build(deps-dev): Bump the development-and-testing group across 1 directory with 5 updates by dependabot[bot] · Pull Request #14 · codeforamerica/cfa-eng-cli

dependabot · 2026-07-13T09:56:05Z

Bumps the development-and-testing group with 5 updates in the / directory:

Package	From	To
rubocop	`1.86.1`	`1.88.2`
rubocop-rspec	`3.9.0`	`3.10.2`
rubocop-yard	`1.1.0`	`1.3.0`
ruby-lsp	`0.26.9`	`0.26.10`
simplecov	`0.22.0`	`1.0.0`

Updates rubocop from 1.86.1 to 1.88.2

Release notes

Sourced from rubocop's releases.

RuboCop v1.88.2

Bug fixes

#15417: Fix a false negative for Lint/ToJSON, which did not flag singleton def self.to_json definitions. (@bbatsov)

#15418: Fix a false negative for Lint/UnreachableCode, which only flagged the first statement after a flow-of-control statement instead of every unreachable statement that followed it. (@bbatsov)

#15416: Fix a false negative for Lint/UselessNumericOperation, which only flagged bare method-call receivers and ignored local variables, instance/class/global variables, and constants (e.g. @x + 0, CONST * 1). (@bbatsov)

#15419: Fix a false negative for Lint/Void where safe-navigation calls to nonmutating methods (e.g. x&.sort) were not flagged when CheckForMethodsWithNoSideEffects is enabled. (@bbatsov)

#15421: Fix a false negative for Style/ArrayIntersect with the block form using include? (e.g. array1.any? { |e| array2.include?(e) }), which was only detected for member?. (@bbatsov)

#15420: Fix a false negative for Style/CollectionCompact, which did not flag grep_v(nil)/grep_v(NilClass) on a safe-navigation call (e.g. array&.grep_v(nil)). (@bbatsov)

#15422: Fix a false negative for Style/DefWithParentheses with a single-line definition whose body follows a semicolon (e.g. def foo(); end), where the parentheses can be safely omitted. (@bbatsov)

#15388: Fix a false negative for Style/MixinUsage when including multiple modules in one statement. (@bbatsov)

#15388: Fix a false negative for Style/ModuleFunction when the module body is a single statement. (@bbatsov)

#15388: Fix a false negative for Style/RedundantCurrentDirectoryInPath with double-quoted strings containing interpolation. (@bbatsov)

#15395: Fix a false negative for Style/RedundantHeredocDelimiterQuotes with double-quoted delimiters whose body contains interpolation or escapes. (@bbatsov)

#15409: Fix a false positive for Gemspec/DuplicatedAssignment with multiple specifications. (@bbatsov)

#15403: Fix a false positive for Layout/CommentIndentation with a comment above an inline access modifier (e.g. private def foo) when Layout/AccessModifierIndentation is configured with EnforcedStyle: outdent. (@grk)

#15372: Fix a false positive for Style/InvertibleUnlessCondition with a multi-statement begin condition. (@bbatsov)

#15360: Fix an incorrect autocorrect for Style/ArgumentsForwarding and Style/MethodDefParentheses when autocorrection conflicts while adding parentheses to method definition arguments. (@koic)

#15417: Fix an incorrect autocorrect for Lint/ToJSON that produced invalid Ruby (def to_json(*_args)()) when the method had explicit empty parentheses. (@bbatsov)

#15426: Fix an incorrect autocorrect for Style/MethodCallWithoutArgsParentheses when empty parentheses span multiple lines and the method call has a block. (@koic)

#15328: Fix a false positive for Style/HashConversion with a splat argument, which previously produced an invalid hash literal. (@bbatsov)

#15338: Fix a false positive for Style/HashLookupMethod with safe navigation, where the suggested bracket form would be the unreadable hash&.[](https://github.com/rubocop/rubocop/blob/HEAD/key). (@bbatsov)

#15397: Fix an incorrect autocorrect for Style/IdenticalConditionalBranches that hoisted the moved expression to column zero instead of matching the surrounding indentation. (@bbatsov)

#15372: Fix an incorrect autocorrect for Style/InvertibleUnlessCondition with mixed &&/|| conditions, which lost the required parentheses when inverting. (@bbatsov)

#15428: Fix an incorrect autocorrect for Style/TrivialAccessors when AllowPredicates: false is set and a trivial reader is defined as a predicate class method. (@koic)

#15402: Fix an infinite loop and file corruption for Layout/LineLength with SplitStrings when an over-long string is indented under a multi-line parent. (@bbatsov)

#15384: Fix a false positive and a false negative for Style/MissingRespondToMissing when method_missing is defined at the top level or alongside sibling classes. (@bbatsov)

#15432: Fix false positives in Layout/ElseAlignment when using else within a block that is part of a larger expression. (@koic)

#15423: Fix false positives in Layout/MultilineMethodCallIndentation when a method chain is nested inside a parenthesized argument list or a grouped expression within a hash pair value. (@koic)

#15424: Fix Style/StructInheritance autocorrect dropping leading indentation when class is inside a module or namespace. (@amckinnie)

#15325: Fix Style/DocumentationMethod ignoring AllowedMethods for inline modifier defs. (@bbatsov)

#15369: Fix a false positive for Style/LambdaCall when the argument list contains a comment, which the autocorrect would have dropped. (@bbatsov)

Changes

#15430: Improve performance of offense reporting by not allocating a new source range per offense outside of embedded sources. (@bbatsov)

#15430: Improve investigation performance by dispatching on_new_investigation, on_investigation_end, and on_other_file only to cops that refine them, and by skipping after_* dispatch when no cop needs it. (@bbatsov)

#15430: Improve performance of the per-file cop relevancy check by skipping gem requirement evaluation for cops without gem requirements. (@bbatsov)

#15430: Improve Lint/Debugger performance on code without debugger calls. (@bbatsov)

#15430: Improve autocorrection performance by keeping corrections in memory across inspection iterations and writing each corrected file only once. (@bbatsov)

#15415: Mark Lint/NumericOperationWithConstantResult autocorrect as unsafe because it drops the operands, discarding their side effects and silencing cases where the result is not actually constant (e.g. x / x raises when x is 0). (@bbatsov)

#15430: Improve performance of cops using AllowedPatterns, ForbiddenPatterns, and AllowedMethods by compiling the configured patterns only once. (@bbatsov)

#15430: Improve performance of Style/IfUnlessModifier and other modifier cops on files with many comments or conditionals. (@bbatsov)

RuboCop v1.88.1

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.88.2 (2026-07-08)

Bug fixes

#15417: Fix a false negative for Lint/ToJSON, which did not flag singleton def self.to_json definitions. ([@bbatsov][])

#15418: Fix a false negative for Lint/UnreachableCode, which only flagged the first statement after a flow-of-control statement instead of every unreachable statement that followed it. ([@bbatsov][])

#15416: Fix a false negative for Lint/UselessNumericOperation, which only flagged bare method-call receivers and ignored local variables, instance/class/global variables, and constants (e.g. @x + 0, CONST * 1). ([@bbatsov][])

#15419: Fix a false negative for Lint/Void where safe-navigation calls to nonmutating methods (e.g. x&.sort) were not flagged when CheckForMethodsWithNoSideEffects is enabled. ([@bbatsov][])

#15421: Fix a false negative for Style/ArrayIntersect with the block form using include? (e.g. array1.any? { |e| array2.include?(e) }), which was only detected for member?. ([@bbatsov][])

#15420: Fix a false negative for Style/CollectionCompact, which did not flag grep_v(nil)/grep_v(NilClass) on a safe-navigation call (e.g. array&.grep_v(nil)). ([@bbatsov][])

#15422: Fix a false negative for Style/DefWithParentheses with a single-line definition whose body follows a semicolon (e.g. def foo(); end), where the parentheses can be safely omitted. ([@bbatsov][])

#15388: Fix a false negative for Style/MixinUsage when including multiple modules in one statement. ([@bbatsov][])

#15388: Fix a false negative for Style/ModuleFunction when the module body is a single statement. ([@bbatsov][])

#15388: Fix a false negative for Style/RedundantCurrentDirectoryInPath with double-quoted strings containing interpolation. ([@bbatsov][])

#15395: Fix a false negative for Style/RedundantHeredocDelimiterQuotes with double-quoted delimiters whose body contains interpolation or escapes. ([@bbatsov][])

#15409: Fix a false positive for Gemspec/DuplicatedAssignment with multiple specifications. ([@bbatsov][])

#15403: Fix a false positive for Layout/CommentIndentation with a comment above an inline access modifier (e.g. private def foo) when Layout/AccessModifierIndentation is configured with EnforcedStyle: outdent. ([@grk][])

#15372: Fix a false positive for Style/InvertibleUnlessCondition with a multi-statement begin condition. ([@bbatsov][])

#15360: Fix an incorrect autocorrect for Style/ArgumentsForwarding and Style/MethodDefParentheses when autocorrection conflicts while adding parentheses to method definition arguments. ([@koic][])

#15417: Fix an incorrect autocorrect for Lint/ToJSON that produced invalid Ruby (def to_json(*_args)()) when the method had explicit empty parentheses. ([@bbatsov][])

#15426: Fix an incorrect autocorrect for Style/MethodCallWithoutArgsParentheses when empty parentheses span multiple lines and the method call has a block. ([@koic][])

#15328: Fix a false positive for Style/HashConversion with a splat argument, which previously produced an invalid hash literal. ([@bbatsov][])

#15338: Fix a false positive for Style/HashLookupMethod with safe navigation, where the suggested bracket form would be the unreadable hash&.[](https://github.com/rubocop/rubocop/blob/master/key). ([@bbatsov][])

#15397: Fix an incorrect autocorrect for Style/IdenticalConditionalBranches that hoisted the moved expression to column zero instead of matching the surrounding indentation. ([@bbatsov][])

#15372: Fix an incorrect autocorrect for Style/InvertibleUnlessCondition with mixed &&/|| conditions, which lost the required parentheses when inverting. ([@bbatsov][])

#15428: Fix an incorrect autocorrect for Style/TrivialAccessors when AllowPredicates: false is set and a trivial reader is defined as a predicate class method. ([@koic][])

#15402: Fix an infinite loop and file corruption for Layout/LineLength with SplitStrings when an over-long string is indented under a multi-line parent. ([@bbatsov][])

#15384: Fix a false positive and a false negative for Style/MissingRespondToMissing when method_missing is defined at the top level or alongside sibling classes. ([@bbatsov][])

#15432: Fix false positives in Layout/ElseAlignment when using else within a block that is part of a larger expression. ([@koic][])

#15423: Fix false positives in Layout/MultilineMethodCallIndentation when a method chain is nested inside a parenthesized argument list or a grouped expression within a hash pair value. ([@koic][])

#15424: Fix Style/StructInheritance autocorrect dropping leading indentation when class is inside a module or namespace. ([@amckinnie][])

#15325: Fix Style/DocumentationMethod ignoring AllowedMethods for inline modifier defs. ([@bbatsov][])

#15369: Fix a false positive for Style/LambdaCall when the argument list contains a comment, which the autocorrect would have dropped. ([@bbatsov][])

Changes

#15430: Improve performance of offense reporting by not allocating a new source range per offense outside of embedded sources. ([@bbatsov][])

#15430: Improve investigation performance by dispatching on_new_investigation, on_investigation_end, and on_other_file only to cops that refine them, and by skipping after_* dispatch when no cop needs it. ([@bbatsov][])

#15430: Improve performance of the per-file cop relevancy check by skipping gem requirement evaluation for cops without gem requirements. ([@bbatsov][])

#15430: Improve Lint/Debugger performance on code without debugger calls. ([@bbatsov][])

#15430: Improve autocorrection performance by keeping corrections in memory across inspection iterations and writing each corrected file only once. ([@bbatsov][])

#15415: Mark Lint/NumericOperationWithConstantResult autocorrect as unsafe because it drops the operands, discarding their side effects and silencing cases where the result is not actually constant (e.g. x / x raises when x is 0). ([@bbatsov][])

#15430: Improve performance of cops using AllowedPatterns, ForbiddenPatterns, and AllowedMethods by compiling the configured patterns only once. ([@bbatsov][])

#15430: Improve performance of Style/IfUnlessModifier and other modifier cops on files with many comments or conditionals. ([@bbatsov][])

1.88.1 (2026-07-01)

Bug fixes

#15408: Fix a crash for Bundler/GemComment with a non-literal gem option key. ([@bbatsov][])

... (truncated)

Commits

ceb6377 Cut 1.88.2
ee87be8 Update Changelog
e161fe6 Keep autocorrections in memory during the inspection loop
c8e0c83 Speed up Style/IfUnlessModifier eligibility checks
ef10f8a Dispatch investigation callbacks only to cops that refine them
4de41ea Avoid allocating a Range per offense in the common case
be1bb58 Fast-path the gem requirements check in cop relevancy
278525b Memoize compiled regexps in pattern mixins
28b6cd6 Improve Lint/Debugger performance on non-debugger code
1066e7b Merge pull request #15434 from koic/fix_else_alignment_for_block_in_expression
Additional commits viewable in compare view

Updates rubocop-rspec from 3.9.0 to 3.10.2

Release notes

Sourced from rubocop-rspec's releases.

RuboCop RSpec v3.10.2

Fix false positives for RSpec/SpecFilePathFormat when CustomTransform maps a namespace to an empty string. (@sakuro)

Fix RSpec/MatchWithSimpleRegex to ignore regular expressions with options. (@bquorning)

RuboCop RSpec v3.10.1

Add Strict option to RSpec/SharedContext to flag shared_context whenever it contains examples, even alongside setup code. (@Darhazer)

Add NegatedMatcher configuration option RSpec/ExpectChange. (@Darhazer)

Fix RSpec/MatchWithSimpleRegex to ignore regular expressions with interpolations. (@bquorning)

RuboCop RSpec v3.10.0

Add new cop RSpec/MatchWithSimpleRegex to suggest include matcher when match is used with simple string literals without regex-specific features. (@bquorning)

Add new cop RSpec/DiscardedMatcher to detect matchers in void context (e.g. missing .and between compound matchers). (@ydakuka)

Add support for itblock nodes. (@Darhazer)

RSpec/ScatteredLet now preserves the order of lets during auto-correction. (@Darhazer)

Fix a false negative for RSpec/EmptyLineAfterFinalLet inside shared_examples / include_examples / it_behaves_like blocks. (@Darhazer)

Fix a false positive for RSpec/ContainExactly when contain_exactly has multiple splat arguments. (@ydah)

Add autocorrect support for RSpec/SubjectDeclaration. (@eugeneius)

Fix false negatives for RSpec/SpecFilePathFormat when the expected class path only partially matches a path segment. (@ydah)

Fix a false negative for RSpec/ExpectActual when the matcher takes no arguments (e.g. expect("foo").to be_present, expect(1).to be). (@cvx)

Changelog

Sourced from rubocop-rspec's changelog.

3.10.2 (2026-06-06)

Fix false positives for RSpec/SpecFilePathFormat when CustomTransform maps a namespace to an empty string. ([@sakuro])

Fix RSpec/MatchWithSimpleRegex to ignore regular expressions with options. ([@bquorning])

3.10.1 (2026-06-05)

Add Strict option to RSpec/SharedContext to flag shared_context whenever it contains examples, even alongside setup code. ([@Darhazer])

Add NegatedMatcher configuration option RSpec/ExpectChange. ([@Darhazer])

Fix RSpec/MatchWithSimpleRegex to ignore regular expressions with interpolations. ([@bquorning])

3.10.0 (2026-06-05)

Add new cop RSpec/MatchWithSimpleRegex to suggest include matcher when match is used with simple string literals without regex-specific features. ([@bquorning])

Add new cop RSpec/DiscardedMatcher to detect matchers in void context (e.g. missing .and between compound matchers). ([@ydakuka])

Add support for itblock nodes. ([@Darhazer])

RSpec/ScatteredLet now preserves the order of lets during auto-correction. ([@Darhazer])

Fix a false negative for RSpec/EmptyLineAfterFinalLet inside shared_examples / include_examples / it_behaves_like blocks. ([@Darhazer])

Fix a false positive for RSpec/ContainExactly when contain_exactly has multiple splat arguments. ([@ydah])

Add autocorrect support for RSpec/SubjectDeclaration. ([@eugeneius])

Fix false negatives for RSpec/SpecFilePathFormat when the expected class path only partially matches a path segment. ([@ydah])

Fix a false negative for RSpec/ExpectActual when the matcher takes no arguments (e.g. expect("foo").to be_present, expect(1).to be). ([@cvx])

Commits

2488441 Merge pull request #2189 from rubocop/release
c9e53cf Bump version to 3.10.2
7ae0a42 Merge pull request #2186 from sakuro/fix/spec-file-path-format-empty-custom-t...
8b0b5e9 Merge branch 'master' into fix/spec-file-path-format-empty-custom-transform
dc4465c Merge pull request #2188 from rubocop/fix-2185
d5de6b2 Consider regexp with options a non-simple regexp
bad0cb3 🐛 Fix RSpec/SpecFilePathFormat false positives when CustomTransform maps ...
ec3eeab Merge pull request #2183 from rubocop/fix-match-with-simple-regex-with-interp...
16bbf49 Bump version to 3.10.1
2a78abd Ignore interpolation in MatchWithSimpleRegex
Additional commits viewable in compare view

Updates rubocop-yard from 1.1.0 to 1.3.0

Release notes

Sourced from rubocop-yard's releases.

v1.3.0

What's Changed

Guard against YARD parser type/explainer size mismatch by @ksss in ksss/rubocop-yard#45

Bundle update by @ksss in ksss/rubocop-yard#44

Full Changelog: ksss/rubocop-yard@v1.2.0...v1.3.0

v1.2.0

What's Changed

Update Ruby by @ksss in ksss/rubocop-yard#40

Allow @param on Struct/Data constant assignments by @lekemula in ksss/rubocop-yard#42

New Contributors

@lekemula made their first contribution in ksss/rubocop-yard#42

Full Changelog: ksss/rubocop-yard@v1.1.0...v1.2.0

Changelog

Sourced from rubocop-yard's changelog.

[Unreleased]

YARD/MeaninglessTag: Allow @param on Struct.new/Data.define constant assignments (ksss/rubocop-yard#36)

Commits

bc55c8a v1.3.0
68d7505 Bundle update (#44)
5fa0253 Guard against YARD parser type/explainer size mismatch (#45)
456f085 v1.2.0
68939ce allow @param on Struct/Data constant assignments (#42)
6678ae5 Update Ruby (#40)
See full diff in compare view

Updates ruby-lsp from 0.26.9 to 0.26.10

Release notes

Sourced from ruby-lsp's releases.

v0.26.10

🐛 Bug Fixes

Prevent adding end token on endless methods (Shopify/ruby-lsp#4042) by @vinistock

Return MethodNotFound (-32601) for unrecognized LSP requests (Shopify/ruby-lsp#4040) by @IgorFroehner

Prevent loading old gem installations as project add-ons (Shopify/ruby-lsp#4052) by @vinistock

Fix document link gem paths when to_spec returns nil (Shopify/ruby-lsp#4060) by @vinistock

Use env shebangs for RubyGems installs (Shopify/ruby-lsp#4126) by @joshheinrichs-shopify

Don't crash on document URIs with an invalid scheme (Shopify/ruby-lsp#4127) by @eyupcanakman

Commits

584117f Add back the x64-mingw-ucrt platform to the Gemfile.lock to fix the build on ...
f2db81c Prepare for 0.26.10
1786573 Merge pull request #4156 from Shopify/dependabot/npm_and_yarn/vscode/minor-an...
bc80b24 Merge pull request #4154 from Shopify/dependabot/submodules/test/fixtures/pri...
9004a25 Merge pull request #4155 from Shopify/dependabot/github_actions/ruby/setup-ru...
f501249 Bump the minor-and-patch group in /vscode with 6 updates
f96cdc6 Bump ruby/setup-ruby from 1.314.0 to 1.316.0
5ba6d69 Bump test/fixtures/prism from 26cfb91 to d07335c
01e0d0e Merge pull request #4151 from Shopify/dependabot/npm_and_yarn/vscode/types/no...
0678348 Merge pull request #4147 from Shopify/dependabot/npm_and_yarn/vscode/vscode/t...
Additional commits viewable in compare view

Updates simplecov from 0.22.0 to 1.0.0

Release notes

Sourced from simplecov's releases.

v1.0.0

What's Changed

Adds Ruby 3.2 to the CI matrix. by @petergoldstein in simplecov-ruby/simplecov#1042

Fix incorrect comment on "Gemfile" by @nishidayuya in simplecov-ruby/simplecov#1027

Fix typo in documentation by @eyupatis in simplecov-ruby/simplecov#995

Readme: Fix Coverage link by @camsteffen in simplecov-ruby/simplecov#1049

Cleanup archived project by @borisrorsvort in simplecov-ruby/simplecov#1056

Added dependabot for GitHub Actions and bundler by @ydah in simplecov-ruby/simplecov#1048

Bump rubocop from 1.24.1 to 1.42.0 by @ydah in simplecov-ruby/simplecov#1047

Bump actions/checkout from 3 to 4 by @dependabot[bot] in simplecov-ruby/simplecov#1070

Fix typo by @zenspider in simplecov-ruby/simplecov#1076

CI debugging by @PragTob in simplecov-ruby/simplecov#1086

Add TruffleRuby in CI by @eregon in simplecov-ruby/simplecov#1079

allow Coverage to start when Coverage.running? is not implemented by @notEthan in simplecov-ruby/simplecov#1043

Run Rubocop only once in CI by @PragTob in simplecov-ruby/simplecov#1087

Unexclude skipped on TruffleRuby test case by @andrykonchin in simplecov-ruby/simplecov#1089

Set up the trusted publisher together with @segiddins by @PragTob in simplecov-ruby/simplecov#1094

Bump step-security/harden-runner from 2.7.1 to 2.8.1 by @dependabot[bot] in simplecov-ruby/simplecov#1095

Trying to update cucumber & co but running into conflicts by @PragTob in simplecov-ruby/simplecov#1088

Technical/Fix documentation formatters usage example by @bestwebua in simplecov-ruby/simplecov#1096

Fix minor typo in README by @chris-hewitt in simplecov-ruby/simplecov#1080

Update gems & fix new rubocop offenses by @PragTob in simplecov-ruby/simplecov#1098

Bring Ruby 2.7 support back by @amatsuda in simplecov-ruby/simplecov#1107

Bump step-security/harden-runner from 2.8.1 to 2.9.1 by @dependabot[bot] in simplecov-ruby/simplecov#1104

Bring Ruby 2.5 and 2.6 support back by @amatsuda in simplecov-ruby/simplecov#1108

Bump step-security/harden-runner from 2.9.1 to 2.10.2 by @dependabot[bot] in simplecov-ruby/simplecov#1117

Bump rubygems/release-gem from 612653d273a73bdae1df8453e090060bb4db5f31 to a25424ba2ba8b387abc8ef40807c2c85b96cbe32 by @dependabot[bot] in simplecov-ruby/simplecov#1119

Follow the repo convention to use floor instead of round to provide actionable coverage metrics by @corsonknowles in simplecov-ruby/simplecov#1116

Ensure branches Hash is present when supported by @marcotc in simplecov-ruby/simplecov#972

Add logger to deps and load in early in test Rails app. by @simi in simplecov-ruby/simplecov#1131

Bump step-security/harden-runner from 2.10.2 to 2.11.1 by @dependabot[bot] in simplecov-ruby/simplecov#1128

Reduce GC pressure in LinesCombiner by ~90% by @KevSlashNull in simplecov-ruby/simplecov#1144

Add support for oneshot_lines coverage mode by @fatkodima in simplecov-ruby/simplecov#1154

Bump actions/checkout from 4 to 6 by @dependabot[bot] in simplecov-ruby/simplecov#1148

Bump rubygems/release-gem from 1.1.1 to 1.1.2 by @dependabot[bot] in simplecov-ruby/simplecov#1145

Bump step-security/harden-runner from 2.13.0 to 2.14.1 by @dependabot[bot] in simplecov-ruby/simplecov#1153

Fixed typos and grammatical errors by @AmritD in simplecov-ruby/simplecov#1147

Fix crash in oneshot coverage when file is missing or not valid Ruby by @skryukov in simplecov-ruby/simplecov#1158

Prevent test_frameworks profile to hide source directories by @splattael in simplecov-ruby/simplecov#1133

Minimum coverage by group check by @mikhliuk-k in simplecov-ruby/simplecov#1105

Fallback to empty array if branches is missing by @exoego in simplecov-ruby/simplecov#1140

patch simplecov-html dep by @timkellogg in simplecov-ruby/simplecov#1072

minimum_coverage_by_file now prints the name of the violating file. by @philipritchey in simplecov-ruby/simplecov#1103

Add support for method coverage by @sferik in simplecov-ruby/simplecov#1161

Update commercial services docs: replace Code Climate with Qlty Cloud by @brynary in simplecov-ruby/simplecov#1162

Fix misleading 100% branch/method coverage for unloaded tracked files by @55728 in simplecov-ruby/simplecov#1163

add line and branch coverage output expectation by @philipritchey in simplecov-ruby/simplecov#1102

Support parallel_tests with multiple commands by @BenoitMC in simplecov-ruby/simplecov#1022

Bump step-security/harden-runner from 2.16.0 to 2.16.1 by @dependabot[bot] in simplecov-ruby/simplecov#1166

Bump ruby/setup-ruby from 1 to 1.300.0 by @dependabot[bot] in simplecov-ruby/simplecov#1168

... (truncated)

Changelog

Sourced from simplecov's changelog.

1.0.0 (2026-07-12)

First stable release of the 1.0 line. The entries below consolidate release candidates rc1 through rc5 and describe all changes since 0.22.1.

Breaking Changes

Dropped support for Ruby 3.1 and JRuby 9.4. The minimum is now Ruby 3.2 (and JRuby 10, which reports RUBY_VERSION 3.4). Ruby 3.1 reached end of life in March 2025, and a recent i18n release calls Fiber[], a Ruby 3.2 API, at load time, so suites that load Rails no longer run on 3.1. Raising required_ruby_version to >= 3.2 also excludes JRuby 9.4, which reports RUBY_VERSION 3.1.x. See #1171.

JSON formatter: group stats changed from { "covered_percent": 80.0 } to full stats shape { "covered": 8, "missed": 2, "total": 10, "percent": 80.0, "strength": 0.0 }. The key covered_percent is renamed to percent.

JSON formatter: simplecov_json_formatter gem is now built in. require "simplecov_json_formatter" continues to work via a shim.

StringFilter now matches at path-segment boundaries. "lib" matches /lib/ but no longer matches /library/. Use a Regexp filter for substring matching.

SourceFile#project_filename now returns a truly relative path with no leading separator (e.g. lib/foo.rb instead of /lib/foo.rb). This also removes the leading / from file path keys in coverage.json and from the filename in minimum_coverage_by_file error messages. Anchored RegexFilters that relied on a leading / (e.g. %r{^/lib/}) should be rewritten (e.g. %r{\Alib/}).

Removed docile gem dependency. The SimpleCov.configure block is now evaluated via instance_exec with instance variable proxying.

Removed automatic activation of JSONFormatter when the CC_TEST_REPORTER_ID environment variable is set. The default HTMLFormatter now emits coverage.json alongside the HTML report (using JSONFormatter.build_hash to serialize the same payload JSONFormatter writes), so the env-var special case is no longer needed. Because of this, listing JSONFormatter alongside HTMLFormatter is redundant and can be removed.

SimpleCov.start now loads the test_frameworks profile by default, which filters paths under test/, spec/, features/, and autotest/. Running the suite always executes 100% of the test files themselves, which inflated the overall percentage and obscured application coverage. To opt back in (e.g. to surface dead test helpers), drop the filter with remove_filter %r{\A(test|features|spec|autotest)/}. See #816.

HTML and JSON formatters now write the "Coverage report generated for X to Y" status line (and the per-criterion totals beneath it) to stderr instead of stdout. The message is a diagnostic, not the program's output, and routing it to stdout polluted pipelines like rspec -f json. Suppress it entirely with silent: true on the formatter; redirect with 2>&1 if you want the old behavior. See #1060.

Under parallel_tests, SimpleCov now waits in the first started process (via ParallelTests.first_process?) rather than the last. This matches the convention parallel_tests's own README recommends for "do something once after all workers finish" hooks, so user code that has its own ParallelTests.wait_for_other_processes_to_finish in an RSpec.after(:suite) (or equivalent) no longer deadlocks against SimpleCov's wait when both pick the same process. As a side benefit, the previous PARALLEL_TEST_GROUPS=1 workaround for last_process?'s "" == "1" mismatch (#1066) is no longer needed — first_process? handles that case naturally. Migration: the rare project that wired its own wait via ParallelTests.last_process? now hits the symmetric deadlock and must switch to first_process?. See #922.

Removed SimpleCov.coverage_criterion. It was a reader/writer for a value nothing in SimpleCov ever consumed, so it duplicated primary_coverage without affecting any behavior. Use primary_coverage to choose the report's leading criterion (or the coverage :branch, primary: true form).

Deprecations

The configuration API has been redesigned around a smaller, more consistent set of verbs. The legacy methods continue to work but each emits a deprecation warning that names its replacement; a future release will remove them. Warnings are deduplicated by call site, so a deprecated method called in a loop or a configuration block re-evaluated once per parallel worker or spec file warns at most once per source location (see #1204). See the "Migrating from the legacy configuration API" section in the README for the full migration table and a before/after example.

add_filter → skip (identical matcher grammar; no behavior change)

add_group → group (identical matcher grammar; no behavior change)

track_files → cover (cover includes unloaded files like track_files did and restricts the report to the matching set; pass every directory you want reported, e.g. cover "lib/**/*.rb", "app/**/*.rb", to keep the old additive-only behavior)

use_merging → merging (same value)

enable_for_subprocesses → merge_subprocesses (same value)

enable_coverage_for_eval → enable_coverage :eval (folds into the same call that enables :line / :branch / :method)

print_error_status (reader) → print_errors (the print_error_status= writer is unaffected for now)

Calling SimpleCov.start from .simplecov is deprecated. Coverage tracking still begins for backward compatibility, but a one-time deprecation warning fires pointing the user at moving the call into spec_helper.rb / test_helper.rb; a future release will require the explicit SimpleCov.start from a test helper. The migration goes hand-in-hand with the bugfix below: once SimpleCov.start lives in the test helper, the parent process that auto-loads .simplecov never starts tracking and the empty-report-overwrite scenario can't arise. See #581.

# :nocov: toggle comments (and the configurable SimpleCov.nocov_token / SimpleCov.skip_token) are deprecated in favor of the new # simplecov:disable / # simplecov:enable directives. Each file that still uses # :nocov: emits a one-time deprecation warning to stderr at load time pointing at the recommended replacement, and any call to SimpleCov.nocov_token or SimpleCov.skip_token (getter or setter) likewise warns. The directive will be removed in a future release.

SimpleCov::SourceFile#branches_coverage_percent and #methods_coverage_percent are deprecated in favor of the uniform covered_percent(:branch) / covered_percent(:method). covered_percent (and covered_strength) now take a criterion argument (defaulting to :line), so the same call reaches any criterion instead of line being the unprefixed default while branch and method had their own differently-named methods. coverage_statistics also now accepts a criterion (e.g. coverage_statistics(:branch)) to return that one CoverageStatistics rather than the whole Hash.

minimum_coverage_by_file and minimum_coverage_by_group are deprecated in favor of the coverage method's minimum_per_file / minimum_per_group verbs. The legacy methods overloaded a single hash to carry both per-criterion defaults and per-path / per-group overrides, with minimum_coverage_by_file further distinguishing Symbol keys (criterion defaults) from String / Regexp keys (path overrides) and accepting either a bare number or a per-criterion hash as the value. The coverage block fixes the criterion so every threshold is a plain percentage with an only: target. The setter for...
Description has been truncated

…ctory with 5 updates Bumps the development-and-testing group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [rubocop](https://github.com/rubocop/rubocop) | `1.86.1` | `1.88.2` | | [rubocop-rspec](https://github.com/rubocop/rubocop-rspec) | `3.9.0` | `3.10.2` | | [rubocop-yard](https://github.com/ksss/rubocop-yard) | `1.1.0` | `1.3.0` | | [ruby-lsp](https://github.com/Shopify/ruby-lsp) | `0.26.9` | `0.26.10` | | [simplecov](https://github.com/simplecov-ruby/simplecov) | `0.22.0` | `1.0.0` | Updates `rubocop` from 1.86.1 to 1.88.2 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.86.1...v1.88.2) Updates `rubocop-rspec` from 3.9.0 to 3.10.2 - [Release notes](https://github.com/rubocop/rubocop-rspec/releases) - [Changelog](https://github.com/rubocop/rubocop-rspec/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop-rspec@v3.9.0...v3.10.2) Updates `rubocop-yard` from 1.1.0 to 1.3.0 - [Release notes](https://github.com/ksss/rubocop-yard/releases) - [Changelog](https://github.com/ksss/rubocop-yard/blob/main/CHANGELOG.md) - [Commits](ksss/rubocop-yard@v1.1.0...v1.3.0) Updates `ruby-lsp` from 0.26.9 to 0.26.10 - [Release notes](https://github.com/Shopify/ruby-lsp/releases) - [Commits](Shopify/ruby-lsp@v0.26.9...v0.26.10) Updates `simplecov` from 0.22.0 to 1.0.0 - [Release notes](https://github.com/simplecov-ruby/simplecov/releases) - [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md) - [Commits](simplecov-ruby/simplecov@v0.22.0...v1.0.0) --- updated-dependencies: - dependency-name: rubocop dependency-version: 1.88.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-and-testing - dependency-name: rubocop-rspec dependency-version: 3.10.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-and-testing - dependency-name: rubocop-yard dependency-version: 1.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-and-testing - dependency-name: ruby-lsp dependency-version: 0.26.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-and-testing - dependency-name: simplecov dependency-version: 1.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development-and-testing ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Jul 13, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps-dev): Bump the development-and-testing group across 1 directory with 5 updates - #14

build(deps-dev): Bump the development-and-testing group across 1 directory with 5 updates#14
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/development-and-testing-ea993fd576

dependabot Bot commented on behalf of github Jul 13, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

RuboCop v1.88.2

Bug fixes

Changes

RuboCop v1.88.1

1.88.2 (2026-07-08)

Bug fixes

Changes

1.88.1 (2026-07-01)

Bug fixes

RuboCop RSpec v3.10.2

RuboCop RSpec v3.10.1

RuboCop RSpec v3.10.0

3.10.2 (2026-06-06)

3.10.1 (2026-06-05)

3.10.0 (2026-06-05)

v1.3.0

What's Changed

v1.2.0

What's Changed

New Contributors

[Unreleased]

v0.26.10

🐛 Bug Fixes

v1.0.0

What's Changed

1.0.0 (2026-07-12)

Breaking Changes

Deprecations

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 13, 2026 •

edited

Loading