Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 15, 2025

Bumps the monthly group with 4 updates in the / directory: minitest, mocha, concurrent-ruby and json.

Updates minitest from 5.26.2 to 5.27.0

Changelog

Sourced from minitest's changelog.

=== 5.27.0 / 2025-12-11

  • 1 major enhancement:

    • Adding post install message announcing the EOL for minitest 5!
  • 2 minor enhancements:

    • Removed TestTask::Work#initialize since Queue can now initialize with an Enumerable! AMAZING!
    • Use Kernel#warn uplevel argument for nicer warnings. (byroot)
  • 5 bug fixes:

    • Cleaned up option aliasing a tad.
    • Removed obsolete conditional for prerecord
    • Removed obsolete guards around Warning.
    • Removed obsolete version guards for pattern matching assertions.
    • Switched all internal requires to require_relative.
Commits
  • 819e9b5 Branching minitest to version 5.27.0
  • e9a9fc3 ! Adding post install message announcing the EOL for minitest 5.
  • 4525c88 REVERTED: Removed obsolete conditional for prerecord. For now... Wait for MT6.
  • 6b3fb6c - Removed obsolete guards around Warning.
  • 72b90c3 - Removed obsolete version guards for pattern matching assertions.
  • a8143f2 - Removed obsolete conditional for prerecord
  • f6fffa1 + Use Kernel#warn uplevel argument for nicer warnings. (byroot)
  • a0e9289 Fixed reporter test shape variation warning. (havenwood)
  • 15394fc + Removed TestTask::Work#initialize since Queue can now initialize with an En...
  • 8a4d7ee - Switched all internal requires to require_relative.
  • Additional commits viewable in compare view

Updates mocha from 2.8.2 to 3.0.0

Changelog

Sourced from mocha's changelog.

3.0.0

External changes

  • Improvements to docs for cardinality-related methods (#700)
  • Drop support for Ruby v2.1 (#628 & #695)
  • Improve gemspec description (#692 & #696)
  • Remove docs for use_test_unit_gem option (eaf03493)
  • Correct docs for MOCHA_OPTIONS "debug" value (69ef41c0)
  • Use built-in Ruby debug option vs custom module (#714 & #715)
  • Enable strict keyword argument matching by default in Ruby >= v3 (#697 & #718)
  • Use Ruby v1.9 Hash syntax in Hash#mocha_inspect used in failure messages (#651 & #719)
  • Improve #mocha_inspect for empty keyword argument Hash (#588 & #720) - thanks to @​herwinw for reporting
  • Improve error if Mockery.teardown called before Mockery.setup (#611, #646 & #721) - thanks to @​riniculous for reporting
  • Freeze string literals (#722)
  • Allow keyword arguments to match an expectation expecting only positional arguments (#593 & #732) - thanks to @​seandilda for reporting
  • Fix compatibility with Ruby 3.5 (#755) - thanks to @​Earlopain
  • Add missing quotes to docs for Mocha::ParameterMatchers::Methods#equivalent_uri (#757) - thanks to @​bensherman
  • Increment assertion count on never expected invocation (#763 & #764)
  • Remove deprecated ParameterMatchers::Base class; include ParameterMatchers::BaseMethods module instead (415ae768)
  • Remove deprecated ParameterMatcher methods now available in ParameterMatcher::Methods (8de49979)
  • Removed deprecated access to ParameterMatcher classes (6ea9e3f5)

Internal changes

  • Add Expectation#thrice (#701) - thanks to @​andrewn617
  • Add base64 to Gemfile for Ruby >= v3.3.0 to avoid warning (8c49314c & a76330d6)
  • Include custom Gemfiles in Rubocop linting (04063f0d)
  • Use ruby:3.4.0-rc1 vs ruby:3.4.0-preview2 in CI in preparation for the Ruby v3.4 release (b2127407)
  • Add ostruct to Gemfile for Ruby >= v3.4.0 to avoid warning (2b05e09e)
  • Add Ruby v3.4 to CI build matrix (#708)
  • Fix Ruby v3.4 warnings in ObjectInspectTest (#709 & #710)
  • Rubocop-related improvements (#702 & #705)
  • Consistently use development group in Gemfiles (#706 & #716)
  • Add missing requires for 'mocha/ruby_version' (7f99db69)
  • Convert ParameterMatchers::Base class -> module (#712 & #723)
  • Enable ExpectMatchingDefinition option on Naming/FileName cop (#726)
  • Remove duplicate DefaultReceiverTest (39d99954)
  • Improvements to keyword argument matching tests (#730)
  • Improvements to keyword argument matcher unit test (#731)
  • Remove support for running tests with Minitest < v5 (#727)
  • Remove workaround for JRuby jar-dependencies issue (#737)
  • Add benchmark to Gemfile to fix warning (#733 & #740) - thanks to @​nitishr
  • Add documentation coverage check (#707, #743 & #745) - thanks to @​nitishr
  • Fix Lint/LiteralAsCondition violation (#746) - thanks to @​nitishr
  • Fix rdoc-related warning when running doc rake task (#741 & #747)
  • Fail fast in CI builds on any Ruby warnings (#729 & #741) - thanks to @​nitishr
  • Add ObjectMethods#stubba_respond_to? and use instead of Object#respond_to? (#713, #742 & #750) - thanks to @​nitishr
  • Rename #stubbee -> #stubba_object and #mock_owner -> #stubbee (#463 & #751) - thanks to @​nitishr

... (truncated)

Commits
  • 16a380b [skip ci] Update documentation for v3.0.0
  • b035b36 Bump version to 3.0.0 & prepare for release
  • b4310b8 [skip ci] Update documentation for v3.0.0-rc.2
  • 31e433a Bump version to 3.0.0-rc.2 & prepare for release
  • 812fb65 Fix Naming/FileName violation for BaseMethods
  • 1c0fcab No default arg for Hooks#mocha_setup
  • a461609 No default arg for Mockery.setup
  • 207384d No default arg for Mockery#initialize
  • 2e8cfe5 Extract build_mockery method in MockeryTest
  • d850fc5 No default assertion_counter for Mock#initialize
  • Additional commits viewable in compare view

Updates concurrent-ruby from 1.3.5 to 1.3.6

Release notes

Sourced from concurrent-ruby's releases.

v1.3.6

What's Changed

New Contributors

Full Changelog: ruby-concurrency/concurrent-ruby@v1.3.5...v1.3.6

Changelog

Sourced from concurrent-ruby's changelog.

Release v1.3.6 (13 December 2025)

concurrent-ruby:

Commits
  • dba7766 Release 1.3.6
  • 49b7552 Exclude dependabot updates from release notes
  • 048f5d0 ThreadPoolExecutor kill will wait_for_termination in JRuby; ensure TimerS...
  • 4e340ed Flaky test fix: allow ThreadPool to shutdown before asserting completed_task_...
  • 4dc8de3 Allow TimerTask to be safely restarted after shutdown and avoid duplicate tas...
  • 47cf3a1 Mark RubySingleThreadExecutor as a SerialExecutorService
  • 572d44c Asynchronous pruning for RubyThreadPoolExecutor (#1082)
  • e25e34c Add Joshua Young to the list of maintainers (#1097)
  • 978eed6 Use typed data APIs
  • eacd77a Use stdatomic.h on recent macOS
  • Additional commits viewable in compare view

Updates json from 2.17.1 to 2.18.0

Release notes

Sourced from json's releases.

v2.18.0

What's Changed

  • Add :allow_control_characters parser options, to allow JSON strings containing unescaped ASCII control characters (e.g. newlines).

Full Changelog: ruby/json@v2.17.1...v2.18.0

Changelog

Sourced from json's changelog.

2025-12-11 (2.18.0)

  • Add :allow_control_characters parser options, to allow JSON strings containing unescaped ASCII control characters (e.g. newlines).
Commits
  • 1cdd212 Release 2.18.0
  • 3459499 Add allow_control_characters parsing option
  • 1da3fd9 Add a specific error for unescaped newlines
  • cf3993c Remove dead code from JSON::TruffleRuby::Generator
  • 4218a42 Remove dead code in benchmark/encoder.rb
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note

Updates Gemfile.lock to newer versions of concurrent-ruby, json, minitest, and mocha.

  • Dependencies:
    • Bump concurrent-ruby from 1.3.51.3.6.
    • Bump json from 2.17.12.18.0.
    • Bump minitest from 5.26.25.27.0.
    • Bump mocha from 2.8.23.0.0.

Written by Cursor Bugbot for commit 489c4f0. This will update automatically on new commits. Configure here.

Bumps the monthly group with 4 updates in the / directory: [minitest](https://github.com/minitest/minitest), [mocha](https://github.com/freerange/mocha), [concurrent-ruby](https://github.com/ruby-concurrency/concurrent-ruby) and [json](https://github.com/ruby/json).


Updates `minitest` from 5.26.2 to 5.27.0
- [Changelog](https://github.com/minitest/minitest/blob/master/History.rdoc)
- [Commits](minitest/minitest@v5.26.2...v5.27.0)

Updates `mocha` from 2.8.2 to 3.0.0
- [Changelog](https://github.com/freerange/mocha/blob/main/RELEASE.md)
- [Commits](freerange/mocha@v2.8.2...v3.0.0)

Updates `concurrent-ruby` from 1.3.5 to 1.3.6
- [Release notes](https://github.com/ruby-concurrency/concurrent-ruby/releases)
- [Changelog](https://github.com/ruby-concurrency/concurrent-ruby/blob/master/CHANGELOG.md)
- [Commits](ruby-concurrency/concurrent-ruby@v1.3.5...v1.3.6)

Updates `json` from 2.17.1 to 2.18.0
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](ruby/json@v2.17.1...v2.18.0)

---
updated-dependencies:
- dependency-name: minitest
  dependency-version: 5.27.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: monthly
- dependency-name: mocha
  dependency-version: 3.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: monthly
- dependency-name: concurrent-ruby
  dependency-version: 1.3.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: monthly
- dependency-name: json
  dependency-version: 2.18.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: monthly
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Dec 15, 2025
@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedminitest@​5.26.2 ⏵ 5.27.093 +1100100100100
Updatedmocha@​2.8.2 ⏵ 3.0.09810010010080 -19

View full report

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 16, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 16, 2025
@dependabot dependabot bot deleted the dependabot/bundler/monthly-6483946e15 branch December 16, 2025 13:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant