Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 13, 2026

Bumps the minor-and-patch group with 4 updates: rubocop-rspec, identity_cache, google-protobuf and sorbet-static-and-runtime.

Updates rubocop-rspec from 3.8.0 to 3.9.0

Release notes

Sourced from rubocop-rspec's releases.

RuboCop RSpec v3.9.0

  • Fix a false positive for RSpec/LeakyLocalVariable when variables are used only in example metadata (e.g., skip messages). (@​ydah)
  • Fix a false positive for RSpec/ScatteredSetup when the hook is defined inside a class method. (@​d4rky-pl)
  • Fix a false positive for RSpec/DescribedClass inside dynamically evaluated blocks (class_eval, module_eval, instance_eval, class_exec, module_exec, instance_exec). (@​sucicfilip)
  • Add new cop RSpec/Output. (@​kevinrobell-st)
Changelog

Sourced from rubocop-rspec's changelog.

3.9.0 (2026-01-07)

  • Fix a false positive for RSpec/LeakyLocalVariable when variables are used only in example metadata (e.g., skip messages). ([@​ydah])
  • Fix a false positive for RSpec/ScatteredSetup when the hook is defined inside a class method. ([@​d4rky-pl])
  • Fix a false positive for RSpec/DescribedClass inside dynamically evaluated blocks (class_eval, module_eval, instance_eval, class_exec, module_exec, instance_exec). ([@​sucicfilip])
  • Add new cop RSpec/Output. ([@​kevinrobell-st])
Commits
  • f7aecf0 Merge pull request #2151 from rubocop/release
  • 893a25b Bump version to 3.9.0
  • 91ad43d Merge pull request #2150 from kevinrobell-st/patch-1
  • 802b386 Fix CHANGELOG
  • a03e0c7 Merge pull request #2149 from rubocop/ci-test-ruby-4.0
  • 68f25d9 Temporarily add irb to Gemfile
  • b9e50b8 CI: Test with Ruby 4.0
  • b63bcd8 Merge pull request #2148 from sucicfilip/fix-described-class-inside-eval
  • 278245a Fix RSpec/DescribedClass to ignore *_eval and *_exec blocks
  • ca18f5e Merge pull request #2144 from rubocop/dont-use-ruby-version
  • Additional commits viewable in compare view

Updates identity_cache from 1.6.3 to 1.6.4

Release notes

Sourced from identity_cache's releases.

v1.6.4

What's Changed

New Contributors

Full Changelog: Shopify/identity_cache@v1.6.3...v1.6.4

Changelog

Sourced from identity_cache's changelog.

1.6.4

  • Patch run_callbacks instead of _run_commit_callbacks to expire cache prior to after_commit callbacks. (#602)
Commits
  • a6b6ccb Merge pull request #615 from Shopify/relase-1.6.4
  • 7417178 Release 1.6.4
  • d86056c Merge pull request #602 from Shopify/ac-fix-commit-callback-patch
  • 8c6a19f Patch run_callbacks instead of _run_commit_callbacks
  • 460c68c Merge pull request #597 from Shopify/dependabot/bundler/rexml-3.4.2
  • f37f1f2 Merge pull request #604 from Shopify/dependabot/github_actions/ruby/setup-rub...
  • 7ef44fd Bump ruby/setup-ruby from 1.263.0 to 1.266.0
  • 1a86936 Merge pull request #600 from Shopify/dependabot/github_actions/ruby/setup-rub...
  • 5bb0e43 Bump ruby/setup-ruby from 1.257.0 to 1.263.0
  • 4c2a92c Bump rexml from 3.4.1 to 3.4.2
  • Additional commits viewable in compare view

Updates google-protobuf from 4.33.3 to 4.33.4

Commits

Updates sorbet-static-and-runtime from 0.6.12875 to 0.6.12883

Release notes

Sourced from sorbet-static-and-runtime's releases.

sorbet 0.6.12882.20260109215955-d74b69bec

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12882', :group => :development
gem 'sorbet-runtime', '0.6.12882'

sorbet 0.6.12881.20260108170200-81a010233

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12881', :group => :development
gem 'sorbet-runtime', '0.6.12881'

sorbet 0.6.12880.20260108162253-69831332f

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12880', :group => :development
gem 'sorbet-runtime', '0.6.12880'

sorbet 0.6.12879.20260108102421-56dc39456

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12879', :group => :development
gem 'sorbet-runtime', '0.6.12879'

sorbet 0.6.12878.20260107144138-e472e7364

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12878', :group => :development
gem 'sorbet-runtime', '0.6.12878'

sorbet 0.6.12877.20260107111813-d602da226

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12877', :group => :development
gem 'sorbet-runtime', '0.6.12877'

sorbet 0.6.12876.20260107114243-802f5d5ef

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12876', :group => :development
gem 'sorbet-runtime', '0.6.12876'

sorbet 0.6.12875.20260106092921-0a871d292

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jan 13, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 13, 2026 02:13
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jan 13, 2026
dependabot bot and others added 2 commits January 16, 2026 11:17
Bumps the minor-and-patch group with 4 updates: [rubocop-rspec](https://github.com/rubocop/rubocop-rspec), [identity_cache](https://github.com/Shopify/identity_cache), [google-protobuf](https://github.com/protocolbuffers/protobuf) and [sorbet-static-and-runtime](https://github.com/sorbet/sorbet).

Updates `rubocop-rspec` from 3.8.0 to 3.9.0
- [Release notes](https://github.com/rubocop/rubocop-rspec/releases)
- [Changelog](https://github.com/rubocop/rubocop-rspec/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop-rspec@v3.8.0...v3.9.0)

Updates `identity_cache` from 1.6.3 to 1.6.4
- [Release notes](https://github.com/Shopify/identity_cache/releases)
- [Changelog](https://github.com/Shopify/identity_cache/blob/main/CHANGELOG.md)
- [Commits](Shopify/identity_cache@v1.6.3...v1.6.4)

Updates `google-protobuf` from 4.33.3 to 4.33.4
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `sorbet-static-and-runtime` from 0.6.12875 to 0.6.12883
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

---
updated-dependencies:
- dependency-name: rubocop-rspec
  dependency-version: 3.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: identity_cache
  dependency-version: 1.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: google-protobuf
  dependency-version: 4.33.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: sorbet-static-and-runtime
  dependency-version: 0.6.12883
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@egiurleo egiurleo force-pushed the dependabot/bundler/minor-and-patch-76304b9fed branch from b022080 to 644794c Compare January 16, 2026 17:18
@egiurleo egiurleo enabled auto-merge January 16, 2026 17:20
@egiurleo egiurleo merged commit 19a6c55 into main Jan 16, 2026
19 checks passed
@egiurleo egiurleo deleted the dependabot/bundler/minor-and-patch-76304b9fed branch January 16, 2026 17:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant