Bump the "all" group with 3 updates across multiple ecosystems #20845
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=80&v=4){kind=small}
Bumps the all group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action) and [actions/stale](https://github.com/actions/stale). Updates `github/codeql-action` from 3.30.6 to 4.30.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@64d10c1...e296a93) Updates `actions/stale` from 10.0.0 to 10.1.0 - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](actions/stale@3a9db7e...5f858e3) build(deps): bump the all group across 1 directory with 10 updates Bumps the all group with 5 updates in the /Library/Homebrew directory: | Package | From | To | | --- | --- | --- | | [minitest](https://github.com/minitest/minitest) | `5.25.5` | `5.26.0` | | [rubocop-sorbet](https://github.com/shopify/rubocop-sorbet) | `0.10.5` | `0.11.0` | | [sorbet-static-and-runtime](https://github.com/sorbet/sorbet) | `0.6.12616` | `0.6.12633` | | [spoom](https://github.com/Shopify/spoom) | `1.7.6` | `1.7.7` | | [bigdecimal](https://github.com/ruby/bigdecimal) | `3.2.3` | `3.3.1` | Updates `minitest` from 5.25.5 to 5.26.0 - [Changelog](https://github.com/minitest/minitest/blob/master/History.rdoc) - [Commits](minitest/minitest@v5.25.5...v5.26.0) Updates `rubocop-sorbet` from 0.10.5 to 0.11.0 - [Release notes](https://github.com/shopify/rubocop-sorbet/releases) - [Commits](Shopify/rubocop-sorbet@v0.10.5...v0.11.0) Updates `sorbet-static-and-runtime` from 0.6.12616 to 0.6.12633 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `spoom` from 1.7.6 to 1.7.7 - [Release notes](https://github.com/Shopify/spoom/releases) - [Commits](Shopify/spoom@v1.7.6...v1.7.7) Updates `sorbet-runtime` from 0.6.12616 to 0.6.12633 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `bigdecimal` from 3.2.3 to 3.3.1 - [Release notes](https://github.com/ruby/bigdecimal/releases) - [Changelog](https://github.com/ruby/bigdecimal/blob/master/CHANGES.md) - [Commits](ruby/bigdecimal@v3.2.3...v3.3.1) Updates `json` from 2.15.0 to 2.15.1 - [Release notes](https://github.com/ruby/json/releases) - [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md) - [Commits](ruby/json@v2.15.0...v2.15.1) Updates `prism` from 1.5.1 to 1.5.2 - [Release notes](https://github.com/ruby/prism/releases) - [Changelog](https://github.com/ruby/prism/blob/main/CHANGELOG.md) - [Commits](ruby/prism@v1.5.1...v1.5.2) Updates `sorbet` from 0.6.12616 to 0.6.12633 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `sorbet-static` from 0.6.12616 to 0.6.12633 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) build(deps): bump certifi Bumps the all group with 1 update in the /Library/Homebrew/formula-analytics directory: [certifi](https://github.com/certifi/python-certifi). Updates `certifi` from 2025.8.3 to 2025.10.5 - [Commits](certifi/python-certifi@2025.08.03...2025.10.05) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.30.7 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all - dependency-name: actions/stale dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: minitest dependency-version: 5.26.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: rubocop-sorbet dependency-version: 0.11.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: sorbet-static-and-runtime dependency-version: 0.6.12633 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: spoom dependency-version: 1.7.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: sorbet-runtime dependency-version: 0.6.12633 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: bigdecimal dependency-version: 3.3.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all - dependency-name: json dependency-version: 2.15.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all - dependency-name: prism dependency-version: 1.5.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all - dependency-name: sorbet dependency-version: 0.6.12633 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all - dependency-name: sorbet-static dependency-version: 0.6.12633 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all - dependency-name: certifi dependency-version: 2025.10.5 dependency-type: indirect update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
Autogenerated by the [vendor-gems](https://github.com/Homebrew/brew/blob/HEAD/.github/workflows/vendor-gems.yml) workflow.
ZhongRuoyu
approved these changes
Oct 10, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the all group with 2 updates: github/codeql-action and actions/stale.
Updates
github/codeql-actionfrom 3.30.6 to 4.30.7Release notes
Sourced from github/codeql-action's releases.
Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
e296a93Merge pull request #3183 from github/update-v4.30.7-55283843c93c1673Update changelog for v4.30.75528384Merge pull request #3169 from github/mario-campos/node24b66db86Hoist CHANGELOG note back to "UNRELEASED" section.b2e2232Merge remote-tracking branch 'origin/main' into mario-campos/node24065c6cfMerge pull request #3174 from github/mbg/fix/start-proxy-matrix7fb8378Re-throw exception increateStatusReportBasewhen in test modedddf033Revert changes to build.mjs54ae8baSimplify PR check by reverting changes to@types/node.65e9e64Makematrixavailable tostart-proxyactionUpdates
actions/stalefrom 10.0.0 to 10.1.0Release notes
Sourced from actions/stale's releases.
Commits
5f858e3Addonly-issue-typesoption to filter issues by type (#1255)Bumps the all group with 5 updates in the /Library/Homebrew directory:
5.25.55.26.00.10.50.11.00.6.126160.6.126331.7.61.7.73.2.33.3.1Updates
minitestfrom 5.25.5 to 5.26.0Changelog
Sourced from minitest's changelog.
Commits
f78aa72prepped for release5faf12f- Use Regexp.escape for BASE_RE in case pwd has special chars. (astra_1993)839c5f0- Bypass parallel_executor entirely when n_threads=1.7c90742- Switched assert_equal's diff from Tempfile.open to Tempfile.create.b3dcd38clarify an assert_equal + newline + backslash n test output to be more readable14c87efImprove let tests to no longer be order dependent.6c995cf- Ensure that minitest exits non-zero on Interrupt. (tavianator)42ce806- Removed some 1.8/1.9-based code from the assertions and expectations.a17393e- Still fighting with rdoc? Yup. Still fighting with rdoc...68b3d0c- Don't require rubygems in Rakefile... it is 2025.Updates
rubocop-sorbetfrom 0.10.5 to 0.11.0Release notes
Sourced from rubocop-sorbet's releases.
Commits
1388eb5Release v0.11.05e42112Merge pull request #356 from botantony/add_forbid_t_any_with_nilclass_cop4a1000dAddForbidTAnyWithNilClasscop44344b3Merge pull request #355 from Shopify/forbid-t-sigec15f93Add Sorbet/ForbidTSig and Sorbet/ForbidTHelpers copsc943302Merge pull request #354 from Shopify/dependabot/github_actions/actions/stale-...0cbe100Bump actions/stale from 10.0.0 to 10.1.0ea81b48Merge pull request #349 from Earlopain/fix-docs-url-for-lsp00a7604Bump actions/stale from 9.1.0 to 10.0.0 (#351)e58fa58Bump actions/github-script from 7.0.1 to 8.0.0 (#350)Updates
sorbet-static-and-runtimefrom 0.6.12616 to 0.6.12633Release notes
Sourced from sorbet-static-and-runtime's releases.
... (truncated)
Commits
Updates
spoomfrom 1.7.6 to 1.7.7Commits
dc6aedbBump version to v1.7.768c0037Merge pull request #803 from Shopify/comments-and-types661fce0bin/export-rbi7ecc7f4rubocop -a0064311Add fix for test that seems to be failing on main79fbc5bFix spoom srb assertions translate to preserve trailing comments in correct o...b8e15b5Merge pull request #801 from Shopify/dependabot/bundler/minor-and-patch-f2baf...dd4cc03Bump sorbet-static-and-runtime in the minor-and-patch group4d8b103Merge pull request #800 from Shopify/dependabot/github_actions/ruby/setup-rub...9bbd4baMerge pull request #799 from Shopify/dependabot/bundler/minor-and-patch-dd64e...Updates
sorbet-runtimefrom 0.6.12616 to 0.6.12633Release notes
Sourced from sorbet-runtime's releases.
... (truncated)
Commits
Updates
bigdecimalfrom 3.2.3 to 3.3.1Release notes
Sourced from bigdecimal's releases.
Changelog
Sourced from bigdecimal's changelog.
Commits
2d932f4Bump version to 3.3.1 (#443)8f34991Unify all precision validation to be consistent with BigDecimal#add (#442)a831065Fix modulo/remainder of negative zero (#441)0aa97bbBump version to 3.3.0 (#437)f718178Fix precision of x.power(y, prec) when the result is nearly infinity (#439)a267ca7Improve performance of x**y when y is a huge value (#438)cb2458bAdd newline at EOF [ci skip]d93b542Make internal BigMath method a private method (#432)f107735Merge pull request #431 from ruby/dependabot/github_actions/step-security/har...6682fd8Bump step-security/harden-runner from 2.13.0 to 2.13.1Updates
jsonfrom 2.15.0 to 2.15.1Release notes
Sourced from json's releases.
Changelog
Sourced from json's changelog.
Commits
9e6067bRelease 2.15.11e19097Add a workflow to sync commits to ruby/ruby (#872)1b1647fUpdate changelogeec466dMerge pull request #871 from tompng/fix_sliced_string_escaped7baf01Fix sliced string escapingd867e39Run jruby-head on Windowsec85851Fix a typo in the changelogUpdates
prismfrom 1.5.1 to 1.5.2Release notes
Sourced from prism's releases.
Changelog
Sourced from prism's changelog.
Commits
5446f7bMerge pull request #3675 from ruby/bump-version7574837Bump to v022d6d0Merge pull request #3674 from Earlopain/endless-method-no-parense1910d4For these special cases, there exists no optional argument type. Since a endl...c89ca2async-ruby.yml: Fix the target push branchc0f3ea7Add a workflow to sync commits to ruby/ruby (#3673)3070615Merge pull request #3672 from ruby/dependabot/bundler/gemfiles/typecheck/ruby...5e2a3afMerge pull request #3671 from ruby/dependabot/maven/java-wasm/java-deps-7d48a...f6befc3Bump sorbetbde0629Bump the java-deps group in /java-wasm with 4 updatesUpdates
sorbetfrom 0.6.12616 to 0.6.12633Release notes
Sourced from sorbet's releases.
... (truncated)
Commits
Updates
sorbet-staticfrom 0.6.12616 to 0.6.12633Release notes
Sourced from sorbet-static's releases.
... (truncated)
Commits
Bumps the all group with 1 update in the /Library/Homebrew/formula-analytics directory: certifi.
Updates
certififrom 2025.8.3 to 2025.10.5Commits
fb14ac42025.10.05 (#371)2c7c7eeAdd Python 3.14 classifier in setup.py1a5cb7bBump actions/setup-python from 5.6.0 to 6.0.0 (#367)dea5960Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 (#366)83566b7Bump actions/checkout from 4.2.2 to 5.0.0ca2e121Bump actions/download-artifact from 4.3.0 to 5.0.0Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions