Skip to content

deps(ruby): bump the bundler-dependencies group in /ruby with 2 updates#329

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/bundler/ruby/bundler-dependencies-5b6be42971
Jun 2, 2026
Merged

deps(ruby): bump the bundler-dependencies group in /ruby with 2 updates#329
github-actions[bot] merged 1 commit into
mainfrom
dependabot/bundler/ruby/bundler-dependencies-5b6be42971

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jun 2, 2026

Bumps the bundler-dependencies group in /ruby with 2 updates: zeitwerk and yard.

Updates zeitwerk from 2.8.1 to 2.8.2

Changelog

Sourced from zeitwerk's changelog.

2.8.2 (23 May 2026)

  • on_load and on_unload accept constant paths with leading colons. For example:

    loader.on_load('::User') { ... }
  • on_load and on_unload validate that their input is a constant path. For example:

    loader.on_load(':User') { ... }

    raises NameError.

Commits
  • 76f0790 Ready for 2.8.2
  • 14cff5e Refactor cpath validation for TruffleRuby
  • 8c26393 on_load and on_unload validate their input is a constant path
  • ea55f02 Add a constant path validator
  • 80e925b Let on_load/on_unload use a sentinel for 0 args
  • 2a25bce Add RuboCop to CI
  • 198fe83 Linting
  • 27b9a58 Merge pull request #335 from Shopify/on_load_qualifier
  • f0389f0 Make qualified constant paths work with #on_load
  • See full diff in compare view

Updates yard from 0.9.43 to 0.9.44

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Update Ruby dependencies in /ruby: zeitwerk to 2.8.2 and yard to 0.9.44. Brings patch fixes; zeitwerk adds stricter constant path validation and supports leading colons in on_load/on_unload.

  • Dependencies
    • zeitwerk: 2.8.1 → 2.8.2
    • yard: 0.9.43 → 0.9.44

Written for commit d218fcb. Summary will update on new commits.

Review in cubic

Bumps the bundler-dependencies group in /ruby with 2 updates: [zeitwerk](https://github.com/fxn/zeitwerk) and [yard](https://yardoc.org).


Updates `zeitwerk` from 2.8.1 to 2.8.2
- [Changelog](https://github.com/fxn/zeitwerk/blob/main/CHANGELOG.md)
- [Commits](fxn/zeitwerk@v2.8.1...v2.8.2)

Updates `yard` from 0.9.43 to 0.9.44

---
updated-dependencies:
- dependency-name: zeitwerk
  dependency-version: 2.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: yard
  dependency-version: 0.9.44
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update the Ruby SDK labels Jun 2, 2026
Copilot AI review requested due to automatic review settings June 2, 2026 08:25
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update the Ruby SDK labels Jun 2, 2026
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

@github-actions github-actions Bot enabled auto-merge (squash) June 2, 2026 08:25
@github-actions github-actions Bot merged commit d5063b6 into main Jun 2, 2026
44 of 45 checks passed
@dependabot dependabot Bot deleted the dependabot/bundler/ruby/bundler-dependencies-5b6be42971 branch June 2, 2026 08:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update the Ruby SDK

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant