Bump the bundler-lint group with 5 updates #1533

dependabot · 2024-11-01T10:35:01Z

Bumps the bundler-lint group with 5 updates:

Package	From	To
brakeman	`6.2.1`	`6.2.2`
erb_lint	`0.6.0`	`0.7.0`
rubocop	`1.65.0`	`1.68.0`
rubocop-rails	`2.26.2`	`2.27.0`
rubocop-rspec	`3.1.0`	`3.2.0`

Updates brakeman from 6.2.1 to 6.2.2

Release notes

Sourced from brakeman's releases.

6.2.2

New end-of-support dates for Rails

Revamp command injection detection in pipeline* calls (#1862)

Exclude more native gems from vendored gems in brakeman gem (#1869)

Changelog

Sourced from brakeman's changelog.

6.2.2 - 2024-10-15

Ignore more native gems when building gem

Revamp command injection in pipeline* calls

New end-of-support dates for Rails

Commits

0aeceda Bump to 6.2.2
43612a6 Merge pull request #1872 from presidentbeef/more_native_gems_to_ignore
2ece3b4 Update CHANGES
72df013 Ignore more native gems when building gem
e4f49f6 Merge pull request #1868 from presidentbeef/revamp_pipeline_check
9e8cd79 Revamp command injection in pipeline* calls
f99539b Merge pull request #1865 from presidentbeef/update_eol_dates_for_rails
1713d5f Remove Gitter link from README
c25fcae Merge pull request #1864 from presidentbeef/fix_docker_once_more
8da2a28 New end-of-support dates for Rails
Additional commits viewable in compare view

Updates erb_lint from 0.6.0 to 0.7.0

Release notes

Sourced from erb_lint's releases.

v0.7.0

What's Changed

Standardize repo name to erb_lint by @george-ma in Shopify/erb_lint#360 Consistently use the erb_lint name, instead of erb-lint or erblint. The old names are still supported, but will be removed in a future release.

Don't use rexml for the JUnit formatter by @Earlopain in Shopify/erb_lint#374

Allow laquo and raquo in HardCodedString linter by @bcroesch in Shopify/erb_lint#355

README.md: include HardCodedString linter by @francisfuzz in Shopify/erb_lint#278

Don't use possibly deprecated RuboCop API by @Earlopain in Shopify/erb_lint#375

Rename CACHE_DIRECTORY to .erb_lint_cache. by @joshuapinter in Shopify/erb_lint#380 Rename the cache directory to match the new name. Your first build will rebuild it from scratch.

New Contributors

@Earlopain made their first contribution in Shopify/erb_lint#374

@bcroesch made their first contribution in Shopify/erb_lint#355

@francisfuzz made their first contribution in Shopify/erb_lint#278

Full Changelog: Shopify/erb_lint@v0.6.0...v0.7.0

Commits

67e9f5c Merge pull request #382 from Shopify/mangara-release-0-7-0
37ab1c1 Release erb_lint v0.7.0
5c63068 Merge pull request #380 from cntral/rename_cache_directory
af5f18e Rename CACHE_DIRECTORY to .erb_lint_cache.
255fdb4 Merge pull request #375 from Earlopain/team-new
a46e322 Merge pull request #376 from Earlopain/actions-bump
ab1f55d docs(README.md): Document HardCodedString linter (#278)
8a6c502 Merge pull request #355 from bcroesch/allow-hard-coded-laquo-raquo
93a6524 Merge pull request #374 from Earlopain/junit-no-rexml
12e1659 Don't use rexml for the JUnit formatter
Additional commits viewable in compare view

Updates rubocop from 1.65.0 to 1.68.0

Release notes

Sourced from rubocop's releases.

RuboCop 1.68

New features

#13050: Add new Style/BitwisePredicate cop. (@koic)

#12140: Add new Style/CombinableDefined cop. (@dvandersluis)

#12988: Add new Style/AmbiguousEndlessMethodDefinition cop. (@dvandersluis)

#11514: Add new Lint/UnescapedBracketInRegexp cop. (@dvandersluis)

#13360: Add AllowSteepAnnotation config option to Layout/LeadingCommentSpace. (@tk0miya)

#13146: Add new IgnoreDuplicateElseBranch option to Lint/DuplicateBranch. (@fatkodima)

#13171: Add new Style/SafeNavigationChainLength cop. (@fatkodima)

#13252: Add new Style/KeywordArgumentsMerging cop. (@fatkodima)

Bug fixes

#13401: Fix a false negative for Style/RedundantLineContinuation when there is a line continuation at the EOF. (@koic)

#13368: Fix an incorrect autocorrect for Naming/BlockForwarding with Style/ExplicitBlockArgument. (@koic)

#13391: Fix deserialization of unknown encoding offenses. (@earlopain)

#13348: Ensure Style/BlockDelimiters autocorrection does not move other code between the block and comment. (@dvandersluis)

#13382: Fix an error during error handling for custom ruby extractors when the extractor is a class. (@earlopain)

#13309: Fix a false negative for Lint/UselessAssignment cop when there is a useless assignment followed by a block. (@pCosta99)

#13255: Fix false negatives for Style/MapIntoArray when using non-splatted arguments. (@vlad-pisanov)

#13356: Fix a false positive for Layout/SpaceBeforeBrackets when there is a dot before []=. (@earlopain)

#13365: Fix false positives for Lint/SafeNavigationConsistency when using safe navigation on the LHS with operator method on the RHS of &&. (@koic)

#13390: Fix false positives for Style/GuardClause when using a local variable assigned in a conditional expression in a branch. (@koic)

#13337: Fix false positives for Style/RedundantLineContinuation when required line continuations for && is used with an assignment after a line break. (@koic)

#13387: Fix false positives in Style/RedundantParentheses when parentheses are used around method chain with do...end block in keyword argument. (@koic)

#13341: Fix false positives for Lint/SafeNavigationChain when a safe navigation operator is used with a method call as the RHS operand of && for the same receiver. (@koic)

#13324: Fix --disable-uncorrectable to not insert a comment inside a string continuation. (@dvandersluis)

#13364: Fix incorrect autocorrect with Lint/UselessAssignment a multiple assignment or for contains an inner assignment. (@dvandersluis)

#13353: Fix an incorrect autocorrect for Style/BlockDelimiters when EnforcedStyle: semantic is set and used with Layout/SpaceInsideBlockBraces. (@koic)

#13361: Fix false positives for Style/RedundantInterpolationUnfreeze and Style/RedundantFreeze when strings contain interpolated global, instance, and class variables. (@vlad-pisanov)

#13343: Prevent Layout/LineLength from breaking up a method with arguments chained onto a heredoc delimiter. (@dvandersluis)

#13374: Return exit code 0 with --display-only-correctable and --display-only-safe-correctable when no offenses are displayed. (@dvandersluis)

#13193: Fix false positive in Style/MultipleComparison when ComparisonsThreshold exceeds 2. (@fatkodima,@vlad-pisanov)

#13325: Fix an incorrect autocorrect for Lint/NonAtomicFileOperation when using a postfix unless for file existence checks before creating a file, in cases with Dir.mkdir. ([@kotaro0522][])

#13397: Update PercentLiteralCorrector to be able to write pairs of delimiters without excessive escaping. (@dvandersluis)

#13336: Update Style/SafeNavigation to not autocorrect if the RHS of an and node is an or node. (@dvandersluis)

#13378: When removing parens in Style/TernaryParentheses with a send node condition, ensure its arguments are parenthesized. (@dvandersluis)

Changes

#13347: When running rubocop -V, show the analysis Ruby version of the current directory. (@earlopain)

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.68.0 (2024-10-31)

New features

#13050: Add new Style/BitwisePredicate cop. ([@koic][])

#12140: Add new Style/CombinableDefined cop. ([@dvandersluis][])

#12988: Add new Style/AmbiguousEndlessMethodDefinition cop. ([@dvandersluis][])

#11514: Add new Lint/UnescapedBracketInRegexp cop. ([@dvandersluis][])

#13360: Add AllowSteepAnnotation config option to Layout/LeadingCommentSpace. ([@tk0miya][])

#13146: Add new IgnoreDuplicateElseBranch option to Lint/DuplicateBranch. ([@fatkodima][])

#13171: Add new Style/SafeNavigationChainLength cop. ([@fatkodima][])

#13252: Add new Style/KeywordArgumentsMerging cop. ([@fatkodima][])

Bug fixes

#13401: Fix a false negative for Style/RedundantLineContinuation when there is a line continuation at the EOF. ([@koic][])

#13368: Fix an incorrect autocorrect for Naming/BlockForwarding with Style/ExplicitBlockArgument. ([@koic][])

#13391: Fix deserialization of unknown encoding offenses. ([@earlopain][])

#13348: Ensure Style/BlockDelimiters autocorrection does not move other code between the block and comment. ([@dvandersluis][])

#13382: Fix an error during error handling for custom ruby extractors when the extractor is a class. ([@earlopain][])

#13309: Fix a false negative for Lint/UselessAssignment cop when there is a useless assignment followed by a block. ([@pCosta99][])

#13255: Fix false negatives for Style/MapIntoArray when using non-splatted arguments. ([@vlad-pisanov][])

#13356: Fix a false positive for Layout/SpaceBeforeBrackets when there is a dot before []=. ([@earlopain][])

#13365: Fix false positives for Lint/SafeNavigationConsistency when using safe navigation on the LHS with operator method on the RHS of &&. ([@koic][])

#13390: Fix false positives for Style/GuardClause when using a local variable assigned in a conditional expression in a branch. ([@koic][])

#13337: Fix false positives for Style/RedundantLineContinuation when required line continuations for && is used with an assignment after a line break. ([@koic][])

#13387: Fix false positives in Style/RedundantParentheses when parentheses are used around method chain with do...end block in keyword argument. ([@koic][])

#13341: Fix false positives for Lint/SafeNavigationChain when a safe navigation operator is used with a method call as the RHS operand of && for the same receiver. ([@koic][])

#13324: Fix --disable-uncorrectable to not insert a comment inside a string continuation. ([@dvandersluis][])

#13364: Fix incorrect autocorrect with Lint/UselessAssignment a multiple assignment or for contains an inner assignment. ([@dvandersluis][])

#13353: Fix an incorrect autocorrect for Style/BlockDelimiters when EnforcedStyle: semantic is set and used with Layout/SpaceInsideBlockBraces. ([@koic][])

#13361: Fix false positives for Style/RedundantInterpolationUnfreeze and Style/RedundantFreeze when strings contain interpolated global, instance, and class variables. ([@vlad-pisanov][])

#13343: Prevent Layout/LineLength from breaking up a method with arguments chained onto a heredoc delimiter. ([@dvandersluis][])

#13374: Return exit code 0 with --display-only-correctable and --display-only-safe-correctable when no offenses are displayed. ([@dvandersluis][])

#13193: Fix false positive in Style/MultipleComparison when ComparisonsThreshold exceeds 2. ([@fatkodima][],[@vlad-pisanov][])

#13325: Fix an incorrect autocorrect for Lint/NonAtomicFileOperation when using a postfix unless for file existence checks before creating a file, in cases with Dir.mkdir. ([@kotaro0522][])

#13397: Update PercentLiteralCorrector to be able to write pairs of delimiters without excessive escaping. ([@dvandersluis][])

#13336: Update Style/SafeNavigation to not autocorrect if the RHS of an and node is an or node. ([@dvandersluis][])

#13378: When removing parens in Style/TernaryParentheses with a send node condition, ensure its arguments are parenthesized. ([@dvandersluis][])

Changes

#13347: When running rubocop -V, show the analysis Ruby version of the current directory. ([@earlopain][])

1.67.0 (2024-10-15)

New features

#13259: Add new Lint/DuplicateSetElement cop. ([@koic][])

#13223: Add AllowRBSInlineAnnotation config option to Layout/LeadingCommentSpace to support RBS::Inline style annotation comments. ([@tk0miya][])

... (truncated)

Commits

7d35ef7 Cut 1.68
3033deb Update Changelog
37e9e5f [Fix #12140] Add new Style/CombinableDefined cop.
f8aa27f Fix a false negative for Style/RedundantLineContinuation
d033a5e Merge pull request #13400 from Earlopain/offense-cop-name-docs
faaa349 Fix docs for Offense.cop_name
85f9405 Fix deserialization of unknown encoding offenses
d499d80 [Fix #13387] Fix false positives for Style/RedundantParentheses
3e855b0 Merge pull request #13399 from dvandersluis/fix-and-offense-typo
1f58513 Fix typos and offense instead of an offense.
Additional commits viewable in compare view

Updates rubocop-rails from 2.26.2 to 2.27.0

Release notes

Sourced from rubocop-rails's releases.

RuboCop Rails 2.27.0

Bug fixes

#1377: Fix an error for Rails/EnumSyntax when positional arguments are used and options are not passed as keyword arguments. (@koic)

#1367: Fix Rails/TimeZone should not report offense on String#to_time with timezone specifier. (@armandmgt)

Changes

#727: Disable Rails/TransactionExitStatement on Rails >= 7.2. (@earlopain)

#1374: Change Rails/EnvLocal to handle negated conditions. (@fatkodima)

#1195: Change Rails/SelectMap to handle safe navigation operators. (@fatkodima)

Changelog

Sourced from rubocop-rails's changelog.

2.27.0 (2024-10-26)

Bug fixes

#1377: Fix an error for Rails/EnumSyntax when positional arguments are used and options are not passed as keyword arguments. ([@koic][])

#1367: Fix Rails/TimeZone should not report offense on String#to_time with timezone specifier. ([@armandmgt][])

Changes

#727: Disable Rails/TransactionExitStatement on Rails >= 7.2. ([@earlopain][])

#1374: Change Rails/EnvLocal to handle negated conditions. ([@fatkodima][])

#1195: Change Rails/SelectMap to handle safe navigation operators. ([@fatkodima][])

Commits

9165c10 Cut 2.27.0
f052a89 Update Changelog
f66b8f7 Merge pull request #1378 from koic/fix_an_error_for_rails_enum_syntax
94a8370 [Fix #1377] Fix an error for Rails/EnumSyntax
ec31d1b Merge pull request #1367 from armandmgt/feature/allow-to_time-with-specifier
a413fe6 Suppress new RuboCop offenses
5bc926f Fix Rails/TimeZone should not report offense on String#to_time with timez...
209cc09 Use RuboCop Performance 1.22
2e619f3 [Docs] Add TargetRailsVersion to config documentation
083e24c Merge pull request #1374 from fatkodima/env_local-handle-negations
Additional commits viewable in compare view

Updates rubocop-rspec from 3.1.0 to 3.2.0

Release notes

Sourced from rubocop-rspec's releases.

RuboCop RSpec v3.2.0

Fix RSpec/VoidExpect to only operate inside an example block. (@corsonknowles)

Change RSpec/ContextWording cop to always report an offense when both Prefixes and AllowedPatterns are empty. (@ydah)

Add support for and and or compound matchers to RSpec/ChangeByZero cop. (@ydah)

Changelog

Sourced from rubocop-rspec's changelog.

3.2.0 (2024-10-26)

Fix RSpec/VoidExpect to only operate inside an example block. ([@corsonknowles])

Change RSpec/ContextWording cop to always report an offense when both Prefixes and AllowedPatterns are empty. ([@ydah])

Add support for and and or compound matchers to RSpec/ChangeByZero cop. ([@ydah])

Commits

50ac5ab Merge pull request #1987 from rubocop/release
39b0d3f Release v3.2.0
6584b4a Merge pull request #1985 from rubocop/revert-unwanted-change
530af44 Merge pull request #1975 from corsonknowles/require_void_expect_acts_inside_a...
6cbe423 Update CHANGELOG.md
eb61748 Revert an change that would conceal unintentional RSpec syntax
427d19d Merge branch 'master' into require_void_expect_acts_inside_an_example_block
954a45f Merge pull request #1984 from rubocop/fixcbz
130c564 Fix an error for RSpec/ChangeByZero when change (...) .by (0) and `change...
ff444c2 Merge pull request #1982 from rubocop/improve-cwc
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the bundler-lint group with 5 updates: | Package | From | To | | --- | --- | --- | | [brakeman](https://github.com/presidentbeef/brakeman) | `6.2.1` | `6.2.2` | | [erb_lint](https://github.com/Shopify/erb-lint) | `0.6.0` | `0.7.0` | | [rubocop](https://github.com/rubocop/rubocop) | `1.65.0` | `1.68.0` | | [rubocop-rails](https://github.com/rubocop/rubocop-rails) | `2.26.2` | `2.27.0` | | [rubocop-rspec](https://github.com/rubocop/rubocop-rspec) | `3.1.0` | `3.2.0` | Updates `brakeman` from 6.2.1 to 6.2.2 - [Release notes](https://github.com/presidentbeef/brakeman/releases) - [Changelog](https://github.com/presidentbeef/brakeman/blob/main/CHANGES.md) - [Commits](presidentbeef/brakeman@v6.2.1...v6.2.2) Updates `erb_lint` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/Shopify/erb-lint/releases) - [Commits](Shopify/erb_lint@v0.6.0...v0.7.0) Updates `rubocop` from 1.65.0 to 1.68.0 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.65.0...v1.68.0) Updates `rubocop-rails` from 2.26.2 to 2.27.0 - [Release notes](https://github.com/rubocop/rubocop-rails/releases) - [Changelog](https://github.com/rubocop/rubocop-rails/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop-rails@v2.26.2...v2.27.0) Updates `rubocop-rspec` from 3.1.0 to 3.2.0 - [Release notes](https://github.com/rubocop/rubocop-rspec/releases) - [Changelog](https://github.com/rubocop/rubocop-rspec/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop-rspec@v3.1.0...v3.2.0) --- updated-dependencies: - dependency-name: brakeman dependency-type: direct:development update-type: version-update:semver-patch dependency-group: bundler-lint - dependency-name: erb_lint dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler-lint - dependency-name: rubocop dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler-lint - dependency-name: rubocop-rails dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler-lint - dependency-name: rubocop-rspec dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bundler-lint ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Nov 1, 2024

Fix linter errors

dcbc248

bensheldon merged commit f215f39 into main Nov 10, 2024
46 of 47 checks passed

bensheldon deleted the dependabot/bundler/bundler-lint-569bcd05ce branch November 10, 2024 17:01

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the bundler-lint group with 5 updates #1533

Bump the bundler-lint group with 5 updates #1533

dependabot bot commented on behalf of github Nov 1, 2024

Bump the bundler-lint group with 5 updates #1533

Bump the bundler-lint group with 5 updates #1533

Conversation

dependabot bot commented on behalf of github Nov 1, 2024

6.2.2

6.2.2 - 2024-10-15

v0.7.0

What's Changed

New Contributors

RuboCop 1.68

New features

Bug fixes

Changes

1.68.0 (2024-10-31)

New features

Bug fixes

Changes

1.67.0 (2024-10-15)

New features

RuboCop Rails 2.27.0

Bug fixes

Changes

2.27.0 (2024-10-26)

Bug fixes

Changes

RuboCop RSpec v3.2.0

3.2.0 (2024-10-26)