chore(deps): bump the ruby group with 3 updates

[dependabot]

Bumps the ruby group with 3 updates: net-http, rss and zeitwerk.

Updates net-http from 0.8.0 to 0.9.1

Release notes

Sourced from net-http's releases.

v0.9.1

What's Changed

• Raise Net::OpenTimeout when TCPSocket.open raises IO::TimeoutError. by @​shioimm in ruby/net-http#263
• Freeze more constants for Ractor compatibility by @​rhenium in ruby/net-http#256

New Contributors

• @​shioimm made their first contribution in ruby/net-http#263

Full Changelog: ruby/net-http@v0.9.0...v0.9.1

v0.9.0

What's Changed

• open: Never call Timeout.timeout in rescue clause by @​osyoyu in ruby/net-http#250
• Fixed by misspell -w -error -source=text by @​hsbt in ruby/net-http#254
• Check whether TCPSocket#initialize supports open_timeout once and without exceptions by @​eregon in ruby/net-http#252
• Refactor HTTPS tests by @​rhenium in ruby/net-http#255

New Contributors

• @​eregon made their first contribution in ruby/net-http#252

Full Changelog: ruby/net-http@v0.8.0...v0.9.0

Commits

• 8cee86e v0.9.1
• 7697832 Merge pull request #256 from rhenium/ky/freeze-more-constants
• ce9ac47 Merge pull request #263 from shioimm/catch-ETIMEDOUT-or-IOTimeoutError
• f64109e Raise Net::OpenTimeout when TCPSocket.open raises IO::TimeoutError.
• 3ccf0c8 v0.9.0
• e8e37bb Merge pull request #257 from ruby/dependabot/github_actions/step-security/har...
• f4b30da Bump step-security/harden-runner from 2.13.3 to 2.14.0
• 836ad70 Merge pull request #255 from rhenium/ky/refactor-https-tests
• f24b3b3 Freeze more constants for Ractor compatibility
• 35c1745 Refactor HTTPS tests
• Additional commits viewable in compare view

Updates rss from 0.3.1 to 0.3.2

Release notes

Sourced from rss's releases.

rss 0.3.2 - 2025-12-19

Improvements

• Updated documents.

  • GH-59
  • Patch by 1s22s1.

• Added support for Ruby 4.0.0.

  • GH-62
  • Patch by Taketo Takashima.

Thanks

• 1s22s1
• Taketo Takashima

Changelog

Sourced from rss's changelog.

0.3.2 - 2025-12-19

Improvements

• Updated documents.

  • GH-59
  • Patch by 1s22s1.

• Added support for Ruby 4.0.0.

  • GH-62
  • Patch by Taketo Takashima.

Thanks

• 1s22s1
• Taketo Takashima

Commits

• 29c200c Add 0.3.2 entry
• 32d7ff2 Bump actions/checkout from 5 to 6 (#63)
• 5558fec Use cgi/escape instead of cgi/util (#62)
• c51cd1d Bump actions/checkout from 4 to 5 (#60)
• 28a4b6a Simplify sample code (#59)
• 8a5b056 ci rexml: use separated cache
• f31137a ci rexml: add a workflow to test unreleased REXML periodically
• 8c5029e Bump version
• See full diff in compare view

Updates zeitwerk from 2.7.3 to 2.7.4

Changelog

Sourced from zeitwerk's changelog.

2.7.4 (16 Dec 2025)

• Loaders have to manage disjoint source trees. Therefore, when a root directory is configured Zeitwerk ensures it is not already managed by some other loader. The performance of this validation has been improved.

  Thanks to @​ngan for sharing some benchmarks that led to revise this logic.

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[mergify]

Merge Queue Status

✅ The pull request has been merged at 70ff164

This pull request spent 1 minute 51 seconds in the queue, including 1 minute 42 seconds running CI.
The checks were run on draft #1027.

Required conditions to merge

• author=dependabot[bot]
  • chore(deps): bump the ruby group with 3 updates #1025
• base=main
• status-success=build