13451.20260827114157-c8a7b977e

sorbet 0.6.13450.20260827112108-257c924ba

sorbet 0.6.13449.20260826113755-1b9d41e16

sorbet 0.6.13448.20260826140853-26a713681

sorbet 0.6.13447.20260826102833-3f35a9cc3

sorbet 0.6.13446.20260826092600-a46765e7c

RuboCop v1.90.0

New features

Bug fixes

1.90.0 (2026-08-24)

New features

Bug fixes

sorbet 0.6.13453.20260827153016-8b0a71ff8

sorbet 0.6.13452.20260827121448-b0e749cd0

sorbet 0.6.13451.20260827114157-c8a7b977e

sorbet 0.6.13450.20260827112108-257c924ba

sorbet 0.6.13449.20260826113755-1b9d41e16

sorbet 0.6.13448.20260826140853-26a713681

sorbet 0.6.13447.20260826102833-3f35a9cc3

sorbet 0.6.13446.20260826092600-a46765e7c

sorbet 0.6.13453.20260827153016-8b0a71ff8

sorbet 0.6.13452.20260827121448-b0e749cd0

sorbet 0.6.13451.20260827114157-c8a7b977e

sorbet 0.6.13450.20260827112108-257c924ba

sorbet 0.6.13449.20260826113755-1b9d41e16

sorbet 0.6.13448.20260826140853-26a713681

sorbet 0.6.13447.20260826102833-3f35a9cc3

sorbet 0.6.13446.20260826092600-a46765e7c

v1.8.7

What's Changed

🛠 Other Changes

v1.8.6

What's Changed

🛠 Other Changes

Uh oh!

dduugg left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant