chore(deps): bump the ruby-deps group with 4 updates by dependabot[bot] · Pull Request #2807 · codebar/planner

dependabot · 2026-08-13T04:45:03Z

Bumps the ruby-deps group with 4 updates: icalendar, overcommit, rubocop and scout_apm.

Updates icalendar from 2.12.3 to 2.12.4

Changelog

Sourced from icalendar's changelog.

2.12.4 - 2026-07-31

TEXT unescape fix - Vincent Gao

Commits

2a83c51 Bump version to 2.12.4
a3ce4aa Merge pull request #323 from gaoflow/fix-text-unescape-inverse
a98b40a Fix TEXT unescape so it is the exact inverse of value_ical
See full diff in compare view

Updates overcommit from 0.71.0 to 0.72.0

Release notes

Sourced from overcommit's releases.

0.72.0

What's Changed

Fix Solargraph regexp capture warning by @sds in sds/overcommit#886

Fail Flay hook when flay crashes instead of silently passing by @SAY-5 in sds/overcommit#885

Fix operation state restoration in linked worktrees by @xenyal in sds/overcommit#887

Require patched REXML version by @sds in sds/overcommit#889

New Contributors

@SAY-5 made their first contribution in sds/overcommit#885

@xenyal made their first contribution in sds/overcommit#887

Full Changelog: sds/overcommit@v0.71.0...v0.72.0

Changelog

Sourced from overcommit's changelog.

0.72.0

Fix Solargraph regexp capture warning

Fix Flay hook when flay crashes instead of silently passing

Fix operation state restoration in linked worktrees

Update rexml constraint to patch CVE-2025-58767

Commits

4eda754 Cut version 0.72.0 (#891)
1235937 Remove maintainability badge (#890)
9338179 Require patched REXML version (#889)
a3f4e29 Fix operation state restoration in linked worktrees (#887)
ac17d93 Fail Flay hook when flay crashes instead of silently passing (#885)
bc038b9 Fix Solargraph regexp capture warning (#886)
See full diff in compare view

Updates rubocop from 1.88.2 to 1.89.0

Release notes

Sourced from rubocop's releases.

RuboCop v1.89.0

New features

#15492: Add AllCops/ProjectIndexIncludesGems for bundle-wide indexing. ([@bbatsov][])

#15498: Add DelegatingMethods option to Lint/DuplicateMethods to register custom delegate-shaped methods. ([@bbatsov][])

#15042: Add DisallowedCops configuration option to Style/DisableCopsWithinSourceCodeDirective. ([@hammadxcm][])

#15441: Add new AllowYARDCommentBlockSeparator option to Layout/LeadingCommentSpace. ([@koic][])

#15466: Add new Lint/DeprecatedReference cop to detect references to methods and constants documented as @deprecated, powered by the project index. ([@bbatsov][])

#15491: Add new Lint/NameTypo cop. ([@bbatsov][])

#15468: Add new Lint/UnusedPrivateMethod cop for project-wide dead-code detection via the project index (disabled by default). ([@bbatsov][])

#14598: Make Style/DisableCopsWithinSourceCodeDirective impossible to disable via directive comments when explicitly enabled with Enabled: true. ([@rafaelfranca][])

#15511: Support textDocument/codeAction requests in the built-in language server, so LSP clients that request code actions (Eglot, Helix, Flycheck, ...) can apply RuboCop's autocorrects, not only clients that read them off the published diagnostic. ([@bbatsov][])

#8565: Support NewCops in department configuration to enable pending cops per department, including cops added up to a specific version (e.g. Style: NewCops: '1.19'). ([@koic][])

#9373: Support autocorrection for tab indentation in Layout/IndentationWidth and Style/ClassAndModuleChildren. ([@ioquatix][], [@koic][])

Bug fixes

#15257: Fix a false negative for Lint/ToEnumArguments when explicit extra keyword arguments are passed (e.g. def m(x:); to_enum(:m, x: x, y: 1); end), which raises ArgumentError when the enumerator is used. ([@RedZapdos123][])

#15452: Fix a false positive for Layout/HashAlignment when using EnforcedHashRocketStyle: table and a hash key spans multiple lines. ([@dduugg][])

#12269: Fix a false positive for Lint/UselessAssignment with modifier conditions. ([@bbatsov][])

#13786: Fix a false positive for Lint/Void with setter methods. ([@bbatsov][])

#15507: Fix a false positive for Naming/VariableNumber when using an empty symbol hash key. ([@koic][])

#15284: Fix a false positive for Style/MutableConstant with Data.define. ([@bbatsov][])

#15483: Fix a false positive for Style/MissingRespondToMissing when respond_to_missing? is defined in a reopening of the class and UseProjectIndex is enabled. ([@bbatsov][])

#15500: Fix an error for Lint/LiteralAsCondition when a literal condition has an empty branch. ([@koic][])

#15499: Fix an error for Lint/UselessRuby2Keywords when ruby2_keywords is used with a symbol but no method definition is found. ([@koic][])

#15453: Fix an error for Metrics/MethodLength when a method contains a heredoc and __ENCODING__. ([@koic][])

#15442: Fix an error for Style/ArrayIntersect cop when the block-based check calls member?/include? without an explicit receiver. ([@dduugg][])

#15434: Fix an error for Style/NegativeArrayIndex cop. ([@viralpraxis][])

#15469: Fix an error for Style/RedundantFormat when a format string uses a positional argument number beyond the 64-bit range. ([@koic][])

#15454: Fix an error for Style/RedundantFormat when the argument for a positional variable width is missing. ([@koic][])

#15298: Fix an incorrect autocorrect for Lint/LiteralInInterpolation. ([@bbatsov][])

#15515: Fix an incorrect autocorrect for Style/ArrayIntersect when using safe navigation none? with a block. ([@koic][])

#15364: Fix an incorrect autocorrect for Style/MultipleComparison that dropped an allowed method comparison appearing between the compared values. ([@bbatsov][])

#15367: Fix an incorrect autocorrect for Style/RedundantFileExtensionInRequire that produced invalid Ruby when a backslash preceded the .rb extension. ([@bbatsov][])

#12017: Fix Lint/Void to no longer autocorrect a constant used in a void context, since removing it can change behavior through constant autoloading side effects. ([@bbatsov][])

#14797: Avoid cache writes during server checks. ([@sjh9714][])

#15484: Fix false negatives for Lint/InheritException when Exception is inherited indirectly through a project class (UseProjectIndex). ([@bbatsov][])

#15357: Fix a false negative for Lint/AmbiguousAssignment when using attribute or index assignment. ([@sngsmz][])

#9571: Fix false negatives in Layout/ClassStructure when class body elements are wrapped in begin blocks. ([@koic][])

#9570: Fix false negatives in Layout/ClassStructure when using private_class_method or public_class_method def modifiers. ([@koic][])

#15438: Fix false positives in Style/ArrayIntersect when the receiver of include? in a block is not an array literal. ([@koic][])

#15445: Fix false positives in Style/MultilineIfThen when using the Prism parser engine and an elsif without then follows a branch using then with a body on the same line. ([@koic][])

#15058: Fix false positives in Lint/DuplicateMethods for anonymous classes (Class.new) passed as arguments to the same named-receiver method call (e.g. T.cast). Each Class.new block is an independent class, so methods defined in different blocks should not be treated as duplicates. ([@rafaelfranca][])

#15486: Fix false negatives for Style/RedundantConstantBase inside namespaces when the constant provably resolves identically without :: (UseProjectIndex). ([@bbatsov][])

#15505: Fix incompatible autocorrect between Style/Lambda and Style/SymbolProc producing a syntax error like ->(x)(&:method) when both cops run on lambda { |x| x.method }. ([@koic][])

#15481: Fix cross-file offenses depending on which files are inspected: the project index now always covers the whole project (UseProjectIndex). ([@bbatsov][])

#13794: Fix Layout/LineLength autocorrection for endless methods with block bodies. ([@hervetatche][])

#15462: Fix an error for Lint/ConstantReassignment when a built-in constant name is assigned and UseProjectIndex is enabled. ([@bbatsov][])

#15321: Fix Style/ClassAndModuleChildren ignoring EnforcedStyleForClasses and EnforcedStyleForModules, and skip autocorrection when mixed per-type styles make the result ambiguous. ([@bbatsov][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.89.0 (2026-08-04)

New features

#15492: Add AllCops/ProjectIndexIncludesGems for bundle-wide indexing. ([@bbatsov][])

#15498: Add DelegatingMethods option to Lint/DuplicateMethods to register custom delegate-shaped methods. ([@bbatsov][])

#15042: Add DisallowedCops configuration option to Style/DisableCopsWithinSourceCodeDirective. ([@hammadxcm][])

#15441: Add new AllowYARDCommentBlockSeparator option to Layout/LeadingCommentSpace. ([@koic][])

#15466: Add new Lint/DeprecatedReference cop to detect references to methods and constants documented as @deprecated, powered by the project index. ([@bbatsov][])

#15491: Add new Lint/NameTypo cop. ([@bbatsov][])

#15468: Add new Lint/UnusedPrivateMethod cop for project-wide dead-code detection via the project index (disabled by default). ([@bbatsov][])

#14598: Make Style/DisableCopsWithinSourceCodeDirective impossible to disable via directive comments when explicitly enabled with Enabled: true. ([@rafaelfranca][])

#15511: Support textDocument/codeAction requests in the built-in language server, so LSP clients that request code actions (Eglot, Helix, Flycheck, ...) can apply RuboCop's autocorrects, not only clients that read them off the published diagnostic. ([@bbatsov][])

#8565: Support NewCops in department configuration to enable pending cops per department, including cops added up to a specific version (e.g. Style: NewCops: '1.19'). ([@koic][])

#9373: Support autocorrection for tab indentation in Layout/IndentationWidth and Style/ClassAndModuleChildren. ([@ioquatix][], [@koic][])

Bug fixes

#15257: Fix a false negative for Lint/ToEnumArguments when explicit extra keyword arguments are passed (e.g. def m(x:); to_enum(:m, x: x, y: 1); end), which raises ArgumentError when the enumerator is used. ([@RedZapdos123][])

#15452: Fix a false positive for Layout/HashAlignment when using EnforcedHashRocketStyle: table and a hash key spans multiple lines. ([@dduugg][])

#12269: Fix a false positive for Lint/UselessAssignment with modifier conditions. ([@bbatsov][])

#13786: Fix a false positive for Lint/Void with setter methods. ([@bbatsov][])

#15507: Fix a false positive for Naming/VariableNumber when using an empty symbol hash key. ([@koic][])

#15284: Fix a false positive for Style/MutableConstant with Data.define. ([@bbatsov][])

#15483: Fix a false positive for Style/MissingRespondToMissing when respond_to_missing? is defined in a reopening of the class and UseProjectIndex is enabled. ([@bbatsov][])

#15500: Fix an error for Lint/LiteralAsCondition when a literal condition has an empty branch. ([@koic][])

#15499: Fix an error for Lint/UselessRuby2Keywords when ruby2_keywords is used with a symbol but no method definition is found. ([@koic][])

#15453: Fix an error for Metrics/MethodLength when a method contains a heredoc and __ENCODING__. ([@koic][])

#15442: Fix an error for Style/ArrayIntersect cop when the block-based check calls member?/include? without an explicit receiver. ([@dduugg][])

#15434: Fix an error for Style/NegativeArrayIndex cop. ([@viralpraxis][])

#15469: Fix an error for Style/RedundantFormat when a format string uses a positional argument number beyond the 64-bit range. ([@koic][])

#15454: Fix an error for Style/RedundantFormat when the argument for a positional variable width is missing. ([@koic][])

#15298: Fix an incorrect autocorrect for Lint/LiteralInInterpolation. ([@bbatsov][])

#15515: Fix an incorrect autocorrect for Style/ArrayIntersect when using safe navigation none? with a block. ([@koic][])

#15364: Fix an incorrect autocorrect for Style/MultipleComparison that dropped an allowed method comparison appearing between the compared values. ([@bbatsov][])

#15367: Fix an incorrect autocorrect for Style/RedundantFileExtensionInRequire that produced invalid Ruby when a backslash preceded the .rb extension. ([@bbatsov][])

#12017: Fix Lint/Void to no longer autocorrect a constant used in a void context, since removing it can change behavior through constant autoloading side effects. ([@bbatsov][])

#14797: Avoid cache writes during server checks. ([@sjh9714][])

#15484: Fix false negatives for Lint/InheritException when Exception is inherited indirectly through a project class (UseProjectIndex). ([@bbatsov][])

#15357: Fix a false negative for Lint/AmbiguousAssignment when using attribute or index assignment. ([@sngsmz][])

#9571: Fix false negatives in Layout/ClassStructure when class body elements are wrapped in begin blocks. ([@koic][])

#9570: Fix false negatives in Layout/ClassStructure when using private_class_method or public_class_method def modifiers. ([@koic][])

#15438: Fix false positives in Style/ArrayIntersect when the receiver of include? in a block is not an array literal. ([@koic][])

#15445: Fix false positives in Style/MultilineIfThen when using the Prism parser engine and an elsif without then follows a branch using then with a body on the same line. ([@koic][])

#15058: Fix false positives in Lint/DuplicateMethods for anonymous classes (Class.new) passed as arguments to the same named-receiver method call (e.g. T.cast). Each Class.new block is an independent class, so methods defined in different blocks should not be treated as duplicates. ([@rafaelfranca][])

#15486: Fix false negatives for Style/RedundantConstantBase inside namespaces when the constant provably resolves identically without :: (UseProjectIndex). ([@bbatsov][])

#15505: Fix incompatible autocorrect between Style/Lambda and Style/SymbolProc producing a syntax error like ->(x)(&:method) when both cops run on lambda { |x| x.method }. ([@koic][])

#15481: Fix cross-file offenses depending on which files are inspected: the project index now always covers the whole project (UseProjectIndex). ([@bbatsov][])

#13794: Fix Layout/LineLength autocorrection for endless methods with block bodies. ([@hervetatche][])

#15462: Fix an error for Lint/ConstantReassignment when a built-in constant name is assigned and UseProjectIndex is enabled. ([@bbatsov][])

... (truncated)

Commits

65854e6 Cut 1.89
f5dbd74 Update Changelog
2f96cd7 Add new Lint/NameTypo cop
9a91e2b Promote the resolved-ancestry guard to ProjectIndexHelp
e917b65 Merge pull request #15522 from joklek-vinted/fix/mise-toml-with-single-quotes
619e3d2 Fix Ruby version detection from mise.toml with single quotes
7999d1a [Fix #15501] Improve Style/RedundantLineContinuation performance on adjacen...
63d9361 Advertise executeCommandProvider in the language server
893a02f Cache the LSP project index across requests
3b9755f Merge pull request #15516 from koic/fix_a_flaky_line_length_spec_timeout_on_j...
Additional commits viewable in compare view

Updates scout_apm from 6.2.0 to 6.2.1

Changelog

Sourced from scout_apm's changelog.

6.2.1

Fix SystemStackError with grape >= 3.3.0 by falling back to prepend instrumentation when Grape owns Endpoint#run itself (#624)

Fix a GraphQL layer leak where an unhandled exception skipping end_execute_field could leave stale layers on the request (#626)

Honor SCOUT_LOG_LEVEL during agent bootstrap instead of always logging at the default level (#628)

Use HEROKU_BUILD_COMMIT for Heroku git revision detection, since HEROKU_SLUG_COMMIT is deprecated (#625)

Commits

46c7c2f Version bump 6.2.1 (#629)
4e60f5f Use prepend with grape >= 3.3.0 (#624)
0f2e303 Honor log level during bootstrap (#628)
f630d75 Fix GraphQL layer leak when unhandled exceptions skip end_execute_field (#626)
a9c2295 Use HEROKU_BUILD_COMMIT for Heroku git revision detection (#625)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ruby-deps group with 4 updates: [icalendar](https://github.com/icalendar/icalendar), [overcommit](https://github.com/sds/overcommit), [rubocop](https://github.com/rubocop/rubocop) and [scout_apm](https://github.com/scoutapp/scout_apm_ruby). Updates `icalendar` from 2.12.3 to 2.12.4 - [Changelog](https://github.com/icalendar/icalendar/blob/main/CHANGELOG.md) - [Commits](icalendar/icalendar@v2.12.3...v2.12.4) Updates `overcommit` from 0.71.0 to 0.72.0 - [Release notes](https://github.com/sds/overcommit/releases) - [Changelog](https://github.com/sds/overcommit/blob/main/CHANGELOG.md) - [Commits](sds/overcommit@v0.71.0...v0.72.0) Updates `rubocop` from 1.88.2 to 1.89.0 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.88.2...v1.89.0) Updates `scout_apm` from 6.2.0 to 6.2.1 - [Changelog](https://github.com/scoutapp/scout_apm_ruby/blob/master/CHANGELOG.markdown) - [Commits](scoutapp/scout_apm_ruby@v6.2.0...v6.2.1) --- updated-dependencies: - dependency-name: icalendar dependency-version: 2.12.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ruby-deps - dependency-name: overcommit dependency-version: 0.72.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ruby-deps - dependency-name: rubocop dependency-version: 1.89.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: ruby-deps - dependency-name: scout_apm dependency-version: 6.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ruby-deps ... Signed-off-by: dependabot[bot] <support@github.com>

mroderick

Dependency Upgrade Review: ruby-deps group (4 gems)

PR Scope

Dependency-only — only Gemfile.lock changed.

Package	From	To	Risk
icalendar	2.12.3	2.12.4	Low
overcommit	0.71.0	0.72.0	Low
rubocop	1.88.2	1.89.0	Low
scout_apm	6.2.0	6.2.1	Low

Changes in Dependencies

icalendar: TEXT unescape bug fix (inverse of value_ical). Patch release.
overcommit: Dev-only git hook manager. Fixes for Solargraph regexp, Flay hook crash, linked worktrees, and REXML CVE patch.
rubocop: Dev-only linter. New cops and many bug fixes. The repo uses NewCops: disable, so new cops won't affect CI.
scout_apm: Production APM agent. Fixes SystemStackError with Grape >= 3.3.0, GraphQL layer leak, SCOUT_LOG_LEVEL bootstrap issue, and Heroku revision detection. This app doesn't use Grape or GraphQL.

Usage in Repository

icalendar — Used in WorkshopCalendar and Services::EventCalendar to generate .ics calendar attachments for workshop/event invitation emails. Uses Icalendar::Calendar, Icalendar::Values::DateTime, calendar.to_ical, and event property setters.
overcommit — Dev dependency, not loaded at runtime.
rubocop — Dev dependency for linting. Configured with NewCops: disable.
scout_apm — Production APM gem that auto-instruments; no direct application code references.

Compatibility Assessment

Compatible. All upgrades are patch or minor releases focused on bug fixes and internal improvements. None affect APIs this codebase uses.

Test Coverage

Good coverage for WorkshopCalendar (spec/serializers/workshop_calendar_spec.rb), which validates .ical output format and event properties. The icalendar change is a TEXT unescape fix — unlikely to affect the generated calendar output, and existing tests would catch regressions.

Confidence Rating

High — Changes are clearly documented, no used APIs are affected, new RuboCop cops are disabled by config, and the APM fixes target frameworks this app doesn't use.

dependabot Bot added dependencies ruby Pull requests that update Ruby code labels Aug 13, 2026

mroderick approved these changes Aug 16, 2026

View reviewed changes

mroderick merged commit 6f7b85a into master Aug 16, 2026
10 checks passed

mroderick deleted the dependabot/bundler/ruby-deps-29a1517584 branch August 16, 2026 15:52

Navigation Menu

Uh oh!

Uh oh!

chore(deps): bump the ruby-deps group with 4 updates - #2807

chore(deps): bump the ruby-deps group with 4 updates#2807
mroderick merged 1 commit into
masterfrom
dependabot/bundler/ruby-deps-29a1517584

dependabot Bot commented on behalf of github Aug 13, 2026

Uh oh!

mroderick left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 13, 2026

2.12.4 - 2026-07-31

0.72.0

What's Changed

New Contributors

0.72.0

RuboCop v1.89.0

New features

Bug fixes

1.89.0 (2026-08-04)

New features

Bug fixes

6.2.1

Uh oh!

mroderick left a comment

Choose a reason for hiding this comment

Dependency Upgrade Review: ruby-deps group (4 gems)

PR Scope

Changes in Dependencies

Usage in Repository

Compatibility Assessment

Test Coverage

Confidence Rating

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant