Skip to content

build(deps): bump the most-gems group with 10 updates #843

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
myronmarston merged 1 commit into from
Sep 16, 2025
Merged

build(deps): bump the most-gems group with 10 updates #843

myronmarston merged 1 commit into from
Sep 16, 2025

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 15, 2025 •
edited
Loading

Bumps the most-gems group with 10 updates:

Package From To
nokogiri 1.18.9 1.18.10
aws-sdk-cloudwatch 1.120.0 1.121.0
async 2.31.0 2.32.0
aws-partitions 1.1156.0 1.1160.0
google-protobuf 4.32.0 4.32.1
metrics 0.14.0 0.15.0
prism 1.4.0 1.5.1
regexp_parser 2.11.2 2.11.3
rexml 3.4.3 3.4.4
traces 0.18.1 0.18.2

Updates nokogiri from 1.18.9 to 1.18.10

Release notes

Sourced from nokogiri's releases.

v1.18.10 / 2025-09-15

Dependencies

  • [CRuby] Vendored libxml2 is updated to v2.13.9. Note that the security fixes published in v2.13.9 were already present in Nokogiri v1.18.9.
  • [CRuby] [Windows and MacOS] Vendored libiconv is updated to v1.18
7fb87235d729c74a2be635376d82b1d459230cc17c50300f8e4fcaabc6195344  nokogiri-1.18.10-aarch64-linux-gnu.gem
7e74e58314297cc8a8f1b533f7212d1999dbe2639a9ee6d97b483ea2acc18944  nokogiri-1.18.10-aarch64-linux-musl.gem
51f4f25ab5d5ba1012d6b16aad96b840a10b067b93f35af6a55a2c104a7ee322  nokogiri-1.18.10-arm-linux-gnu.gem
1c6ea754e51cecc85c30ee8ab1e6aa4ce6b6e134d01717e9290e79374a9e00aa  nokogiri-1.18.10-arm-linux-musl.gem
c2b0de30770f50b92c9323fa34a4e1cf5a0af322afcacd239cd66ee1c1b22c85  nokogiri-1.18.10-arm64-darwin.gem
cd431a09c45d84a2f870ba0b7e8f571199b3727d530f2b4888a73639f76510b5  nokogiri-1.18.10-java.gem
64f40d4a41af9f7f83a4e236ad0cf8cca621b97e31f727b1bebdae565a653104  nokogiri-1.18.10-x64-mingw-ucrt.gem
536e74bed6db2b5076769cab5e5f5af0cd1dccbbd75f1b3e1fa69d1f5c2d79e2  nokogiri-1.18.10-x86_64-darwin.gem
ff5ba26ba2dbce5c04b9ea200777fd225061d7a3930548806f31db907e500f72  nokogiri-1.18.10-x86_64-linux-gnu.gem
0651fccf8c2ebbc2475c8b1dfd7ccac3a0a6d09f8a41b72db8c21808cb483385  nokogiri-1.18.10-x86_64-linux-musl.gem
d5cc0731008aa3b3a87b361203ea3d19b2069628cb55e46ac7d84a0445e69cc1  nokogiri-1.18.10.gem
Changelog

Sourced from nokogiri's changelog.

v1.18.10 / 2025-09-15

Dependencies

  • [CRuby] Vendored libxml2 is updated to v2.13.9. Note that the security fixes published in v2.13.9 were already present in Nokogiri v1.18.9.
  • [CRuby] [Windows and MacOS] Vendored libiconv is updated to v1.18
Commits
  • 6803740 version bump to v1.18.10
  • 93337de dep: bump vendored libxml2 to v2.13.9 (#3555)
  • 15dde17 ci: work around repeated bundler deadlocks
  • 9906071 dep: bump vendored libxml2 to v2.13.9
  • adf72e3 [v1.18.x] backport libiconv upgrade to v1.18 (#3550)
  • 92cab09 dep: update vendored libiconv to 1.18
  • f1c5ea8 Use mirror site to download libiconv
  • dcd2721 ci: stop testing Ruby 3.1 windows source builds
  • cf856e6 ci: fix the aarch64 segfault by using a more modern qemu
  • 6d77443 Fix errors building Ruby 3.1 on windows
  • Additional commits viewable in compare view

Updates aws-sdk-cloudwatch from 1.120.0 to 1.121.0

Changelog

Sourced from aws-sdk-cloudwatch's changelog.

1.121.0 (2025-09-09)

  • Feature - Added a new API - DescribeAlarmContributors API, to retrieve alarm contributors in ALARM state. Added support in DescribeAlarmHistory API to query alarm contributor history
Commits

Updates async from 2.31.0 to 2.32.0

Changelog

Sourced from async's changelog.

v2.32.0

  • Introduce Queue#waiting_count and PriorityQueue#waiting_count. Generally for statistics/testing purposes only.
Commits
  • f9f49c2 Bump minor version.
  • b0491bf Introduce Queue#waiting_count and PriorityQueue#waiting_count.
  • See full diff in compare view

Updates aws-partitions from 1.1156.0 to 1.1160.0

Changelog

Sourced from aws-partitions's changelog.

1.1160.0 (2025-09-15)

  • Feature - Updated the partitions source data the determines the AWS service regions and endpoints.

1.1159.0 (2025-09-11)

  • Feature - Updated the partitions source data the determines the AWS service regions and endpoints.

1.1158.0 (2025-09-10)

  • Feature - Updated the partitions source data the determines the AWS service regions and endpoints.

1.1157.0 (2025-09-09)

  • Feature - Updated the partitions source data the determines the AWS service regions and endpoints.
Commits

Updates google-protobuf from 4.32.0 to 4.32.1

Commits

Updates metrics from 0.14.0 to 0.15.0

Changelog

Sourced from metrics's changelog.

v0.15.0

  • Add into = nil parameter to Metrics::Tags.normalize(tags, into = nil) to allow reusing an existing array.
Commits

Updates prism from 1.4.0 to 1.5.1

Release notes

Sourced from prism's releases.

v1.5.1

Changed

  • Revert of a bug introduced with static literal flags on interpolated strings.

v1.5.0

Added

  • Add Prism::Translation::ParserCurrent.
  • Add Integer::to_u32_digits for the Rust API.
  • Add pm_comment_type_t field for the Rust API.
  • Support leading logical operators for CRuby 3.5+.

Changed

  • Mark Prism as ractor-safe.
  • Enforce a minimum version for the parser translation layer.
  • Many fixes to the parser translation layer.
  • Accept a newline after the defined? keyword.
  • Reject true && not true.
  • Make it = it assign nil to match parse.y behavior [Bug #21139].
  • Some fixes to the ruby parser translation layer.
  • Ensure call nodes have the correct ending location.
  • Reject foo && return bar.
Changelog

Sourced from prism's changelog.

[1.5.1] - 2025-09-13

Changed

  • Revert of a bug introduced with static literal flags on interpolated strings.

[1.5.0] - 2025-09-12

Added

  • Add Prism::Translation::ParserCurrent.
  • Add Integer::to_u32_digits for the Rust API.
  • Add pm_comment_type_t field for the Rust API.
  • Support leading logical operators for CRuby 3.5+.

Changed

  • Mark Prism as ractor-safe.
  • Enforce a minimum version for the parser translation layer.
  • Many fixes to the parser translation layer.
  • Accept a newline after the defined? keyword.
  • Reject true && not true.
  • Make it = it assign nil to match parse.y behavior [Bug #21139].
  • Some fixes to the ruby parser translation layer.
  • Ensure call nodes have the correct ending location.
  • Reject foo && return bar.
Commits

Updates regexp_parser from 2.11.2 to 2.11.3

Changelog

Sourced from regexp_parser's changelog.

[2.11.3] - 2025-09-15 - Janosch Müller

Fixed

  • correctly emit backslash-escaped UTF8 characters in character classes as one token (#104)
Commits
  • c5094a8 Release v2.11.3
  • f3c3a79 Clean up ragel out put some more
  • 6993fab Deduplicate transition
  • a611c88 Merge pull request #106 from Earlopain/fix-utf8-escapes-in-sets
  • 1500106 Merge pull request #105 from Earlopain/ragel-rake-buildin-command
  • 2efa904 Fix UTF8 escapes in character classes
  • fe4c477 Fix bundle exec rake install when command is buildin
  • See full diff in compare view

Updates rexml from 3.4.3 to 3.4.4

Release notes

Sourced from rexml's releases.

REXML 3.4.4 - 2025-09-10

Improvement

  • Accept REXML::Document.new("") for backward compatibility
    • GH-296
    • GH-295
    • Patch by NAITOH Jun
    • Reported by Joe Rafaniello

Thanks

  • NAITOH Jun

  • Joe Rafaniello

Changelog

Sourced from rexml's changelog.

3.4.4 - 2025-09-10 {#version-3-4-4}

Improvement

  • Accept REXML::Document.new("") for backward compatibility
    • GH-296
    • GH-295
    • Patch by NAITOH Jun
    • Reported by Joe Rafaniello

Thanks

  • NAITOH Jun

  • Joe Rafaniello

Commits

Updates traces from 0.18.1 to 0.18.2

Changelog

Sourced from traces's changelog.

Releases

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Sep 15, 2025
@dependabot dependabot bot requested a review from ayousufi as a code owner September 15, 2025 20:47
@dependabot dependabot bot added the ruby Pull requests that update Ruby code label Sep 15, 2025
@myronmarston
Copy link
Collaborator

myronmarston commented Sep 15, 2025

@dependabot recreate

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 15, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@myronmarston
Copy link
Collaborator

myronmarston commented Sep 15, 2025

@dependabot rebase

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 15, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

1 similar comment
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 15, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@myronmarston
Copy link
Collaborator

myronmarston commented Sep 15, 2025

@dependabot recreate

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 15, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@myronmarston
Copy link
Collaborator

myronmarston commented Sep 16, 2025

@dependabot recreate

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 16, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@myronmarston
Copy link
Collaborator

myronmarston commented Sep 16, 2025

@dependabot recreate

@dependabot
build(deps): bump the most-gems group with 10 updates
5b64460 
Bumps the most-gems group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [nokogiri](https://github.com/sparklemotion/nokogiri) | `1.18.9` | `1.18.10` |
| [aws-sdk-cloudwatch](https://github.com/aws/aws-sdk-ruby) | `1.120.0` | `1.121.0` |
| [async](https://github.com/socketry/async) | `2.31.0` | `2.32.0` |
| [aws-partitions](https://github.com/aws/aws-sdk-ruby) | `1.1156.0` | `1.1160.0` |
| [google-protobuf](https://github.com/protocolbuffers/protobuf) | `4.32.0` | `4.32.1` |
| [metrics](https://github.com/socketry/metrics) | `0.14.0` | `0.15.0` |
| [prism](https://github.com/ruby/prism) | `1.4.0` | `1.5.1` |
| [regexp_parser](https://github.com/ammar/regexp_parser) | `2.11.2` | `2.11.3` |
| [rexml](https://github.com/ruby/rexml) | `3.4.3` | `3.4.4` |
| [traces](https://github.com/socketry/traces) | `0.18.1` | `0.18.2` |


Updates `nokogiri` from 1.18.9 to 1.18.10
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](sparklemotion/nokogiri@v1.18.9...v1.18.10)

Updates `aws-sdk-cloudwatch` from 1.120.0 to 1.121.0
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-cloudwatch/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `async` from 2.31.0 to 2.32.0
- [Release notes](https://github.com/socketry/async/releases)
- [Changelog](https://github.com/socketry/async/blob/main/releases.md)
- [Commits](socketry/async@v2.31.0...v2.32.0)

Updates `aws-partitions` from 1.1156.0 to 1.1160.0
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-partitions/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `google-protobuf` from 4.32.0 to 4.32.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `metrics` from 0.14.0 to 0.15.0
- [Release notes](https://github.com/socketry/metrics/releases)
- [Changelog](https://github.com/socketry/metrics/blob/main/releases.md)
- [Commits](socketry/metrics@v0.14.0...v0.15.0)

Updates `prism` from 1.4.0 to 1.5.1
- [Release notes](https://github.com/ruby/prism/releases)
- [Changelog](https://github.com/ruby/prism/blob/main/CHANGELOG.md)
- [Commits](ruby/prism@v1.4.0...v1.5.1)

Updates `regexp_parser` from 2.11.2 to 2.11.3
- [Changelog](https://github.com/ammar/regexp_parser/blob/master/CHANGELOG.md)
- [Commits](ammar/regexp_parser@v2.11.2...v2.11.3)

Updates `rexml` from 3.4.3 to 3.4.4
- [Release notes](https://github.com/ruby/rexml/releases)
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md)
- [Commits](ruby/rexml@v3.4.3...v3.4.4)

Updates `traces` from 0.18.1 to 0.18.2
- [Changelog](https://github.com/socketry/traces/blob/main/releases.md)
- [Commits](socketry/traces@v0.18.1...v0.18.2)

---
updated-dependencies:
- dependency-name: nokogiri
  dependency-version: 1.18.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: most-gems
- dependency-name: aws-sdk-cloudwatch
  dependency-version: 1.121.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: most-gems
- dependency-name: async
  dependency-version: 2.32.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: most-gems
- dependency-name: aws-partitions
  dependency-version: 1.1160.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: most-gems
- dependency-name: google-protobuf
  dependency-version: 4.32.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: most-gems
- dependency-name: metrics
  dependency-version: 0.15.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: most-gems
- dependency-name: prism
  dependency-version: 1.5.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: most-gems
- dependency-name: regexp_parser
  dependency-version: 2.11.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: most-gems
- dependency-name: rexml
  dependency-version: 3.4.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: most-gems
- dependency-name: traces
  dependency-version: 0.18.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: most-gems
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/bundler/most-gems-6f33c13b92 branch from 3bf9eb2 to 5b64460 Compare September 16, 2025 15:54
@myronmarston myronmarston merged commit d79ff2c into main Sep 16, 2025
14 checks passed
@myronmarston myronmarston deleted the dependabot/bundler/most-gems-6f33c13b92 branch September 16, 2025 20:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@myronmarston myronmarston myronmarston approved these changes

@ayousufi ayousufi Awaiting requested review from ayousufi ayousufi is a code owner

@BrianSigafoos-SQ BrianSigafoos-SQ Awaiting requested review from BrianSigafoos-SQ BrianSigafoos-SQ is a code owner

@bsorbo bsorbo Awaiting requested review from bsorbo bsorbo is a code owner

@jwils jwils Awaiting requested review from jwils jwils is a code owner

@jwondrusch jwondrusch Awaiting requested review from jwondrusch jwondrusch is a code owner

@lancethomps lancethomps Awaiting requested review from lancethomps lancethomps is a code owner

@nicolewoch nicolewoch Awaiting requested review from nicolewoch nicolewoch is a code owner

@thomasmahoney thomasmahoney Awaiting requested review from thomasmahoney thomasmahoney is a code owner

@zachbutler-squareup zachbutler-squareup Awaiting requested review from zachbutler-squareup

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@myronmarston