Bump the bundler group with 7 updates by dependabot[bot] · Pull Request #23 · rubyatscale/chatwerk

dependabot · 2026-09-01T02:40:00Z

Bumps the bundler group with 7 updates:

Package	From	To
rubocop	`1.88.2`	`1.90.0`
rubocop-performance	`1.26.1`	`1.27.0`
rubocop-sorbet	`0.13.2`	`0.15.0`
sorbet	`0.6.13365`	`0.6.13454`
mcp	`1.0.0`	`1.4.0`
sorbet-runtime	`0.6.13365`	`0.6.13454`
zeitwerk	`2.8.2`	`2.8.3`

Updates rubocop from 1.88.2 to 1.90.0

Release notes

Sourced from rubocop's releases.

RuboCop v1.90.0

New features

#15073: Add AllowTrailingComment option to Style/DisableCopsWithinSourceCodeDirective. ([@bbatsov][])

#9505: Add disable-next directives scoped to the following statement. ([@bbatsov][])

#15550: Add --display-suppressed option to also report offenses suppressed by directive comments, including their -- justification in the JSON formatter. ([@bbatsov][])

#15523: Add new Lint/ArgumentMismatch cop. ([@bbatsov][])

#15594: Add new Lint/SuperArgumentMismatch cop. ([@bbatsov][])

#15581: Add new Style/TimeNow cop. ([@Starlexxx][])

#15111: Add NumberOfEmptyLines option to Layout/EmptyLineAfterMagicComment to configure the minimum number of empty lines required after magic comments. ([@alejofraga][])

#13037: Add --report-unused-todo-entries to catch rotting todo files. ([@bbatsov][])

#15559: Add new Style/DirectiveScope cop to flag disable/enable pairs and disable-only push/pop scopes that wrap a single statement and can use disable-next instead. ([@bbatsov][])

#15547: Make Lint/RedundantCopEnableDirective flag # rubocop:pop directives without a matching # rubocop:push. ([@bbatsov][])

Bug fixes

#15584: Fix a crash in Lint/NameTypo and Lint/UnusedPrivateMethod on string literals with invalid encoding. ([@bbatsov][])

#15541: Fix a false negative for Lint/OutOfRangeRegexpRef when a preceding element access with a non-string literal argument (e.g. hash[:key]) discarded the tracked capture count. ([@koic][])

#7958: Add todo comments for skipped unsafe corrections with --disable-uncorrectable. ([@bbatsov][])

#15569: Fix an error for the built-in language server when a workspace/executeCommand request has no document URI in its arguments. ([@koic][])

#15410: Fix an incorrect autocorrect for Naming/BinaryOperatorParameterName. ([@bbatsov][])

#15576: Fix an incorrect autocorrect for Style/Sample when shuffle is given a random: argument; the offense is still reported but no longer autocorrected, since shuffle and sample consume a seeded generator differently and would select different elements. ([@koic][])

#15590: Fix an infinite loop error for Layout/FirstArgumentIndentation when EnforcedStyle: with_fixed_indentation is specified for Layout/ArgumentAlignment and Layout/FirstMethodArgumentLineBreak is enabled with AllowMultilineFinalElement: true. ([@Starlexxx][])

#15588: Fix RuboCop::Cop::IgnoredMethods and RuboCop::Cop::IgnoredPattern being unreachable after require 'rubocop'. ([@SeanLF][])

#8349: Don't autocorrect away directives for unknown cops. ([@bbatsov][])

#7894: Don't flag disables of pending cops as redundant. ([@bbatsov][])

#9963: Fix false negatives for Layout/ExtraSpacing. ([@Starlexxx][])

#15525: Fix false negatives in Layout/LineLength when a constant path like Http::UploadedFile matches URISchemes case-insensitively. ([@koic][])

#13941: Fix false positives for Lint/UselessConstantScoping when assigning with Class.new, Module.new, Struct.new, or Data.define after private. ([@pdobb][])

#15526: Fix false positives in Layout/MultilineMethodCallIndentation when a line has multiple single-line blocks before a multiline block. ([@koic][])

#15538: Fix false positives in Lint/ConstantReassignment when a constant is assigned in compact-style namespaces (e.g. module A::B). ([@alex-tan][])

#15517: Fix false positives in Lint/RedundantSafeNavigation when InferNonNilReceiver is enabled and the receiver name is rebound by a nested block (it or a shadowed block parameter). ([@koic][])

#15572: Fix RuboCop::Cop::Registry#freeze to freeze its internal collections, so that registering a lazily loaded cop after the freeze fails fast at the registration site instead of corrupting the registry. ([@koic][])

#15585: Make Lint/DuplicateMethods honor silence_redefinition_of_method and redefine_method as intentional redefinitions. ([@bbatsov][])

#15558: Fix --display-suppressed reporting a nil justification when the offense is loaded from the result cache. ([@corsonknowles][])

#10449: Fix Layout/ClassStructure autocorrection producing a wrong order when an element cannot be moved, and make offenses report the category that actually blocks the expected order. ([@koic][])

#15568: Fix Lint/NameTypo registering false positives for names provided by a gem whose namespace the project reopens, and for constants read from a namespace with an unresolved ancestor. ([@HoneyryderChuck][])

#15556: Fix Lint/UnusedPrivateMethod retaining every past project_index object it has seen (and the index graph reachable from each), rather than only the most recent one. This caused unbounded memory growth in long-lived processes such as rubocop --server. ([@bquorning][])

#10046: Fix Lint/UselessMethodDefinition false positive for methods with **kwargs. ([@bbatsov][])

#15589: Fix --lsp and --mcp being silently ignored when the RuboCop server is running: they now start the protocol server in the current process instead of being forwarded to the server as a lint request. ([@koic][])

#11148: Merge department and cop-level Exclude settings. ([@bbatsov][])

#15531: Fix a regression in RuboCop 1.89 where the modifier cops could produce lines longer than Layout/LineLength Max when exemptions like AllowedPatterns matched the result. ([@bbatsov][])

#15574: Fix an incorrect warning such as AllCops does not support TargetRailsVersion parameter when a plugin declares a custom AllCops key with a nil value and another plugin is loaded after it. ([@koic][])

#9543: Preserve escape notation in Style/StringConcatenation autocorrect. ([@bbatsov][])

#11119: Preserve persistent cop instances across files. ([@Eljees][])

#13022: Fix rubocop . (and other relative directory arguments) needlessly traversing directories excluded by the configuration, which made it much slower than rubocop in projects with large ignored trees. ([@bbatsov][])

#15561: Fix Lint/RedundantCopDisableDirective and Lint/RedundantCopEnableDirective leaving a directive's -- reason behind when removing the directive. ([@corsonknowles][])

#15593: Fix false positives for Lint/UnusedPrivateMethod for private definitions of Ruby runtime hooks like inherited and const_missing. ([@bbatsov][])

#15547: Make Lint/MissingCopEnableDirective suggest # rubocop:pop instead of # rubocop:enable for an unclosed # rubocop:push. ([@bbatsov][])

#14379: Suppress multi-line offenses with a directive on any of their lines. ([@bbatsov][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.90.0 (2026-08-24)

New features

#15073: Add AllowTrailingComment option to Style/DisableCopsWithinSourceCodeDirective. ([@bbatsov][])

#9505: Add disable-next directives scoped to the following statement. ([@bbatsov][])

#15550: Add --display-suppressed option to also report offenses suppressed by directive comments, including their -- justification in the JSON formatter. ([@bbatsov][])

#15523: Add new Lint/ArgumentMismatch cop. ([@bbatsov][])

#15594: Add new Lint/SuperArgumentMismatch cop. ([@bbatsov][])

#15581: Add new Style/TimeNow cop. ([@Starlexxx][])

#15111: Add NumberOfEmptyLines option to Layout/EmptyLineAfterMagicComment to configure the minimum number of empty lines required after magic comments. ([@alejofraga][])

#13037: Add --report-unused-todo-entries to catch rotting todo files. ([@bbatsov][])

#15559: Add new Style/DirectiveScope cop to flag disable/enable pairs and disable-only push/pop scopes that wrap a single statement and can use disable-next instead. ([@bbatsov][])

#15547: Make Lint/RedundantCopEnableDirective flag # rubocop:pop directives without a matching # rubocop:push. ([@bbatsov][])

Bug fixes

#15584: Fix a crash in Lint/NameTypo and Lint/UnusedPrivateMethod on string literals with invalid encoding. ([@bbatsov][])

#15541: Fix a false negative for Lint/OutOfRangeRegexpRef when a preceding element access with a non-string literal argument (e.g. hash[:key]) discarded the tracked capture count. ([@koic][])

#7958: Add todo comments for skipped unsafe corrections with --disable-uncorrectable. ([@bbatsov][])

#15569: Fix an error for the built-in language server when a workspace/executeCommand request has no document URI in its arguments. ([@koic][])

#15410: Fix an incorrect autocorrect for Naming/BinaryOperatorParameterName. ([@bbatsov][])

#15576: Fix an incorrect autocorrect for Style/Sample when shuffle is given a random: argument; the offense is still reported but no longer autocorrected, since shuffle and sample consume a seeded generator differently and would select different elements. ([@koic][])

#15590: Fix an infinite loop error for Layout/FirstArgumentIndentation when EnforcedStyle: with_fixed_indentation is specified for Layout/ArgumentAlignment and Layout/FirstMethodArgumentLineBreak is enabled with AllowMultilineFinalElement: true. ([@Starlexxx][])

#15588: Fix RuboCop::Cop::IgnoredMethods and RuboCop::Cop::IgnoredPattern being unreachable after require 'rubocop'. ([@SeanLF][])

#8349: Don't autocorrect away directives for unknown cops. ([@bbatsov][])

#7894: Don't flag disables of pending cops as redundant. ([@bbatsov][])

#9963: Fix false negatives for Layout/ExtraSpacing. ([@Starlexxx][])

#15525: Fix false negatives in Layout/LineLength when a constant path like Http::UploadedFile matches URISchemes case-insensitively. ([@koic][])

#13941: Fix false positives for Lint/UselessConstantScoping when assigning with Class.new, Module.new, Struct.new, or Data.define after private. ([@pdobb][])

#15526: Fix false positives in Layout/MultilineMethodCallIndentation when a line has multiple single-line blocks before a multiline block. ([@koic][])

#15538: Fix false positives in Lint/ConstantReassignment when a constant is assigned in compact-style namespaces (e.g. module A::B). ([@alex-tan][])

#15517: Fix false positives in Lint/RedundantSafeNavigation when InferNonNilReceiver is enabled and the receiver name is rebound by a nested block (it or a shadowed block parameter). ([@koic][])

#15572: Fix RuboCop::Cop::Registry#freeze to freeze its internal collections, so that registering a lazily loaded cop after the freeze fails fast at the registration site instead of corrupting the registry. ([@koic][])

#15585: Make Lint/DuplicateMethods honor silence_redefinition_of_method and redefine_method as intentional redefinitions. ([@bbatsov][])

#15558: Fix --display-suppressed reporting a nil justification when the offense is loaded from the result cache. ([@corsonknowles][])

#10449: Fix Layout/ClassStructure autocorrection producing a wrong order when an element cannot be moved, and make offenses report the category that actually blocks the expected order. ([@koic][])

#15568: Fix Lint/NameTypo registering false positives for names provided by a gem whose namespace the project reopens, and for constants read from a namespace with an unresolved ancestor. ([@HoneyryderChuck][])

#15556: Fix Lint/UnusedPrivateMethod retaining every past project_index object it has seen (and the index graph reachable from each), rather than only the most recent one. This caused unbounded memory growth in long-lived processes such as rubocop --server. ([@bquorning][])

#10046: Fix Lint/UselessMethodDefinition false positive for methods with **kwargs. ([@bbatsov][])

#15589: Fix --lsp and --mcp being silently ignored when the RuboCop server is running: they now start the protocol server in the current process instead of being forwarded to the server as a lint request. ([@koic][])

#11148: Merge department and cop-level Exclude settings. ([@bbatsov][])

#15531: Fix a regression in RuboCop 1.89 where the modifier cops could produce lines longer than Layout/LineLength Max when exemptions like AllowedPatterns matched the result. ([@bbatsov][])

#15574: Fix an incorrect warning such as AllCops does not support TargetRailsVersion parameter when a plugin declares a custom AllCops key with a nil value and another plugin is loaded after it. ([@koic][])

#9543: Preserve escape notation in Style/StringConcatenation autocorrect. ([@bbatsov][])

#11119: Preserve persistent cop instances across files. ([@Eljees][])

#13022: Fix rubocop . (and other relative directory arguments) needlessly traversing directories excluded by the configuration, which made it much slower than rubocop in projects with large ignored trees. ([@bbatsov][])

#15561: Fix Lint/RedundantCopDisableDirective and Lint/RedundantCopEnableDirective leaving a directive's -- reason behind when removing the directive. ([@corsonknowles][])

#15593: Fix false positives for Lint/UnusedPrivateMethod for private definitions of Ruby runtime hooks like inherited and const_missing. ([@bbatsov][])

#15547: Make Lint/MissingCopEnableDirective suggest # rubocop:pop instead of # rubocop:enable for an unclosed # rubocop:push. ([@bbatsov][])

... (truncated)

Commits

f1b25e1 Cut 1.90
72895f6 Update Changelog
7042de6 Move op_method? before the shadowing helpers
4b14dd2 Fix an incorrect autocorrect for Naming/BinaryOperatorParameterName
5d221ac [Fix #10046] Fix Lint/UselessMethodDefinition false positive for methods wi...
5070fc3 [Fix #15111] Add NumberOfEmptyLines option to `Layout/EmptyLineAfterMagicCo...
496eb65 [Fix #9543] Preserve escape notation in Style/StringConcatenation autocorrect
75b3622 Remove a directive's -- reason along with the directive
858d8a8 Merge pull request #15596 from koic/add_real_last_column_to_offense
15557b0 Add Offense#real_last_column and use it in JSONFormatter
Additional commits viewable in compare view

Updates rubocop-performance from 1.26.1 to 1.27.0

Release notes

Sourced from rubocop-performance's releases.

RuboCop Performance v1.27.0

Bug fixes

#532: Fix false negatives for Performance/ChainArrayAllocation when using flat_map, filter_map, and collect_concat. (@koic)

Changes

#530: Speed up loading rubocop-performance by lazily loading only the cops needed for a run. This requires RuboCop 1.89.0+. (@koic)

Changelog

Sourced from rubocop-performance's changelog.

1.27.0 (2026-08-16)

Bug fixes

#532: Fix false negatives for Performance/ChainArrayAllocation when using flat_map, filter_map, and collect_concat. ([@koic][])

Changes

#530: Speed up loading rubocop-performance by lazily loading only the cops needed for a run. This requires RuboCop 1.89.0+. ([@koic][])

Commits

c07064d Cut 1.27.0
0e7abe8 Update Changelog
0d43a61 Suppress RuboCop offenses
72eb77d Merge pull request #533 from koic/fix_chain_array_allocation_false_negatives
9c60244 Merge pull request #528 from koic/fix_regexp_match_offense_message_for_bang_t...
c3515cb [Fix #532] Fix false negatives for Performance/ChainArrayAllocation
dba3d75 Merge pull request #530 from koic/lazy_load_cops
dd5f992 Load cops lazily
f1763dd [Fix #510] Clarify Performance/RegexpMatch message for !~
9c969a6 Fix JRuby CI failure caused by rbs native extension build
Additional commits viewable in compare view

Updates rubocop-sorbet from 0.13.2 to 0.15.0

Release notes

Sourced from rubocop-sorbet's releases.

v0.15.0

What's Changed

🛠 Other Changes

Add Sorbet/StructPropName cop by @Guflly in Shopify/rubocop-sorbet#393

Add autocorrect for RBS comments ↔ sig blocks signatures by @Morriar in Shopify/rubocop-sorbet#397

Add Sorbet/ForbidTBindInAssignment by @Morriar in Shopify/rubocop-sorbet#398

Support root-scoped T.bind calls by @Morriar in Shopify/rubocop-sorbet#399

Reject spaced RBS comment markers by @Morriar in Shopify/rubocop-sorbet#402

Add AutocorrectStyle: rbs to Sorbet/ForbidTStruct by @rafaelfranca in Shopify/rubocop-sorbet#395

Extend RedundantTLetForLiteral to trailing RBS annotations by @Morriar in Shopify/rubocop-sorbet#401

Autocorrect T.bind to RBS self assertions by @Morriar in Shopify/rubocop-sorbet#400

Remove obsolete RBS marker spacing test by @Morriar in Shopify/rubocop-sorbet#408

Autocorrect T.absurd to RBS assertions by @Morriar in Shopify/rubocop-sorbet#403

Autocorrect T.cast to RBS assertions by @Morriar in Shopify/rubocop-sorbet#406

Autocorrect T.let to RBS annotations by @Morriar in Shopify/rubocop-sorbet#407

Autocorrect T.unsafe to RBS assertions by @Morriar in Shopify/rubocop-sorbet#404

Autocorrect inline else T.absurd calls by @Morriar in Shopify/rubocop-sorbet#409

Autocorrect T.must to RBS assertions by @Morriar in Shopify/rubocop-sorbet#405

New Contributors

@Guflly made their first contribution in Shopify/rubocop-sorbet#393

Full Changelog: Shopify/rubocop-sorbet@v0.14.0...v0.15.0

v0.14.0

What's Changed

🛠 Other Changes

Add Sorbet/SetterReturnType cop and extract RBSParser helper by @rafaelfranca in Shopify/rubocop-sorbet#389

Fix TLetCorrection corrupting files with interior heredocs by @dduugg in Shopify/rubocop-sorbet#387

Patch Lint/Void to be RBS #: absurd aware by @rafaelfranca in Shopify/rubocop-sorbet#390

Drop support for Ruby 3.1 and 3.2 by @Morriar in Shopify/rubocop-sorbet#392

Full Changelog: Shopify/rubocop-sorbet@v0.13.2...v0.14.0

Commits

a88afd4 Release v0.15.0
c3e4550 Merge pull request #405 from Shopify/t-must-rbs-autocorrection
946e63b Add trailing comment autocorrection test
673b342 Merge pull request #409 from Shopify/t-absurd-inline-else
0dac722 Test inline unless absurd autocorrection
6979d2e Handle inline if else T.absurd autocorrection
0ce61e7 Autocorrect inline else T.absurd calls
6468538 Merge pull request #404 from Shopify/t-unsafe-rbs-autocorrection
5a5dc70 Merge pull request #407 from Shopify/t-let-rbs-autocorrection
9cf7734 Merge pull request #406 from Shopify/t-cast-rbs-autocorrection
Additional commits viewable in compare view

Updates sorbet from 0.6.13365 to 0.6.13454

Release notes

Sourced from sorbet's releases.

sorbet 0.6.13453.20260827153016-8b0a71ff8

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13453', :group => :development
gem 'sorbet-runtime', '0.6.13453'
sorbet 0.6.13452.20260827121448-b0e749cd0

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13452', :group => :development
gem 'sorbet-runtime', '0.6.13452'
sorbet 0.6.13451.20260827114157-c8a7b977e

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13451', :group => :development
gem 'sorbet-runtime', '0.6.13451'
sorbet 0.6.13450.20260827112108-257c924ba

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13450', :group => :development
gem 'sorbet-runtime', '0.6.13450'
sorbet 0.6.13449.20260826113755-1b9d41e16

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13449', :group => :development
gem 'sorbet-runtime', '0.6.13449'
sorbet 0.6.13448.20260826140853-26a713681

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13448', :group => :development
gem 'sorbet-runtime', '0.6.13448'
sorbet 0.6.13447.20260826102833-3f35a9cc3

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13447', :group => :development
gem 'sorbet-runtime', '0.6.13447'
sorbet 0.6.13446.20260826092600-a46765e7c

... (truncated)

Commits

See full diff in compare view

Updates mcp from 1.0.0 to 1.4.0

Release notes

Sourced from mcp's releases.

v1.4.0

This release repairs the subscriptions/listen stream. A host that buffers its responses, the documented Rails controller pattern among them, can decline the method with serve_subscriptions_listen: false instead of answering a modern client with a streaming body it cannot render, and the stream's ordering guarantees are enforced: no notification reaches a client before the acknowledgement, and none follows the graceful closing result.

Added

Add serve_subscriptions_listen: for hosts that cannot hold an SSE stream open (#533)

Fixed

Deliver subscriptions/listen notifications only after the acknowledgement (#532)

Serialize subscriptions/listen writes so the graceful result is the final message (#535)

v1.3.0

User-facing documentation now lives on the documentation site at https://ruby.sdk.modelcontextprotocol.io, and README.md keeps the quick start. Two entries under "Changed" reject traffic that earlier releases accepted and ship in a minor release under the exceptions described in https://github.com/modelcontextprotocol/ruby-sdk/blob/HEAD/VERSIONING.md.

Added

Add a resources_list_handler for context-dependent resource lists (#509)

Pass a handler-returned _meta through the subscribe result (#510)

Changed

Bound OAuth response bodies in the client (#520)

Reject duplicate in-flight JSON-RPC request ids (#521)

Move the documentation from README.md to the documentation site (#523)

v1.2.0

This release completes the SEP-2575 stateless lifecycle of the 2026-07-28 specification, together with the SEP-2322, SEP-2549, and SEP-2243 features that revision builds on. Several entries under "Changed" are incompatible with 1.1.0 and ship in a minor release under the spec-conformance and security exceptions described in https://github.com/modelcontextprotocol/ruby-sdk/blob/HEAD/VERSIONING.md.

Added

Handle the SEP-2575 modern request envelope in the server core (#475)

Serve both lifecycle eras over stdio with an era lock per SEP-2575 (#478)

Serve the sessionless modern path over Streamable HTTP per SEP-2575 (#479)

Finalize server/discover and add client modern lifecycle support per SEP-2575 (#480)

Let handlers return multi round-trip input_required results per SEP-2322 (#481)

Add MCP::Elicitation::EnumSchema builders per SEP-1330 (#482)

Stamp the required resultType on modern results per SEP-2322 (#487)

Enforce the modern lifecycle admission rules per SEP-2575 (#489)

Stream modern request notifications and honor the envelope logLevel per SEP-2575 (#490)

Expose the user-defined server_context in instrumentation data (#493)

Serve the subscriptions/listen notification stream per SEP-2575 (#495)

Add opt-in requestState sealing via MCP::Server::RequestStateSecurity (#496)

Mirror x-mcp-header tool parameters into Mcp-Param-* headers per SEP-2243 (#498)

Stamp the required cache hints on modern cacheable results per SEP-2549 (#499)

Drive multi round-trip input_required results on the client per SEP-2322 (#500)

Fulfill input_required results on the legacy wire per SEP-2322 (#501)

Changed

... (truncated)

Changelog

Sourced from mcp's changelog.

[1.4.0] - 2026-08-28

This release repairs the subscriptions/listen stream. A host that buffers its responses, the documented Rails controller pattern among them, can decline the method with serve_subscriptions_listen: false instead of answering a modern client with a streaming body it cannot render, and the stream's ordering guarantees are enforced: no notification reaches a client before the acknowledgement, and none follows the graceful closing result.

Added

Add serve_subscriptions_listen: for hosts that cannot hold an SSE stream open (#533)

Fixed

Deliver subscriptions/listen notifications only after the acknowledgement (#532)

Serialize subscriptions/listen writes so the graceful result is the final message (#535)

[1.3.0] - 2026-08-22

User-facing documentation now lives on the documentation site at https://ruby.sdk.modelcontextprotocol.io, and README.md keeps the quick start. Two entries under "Changed" reject traffic that earlier releases accepted and ship in a minor release under the exceptions described in https://github.com/modelcontextprotocol/ruby-sdk/blob/main/VERSIONING.md.

Added

Add a resources_list_handler for context-dependent resource lists (#509)

Pass a handler-returned _meta through the subscribe result (#510)

Changed

Bound OAuth response bodies in the client (#520)

Reject duplicate in-flight JSON-RPC request ids (#521)

Move the documentation from README.md to the documentation site (#523)

[1.2.0] - 2026-08-15

This release completes the SEP-2575 stateless lifecycle of the 2026-07-28 specification, together with the SEP-2322, SEP-2549, and SEP-2243 features that revision builds on. Several entries under "Changed" are incompatible with 1.1.0 and ship in a minor release under the spec-conformance and security exceptions described in https://github.com/modelcontextprotocol/ruby-sdk/blob/main/VERSIONING.md.

Added

Handle the SEP-2575 modern request envelope in the server core (#475)

Serve both lifecycle eras over stdio with an era lock per SEP-2575 (#478)

Serve the sessionless modern path over Streamable HTTP per SEP-2575 (#479)

Finalize server/discover and add client modern lifecycle support per SEP-2575 (#480)

Let handlers return multi round-trip input_required results per SEP-2322 (#481)

Add MCP::Elicitation::EnumSchema builders per SEP-1330 (#482)

Stamp the required resultType on modern results per SEP-2322 (#487)

... (truncated)

Commits

da4ce54 Merge pull request #536 from koic/release_1_4_0
50accf6 Release 1.4.0
6b6b641 Merge pull request #535 from koic/serialize_listen_stream_writes_on_teardown
7909600 Merge pull request #534 from koic/add_a_docs_preview_rake_task
2200cbd Serialize subscriptions/listen writes so the graceful result is the final m...
411f6b9 Merge pull request #532 from koic/activate_listen_streams_after_the_acknowled...
636e494 Add a rake docs:preview task serving the docs site locally
3b79c8e Merge pull request #533 from koic/make_subscriptions_listen_refusable
3da0c10 Make subscriptions/listen refusable for hosts that cannot stream
5ce308b Deliver subscriptions/listen notifications only after the acknowledgement
Additional commits viewable in compare view

Updates sorbet-runtime from 0.6.13365 to 0.6.13454

Release notes

Sourced from sorbet-runtime's releases.

sorbet 0.6.13453.20260827153016-8b0a71ff8

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13453', :group => :development
gem 'sorbet-runtime', '0.6.13453'
sorbet 0.6.13452.20260827121448-b0e749cd0

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13452', :group => :development
gem 'sorbet-runtime', '0.6.13452'
sorbet 0.6.13451.20260827114157-c8a7b977e

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13451', :group => :development
gem 'sorbet-runtime', '0.6.13451'
sorbet 0.6.13450.20260827112108-257c924ba

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13450', :group => :development
gem 'sorbet-runtime', '0.6.13450'
sorbet 0.6.13449.20260826113755-1b9d41e16

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13449', :group => :development
gem 'sorbet-runtime', '0.6.13449'
sorbet 0.6.13448.20260826140853-26a713681

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13448', :group => :development
gem 'sorbet-runtime', '0.6.13448'
sorbet 0.6.13447.20260826102833-3f35a9cc3

To use Sorbet add this line to your Gemfile:
gem 'sorbet', '0.6.13447', :group => :development
gem 'sorbet-runtime', '0.6.13447'
sorbet 0.6.13446.20260826092600-a46765e7c

... (truncated)

Commits

See full diff in compare view

Updates zeitwerk from 2.8.2 to 2.8.3

Changelog

Sourced from zeitwerk's changelog.

2.8.3 (1 Aug 2026)

2.8.0 introduced a regression: Collapsed directories that were also configured as eager load exclusions were eager loaded. The exclusion was not honored. This has been fixed.

Commits

607973f Ready for 2.8.3
8f09b96 Let eager loading skip collapsed eager loading exceptions
f548f2c Remove unused variables
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the bundler group with 7 updates: | Package | From | To | | --- | --- | --- | | [rubocop](https://github.com/rubocop/rubocop) | `1.88.2` | `1.90.0` | | [rubocop-performance](https://github.com/rubocop/rubocop-performance) | `1.26.1` | `1.27.0` | | [rubocop-sorbet](https://github.com/shopify/rubocop-sorbet) | `0.13.2` | `0.15.0` | | [sorbet](https://github.com/sorbet/sorbet) | `0.6.13365` | `0.6.13454` | | [mcp](https://github.com/modelcontextprotocol/ruby-sdk) | `1.0.0` | `1.4.0` | | [sorbet-runtime](https://github.com/sorbet/sorbet) | `0.6.13365` | `0.6.13454` | | [zeitwerk](https://github.com/fxn/zeitwerk) | `2.8.2` | `2.8.3` | Updates `rubocop` from 1.88.2 to 1.90.0 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.88.2...v1.90.0) Updates `rubocop-performance` from 1.26.1 to 1.27.0 - [Release notes](https://github.com/rubocop/rubocop-performance/releases) - [Changelog](https://github.com/rubocop/rubocop-performance/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop-performance@v1.26.1...v1.27.0) Updates `rubocop-sorbet` from 0.13.2 to 0.15.0 - [Release notes](https://github.com/shopify/rubocop-sorbet/releases) - [Commits](Shopify/rubocop-sorbet@v0.13.2...v0.15.0) Updates `sorbet` from 0.6.13365 to 0.6.13454 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `mcp` from 1.0.0 to 1.4.0 - [Release notes](https://github.com/modelcontextprotocol/ruby-sdk/releases) - [Changelog](https://github.com/modelcontextprotocol/ruby-sdk/blob/main/CHANGELOG.md) - [Commits](modelcontextprotocol/ruby-sdk@v1.0.0...v1.4.0) Updates `sorbet-runtime` from 0.6.13365 to 0.6.13454 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `zeitwerk` from 2.8.2 to 2.8.3 - [Changelog](https://github.com/fxn/zeitwerk/blob/main/CHANGELOG.md) - [Commits](fxn/zeitwerk@v2.8.2...v2.8.3) --- updated-dependencies: - dependency-name: rubocop dependency-version: 1.90.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bundler - dependency-name: rubocop-performance dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bundler - dependency-name: rubocop-sorbet dependency-version: 0.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bundler - dependency-name: sorbet dependency-version: 0.6.13454 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler - dependency-name: mcp dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bundler - dependency-name: sorbet-runtime dependency-version: 0.6.13454 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler - dependency-name: zeitwerk dependency-version: 2.8.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bundler ... Signed-off-by: dependabot[bot] <support@github.com>

dduugg

Approving automated Dependabot dependency bump.

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Sep 1, 2026

dependabot Bot requested a review from a team as a code owner September 1, 2026 02:40

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Sep 1, 2026

dduugg approved these changes Sep 1, 2026

View reviewed changes

dduugg merged commit 9a9cfc4 into main Sep 1, 2026
6 checks passed

dduugg deleted the dependabot/bundler/bundler-7eb4a39f3c branch September 1, 2026 17:39

Navigation Menu

Uh oh!

Bump the bundler group with 7 updates - #23

Bump the bundler group with 7 updates#23
dduugg merged 1 commit into
mainfrom
dependabot/bundler/bundler-7eb4a39f3c

dependabot Bot commented on behalf of github Sep 1, 2026

Uh oh!

dduugg left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 1, 2026

RuboCop v1.90.0

New features

Bug fixes

1.90.0 (2026-08-24)

New features

Bug fixes

RuboCop Performance v1.27.0

Bug fixes

Changes

1.27.0 (2026-08-16)

Bug fixes

Changes

v0.15.0

What's Changed

🛠 Other Changes

New Contributors

v0.14.0

What's Changed

🛠 Other Changes

sorbet 0.6.13453.20260827153016-8b0a71ff8

sorbet 0.6.13452.20260827121448-b0e749cd0

sorbet 0.6.13451.20260827114157-c8a7b977e

sorbet 0.6.13450.20260827112108-257c924ba

sorbet 0.6.13449.20260826113755-1b9d41e16

sorbet 0.6.13448.20260826140853-26a713681

sorbet 0.6.13447.20260826102833-3f35a9cc3

sorbet 0.6.13446.20260826092600-a46765e7c

v1.4.0

Added

Fixed

v1.3.0

Added

Changed

v1.2.0

Added

Changed

[1.4.0] - 2026-08-28

Added

Fixed

[1.3.0] - 2026-08-22

Added

Changed

[1.2.0] - 2026-08-15

Added

sorbet 0.6.13453.20260827153016-8b0a71ff8

sorbet 0.6.13452.20260827121448-b0e749cd0

sorbet 0.6.13451.20260827114157-c8a7b977e

sorbet 0.6.13450.20260827112108-257c924ba

sorbet 0.6.13449.20260826113755-1b9d41e16

sorbet 0.6.13448.20260826140853-26a713681

sorbet 0.6.13447.20260826102833-3f35a9cc3

sorbet 0.6.13446.20260826092600-a46765e7c

2.8.3 (1 Aug 2026)

Uh oh!

dduugg left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant