Bump the patch-and-minor-dependencies group with 2 updates by dependabot[bot] · Pull Request #62 · simonneutert/ruby-telegram-login-web-stub-tutorial

dependabot · 2026-10-01T19:33:09Z

Bumps the patch-and-minor-dependencies group with 2 updates: roda and rubocop.

Updates roda from 3.107.0 to 3.108.0

Changelog

=== 3.108.0 (2026-09-14)

Make invalid_request_body r.POST exception handling reraise RodaErrors (jeremyevans)

Make host_routing plugin downcase hostnames before storage and comparison (jeremyevans)

Make :extension hash matcher in path_matchers plugin require . before extension (jeremyevans)

Add params_capturing_restore plugin to have params_capturing work with pass and break plugins (jeremyevans)

Always set Vary response header if considering Accept request header in type_routing plugin (jeremyevans)

Have r.last_modified in caching plugin check If-Unmodified-Since before If-None-Match and If-Modified-Since (jeremyevans)

Do not have r.on_segment in optimized_segment_matchers match empty segment (jeremyevans)

Do not have r.on with String class matcher and default symbol matcher match empty segment (jeremyevans)

Make pass plugin work with hash_branches and hash_paths plugins (jeremyevans)

Make params_capturing plugin override a provided parameter named captures (jeremyevans)

Deprecate the :clear_session csrf_failure option value in the route_csrf and sec_fetch_site_csrf plugins (jeremyevans)

Make segment matching with convertor not consume remaining_path if convertor returns false/nil (jeremyevans)

Make etag in the caching plugin return a 412 response if an If-Match header is submitted and weak option is used (jeremyevans)

Make r.redirect without arguments use / if path starts with // (jeremyevans)

Make run_append_slash with :use_redirects option not redirect if path starts with // (jeremyevans)

Make hash matcher reset remaining path and captures on failure (jeremyevans)

Make pass and break plugins work with optimized_{string,segment}_matchers plugins (jeremyevans)

Make render method options have greater priority than options set via set_view_options (jeremyevans)

Do not allow rendering templates outside an allowed_paths directory but having an allowed path as a prefix (jeremyevans)

Do not add the :views directory as an allowed path if it isn't a directory (jeremyevans)

Support json_parser :content_type_regexp plugin option, warn if not provided (jeremyevans)

Add r.query to all_verbs plugin on Rack 3.3+ (jeremyevans)

Support :exempt_request_methods option for route_csrf plugin, to use an allow list approach (jeremyevans)

Add csrf_request_method to route_csrf plugin, to handle case where REQUEST_METHOD has been modified (jeremyevans)

Commits

f13bb6b Bump version to 3.108.0
523005c Switch one of recommended :content_type_regexp examples to be case insensitive
3bd7215 Fix JRUBY_VERSION check in sessions spec to handle JRuby 10+
aed701c Explain why you may want to use public plugin instead of static
d579023 Make invalid_request_body r.POST exception handling reraise RodaErrors
d7b9422 Make host_routing plugin downcase hostnames before storage and comparison
4401593 Make :extension hash matcher in path_matchers plugin require . before extension
6399979 Remove unneeded branch in hmac_paths plugin
3305442 Add params_capturing_restore plugin to have params_capturing work with pass a...
acd56df Always set Vary response header if considering Accept request header in type_...
Additional commits viewable in compare view

Updates rubocop from 1.90.0 to 1.91.0

Release notes

Sourced from rubocop's releases.

RuboCop v1.91.0

New features

#15631: Add a preview channel for unstable behavior. ([@bbatsov][])

#15627: Add a SARIF formatter. ([@bbatsov][])

#15686: Add AllCops: FailLevel, the configuration equivalent of --fail-level. ([@bbatsov][])

#15650: Add AllowedDirectives option to Style/DisableCopsWithinSourceCodeDirective, exempting directive kinds such as generated rubocop:todo comments. ([@bbatsov][])

#15629: Add --changed to inspect only the files git says changed. ([@bbatsov][])

#15628: Add --diff to preview autocorrection without writing files. ([@bbatsov][])

#15615: Add new Lint/MisplacedMagicComment cop to flag magic comments in positions where Ruby ignores them. ([@bbatsov][])

#15600: Add the rubocop:enable-next directive to re-enable cops for the next statement only. ([@bbatsov][])

#15600: Add the rubocop:next directive, combining push-style +/- arguments with disable-next's statement scope. ([@bbatsov][])

#15363: Let a cop's entry in the default configuration carry a Preview section with the defaults it is expected to adopt in the next major release, applied under Preview. ([@bbatsov][])

Bug fixes

#15349: Fix a false positive for Style/RedundantRegexpCharacterClass with \8/\9. ([@bbatsov][])

#15646: Fix an error for Layout/ElseAlignment when else is used with rescue in a class, module, or singleton class body. ([@viralpraxis][])

#15613: Fix an error for Layout/HashAlignment when a hash value starts on the line below its key. ([@viralpraxis][])

#15623: Fix an error for Layout/HashAlignment when the first pair of a hash omits its value, and an incorrect autocorrection when a later pair does. ([@viralpraxis][])

#15602: Fix an error for Layout/IndentationWidth on under-indented code with tab indentation. ([@Starlexxx][])

#15672: Fix an error for Lint/RedundantCopDisableDirective when a file contains more than one rubocop:push/rubocop:pop pair. ([@koic][])

#15625: Fix an error for Style/AccessModifierDeclarations when a body repeats the same access modifier. ([@viralpraxis][])

#15603: Fix an error for Style/AccessModifierDeclarations with EnforcedStyle: inline when an access modifier is the body of an if without an else branch. ([@viralpraxis][])

#15604: Fix an error for Style/ConstantVisibility when a visibility declaration splats anything other than an array literal, e.g. private_constant(*constants(false)). ([@viralpraxis][])

#15647: Fix an error for Style/DocumentationMethod when an inline module_function/ruby2_keywords def is preceded by another argument. ([@viralpraxis][])

#15680: Fix an error for Style/EndlessMethod when a method definition is nested inside another method definition. ([@viralpraxis][])

#15674: Fix an error for Style/FloatDivision when using EnforcedStyle: fdiv and one operand of a float division is itself a parenthesized float division. ([@viralpraxis][])

#15624: Fix an error for Style/HashLookupMethod when the looked-up key is itself a hash lookup. ([@viralpraxis][])

#15642: Fix an error for Style/HashSyntax when hash rockets are enforced and a hash value repeats its key. ([@viralpraxis][])

#15634: Fix an incorrect autocorrect for Lint/LiteralAsCondition when the other operand is a parenthesized return. ([@Starlexxx][])

#15648: Fix an incorrect autocorrect for Lint/ParenthesesAsGroupedExpression when the parentheses contain and, or, not, or a modifier expression. ([@Starlexxx][])

#15612: Fix an incorrect autocorrect for Naming/BlockForwarding with Style/MethodDefParentheses. ([@Starlexxx][])

#15680: Fix an incorrect autocorrect for Style/EndlessMethod when using EnforcedStyle: require_always and the method body has a rescue or ensure clause. ([@viralpraxis][])

#15669: Fix an incorrect autocorrect for Style/FloatDivision when using EnforcedStyle: fdiv and the divisor is a method call with parenthesized arguments. ([@viralpraxis][])

#15678: Fix an incorrect autocorrect for Style/For when using EnforcedStyle: for and the block body has a rescue or ensure clause. ([@viralpraxis][])

#15645: Fix an incorrect autocorrect for Style/GuardClause with Style/MissingElse. ([@Starlexxx][])

#15668: Fix an incorrect autocorrect for Style/MethodCallWithArgsParentheses when EnforcedStyle: omit_parentheses is used together with Style/TrailingCommaInArguments. ([@viralpraxis][])

#15347: Fix an incorrect autocorrect for Style/NestedModifier. ([@bbatsov][])

#15347: Fix an incorrect autocorrect for Style/NonNilCheck. ([@bbatsov][])

#15347: Fix an incorrect autocorrect for Style/Not with a flip-flop or assignment. ([@bbatsov][])

#15349: Fix an incorrect autocorrect for Style/RedundantDoubleSplatHashBraces with a braced merge argument. ([@bbatsov][])

#15349: Fix an incorrect autocorrect for Style/RedundantParentheses around and/or. ([@bbatsov][])

#15349: Fix an incorrect autocorrect for Style/RedundantRegexpConstructor with %r{} delimiters. ([@bbatsov][])

#15614: Fix an infinite loop between Layout/ArgumentAlignment and Layout/HashAlignment with separator style. ([@Starlexxx][])

#15599: Fix an infinite loop error for Layout/CommentIndentation when many comment blocks with the same indentation are separated by empty lines. ([@Starlexxx][])

#15597: Fix an infinite loop error for Layout/EmptyLinesAfterModuleInclusion when a module inclusion is directly before rescue. ([@Starlexxx][])

#15617: Fix an infinite loop between Layout/ExtraSpacing with ForceEqualSignAlignment and Layout/SpaceAroundOperators. ([@Starlexxx][])

#15638: Fix an infinite loop error for Layout/FirstArrayElementIndentation with Layout/ArrayAlignment when EnforcedStyle: with_fixed_indentation is configured. ([@RedZapdos123][])

#15639: Fix an infinite loop error for Layout/FirstParameterIndentation with Layout/ParameterAlignment when EnforcedStyle: with_fixed_indentation is configured. ([@RedZapdos123][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.91.0 (2026-09-10)

New features

#15631: Add a preview channel for unstable behavior. ([@bbatsov][])

#15627: Add a SARIF formatter. ([@bbatsov][])

#15686: Add AllCops: FailLevel, the configuration equivalent of --fail-level. ([@bbatsov][])

#15650: Add AllowedDirectives option to Style/DisableCopsWithinSourceCodeDirective, exempting directive kinds such as generated rubocop:todo comments. ([@bbatsov][])

#15629: Add --changed to inspect only the files git says changed. ([@bbatsov][])

#15628: Add --diff to preview autocorrection without writing files. ([@bbatsov][])

#15615: Add new Lint/MisplacedMagicComment cop to flag magic comments in positions where Ruby ignores them. ([@bbatsov][])

#15600: Add the rubocop:enable-next directive to re-enable cops for the next statement only. ([@bbatsov][])

#15600: Add the rubocop:next directive, combining push-style +/- arguments with disable-next's statement scope. ([@bbatsov][])

#15363: Let a cop's entry in the default configuration carry a Preview section with the defaults it is expected to adopt in the next major release, applied under Preview. ([@bbatsov][])

Bug fixes

#15349: Fix a false positive for Style/RedundantRegexpCharacterClass with \8/\9. ([@bbatsov][])

#15646: Fix an error for Layout/ElseAlignment when else is used with rescue in a class, module, or singleton class body. ([@viralpraxis][])

#15613: Fix an error for Layout/HashAlignment when a hash value starts on the line below its key. ([@viralpraxis][])

#15623: Fix an error for Layout/HashAlignment when the first pair of a hash omits its value, and an incorrect autocorrection when a later pair does. ([@viralpraxis][])

#15602: Fix an error for Layout/IndentationWidth on under-indented code with tab indentation. ([@Starlexxx][])

#15672: Fix an error for Lint/RedundantCopDisableDirective when a file contains more than one rubocop:push/rubocop:pop pair. ([@koic][])

#15625: Fix an error for Style/AccessModifierDeclarations when a body repeats the same access modifier. ([@viralpraxis][])

#15603: Fix an error for Style/AccessModifierDeclarations with EnforcedStyle: inline when an access modifier is the body of an if without an else branch. ([@viralpraxis][])

#15604: Fix an error for Style/ConstantVisibility when a visibility declaration splats anything other than an array literal, e.g. private_constant(*constants(false)). ([@viralpraxis][])

#15647: Fix an error for Style/DocumentationMethod when an inline module_function/ruby2_keywords def is preceded by another argument. ([@viralpraxis][])

#15680: Fix an error for Style/EndlessMethod when a method definition is nested inside another method definition. ([@viralpraxis][])

#15674: Fix an error for Style/FloatDivision when using EnforcedStyle: fdiv and one operand of a float division is itself a parenthesized float division. ([@viralpraxis][])

#15624: Fix an error for Style/HashLookupMethod when the looked-up key is itself a hash lookup. ([@viralpraxis][])

#15642: Fix an error for Style/HashSyntax when hash rockets are enforced and a hash value repeats its key. ([@viralpraxis][])

#15634: Fix an incorrect autocorrect for Lint/LiteralAsCondition when the other operand is a parenthesized return. ([@Starlexxx][])

#15648: Fix an incorrect autocorrect for Lint/ParenthesesAsGroupedExpression when the parentheses contain and, or, not, or a modifier expression. ([@Starlexxx][])

#15612: Fix an incorrect autocorrect for Naming/BlockForwarding with Style/MethodDefParentheses. ([@Starlexxx][])

#15680: Fix an incorrect autocorrect for Style/EndlessMethod when using EnforcedStyle: require_always and the method body has a rescue or ensure clause. ([@viralpraxis][])

#15669: Fix an incorrect autocorrect for Style/FloatDivision when using EnforcedStyle: fdiv and the divisor is a method call with parenthesized arguments. ([@viralpraxis][])

#15678: Fix an incorrect autocorrect for Style/For when using EnforcedStyle: for and the block body has a rescue or ensure clause. ([@viralpraxis][])

#15645: Fix an incorrect autocorrect for Style/GuardClause with Style/MissingElse. ([@Starlexxx][])

#15668: Fix an incorrect autocorrect for Style/MethodCallWithArgsParentheses when EnforcedStyle: omit_parentheses is used together with Style/TrailingCommaInArguments. ([@viralpraxis][])

#15347: Fix an incorrect autocorrect for Style/NestedModifier. ([@bbatsov][])

#15347: Fix an incorrect autocorrect for Style/NonNilCheck. ([@bbatsov][])

#15347: Fix an incorrect autocorrect for Style/Not with a flip-flop or assignment. ([@bbatsov][])

#15349: Fix an incorrect autocorrect for Style/RedundantDoubleSplatHashBraces with a braced merge argument. ([@bbatsov][])

#15349: Fix an incorrect autocorrect for Style/RedundantParentheses around and/or. ([@bbatsov][])

#15349: Fix an incorrect autocorrect for Style/RedundantRegexpConstructor with %r{} delimiters. ([@bbatsov][])

#15614: Fix an infinite loop between Layout/ArgumentAlignment and Layout/HashAlignment with separator style. ([@Starlexxx][])

#15599: Fix an infinite loop error for Layout/CommentIndentation when many comment blocks with the same indentation are separated by empty lines. ([@Starlexxx][])

#15597: Fix an infinite loop error for Layout/EmptyLinesAfterModuleInclusion when a module inclusion is directly before rescue. ([@Starlexxx][])

#15617: Fix an infinite loop between Layout/ExtraSpacing with ForceEqualSignAlignment and Layout/SpaceAroundOperators. ([@Starlexxx][])

#15638: Fix an infinite loop error for Layout/FirstArrayElementIndentation with Layout/ArrayAlignment when EnforcedStyle: with_fixed_indentation is configured. ([@RedZapdos123][])

... (truncated)

Commits

6eee0af Cut 1.91
ed0572d Update Changelog
3181272 Fix an infinite loop for Style/NumericLiteralPrefix with signed literals
b87652a Fix Layout/LineLength SplitStrings loop on trailing-space split point
fce7a33 [Fix #15638] Fix first array indentation loop
321bd65 #15347 Fix an incorrect autocorrect for Style/NestedModifier
a464cba #15347 Fix incorrect autocorrects for Style/NilComparison with precedence...
3192b70 #15347 Fix an incorrect autocorrect for Style/NonNilCheck
f747cab #15347 Fix an incorrect autocorrect for Style/Not with a flip-flop or ass...
3f52020 Add CHANGELOG entry for the preview fail level
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the patch-and-minor-dependencies group with 2 updates: [roda](https://github.com/jeremyevans/roda) and [rubocop](https://github.com/rubocop/rubocop). Updates `roda` from 3.107.0 to 3.108.0 - [Changelog](https://github.com/jeremyevans/roda/blob/master/CHANGELOG) - [Commits](jeremyevans/roda@3.107.0...3.108.0) Updates `rubocop` from 1.90.0 to 1.91.0 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.90.0...v1.91.0) --- updated-dependencies: - dependency-name: roda dependency-version: 3.108.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-and-minor-dependencies - dependency-name: rubocop dependency-version: 1.91.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch-and-minor-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-01T19:46:26Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot assigned simonneutert Oct 1, 2026

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Oct 1, 2026

simonneutert closed this Oct 1, 2026

dependabot Bot deleted the dependabot/bundler/patch-and-minor-dependencies-7936a0a7ba branch October 1, 2026 19:46

Navigation Menu

Repository navigation

Bump the patch-and-minor-dependencies group with 2 updates - #62

Bump the patch-and-minor-dependencies group with 2 updates#62
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/patch-and-minor-dependencies-7936a0a7ba

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026

RuboCop v1.91.0

New features

Bug fixes

1.91.0 (2026-09-10)

New features

Bug fixes

Uh oh!

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant