[dependabot]

Bumps the patch-and-minor-dependencies group with 5 updates:

Package	From	To
roda	3.106.0	3.107.0
telegram-bot-ruby	2.8.0	2.8.1
tilt	2.8.0	2.9.0
rubocop	1.88.2	1.90.0
rubocop-performance	1.26.1	1.27.0

Updates roda from 3.106.0 to 3.107.0

Changelog

Sourced from roda's changelog.

=== 3.107.0 (2026-08-13)

• Deprecate upgrading rack sessions and compressed sessions in the sessions plugin (jeremyevans)

• Deprecate the delay_build plugin (jeremyevans)

• Deprecate automatic compression using common libraries in the assets plugin (jeremyevans)

• Support using a proc or method for the :css_compressor and :js_compressor assets plugin options (jeremyevans)

• Document that the route_block_args plugin will be removed in Roda 4 (jeremyevans)

• Document that the csrf plugin will be removed in Roda 4 (jeremyevans)

• Document that the static plugin will be removed in Roda 4 (jeremyevans)

• Warn by default if dynamically defining a method using a block with an unexpected arity (jeremyevans)

• Add url_escape plugin for Roda#url_{,un}escape methods (jeremyevans)

Commits

• 21370ef Bump version to 3.107.0
• 38926b5 Add covering specs after check_arity changes
• ba89b53 Avoid compressor warning in recheck_precompiled_assets spec
• 0b102b1 Add Roda 4 note about middleware next if not found plugin
• 4ce7f95 Deprecate upgrading rack sessions and compressed sessions in the sessions plugin
• 345a7c5 Deprecate the delay_build plugin
• 8323053 Fix Roda 4 note for check_arity
• 3df8aef Add note to remove :concat_only option in Roda 4
• 24d8ac2 Deprecate automatic compression using common libraries in the assets plugin
• 563a536 Support using a proc or method for the :css_compressor and :js_compressor ass...
• Additional commits viewable in compare view

Updates telegram-bot-ruby from 2.8.0 to 2.8.1

Changelog

Sourced from telegram-bot-ruby's changelog.

2.8.1

Fixed

• JSON-encode Hash params in API calls and parse RichText correctly #340 (thx @​vsevolod)

Commits

• cefdb5e Bump version
• f6f60d8 Fix Rich Messages: JSON-encode Hash params and parse RichText correctly (#340)
• 36ff484 Update README.md
• See full diff in compare view

Updates tilt from 2.8.0 to 2.9.0

Changelog

Sourced from tilt's changelog.

2.9.0 (2026-08-17)

• Add Herb template, registered for .herb and .html.erb (marcoroth) (#30)

Commits

• f0d75c6 Bump version to 2.9.0
• c6f5711 Register ERB/Erubi for .html.erb
• b5371b6 Update commonmarker tests for changes in recent versions of commonmarker
• 610b5e3 Add Herb Template Engine
• See full diff in compare view

Updates rubocop from 1.88.2 to 1.90.0

Release notes

Sourced from rubocop's releases.

RuboCop v1.90.0

New features

• #15073: Add AllowTrailingComment option to Style/DisableCopsWithinSourceCodeDirective. ([@​bbatsov][])
• #9505: Add disable-next directives scoped to the following statement. ([@​bbatsov][])
• #15550: Add --display-suppressed option to also report offenses suppressed by directive comments, including their -- justification in the JSON formatter. ([@​bbatsov][])
• #15523: Add new Lint/ArgumentMismatch cop. ([@​bbatsov][])
• #15594: Add new Lint/SuperArgumentMismatch cop. ([@​bbatsov][])
• #15581: Add new Style/TimeNow cop. ([@​Starlexxx][])
• #15111: Add NumberOfEmptyLines option to Layout/EmptyLineAfterMagicComment to configure the minimum number of empty lines required after magic comments. ([@​alejofraga][])
• #13037: Add --report-unused-todo-entries to catch rotting todo files. ([@​bbatsov][])
• #15559: Add new Style/DirectiveScope cop to flag disable/enable pairs and disable-only push/pop scopes that wrap a single statement and can use disable-next instead. ([@​bbatsov][])
• #15547: Make Lint/RedundantCopEnableDirective flag # rubocop:pop directives without a matching # rubocop:push. ([@​bbatsov][])

Bug fixes

• #15584: Fix a crash in Lint/NameTypo and Lint/UnusedPrivateMethod on string literals with invalid encoding. ([@​bbatsov][])
• #15541: Fix a false negative for Lint/OutOfRangeRegexpRef when a preceding element access with a non-string literal argument (e.g. hash[:key]) discarded the tracked capture count. ([@​koic][])
• #7958: Add todo comments for skipped unsafe corrections with --disable-uncorrectable. ([@​bbatsov][])
• #15569: Fix an error for the built-in language server when a workspace/executeCommand request has no document URI in its arguments. ([@​koic][])
• #15410: Fix an incorrect autocorrect for Naming/BinaryOperatorParameterName. ([@​bbatsov][])
• #15576: Fix an incorrect autocorrect for Style/Sample when shuffle is given a random: argument; the offense is still reported but no longer autocorrected, since shuffle and sample consume a seeded generator differently and would select different elements. ([@​koic][])
• #15590: Fix an infinite loop error for Layout/FirstArgumentIndentation when EnforcedStyle: with_fixed_indentation is specified for Layout/ArgumentAlignment and Layout/FirstMethodArgumentLineBreak is enabled with AllowMultilineFinalElement: true. ([@​Starlexxx][])
• #15588: Fix RuboCop::Cop::IgnoredMethods and RuboCop::Cop::IgnoredPattern being unreachable after require 'rubocop'. ([@​SeanLF][])
• #8349: Don't autocorrect away directives for unknown cops. ([@​bbatsov][])
• #7894: Don't flag disables of pending cops as redundant. ([@​bbatsov][])
• #9963: Fix false negatives for Layout/ExtraSpacing. ([@​Starlexxx][])
• #15525: Fix false negatives in Layout/LineLength when a constant path like Http::UploadedFile matches URISchemes case-insensitively. ([@​koic][])
• #13941: Fix false positives for Lint/UselessConstantScoping when assigning with Class.new, Module.new, Struct.new, or Data.define after private. ([@​pdobb][])
• #15526: Fix false positives in Layout/MultilineMethodCallIndentation when a line has multiple single-line blocks before a multiline block. ([@​koic][])
• #15538: Fix false positives in Lint/ConstantReassignment when a constant is assigned in compact-style namespaces (e.g. module A::B). ([@​alex-tan][])
• #15517: Fix false positives in Lint/RedundantSafeNavigation when InferNonNilReceiver is enabled and the receiver name is rebound by a nested block (it or a shadowed block parameter). ([@​koic][])
• #15572: Fix RuboCop::Cop::Registry#freeze to freeze its internal collections, so that registering a lazily loaded cop after the freeze fails fast at the registration site instead of corrupting the registry. ([@​koic][])
• #15585: Make Lint/DuplicateMethods honor silence_redefinition_of_method and redefine_method as intentional redefinitions. ([@​bbatsov][])
• #15558: Fix --display-suppressed reporting a nil justification when the offense is loaded from the result cache. ([@​corsonknowles][])
• #10449: Fix Layout/ClassStructure autocorrection producing a wrong order when an element cannot be moved, and make offenses report the category that actually blocks the expected order. ([@​koic][])
• #15568: Fix Lint/NameTypo registering false positives for names provided by a gem whose namespace the project reopens, and for constants read from a namespace with an unresolved ancestor. ([@​HoneyryderChuck][])
• #15556: Fix Lint/UnusedPrivateMethod retaining every past project_index object it has seen (and the index graph reachable from each), rather than only the most recent one. This caused unbounded memory growth in long-lived processes such as rubocop --server. ([@​bquorning][])
• #10046: Fix Lint/UselessMethodDefinition false positive for methods with **kwargs. ([@​bbatsov][])
• #15589: Fix --lsp and --mcp being silently ignored when the RuboCop server is running: they now start the protocol server in the current process instead of being forwarded to the server as a lint request. ([@​koic][])
• #11148: Merge department and cop-level Exclude settings. ([@​bbatsov][])
• #15531: Fix a regression in RuboCop 1.89 where the modifier cops could produce lines longer than Layout/LineLength Max when exemptions like AllowedPatterns matched the result. ([@​bbatsov][])
• #15574: Fix an incorrect warning such as AllCops does not support TargetRailsVersion parameter when a plugin declares a custom AllCops key with a nil value and another plugin is loaded after it. ([@​koic][])
• #9543: Preserve escape notation in Style/StringConcatenation autocorrect. ([@​bbatsov][])
• #11119: Preserve persistent cop instances across files. ([@​Eljees][])
• #13022: Fix rubocop . (and other relative directory arguments) needlessly traversing directories excluded by the configuration, which made it much slower than rubocop in projects with large ignored trees. ([@​bbatsov][])
• #15561: Fix Lint/RedundantCopDisableDirective and Lint/RedundantCopEnableDirective leaving a directive's -- reason behind when removing the directive. ([@​corsonknowles][])
• #15593: Fix false positives for Lint/UnusedPrivateMethod for private definitions of Ruby runtime hooks like inherited and const_missing. ([@​bbatsov][])
• #15547: Make Lint/MissingCopEnableDirective suggest # rubocop:pop instead of # rubocop:enable for an unclosed # rubocop:push. ([@​bbatsov][])
• #14379: Suppress multi-line offenses with a directive on any of their lines. ([@​bbatsov][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.90.0 (2026-08-24)

New features

• #15073: Add AllowTrailingComment option to Style/DisableCopsWithinSourceCodeDirective. ([@​bbatsov][])
• #9505: Add disable-next directives scoped to the following statement. ([@​bbatsov][])
• #15550: Add --display-suppressed option to also report offenses suppressed by directive comments, including their -- justification in the JSON formatter. ([@​bbatsov][])
• #15523: Add new Lint/ArgumentMismatch cop. ([@​bbatsov][])
• #15594: Add new Lint/SuperArgumentMismatch cop. ([@​bbatsov][])
• #15581: Add new Style/TimeNow cop. ([@​Starlexxx][])
• #15111: Add NumberOfEmptyLines option to Layout/EmptyLineAfterMagicComment to configure the minimum number of empty lines required after magic comments. ([@​alejofraga][])
• #13037: Add --report-unused-todo-entries to catch rotting todo files. ([@​bbatsov][])
• #15559: Add new Style/DirectiveScope cop to flag disable/enable pairs and disable-only push/pop scopes that wrap a single statement and can use disable-next instead. ([@​bbatsov][])
• #15547: Make Lint/RedundantCopEnableDirective flag # rubocop:pop directives without a matching # rubocop:push. ([@​bbatsov][])

Bug fixes

• #15584: Fix a crash in Lint/NameTypo and Lint/UnusedPrivateMethod on string literals with invalid encoding. ([@​bbatsov][])
• #15541: Fix a false negative for Lint/OutOfRangeRegexpRef when a preceding element access with a non-string literal argument (e.g. hash[:key]) discarded the tracked capture count. ([@​koic][])
• #7958: Add todo comments for skipped unsafe corrections with --disable-uncorrectable. ([@​bbatsov][])
• #15569: Fix an error for the built-in language server when a workspace/executeCommand request has no document URI in its arguments. ([@​koic][])
• #15410: Fix an incorrect autocorrect for Naming/BinaryOperatorParameterName. ([@​bbatsov][])
• #15576: Fix an incorrect autocorrect for Style/Sample when shuffle is given a random: argument; the offense is still reported but no longer autocorrected, since shuffle and sample consume a seeded generator differently and would select different elements. ([@​koic][])
• #15590: Fix an infinite loop error for Layout/FirstArgumentIndentation when EnforcedStyle: with_fixed_indentation is specified for Layout/ArgumentAlignment and Layout/FirstMethodArgumentLineBreak is enabled with AllowMultilineFinalElement: true. ([@​Starlexxx][])
• #15588: Fix RuboCop::Cop::IgnoredMethods and RuboCop::Cop::IgnoredPattern being unreachable after require 'rubocop'. ([@​SeanLF][])
• #8349: Don't autocorrect away directives for unknown cops. ([@​bbatsov][])
• #7894: Don't flag disables of pending cops as redundant. ([@​bbatsov][])
• #9963: Fix false negatives for Layout/ExtraSpacing. ([@​Starlexxx][])
• #15525: Fix false negatives in Layout/LineLength when a constant path like Http::UploadedFile matches URISchemes case-insensitively. ([@​koic][])
• #13941: Fix false positives for Lint/UselessConstantScoping when assigning with Class.new, Module.new, Struct.new, or Data.define after private. ([@​pdobb][])
• #15526: Fix false positives in Layout/MultilineMethodCallIndentation when a line has multiple single-line blocks before a multiline block. ([@​koic][])
• #15538: Fix false positives in Lint/ConstantReassignment when a constant is assigned in compact-style namespaces (e.g. module A::B). ([@​alex-tan][])
• #15517: Fix false positives in Lint/RedundantSafeNavigation when InferNonNilReceiver is enabled and the receiver name is rebound by a nested block (it or a shadowed block parameter). ([@​koic][])
• #15572: Fix RuboCop::Cop::Registry#freeze to freeze its internal collections, so that registering a lazily loaded cop after the freeze fails fast at the registration site instead of corrupting the registry. ([@​koic][])
• #15585: Make Lint/DuplicateMethods honor silence_redefinition_of_method and redefine_method as intentional redefinitions. ([@​bbatsov][])
• #15558: Fix --display-suppressed reporting a nil justification when the offense is loaded from the result cache. ([@​corsonknowles][])
• #10449: Fix Layout/ClassStructure autocorrection producing a wrong order when an element cannot be moved, and make offenses report the category that actually blocks the expected order. ([@​koic][])
• #15568: Fix Lint/NameTypo registering false positives for names provided by a gem whose namespace the project reopens, and for constants read from a namespace with an unresolved ancestor. ([@​HoneyryderChuck][])
• #15556: Fix Lint/UnusedPrivateMethod retaining every past project_index object it has seen (and the index graph reachable from each), rather than only the most recent one. This caused unbounded memory growth in long-lived processes such as rubocop --server. ([@​bquorning][])
• #10046: Fix Lint/UselessMethodDefinition false positive for methods with **kwargs. ([@​bbatsov][])
• #15589: Fix --lsp and --mcp being silently ignored when the RuboCop server is running: they now start the protocol server in the current process instead of being forwarded to the server as a lint request. ([@​koic][])
• #11148: Merge department and cop-level Exclude settings. ([@​bbatsov][])
• #15531: Fix a regression in RuboCop 1.89 where the modifier cops could produce lines longer than Layout/LineLength Max when exemptions like AllowedPatterns matched the result. ([@​bbatsov][])
• #15574: Fix an incorrect warning such as AllCops does not support TargetRailsVersion parameter when a plugin declares a custom AllCops key with a nil value and another plugin is loaded after it. ([@​koic][])
• #9543: Preserve escape notation in Style/StringConcatenation autocorrect. ([@​bbatsov][])
• #11119: Preserve persistent cop instances across files. ([@​Eljees][])
• #13022: Fix rubocop . (and other relative directory arguments) needlessly traversing directories excluded by the configuration, which made it much slower than rubocop in projects with large ignored trees. ([@​bbatsov][])
• #15561: Fix Lint/RedundantCopDisableDirective and Lint/RedundantCopEnableDirective leaving a directive's -- reason behind when removing the directive. ([@​corsonknowles][])
• #15593: Fix false positives for Lint/UnusedPrivateMethod for private definitions of Ruby runtime hooks like inherited and const_missing. ([@​bbatsov][])
• #15547: Make Lint/MissingCopEnableDirective suggest # rubocop:pop instead of # rubocop:enable for an unclosed # rubocop:push. ([@​bbatsov][])

... (truncated)

Commits

• f1b25e1 Cut 1.90
• 72895f6 Update Changelog
• 7042de6 Move op_method? before the shadowing helpers
• 4b14dd2 Fix an incorrect autocorrect for Naming/BinaryOperatorParameterName
• 5d221ac [Fix #10046] Fix Lint/UselessMethodDefinition false positive for methods wi...
• 5070fc3 [Fix #15111] Add NumberOfEmptyLines option to `Layout/EmptyLineAfterMagicCo...
• 496eb65 [Fix #9543] Preserve escape notation in Style/StringConcatenation autocorrect
• 75b3622 Remove a directive's -- reason along with the directive
• 858d8a8 Merge pull request #15596 from koic/add_real_last_column_to_offense
• 15557b0 Add Offense#real_last_column and use it in JSONFormatter
• Additional commits viewable in compare view

Updates rubocop-performance from 1.26.1 to 1.27.0

Release notes

Sourced from rubocop-performance's releases.

RuboCop Performance v1.27.0

Bug fixes

• #532: Fix false negatives for Performance/ChainArrayAllocation when using flat_map, filter_map, and collect_concat. (@​koic)

Changes

• #530: Speed up loading rubocop-performance by lazily loading only the cops needed for a run. This requires RuboCop 1.89.0+. (@​koic)

Changelog

Sourced from rubocop-performance's changelog.

1.27.0 (2026-08-16)

Bug fixes

• #532: Fix false negatives for Performance/ChainArrayAllocation when using flat_map, filter_map, and collect_concat. ([@​koic][])

Changes

• #530: Speed up loading rubocop-performance by lazily loading only the cops needed for a run. This requires RuboCop 1.89.0+. ([@​koic][])

Commits

• c07064d Cut 1.27.0
• 0e7abe8 Update Changelog
• 0d43a61 Suppress RuboCop offenses
• 72eb77d Merge pull request #533 from koic/fix_chain_array_allocation_false_negatives
• 9c60244 Merge pull request #528 from koic/fix_regexp_match_offense_message_for_bang_t...
• c3515cb [Fix #532] Fix false negatives for Performance/ChainArrayAllocation
• dba3d75 Merge pull request #530 from koic/lazy_load_cops
• dd5f992 Load cops lazily
• f1763dd [Fix #510] Clarify Performance/RegexpMatch message for !~
• 9c969a6 Fix JRuby CI failure caused by rbs native extension build
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions