Dependabot: Bump the ruby group across 1 directory with 17 updates

[dependabot]

Bumps the ruby group with 11 updates in the / directory:

Package	From	To
event_sourcery	1.0.3	1.0.4
event_sourcery-postgres	1.0.0	1.0.2
rake	13.3.1	13.4.2
puma	7.2.1	8.0.2
pry-byebug	3.11.0	3.12.0
commander	5.0.0	6.0.0
mustermann	3.0.4	3.1.1
rack	3.2.6	3.2.7
rouge	4.7.0	5.1.0
rspec-mocks	3.13.7	3.13.8
tilt	2.6.1	2.9.0

Updates event_sourcery from 1.0.3 to 1.0.4

Release notes

Sourced from event_sourcery's releases.

v1.0.4

What's Changed

• Correct PR identifier by @​orien in envato/event_sourcery#247
• Resolve issues identified by RuboCop by @​orien in envato/event_sourcery#248

Full Changelog: envato/event_sourcery@v1.0.3...v1.0.4

Changelog

Sourced from event_sourcery's changelog.

1.0.4 - 2026-01-17

Changed

• Resolve issues as identified by RuboCop (#248).

#248: envato/event_sourcery#248

Commits

• e0d939a Merge pull request #248 from envato/rubocop
• 66160f3 Release 1.0.4
• 40d9547 RuboCop: resolve Style/Documentation
• d0b3843 RuboCop: disable Style/OptionalBooleanParameter - it is in the public inter...
• 4eff266 RuboCop: disable Lint/RescueException - it is intended
• ffc5aff RuboCop: resolve Lint/MissingSuper
• cf6cfb4 RuboCop: regenerate TODO configuration
• 7d4f987 Correct PR identifier (#247)
• See full diff in compare view

Updates event_sourcery-postgres from 1.0.0 to 1.0.2

Release notes

Sourced from event_sourcery-postgres's releases.

v1.0.2

What's Changed

• Constrain event_sourcery to version 1 by @​orien in envato/event_sourcery-postgres#86

Full Changelog: envato/event_sourcery-postgres@v1.0.1...v1.0.2

v1.0.1

What's Changed

• Resolve issues identified by RuboCop by @​orien in envato/event_sourcery-postgres#85

Full Changelog: envato/event_sourcery-postgres@v1.0.0...v1.0.1

Changelog

Sourced from event_sourcery-postgres's changelog.

1.0.2 - 2026-03-01

Changed

• Constrain event_sourcery to version 1 (#86).

#86: envato/event_sourcery-postgres#86

[1.0.1] - 2026-01-17

Changed

• Resolve issues as identified by RuboCop (#85).

#85: envato/event_sourcery-postgres#85

Commits

• 210b589 Merge pull request #86 from envato/event-sourcery-1
• a31392d Release 1.0.2
• 71a2c81 Constrain event_sourcery to version 1
• ca73151 Merge pull request #85 from envato/rubocop
• c88f231 Release 1.0.1
• 5345c3b RuboCop: resolve Style/SafeNavigation
• d63c481 RuboCop: disable Style/OptionalBooleanParameter - it is in the public inter...
• db67d5c RuboCop: resolve Style/HashEachMethods
• 58e2981 RuboCop: resolve Style/Documentation
• 2868da6 RuboCop: resolve Naming/VariableNumber
• Additional commits viewable in compare view

Updates rake from 13.3.1 to 13.4.2

Commits

• 503b8ec v13.4.2
• 46038e7 Merge pull request #723 from ruby/fix/testopts-preserve-existing-value
• 604a3d9 Isolate TESTOPTS env in TestRakeTestTask setup/teardown
• 5886caa Preserve ENV["TESTOPTS"] when verbose is enabled
• 92193ac v13.4.1
• b74be0b Merge pull request #721 from ruby/fix/add-options-to-gemspec
• 829f66d Add lib/rake/options.rb to gemspec
• 2d55bc4 v13.4.0
• 1415070 Exclude dependabot updates from release note
• b3dc948 Merge pull request #713 from pvdb/simplify_standard_system_dir
• Additional commits viewable in compare view

Updates puma from 7.2.1 to 8.0.2
Updates pry-byebug from 3.11.0 to 3.12.0
Updates commander from 5.0.0 to 6.0.0

Release notes

Sourced from commander's releases.

v6.0.0

What's Changed

• NecroRuby: Modernize commander by @​ggilder in commander-rb/commander#104

Full Changelog: commander-rb/commander@v5.0.0...v6.0.0

Changelog

Sourced from commander's changelog.

=== 6.0.0 / 2026-08-01

• Drop support for Ruby 3.0; require Ruby >= 3.1 (#104). (@​dior001)
• Update highline dependency to ~> 3.1 (#104). (@​dior001)
• Modernize the codebase for the current Ruby ecosystem, including frozen string literals and anonymous block forwarding (#104). (@​dior001)
• Fix SortedSet error on Ruby 3.2+, where it was extracted from the set library (#104).

Commits

• b4c6be4 Release 6.0.0
• b1c05b1 NecroRuby: Modernize commander (#104)
• See full diff in compare view

Updates bigdecimal from 4.0.1 to 4.1.2
Updates byebug from 12.0.0 to 13.0.0
Updates highline from 3.0.1 to 3.1.2

Changelog

Sourced from highline's changelog.

3.1.2 / 2025-01-05

• Fix Ruby software license URL in LICENSE file (@​jeffwidman)
• PR #279 - Upgrades and adjustments for Ruby 3.4 release (@​abinoam)
• PR #278 - Prevent ArgumentError for #col_count_calculate when items exceed 80 chars (@​davidjkling, @​justintsteele)

3.1.1 / 2024-08-18

• PR #276 - Update #say to always flush the output after a #puts (@​blipper)
• PR #274 / I #273 (@​costa)
  • Add Highline#add_to_color_scheme
  • Dockerize the test environment. Just run bin/test and voilá!

3.1.0 / 2024-07-15

• PR #272 / I #271 - Readline is now completed deprecated over Reline (@​abinoam, issue by @​64kramsystem)
• PR #269 - Provide a 'Changelog' link on rubygems.org/gems/highline (@​mark-young-atg)

Commits

• 0321f84 Merge pull request #279 from JEG2/upgrade_ruby_341
• 296bc23 Update Changelog.md
• a428bbb Turn if-else to case-when (rubocop)
• dfab07c Add base64 gem to Gemfile
• cc067cc Update Rubocop Ruby version target
• 452d813 Add Ruby 3.4 to GitHub Actions matrix
• 79d60b1 Fix for frozen string literal on test/test_helper.rb
• 7c42ad1 Fix for frozen string literal on lib/highline.rb
• 182bfc1 Fix for frozen string literal on lib/highline/menu.rb
• b7ddfc3 Merge pull request #278 from davidjkling/master
• Additional commits viewable in compare view

Updates mustermann from 3.0.4 to 3.1.1

Changelog

Sourced from mustermann's changelog.

Changelog

Mustermann follows Semantic Versioning 2.0. Anything documented in the README or via YARD and not declared private is part of the public API.

Unreleased changes

Mustermann 4.0.1

Performance improvements

• Reduce memory usage by deduplicating internal data structures. This is especially effective when using large Mustermann::Set objects. #159 #160 @​byroot

Stable Releases

Mustermann 4.0.0 (2026-04-27)

Breaking changes

• Mustermann::Pattern#match will now return Mustermann::Match instead of either MatchData or Mustermann::SimpleMatch. This object behaves similar to the previous return values, but also implements #params and #pattern.
• Moved Mustermann::Mapper and Mustermann::PatternCache from mustermann to mustermann-contrib.
• Removed special code for Sinatra 1.x. If you want to use Mustermann with Sinatra, please upgrade to any of the Sinatra versions released since 2017.

New features

• Mustermann::Rails now supports Rails up to version 8.2 (previously 5.0).
• Added Mustermann::Hybrid, a pattern that's a union of Sinatra, Rails and URI Template syntax. It is designed to be as compatible as possible with all three syntaxes.
• Added Mustermann::Set to mustermann, which is a collection of patterns with associated values, designed for building routing tables that dispatch efficiently as the number of routes grows.
• Reintroduce Mustermann::Router, now based on Mustermann::Set, for demonstration purposes and use in small applications or middleware. Simple and fast.
• The capture option now supports special class and symbol values, that both set an expected capture pattern and define a params converter.
• Mustermann::Pattern#+ and Mustermann::Pattern#| now return single patterns instead of composite patterns in significantly more cases, like having non-overlapping captures.
• Nicer inspect and pretty_print for patterns and other objects.

Here's an example using Mustermann::Hybrid, Mustermann::Set, and the new capture options:

require "mustermann/set"
set = Mustermann::Set.new(type: :hybrid, capture: { id: Integer, user_id: Integer, slug: :slug })
adding values is optional
set.add "/users",                "users.index"
set.add "/users/:id",            "users.show"
set.add "/posts",                "posts.index"
set.add "/users/:user_id/posts", "posts.index"
set.add "/posts/:id(-:slug)",    "posts.show" # slug is optional
match = set.match("/posts/42-awesome-post")
id is automatically converted to an Integer, and slug is available as a string
</tr></table>

... (truncated)

Commits

• 7445f32 remove visualizer injection into inspect and pretty_print, fixes #153
• e7721d8 Fix markup in README
• a33272b Move Rails pattern documentation from mustermann-contrib to mustermann
• 5cfd230 Fix code example
• 656eb61 Fix typo
• 518fb7e Increase version to 3.1.1
• 8fd53a0 Improve Mustermann::Pattern#hash to reduce the chance of collisions on JRuby ...
• 6b1eddc fix load order issue when loading mustermann/expander directly
• c163eaf Merge branch 'main' into reduce-gem-size
• 418233e bump version to 3.1.0
• Additional commits viewable in compare view

Updates pry from 0.15.2 to 0.16.0

Release notes

Sourced from pry's releases.

v0.16.0

Features

• Ruby 4.0 Support. Pry will now require and default to Reline for newer Rubies. (#2357) (#2349)
• Revert 'Unify show-doc with show-source'. (#2346)

Breaking Changes

• Remove experimental Pry.auto_resize! Returns a warning. The code will be removed later. (#2359)
• Drop support for Ruby < 2.6 (#2349)

New Contributors

• @​ydah made their first contribution in pry/pry#2343

Full Changelog: pry/pry@v0.15.2...v0.16.0

Changelog

Sourced from pry's changelog.

https://github.com/pry/pry/blob/master/v0.16.0 (December 26, 2025)

Features

• Ruby 4.0 Support. Pry will now require and default to Reline for newer Rubies. (#2357) (#2349)
• Revert 'Unify show-doc with show-source'. (#2346)

Breaking Changes

• Remove experimental Pry.auto_resize! Returns a warning. The code will be removed later. (#2359)
• Drop support for Ruby < 2.6 (#2349)

Commits

• 5a267df v0.16.0
• 538b150 Update CHANGELOG
• 0a7ab20 Merge pull request #2361 from andrehjr/remove-outdated-deps
• 8dcb2c8 Remove pinned method_source version for Ruby < 2.3.0
• fc9969b Remove psych pinned version from Gemfile
• 23b3ed6 Remove hardcoded require for rubocop > 2.2.0
• e9ac449 Merge pull request #2349 from andrehjr/no-readline-installed
• 679249b Merge pull request #2359 from andrehjr/remove-experiental-autoresize
• 17d5954 Remove experimental Pry.auto_resize!
• 090822b Pry will only support Ruby 2.6+ form now on
• Additional commits viewable in compare view

Updates rack from 3.2.6 to 3.2.7

Changelog

Sourced from rack's changelog.

Changelog

All notable changes to this project will be documented in this file. For info on how to format all future additions to this file please reference Keep A Changelog.

Unreleased

SPEC Changes

• Define rack.response_finished callback arguments more strictly. (#2365, @​skipkayhil)

Added

• Add Rack::Files#assign_headers to allow overriding how the configured file headers are set. (#2377, @​codergeek121)
• Add support for rack.response_finished to Rack::TempfileReaper. (#2363, @​skipkayhil)
• Add support for streaming bodies when using Rack::Events. (#2375, @​unflxw)
• Add deflaters option to Rack::Deflater to enable custom compression algorithms like zstd. (#2168, @​alexanderadam)
• Add Rack::Request#prefetch? for identifying requests with Sec-Purpose: prefetch header set. (#2405, @​glaszig)
• Add rack.request.config environment key to configure Rack::Request behavior.
• Add Rack::Request#headers for simpler access to request headers by header name. (#1881, @​jeremyevans)
• Allow disabling the Rack::QueryParser bytesize and params limits by passing nil for the bytesize_limit/params_limit keyword arguments, or a negative value for RACK_QUERY_PARSER_BYTESIZE_LIMIT/RACK_QUERY_PARSER_PARAMS_LIMIT. (#2492, @​alpaca-tc)

Changed

• Require Ruby 2.7.3 or newer and replace ruby2_keywords with argument forwarding.
• Raise before exceeding a part limit, not after. (#2362, @​matthew-puku)
• Rack::Deflater now uses a fixed GZip mtime value. (#2372, @​bensheldon)
• Multipart parser drops support for RFC 2231 filename* parameter (prohibited by RFC 7578) and now properly handles UTF-8 encoded filenames via percent-encoding and direct UTF-8 bytes. (#2398, @​wtn)
• The query parser now raises Rack::QueryParser::IncompatibleEncodingError if we try to parse params that are not ASCII compatible. (#2416, @​bquorning)
• The mime type for .pem files has been changed from application/x-x509-ca-cert to application/x-pem-file. (#2435, @​jeremyevans)
• Freeze Rack::Auth::AbstractRequest::AUTHORIZATION_KEYS, Rack::Utils::STATUS_WITH_NO_ENTITY_BODY, Rack::Multipart::Parser::EMPTY, Rack::Utils.default_query_parser, and internal constants in Rack::Lint. (#2428, @​jhawthorn)

Fixed

• Rack::Multipart::UploadedFile now delegates keyword arguments to the wrapped tempfile. Calls such as uploaded_file.readlines(chomp: true) raised TypeError on Ruby 3.0+. (#2481, #2499, @​SeanLF)
• Multipart parser: limit MIME header size check to the unread buffer region to avoid false multipart mime part header too large errors when previously read data accumulates in the scan buffer. (#2392, @​alpaca-tc, @​willnet, @​krororo)
• Multipart parser: add nil guards to prevent NoMethodError crashes when handling Content-Disposition without parameters and Content-Type parameters without '='. (@​haruki0409)

Commits

• 70d2e10 Bump patch version.
• 9b31adf Fix specs on Ruby 2.4
• 7c0abab Do not ignore Ruby 2.4/2.5 errors in CI
• ef52d4e Fix FORWARDED typo.
• 108405e Restore Ruby 2.4/2.5 compatibility
• c3fe393 Update changelog.
• See full diff in compare view

Updates rouge from 4.7.0 to 5.1.0
Updates rspec-mocks from 3.13.7 to 3.13.8

Changelog

Sourced from rspec-mocks's changelog.

3.13.8 / 2026-02-27

Full Changelog

Bug Fixes:

• Improve thread safety of mocks invocation recording. (Chad Wilson, #286)
• Expand any_instance warning about prepended methods to private/protected methods. (Alex Dean, #297)

Commits

• 712e3ca rspec-mocks-v3.13.8
• 77e3082 Changelog for #297
• efd3f6a Merge pull request #297 from alexdean/any_instance_of_prepend_fix
• 27fe84e Changelog for #286
• b3ef9b1 Tidy up rspec-mocks/spec/rspec/mocks/order_group_spec.rb
• 7ed9f38 Improve thread safety of OrderGroups within mocks
• 0404d76 Ignore a spec file which issues warnings
• See full diff in compare view

Updates rspec-support from 3.13.6 to 3.13.7

Changelog

Sourced from rspec-support's changelog.

3.13.7 / 2026-01-28

Full Changelog

Bug Fixes:

• Stop fuzzy matching causing false positives from Range objects. (Eric Mueller, rspec/rspec#298)

Commits

• 47ebfe1 Add missing dates to changelog
• 5cff10c v3.13.7
• 76a1b8c Changelog for #298
• 27b6de2 Merge pull request #298 from nevinera/fix-range-comparison-with-have-attributes
• bac489e Skip is not combinatory so we need to include the ruby check too
• 5aa0256 Change more :if / :unless to :skip
• See full diff in compare view

Updates sequel from 5.99.0 to 5.107.0

Changelog

Sourced from sequel's changelog.

=== 5.107.0 (2026-08-01)

• Support Dataset#explain :query_plan option on SQLite, for EXPLAIN QUERY PLAN (cllns)

• Add Database#set_property_graph_schema to support changing the schema for a property graph on PostgreSQL 19+ (jeremyevans)

• Add Database#rename_property_graph to support renaming property graphs on PostgreSQL 19+ (jeremyevans)

• Add Database#alter_property_graph to support ALTER PROPERTY GRAPH on PostgreSQL 19+ (jeremyevans)

• Add Database#property_graphs to return an array of property graph name symbols on PostgreSQL 19+ (jeremyevans)

• Add Database#graph_table to support GRAPH_TABLE expressions on PostgreSQL 19+ (jeremyevans)

• Add Database#{create,drop}_property_graph to support {CREATE,DROP} PROPERTY GRAPH on PostgreSQL 19+ (jeremyevans)

=== 5.106.0 (2026-07-01)

• Add Sequel::Constants::ALL (jeremyevans)

• Support :ignore_nulls window function option on PostgreSQL 19+ (jeremyevans)

• Add Dataset#for_portion_of to support UPDATE/DELETE FOR PORTION OF on PostgreSQL 19+ (jeremyevans)

=== 5.105.0 (2026-06-01)

• Add Plugin.model_instance_variables to set instance variables used by instances of model using a plugin (jeremyevans)

• Add Model.set_model_instance_variables to set instance variables used by instances of a specific model class (jeremyevans)

• Support shape-friendly Model instances via Model.shape_friendly = true (jeremyevans)

• Make connection_expiration extension set expiration time on connections in the pool when it is loaded (cooljacob204, jeremyevans) (#2365, #2366)

=== 5.104.0 (2026-05-01)

• Support :lateral_subquery as a filter by associations limit strategy in the dataset associations plugin (jeremyevans)

• Support :lateral_subquery as an eager limit strategy for many_through_many/one_through_many associations (jeremyevans)

• Support :lateral_subquery as a filter by associations limit strategy for many_through_many/one_through_many associations (jeremyevans)

• Support :lateral_subquery as an eager_graph limit strategy for many_through_many/one_through_many associations (jeremyevans)

• Support :lateral_subquery as an eager limit strategy for many_to_many/one_through_one associations (jeremyevans)

• Support :lateral_subquery as a filter by associations limit strategy for many_to_many/one_through_one associations (jeremyevans)

• Support :lateral_subquery as an eager_graph limit strategy for many_to_many/one_through_one associations (jeremyevans)

... (truncated)

Commits

• 09cfd8b Bump version to 5.107.0
• 868c461 Support :query_plan option in Dataset#explain on SQLite
• bdb03b6 Fix nondeterministic test failure in property graph spec
• 3e45652 Add Database#alter_property_graph, #rename_property_graph, and #set_property_...
• 6e118df Add Database#property_graphs to return an array of property graph name symbol...
• 114b59c Move parsing check/foreign key constraints to reflection section of PostgreSQ...
• 431979e Add Database#graph_table to support GRAPH_TABLE expressions on PostgreSQL 19+
• cef0e9c Add Database#create_property_graph to support CREATE PROPERTY GRAPH on Postgr...
• 5609197 Restore TruffleRuby on CI
• c08bea8 Fix specs on TruffleRuby
• Additional commits viewable in compare view

Updates tilt from 2.6.1 to 2.9.0

Changelog

Sourced from tilt's changelog.

2.9.0 (2026-08-17)

• Add Herb template, registered for .herb and .html.erb (marcoroth) (#30)

2.8.0 (2026-07-06)

• Support rdoc 8 in the rdoc template (jeremyevans)
• Support options added in recent Commonmarker versions in the Commonmarker template (halo) (#26)

2.7.0 (2026-01-09)

• Support passing template-specific options to Tilt::Pipeline.new (LevitatingBusinessMan) (#24)
• Remove deprecated creole template (jeremyevans)
• Make the rendering of Prawn templates idempotent (rickenharp) (#20)

Commits

• f0d75c6 Bump version to 2.9.0
• c6f5711 Register ERB/Erubi for .html.erb
• b5371b6 Update commonmarker tests for changes in recent versions of commonmarker
• 610b5e3 Add Herb Template Engine
• b0ad5b9 Bump version to 2.8.0
• 4aabc43 Fix CI rdoc version guard on JRuby
• ba41618 Limit rdoc to < 8 on JRuby in CI
• 95afeb0 Support rdoc 8 in the rdoc template
• 5ebaf2f Decrease repetitions in Prawn test
• 8c68520 Add Add JRuby 10.1 to CI
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions