Skip to content

[pull] master from ruby:master#1078

Merged
pull[bot] merged 8 commits into
turkdevops:masterfrom
ruby:master
Jun 4, 2026
Merged

[pull] master from ruby:master#1078
pull[bot] merged 8 commits into
turkdevops:masterfrom
ruby:master

Conversation

@pull
Copy link
Copy Markdown

@pull pull Bot commented Jun 4, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

hsbt and others added 8 commits June 4, 2026 10:49
Dependabot left the version comment as v6.0.2 on the four lines that
carry a trailing `# zizmor: ignore[artipacked]`, since its comment
rewriter only handles a version comment as the last token on the line.
zizmor flagged the resulting hash/comment mismatch. Update every
checkout pin in .github to the v6.0.3 commit and comment at once.
The inline `# zizmor: ignore[artipacked]` comment is a second trailing
comment on the checkout line, which prevents Dependabot from updating the
version comment. Suppress these findings in .github/zizmor.yml instead so
the pins stay a single comment and Dependabot keeps them in sync.
No need for a separate opcode.
This was likely a bad copy/paste from GuardType; HasType does not affect
control flow at all.
Bumps the github-actions group with 3 updates in the / directory: [necojackarc/auto-request-review](https://github.com/necojackarc/auto-request-review), [github/codeql-action](https://github.com/github/codeql-action) and [taiki-e/install-action](https://github.com/taiki-e/install-action).


Updates `necojackarc/auto-request-review` from 5d3060495e58e9cb41f51de50e808d3135d5374e to 035f049cb68460341ab744f19aa9f31aae685e36
- [Release notes](https://github.com/necojackarc/auto-request-review/releases)
- [Commits](necojackarc/auto-request-review@5d30604...035f049)

Updates `github/codeql-action` from 4.36.0 to 4.36.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@7211b7c...87557b9)

Updates `taiki-e/install-action` from 2.81.1 to 2.81.3
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@e49978b...25435dc)

---
updated-dependencies:
- dependency-name: necojackarc/auto-request-review
  dependency-version: 035f049cb68460341ab744f19aa9f31aae685e36
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: 4.36.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.81.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Keeping up with each version manager's invocation convention is not
worth the maintenance cost. chruby in particular is wrapped as a shell
function and cannot be run as `chruby --version` at all, so the line
always reported a missing version.

ruby/rubygems#9528

ruby/rubygems@85cb212067

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Guards against accidentally reintroducing the removed external tool
version output.

ruby/rubygems@3060a5498a

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@pull pull Bot locked and limited conversation to collaborators Jun 4, 2026
@pull pull Bot added the ⤵️ pull label Jun 4, 2026
@pull pull Bot merged commit 9f6cb11 into turkdevops:master Jun 4, 2026
0 of 2 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants