chore(deps): bump the ruby-deps group with 5 updates

[dependabot]

Bumps the ruby-deps group with 5 updates:

Package	From	To
pagy	43.5.6	43.6.0
tzinfo-data	1.2026.2	1.2026.3
commonmarker	2.8.3	2.9.0
haml_lint	0.75.0	0.76.0
rubocop-rails	2.35.5	2.36.0

Updates pagy from 43.5.6 to 43.6.0

Release notes

Sourced from pagy's releases.

Version 43.6.0

Changes in 43.6.0

• Add the max_result_window option to the searchkick and elasticsearch_rails paginators to get an accurate count (#910)

CHANGELOG

Version 43

We needed a leap version to unequivocally signal that it's not just a major version: it's a complete redesign of the legacy code at all levels, usage and API included.

Why 43? Because it's exactly one step beyond "The answer to the ultimate question of life, the Universe, and everything." 😉

Improvements

This version introduces several enhancements, such as new :countish and :keynav_js paginators and improved automation and configuration processes, reducing setup requirements by 99%. The update also includes a simpler API and new interactive development tools, making it a comprehensive upgrade from previous versions.

• New :countish Paginator
  • Faster than OFFSET and supporting the full UI
• New Keynav Pagination
  • The pagy-exclusive technique using the fastest keyset pagination alongside all frontend helpers.
• New interactive dev-tools
  • New PagyWand to integrate the pagy CSS with your app themes.
  • New Pagy AI available right inside your own app.
• Intelligent automation
  • Configuration requirements reduced by 99%.
  • Simplified JavaScript setup.
  • Automatic I18n loading.
• Simpler API
  • You solely need the pagy method and the @​pagy instance to paginate any collection and use any navigation tag and helper.
  • Methods are autoloaded only if used, and consume no memory otherwise.
  • Methods have narrower scopes and can be overridden without deep knowledge.
• New documentation
  • Very concise, straightforward, and easy to navigate and understand.

Upgrade to 43

See the Upgrade Guide

Changelog

Sourced from pagy's changelog.

Version 43.6.0

• Add the max_result_window option to the searchkick and elasticsearch_rails paginators to get an accurate count (#910)

Commits

• e9d987c Merge branch 'dev'
• b37f359 Version 43.6.0
• 728fec5 💎 Add the max_result_window option to the searchkick and elasticsearch_rails ...
• cc37e6d Update gems and packages
• e3eff8f Update README.md
• cb047a7 Bump actions/checkout from 6 to 7 (#909)
• 63a6f3f Improve docs and comments
• 576c524 Update gems and packages
• See full diff in compare view

Updates tzinfo-data from 1.2026.2 to 1.2026.3

Release notes

Sourced from tzinfo-data's releases.

v1.2026.3

Based on version 2026c of the IANA Time Zone Database (https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/message/NVHSX2PAQIT44U5FCCEVNJJYXQMMTJSA/).

Commits

• a826afe Update to tzdata version 2026c.
• See full diff in compare view

Updates commonmarker from 2.8.3 to 2.9.0

Release notes

Sourced from commonmarker's releases.

v2.9.0

What's Changed

• Fix i686 with u32 parsing hack by @​kivikakk in gjtorikian/commonmarker#471
• feat: Upgrade to comrak 0.54 with math_latex + alert_style options, and changed header_ids by @​gjtorikian in gjtorikian/commonmarker#472
• [skip test] Release v2.9.0 by @​github-actions[bot] in gjtorikian/commonmarker#474

Full Changelog: gjtorikian/commonmarker@v2.8.3...v2.9.0

Changelog

Sourced from commonmarker's changelog.

[v2.9.0] - 13-07-2026

What's Changed

• Fix i686 with u32 parsing hack by @​kivikakk in gjtorikian/commonmarker#471
• feat: Upgrade to comrak 0.54 with math_latex + alert_style options, and changed header_ids by @​gjtorikian in gjtorikian/commonmarker#472

⚠️ The heading anchor markup changed (from upstream). The id now lives on the heading element and the anchor moved to the end with aria-label + data-heading-content, replacing the leading aria-hidden link. CSS/JS targeting the old markup will be affected. See kivikakk/comrak#808 for more information.

Full Changelog: gjtorikian/commonmarker@v2.8.3...v2.9.0

Commits

• 2fc7731 Merge pull request #474 from gjtorikian/release/v2.9.0
• 29d0c80 Update CHANGELOG with heading anchor markup changes
• 177d592 Update CHANGELOG.md
• 3ac1e23 [skip test] update changelog
• cc220cb Bump version to 2.9.0
• 027aa7a Merge pull request #472 from gjtorikian/comrak-54
• 729a867 feat: Add math_latex and alert_style options
• cc7c850 build(deps): Bump comrak from 0.53 to 0.54
• aa268bd Merge pull request #471 from gjtorikian/push-wnxmumqvttrt
• 8b63464 fix i686 with u32 parsing hack.
• See full diff in compare view

Updates haml_lint from 0.75.0 to 0.76.0

Release notes

Sourced from haml_lint's releases.

0.76.0

What's Changed

• Add unsafe autocorrections by @​wilfison in sds/haml-lint#675
• Add corrected/correctable flags to offense output by @​wilfison in sds/haml-lint#676

Full Changelog: sds/haml-lint@v0.75.0...v0.76.0

Changelog

Sourced from haml_lint's changelog.

0.76.0

• Add unsafe auto-correction (run only under -A/--auto-correct-all) to UnnecessaryStringOutput, HtmlAttributes, ConsecutiveSilentScripts, and AlignmentTabs
• Fix AlignmentTabs never running, as it was missing its LinterRegistry registration
• Fix ConsecutiveSilentScripts reporting overlapping duplicate lints for a run of more than max_consecutive + 1 scripts
• Add corrected and correctable flags to each offense in the json/hash reporter output, mirroring RuboCop's JSON format. correctable reports whether an offense could be auto-corrected; for RuboCop offenses it uses RuboCop's own per-offense correctability.
• Mark correctable-but-uncorrected lints with [Correctable] in the default (text) reporter.

Commits

• 738a2d2 Cut version 0.76.0 (#677)
• 1cecd28 Add corrected/correctable flags to offense output (#676)
• 7cbc352 Add unsafe autocorrections (#675)
• 6c57679 Bump ruby/setup-ruby from 1.314.0 to 1.316.0 (#673)
• ee6a234 Update rubocop requirement from 1.88.0 to 1.88.1 (#674)
• See full diff in compare view

Updates rubocop-rails from 2.35.5 to 2.36.0

Release notes

Sourced from rubocop-rails's releases.

RuboCop Rails v2.36.0

Bug fixes

• #1647: Fix a false negative for Rails/EagerEvaluationLogMessage when the interpolated string is passed to Rails.logger.debug as the sole body of an enclosing block such as each or tap. (@​conwayje)
• #1646: Fix a false negative for Rails/ReversibleMigration when using remove_index without a column inside a change_table block. (@​ilianah)
• #1642: Fix a false negative for Rails/SafeNavigation when using try/try! with a symbol to proc such as foo.try(&:bar). (@​koic)
• #1599: Fix an incorrect autocorrect for Rails/LinkToBlank when Style/TrailingCommaInArguments with EnforcedStyleForMultiline: consistent_comma adds a trailing comma, which produced a duplicate comma. (@​koic)
• #1619: Fix MigratedSchemaVersion setting so it works for all cops. (@​lovro-bikic)

Changes

• #1641: Fix false negatives in Rails/SafeNavigation when using try/try! with operator methods such as [], []=, and ==. (@​koic)

Changelog

Sourced from rubocop-rails's changelog.

2.36.0 (2026-07-11)

Bug fixes

• #1647: Fix a false negative for Rails/EagerEvaluationLogMessage when the interpolated string is passed to Rails.logger.debug as the sole body of an enclosing block such as each or tap. ([@​conwayje][])
• #1646: Fix a false negative for Rails/ReversibleMigration when using remove_index without a column inside a change_table block. ([@​ilianah][])
• #1642: Fix a false negative for Rails/SafeNavigation when using try/try! with a symbol to proc such as foo.try(&:bar). ([@​koic][])
• #1599: Fix an incorrect autocorrect for Rails/LinkToBlank when Style/TrailingCommaInArguments with EnforcedStyleForMultiline: consistent_comma adds a trailing comma, which produced a duplicate comma. ([@​koic][])
• #1619: Fix MigratedSchemaVersion setting so it works for all cops. ([@​lovro-bikic][])

Changes

• #1641: Fix false negatives in Rails/SafeNavigation when using try/try! with operator methods such as [], []=, and ==. ([@​koic][])

Commits

• b49bdd2 Cut 2.36.0
• c38ff7c Update Changelog
• 4a723b4 Merge pull request #1619 from lovro-bikic/fix-migration-file-skippable
• 7900fa6 Merge pull request #1647 from conwayje/fix-eager-evaluation-log-message-in-block
• 5409363 [Fix #1647] Fix a false negative for Rails/EagerEvaluationLogMessage
• e55944e Merge pull request #1646 from ilianah/fix-remove-index-reversible-migration-d...
• 08663a3 Fix a false negative for Rails/ReversibleMigration with remove_index oper...
• 1d3c824 Merge pull request #1644 from koic/fix_an_incorrect_autocorrect_for_rails_lin...
• 0a41e88 [Fix #1599] Fix an incorrect autocorrect for Rails/LinkToBlank
• 5b46a5d Merge pull request #1645 from koic/fix_jruby_ci_failure_caused_by_rbs_native_...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions