Skip to content

chore(deps): bump the monthly-batch group with 4 updates - #108

Merged
chorrell merged 1 commit into
mainfrom
dependabot/pre_commit/monthly-batch-648418e630
Sep 1, 2026
Merged

chore(deps): bump the monthly-batch group with 4 updates#108
chorrell merged 1 commit into
mainfrom
dependabot/pre_commit/monthly-batch-648418e630

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the monthly-batch group with 4 updates: https://github.com/hadolint/hadolint, https://github.com/DavidAnson/markdownlint-cli2, https://github.com/rubocop/rubocop and https://github.com/woodruffw/zizmor-pre-commit.

Updates https://github.com/hadolint/hadolint from v2.14.0 to 2.15.1

Release notes

Sourced from https://github.com/hadolint/hadolint's releases.

v2.15.1

What's Changed

Full Changelog: hadolint/hadolint@v2.15.0...v2.15.1

v2.15.0

What's Changed

... (truncated)

Commits
  • 2eece55 CI: Run cabal freeze after cabal update
  • 38ae810 CI: Update Cabal cache after setting CABAL_DIR
  • fcbcf10 CI: Fix Github Action context.
  • 35dbdfa CI: Set CABAL_DIR
  • de741b7 Release v2.15.1
  • 6fcf76f Merge pull request #1226 from m-ildefons/gh-1222
  • e2cd8e4 DL3066: Fix false positive when UID is an argument
  • f62eea8 Merge pull request #1225 from m-ildefons/wip/release-macos-cache
  • 4a4365d CI: Fix Macos Cache and image name
  • 87c5e65 Hadolint Online debug
  • Additional commits viewable in compare view

Updates https://github.com/DavidAnson/markdownlint-cli2 from v0.23.1 to 0.23.2

Changelog

Sourced from https://github.com/DavidAnson/markdownlint-cli2's changelog.

0.23.2

  • Update dependencies
Commits
  • b82a6c8 Update to version 0.23.2.
  • e4e659d Add a stub for process.nextTick (using queueMicrotask) now that globby (indir...
  • 99760af Bump globby from 16.2.1 to 16.2.2
  • 3070236 Address new ESLint warnings from previous commit.
  • 6e3cc93 Bump eslint-plugin-unicorn from 71.1.0 to 72.0.0
  • 4ba8177 Add eslint-package-json/all to lint script, address new issues.
  • 9cb99b2 Refactor eslint.config.mjs to use defineConfig, change eslint-plugin-n from "...
  • 37fb0ec Address new ESLint warnings from previous commit.
  • f7fea61 Bump eslint-node-test from 0.2.0 to 0.3.0
  • 85bb5e7 Bump js-yaml from 5.2.1 to 5.2.2
  • Additional commits viewable in compare view

Updates https://github.com/rubocop/rubocop from v1.88.2 to 1.90.0

Release notes

Sourced from https://github.com/rubocop/rubocop's releases.

RuboCop v1.90.0

New features

  • #15073: Add AllowTrailingComment option to Style/DisableCopsWithinSourceCodeDirective. ([@​bbatsov][])
  • #9505: Add disable-next directives scoped to the following statement. ([@​bbatsov][])
  • #15550: Add --display-suppressed option to also report offenses suppressed by directive comments, including their -- justification in the JSON formatter. ([@​bbatsov][])
  • #15523: Add new Lint/ArgumentMismatch cop. ([@​bbatsov][])
  • #15594: Add new Lint/SuperArgumentMismatch cop. ([@​bbatsov][])
  • #15581: Add new Style/TimeNow cop. ([@​Starlexxx][])
  • #15111: Add NumberOfEmptyLines option to Layout/EmptyLineAfterMagicComment to configure the minimum number of empty lines required after magic comments. ([@​alejofraga][])
  • #13037: Add --report-unused-todo-entries to catch rotting todo files. ([@​bbatsov][])
  • #15559: Add new Style/DirectiveScope cop to flag disable/enable pairs and disable-only push/pop scopes that wrap a single statement and can use disable-next instead. ([@​bbatsov][])
  • #15547: Make Lint/RedundantCopEnableDirective flag # rubocop:pop directives without a matching # rubocop:push. ([@​bbatsov][])

Bug fixes

  • #15584: Fix a crash in Lint/NameTypo and Lint/UnusedPrivateMethod on string literals with invalid encoding. ([@​bbatsov][])
  • #15541: Fix a false negative for Lint/OutOfRangeRegexpRef when a preceding element access with a non-string literal argument (e.g. hash[:key]) discarded the tracked capture count. ([@​koic][])
  • #7958: Add todo comments for skipped unsafe corrections with --disable-uncorrectable. ([@​bbatsov][])
  • #15569: Fix an error for the built-in language server when a workspace/executeCommand request has no document URI in its arguments. ([@​koic][])
  • #15410: Fix an incorrect autocorrect for Naming/BinaryOperatorParameterName. ([@​bbatsov][])
  • #15576: Fix an incorrect autocorrect for Style/Sample when shuffle is given a random: argument; the offense is still reported but no longer autocorrected, since shuffle and sample consume a seeded generator differently and would select different elements. ([@​koic][])
  • #15590: Fix an infinite loop error for Layout/FirstArgumentIndentation when EnforcedStyle: with_fixed_indentation is specified for Layout/ArgumentAlignment and Layout/FirstMethodArgumentLineBreak is enabled with AllowMultilineFinalElement: true. ([@​Starlexxx][])
  • #15588: Fix RuboCop::Cop::IgnoredMethods and RuboCop::Cop::IgnoredPattern being unreachable after require 'rubocop'. ([@​SeanLF][])
  • #8349: Don't autocorrect away directives for unknown cops. ([@​bbatsov][])
  • #7894: Don't flag disables of pending cops as redundant. ([@​bbatsov][])
  • #9963: Fix false negatives for Layout/ExtraSpacing. ([@​Starlexxx][])
  • #15525: Fix false negatives in Layout/LineLength when a constant path like Http::UploadedFile matches URISchemes case-insensitively. ([@​koic][])
  • #13941: Fix false positives for Lint/UselessConstantScoping when assigning with Class.new, Module.new, Struct.new, or Data.define after private. ([@​pdobb][])
  • #15526: Fix false positives in Layout/MultilineMethodCallIndentation when a line has multiple single-line blocks before a multiline block. ([@​koic][])
  • #15538: Fix false positives in Lint/ConstantReassignment when a constant is assigned in compact-style namespaces (e.g. module A::B). ([@​alex-tan][])
  • #15517: Fix false positives in Lint/RedundantSafeNavigation when InferNonNilReceiver is enabled and the receiver name is rebound by a nested block (it or a shadowed block parameter). ([@​koic][])
  • #15572: Fix RuboCop::Cop::Registry#freeze to freeze its internal collections, so that registering a lazily loaded cop after the freeze fails fast at the registration site instead of corrupting the registry. ([@​koic][])
  • #15585: Make Lint/DuplicateMethods honor silence_redefinition_of_method and redefine_method as intentional redefinitions. ([@​bbatsov][])
  • #15558: Fix --display-suppressed reporting a nil justification when the offense is loaded from the result cache. ([@​corsonknowles][])
  • #10449: Fix Layout/ClassStructure autocorrection producing a wrong order when an element cannot be moved, and make offenses report the category that actually blocks the expected order. ([@​koic][])
  • #15568: Fix Lint/NameTypo registering false positives for names provided by a gem whose namespace the project reopens, and for constants read from a namespace with an unresolved ancestor. ([@​HoneyryderChuck][])
  • #15556: Fix Lint/UnusedPrivateMethod retaining every past project_index object it has seen (and the index graph reachable from each), rather than only the most recent one. This caused unbounded memory growth in long-lived processes such as rubocop --server. ([@​bquorning][])
  • #10046: Fix Lint/UselessMethodDefinition false positive for methods with **kwargs. ([@​bbatsov][])
  • #15589: Fix --lsp and --mcp being silently ignored when the RuboCop server is running: they now start the protocol server in the current process instead of being forwarded to the server as a lint request. ([@​koic][])
  • #11148: Merge department and cop-level Exclude settings. ([@​bbatsov][])
  • #15531: Fix a regression in RuboCop 1.89 where the modifier cops could produce lines longer than Layout/LineLength Max when exemptions like AllowedPatterns matched the result. ([@​bbatsov][])
  • #15574: Fix an incorrect warning such as AllCops does not support TargetRailsVersion parameter when a plugin declares a custom AllCops key with a nil value and another plugin is loaded after it. ([@​koic][])
  • #9543: Preserve escape notation in Style/StringConcatenation autocorrect. ([@​bbatsov][])
  • #11119: Preserve persistent cop instances across files. ([@​Eljees][])
  • #13022: Fix rubocop . (and other relative directory arguments) needlessly traversing directories excluded by the configuration, which made it much slower than rubocop in projects with large ignored trees. ([@​bbatsov][])
  • #15561: Fix Lint/RedundantCopDisableDirective and Lint/RedundantCopEnableDirective leaving a directive's -- reason behind when removing the directive. ([@​corsonknowles][])
  • #15593: Fix false positives for Lint/UnusedPrivateMethod for private definitions of Ruby runtime hooks like inherited and const_missing. ([@​bbatsov][])
  • #15547: Make Lint/MissingCopEnableDirective suggest # rubocop:pop instead of # rubocop:enable for an unclosed # rubocop:push. ([@​bbatsov][])
  • #14379: Suppress multi-line offenses with a directive on any of their lines. ([@​bbatsov][])

... (truncated)

Changelog

Sourced from https://github.com/rubocop/rubocop's changelog.

1.90.0 (2026-08-24)

New features

  • #15073: Add AllowTrailingComment option to Style/DisableCopsWithinSourceCodeDirective. ([@​bbatsov][])
  • #9505: Add disable-next directives scoped to the following statement. ([@​bbatsov][])
  • #15550: Add --display-suppressed option to also report offenses suppressed by directive comments, including their -- justification in the JSON formatter. ([@​bbatsov][])
  • #15523: Add new Lint/ArgumentMismatch cop. ([@​bbatsov][])
  • #15594: Add new Lint/SuperArgumentMismatch cop. ([@​bbatsov][])
  • #15581: Add new Style/TimeNow cop. ([@​Starlexxx][])
  • #15111: Add NumberOfEmptyLines option to Layout/EmptyLineAfterMagicComment to configure the minimum number of empty lines required after magic comments. ([@​alejofraga][])
  • #13037: Add --report-unused-todo-entries to catch rotting todo files. ([@​bbatsov][])
  • #15559: Add new Style/DirectiveScope cop to flag disable/enable pairs and disable-only push/pop scopes that wrap a single statement and can use disable-next instead. ([@​bbatsov][])
  • #15547: Make Lint/RedundantCopEnableDirective flag # rubocop:pop directives without a matching # rubocop:push. ([@​bbatsov][])

Bug fixes

  • #15584: Fix a crash in Lint/NameTypo and Lint/UnusedPrivateMethod on string literals with invalid encoding. ([@​bbatsov][])
  • #15541: Fix a false negative for Lint/OutOfRangeRegexpRef when a preceding element access with a non-string literal argument (e.g. hash[:key]) discarded the tracked capture count. ([@​koic][])
  • #7958: Add todo comments for skipped unsafe corrections with --disable-uncorrectable. ([@​bbatsov][])
  • #15569: Fix an error for the built-in language server when a workspace/executeCommand request has no document URI in its arguments. ([@​koic][])
  • #15410: Fix an incorrect autocorrect for Naming/BinaryOperatorParameterName. ([@​bbatsov][])
  • #15576: Fix an incorrect autocorrect for Style/Sample when shuffle is given a random: argument; the offense is still reported but no longer autocorrected, since shuffle and sample consume a seeded generator differently and would select different elements. ([@​koic][])
  • #15590: Fix an infinite loop error for Layout/FirstArgumentIndentation when EnforcedStyle: with_fixed_indentation is specified for Layout/ArgumentAlignment and Layout/FirstMethodArgumentLineBreak is enabled with AllowMultilineFinalElement: true. ([@​Starlexxx][])
  • #15588: Fix RuboCop::Cop::IgnoredMethods and RuboCop::Cop::IgnoredPattern being unreachable after require 'rubocop'. ([@​SeanLF][])
  • #8349: Don't autocorrect away directives for unknown cops. ([@​bbatsov][])
  • #7894: Don't flag disables of pending cops as redundant. ([@​bbatsov][])
  • #9963: Fix false negatives for Layout/ExtraSpacing. ([@​Starlexxx][])
  • #15525: Fix false negatives in Layout/LineLength when a constant path like Http::UploadedFile matches URISchemes case-insensitively. ([@​koic][])
  • #13941: Fix false positives for Lint/UselessConstantScoping when assigning with Class.new, Module.new, Struct.new, or Data.define after private. ([@​pdobb][])
  • #15526: Fix false positives in Layout/MultilineMethodCallIndentation when a line has multiple single-line blocks before a multiline block. ([@​koic][])
  • #15538: Fix false positives in Lint/ConstantReassignment when a constant is assigned in compact-style namespaces (e.g. module A::B). ([@​alex-tan][])
  • #15517: Fix false positives in Lint/RedundantSafeNavigation when InferNonNilReceiver is enabled and the receiver name is rebound by a nested block (it or a shadowed block parameter). ([@​koic][])
  • #15572: Fix RuboCop::Cop::Registry#freeze to freeze its internal collections, so that registering a lazily loaded cop after the freeze fails fast at the registration site instead of corrupting the registry. ([@​koic][])
  • #15585: Make Lint/DuplicateMethods honor silence_redefinition_of_method and redefine_method as intentional redefinitions. ([@​bbatsov][])
  • #15558: Fix --display-suppressed reporting a nil justification when the offense is loaded from the result cache. ([@​corsonknowles][])
  • #10449: Fix Layout/ClassStructure autocorrection producing a wrong order when an element cannot be moved, and make offenses report the category that actually blocks the expected order. ([@​koic][])
  • #15568: Fix Lint/NameTypo registering false positives for names provided by a gem whose namespace the project reopens, and for constants read from a namespace with an unresolved ancestor. ([@​HoneyryderChuck][])
  • #15556: Fix Lint/UnusedPrivateMethod retaining every past project_index object it has seen (and the index graph reachable from each), rather than only the most recent one. This caused unbounded memory growth in long-lived processes such as rubocop --server. ([@​bquorning][])
  • #10046: Fix Lint/UselessMethodDefinition false positive for methods with **kwargs. ([@​bbatsov][])
  • #15589: Fix --lsp and --mcp being silently ignored when the RuboCop server is running: they now start the protocol server in the current process instead of being forwarded to the server as a lint request. ([@​koic][])
  • #11148: Merge department and cop-level Exclude settings. ([@​bbatsov][])
  • #15531: Fix a regression in RuboCop 1.89 where the modifier cops could produce lines longer than Layout/LineLength Max when exemptions like AllowedPatterns matched the result. ([@​bbatsov][])
  • #15574: Fix an incorrect warning such as AllCops does not support TargetRailsVersion parameter when a plugin declares a custom AllCops key with a nil value and another plugin is loaded after it. ([@​koic][])
  • #9543: Preserve escape notation in Style/StringConcatenation autocorrect. ([@​bbatsov][])
  • #11119: Preserve persistent cop instances across files. ([@​Eljees][])
  • #13022: Fix rubocop . (and other relative directory arguments) needlessly traversing directories excluded by the configuration, which made it much slower than rubocop in projects with large ignored trees. ([@​bbatsov][])
  • #15561: Fix Lint/RedundantCopDisableDirective and Lint/RedundantCopEnableDirective leaving a directive's -- reason behind when removing the directive. ([@​corsonknowles][])
  • #15593: Fix false positives for Lint/UnusedPrivateMethod for private definitions of Ruby runtime hooks like inherited and const_missing. ([@​bbatsov][])
  • #15547: Make Lint/MissingCopEnableDirective suggest # rubocop:pop instead of # rubocop:enable for an unclosed # rubocop:push. ([@​bbatsov][])

... (truncated)

Commits
  • f1b25e1 Cut 1.90
  • 72895f6 Update Changelog
  • 7042de6 Move op_method? before the shadowing helpers
  • 4b14dd2 Fix an incorrect autocorrect for Naming/BinaryOperatorParameterName
  • 5d221ac [Fix #10046] Fix Lint/UselessMethodDefinition false positive for methods wi...
  • 5070fc3 [Fix #15111] Add NumberOfEmptyLines option to `Layout/EmptyLineAfterMagicCo...
  • 496eb65 [Fix #9543] Preserve escape notation in Style/StringConcatenation autocorrect
  • 75b3622 Remove a directive's -- reason along with the directive
  • 858d8a8 Merge pull request #15596 from koic/add_real_last_column_to_offense
  • 15557b0 Add Offense#real_last_column and use it in JSONFormatter
  • Additional commits viewable in compare view

Updates https://github.com/woodruffw/zizmor-pre-commit from v1.28.0 to 1.29.0

Release notes

Sourced from https://github.com/woodruffw/zizmor-pre-commit's releases.

v1.29.0

New Features 🌈🔗

  • zizmor now has experimental support for auditing pre-commit inputs, meaning both pre-commit configuration and hook definitions (#2209)

  • New audit: insecure-url-scheme detects usages of insecure (i.e. plaintext) protocols when making network requests. The initial version of this audit is limited to pre-commit inputs only (#2228)

  • zizmor now supports GitHub's "self-repository" reference syntax for local actions, e.g. uses: $/foo/bar instead of a manual checkout and uses: ./foo/bar (#2248)

Changes ⚠️🔗

Removals 🌅🔗

  • --collect=workflows-only and --collect=actions-only have been fully removed. Use --collect=workflows and --collect=actions for the replacement behavior (#2242)

Bug Fixes 🐛🔗

  • Fixed a bug where zizmor would reject a valid workflow definition for containing a literal jobs..outputs. value for being a non-string (#2220)

  • Fixed a bug where the github-app audit would incorrectly flag some usages as needing a repositories: key, despite requesting organization-level-only permissions (#2227)

  • Fixed a class of bugs where zizmor would discover the user's configuration in unintuitive ways. When auditing from a Git repository, zizmor now uses the repository root to discover configuration consistently (#2234)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the monthly-batch group with 4 updates
0f747fc 
Bumps the monthly-batch group with 4 updates: [https://github.com/hadolint/hadolint](https://github.com/hadolint/hadolint), [https://github.com/DavidAnson/markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2), [https://github.com/rubocop/rubocop](https://github.com/rubocop/rubocop) and [https://github.com/woodruffw/zizmor-pre-commit](https://github.com/woodruffw/zizmor-pre-commit).


Updates `https://github.com/hadolint/hadolint` from v2.14.0 to 2.15.1
- [Release notes](https://github.com/hadolint/hadolint/releases)
- [Changelog](https://github.com/hadolint/hadolint/blob/master/docs/RELEASE.md)
- [Commits](hadolint/hadolint@v2.14.0...v2.15.1)

Updates `https://github.com/DavidAnson/markdownlint-cli2` from v0.23.1 to 0.23.2
- [Changelog](https://github.com/DavidAnson/markdownlint-cli2/blob/main/CHANGELOG.md)
- [Commits](DavidAnson/markdownlint-cli2@v0.23.1...v0.23.2)

Updates `https://github.com/rubocop/rubocop` from v1.88.2 to 1.90.0
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.88.2...v1.90.0)

Updates `https://github.com/woodruffw/zizmor-pre-commit` from v1.28.0 to 1.29.0
- [Release notes](https://github.com/woodruffw/zizmor-pre-commit/releases)
- [Commits](zizmorcore/zizmor-pre-commit@v1.28.0...v1.29.0)

---
updated-dependencies:
- dependency-name: https://github.com/hadolint/hadolint
  dependency-version: 2.15.1
  dependency-type: direct:production
  dependency-group: monthly-batch
- dependency-name: https://github.com/DavidAnson/markdownlint-cli2
  dependency-version: 0.23.2
  dependency-type: direct:production
  dependency-group: monthly-batch
- dependency-name: https://github.com/rubocop/rubocop
  dependency-version: 1.90.0
  dependency-type: direct:production
  dependency-group: monthly-batch
- dependency-name: https://github.com/woodruffw/zizmor-pre-commit
  dependency-version: 1.29.0
  dependency-type: direct:production
  dependency-group: monthly-batch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file pre_commit Pull requests that update pre_commit code labels Sep 1, 2026
@dependabot
dependabot Bot requested a review from chorrell as a code owner September 1, 2026 14:31
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file pre_commit Pull requests that update pre_commit code labels Sep 1, 2026
@chorrell
chorrell merged commit b32b51f into main Sep 1, 2026
2 checks passed
@chorrell
chorrell deleted the dependabot/pre_commit/monthly-batch-648418e630 branch September 1, 2026 14:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@chorrell chorrell chorrell approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file pre_commit Pull requests that update pre_commit code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@chorrell