build(deps): bump the bundler group across 1 directory with 4 updates

[dependabot]

Bumps the bundler group with 4 updates in the / directory: simplecov, regexp_parser, unicode-display_width and unicode-emoji.

Updates simplecov from 1.3.0 to 1.3.1

Release notes

Sourced from simplecov's releases.

v1.3.1

Bugfixes

• cover_views compiles templates on Rails main again. Rails removed ActionView::Template.registered_template_handler; the lookup reads ActionView::Template::Handlers.template_handlers and still skips an extension with no handler. See simplecov-ruby/simplecov#1300.
• require "simplecov" works again on JRuby on Windows, where 1.3.0 raised LoadError: Could not open library '.../libprism.dll'. Prism's FFI backend cannot open its native library there, and 1.3.0 required Prism as soon as SimpleCov loaded. Prism now loads only when branch or method coverage needs the static extractor, which a line-only run never does. Where it cannot load at all, the extractor falls back to empty branch and method tables for never-loaded files, as it did before 1.3.0. See simplecov-ruby/simplecov#1299.
• simplecov affected --run works on JRuby on Windows, where it crashed with NoMethodError because Process.wait2 answers no status there. On that platform the runner starts through Kernel#system instead.
• simplecov serve refuses a symlink that points outside the report on JRuby on Windows too. JRuby's File.realpath follows no symlinks there, so serve would have served the file the link pointed to, and simplecov clean and the coverage.json lookup compared paths that were never resolved. On JRuby the CLI now resolves paths through the JDK.

Changelog

Sourced from simplecov's changelog.

1.3.1 (2026-09-24)

Bugfixes

• cover_views compiles templates on Rails main again. Rails removed ActionView::Template.registered_template_handler; the lookup reads ActionView::Template::Handlers.template_handlers and still skips an extension with no handler. See simplecov-ruby/simplecov#1300.
• require "simplecov" works again on JRuby on Windows, where 1.3.0 raised LoadError: Could not open library '.../libprism.dll'. Prism's FFI backend cannot open its native library there, and 1.3.0 required Prism as soon as SimpleCov loaded. Prism now loads only when branch or method coverage needs the static extractor, which a line-only run never does. Where it cannot load at all, the extractor falls back to empty branch and method tables for never-loaded files, as it did before 1.3.0. See simplecov-ruby/simplecov#1299.
• simplecov affected --run works on JRuby on Windows, where it crashed with NoMethodError because Process.wait2 answers no status there. On that platform the runner starts through Kernel#system instead.
• simplecov serve refuses a symlink that points outside the report on JRuby on Windows too. JRuby's File.realpath follows no symlinks there, so serve would have served the file the link pointed to, and simplecov clean and the coverage.json lookup compared paths that were never resolved. On JRuby the CLI now resolves paths through the JDK.

Commits

• 4ee7894 Bump version to 1.3.1
• 486e55e bundle update
• d2a62a8 Resolve paths and wait on runners correctly on JRuby on Windows
• 3a2e08e Load Prism only when the static extractor runs
• 08006c4 Look up Action View handlers on the new registry
• 0e0b168 Bump oxlint from 1.82.0 to 1.83.0 in /html_frontend
• c1641b7 Bump @​happy-dom/global-registrator in /html_frontend
• 26920af Bump ruby/setup-ruby from 1.321.0 to 1.323.0
• b18f50d Bump oxlint from 1.81.0 to 1.82.0 in /html_frontend
• a7fa17e Bump @​types/bun from 1.4.1 to 1.4.2 in /html_frontend
• See full diff in compare view

Updates regexp_parser from 2.12.0 to 2.13.1

Changelog

Sourced from regexp_parser's changelog.

[2.13.1] - 2026-09-28 - Janosch Müller

Fixed

• support lone \p expressions and scan them as escaped literal (#111)
  • match Ruby's behavior, which only warns for \p without a curly bracket
  • thanks to Jason Barnabe for the report

[2.13.0] - 2026-09-21 - Janosch Müller

Added

• greatly improved scanning, lexing, and parsing performance
  • ~5x for a single-expression patterns, ~2x for a 500-expression pattern
• improved performance of #each_expression and #traverse
• greatly improved performance when comparing parse results (via #==)
• improved scanner error messages for invalid patterns, e.g. '\xZ'

Fixed

• SystemStackError when parsing or traversing very deeply nested trees (#109)
• minor memory leak when accepting arbitrary user input as syntax version (#109)
• #match_length now respects the quantifier of backrefs and subexp calls (#107)
• #match_length now handles backref/subexp call multiplexing (#107)
• thanks to Oskar Eichler for reporting these

Commits

• c0f4098 Release v2.13.1
• 5e4ba3b Handle lone \p, fixes #111
• a706d28 Release v2.13.0
• 9364abd Update year [ci skip]
• 495b2c4 Merge pull request #110 from ammar/improve-performance-and-memory-use
• 6aa5f4d Improve performance and prevent SystemStackError
• 4fedf0c Remove redundant gemspec metadata ...
• 13c9b53 Remove unnecessary load path pollution
• 9396d6a Omit platform from gemspec ...
• ed1db74 Omit Gemfile, Rakefile, rl files from bundled gem
• Additional commits viewable in compare view

Updates unicode-display_width from 3.2.0 to 3.3.0

Changelog

Sourced from unicode-display_width's changelog.

3.3.0

• Unicode 18.0
• Fix bug that emoji handling could not be deactivated when using config object
• Fix edge case to not modify string when failing parsing binary input as UTF-8

Commits

• 7aa2280 Release v3.3.0
• 552e624 Upgrade Emoji library to 18.0, too
• 5f3d9bf Add CHANGELOG entry
• 534b4b5 Update Unicode version number
• 8a9f247 Unicode 18.0
• 42d1297 Update license year
• 8fafc50 Merge pull request #38 from OskarEichler/codex/security-pin-ci-actions
• 53d0c18 Merge pull request #36 from OskarEichler/codex/preserve-binary-input
• 7731a91 Merge pull request #34 from OskarEichler/codex/allow-false-emoji-override
• afe98ea Merge pull request #33 from OskarEichler/codex/fix-ci-rgi-mode
• Additional commits viewable in compare view

Updates unicode-emoji from 4.2.0 to 4.3.0

Changelog

Sourced from unicode-emoji's changelog.

4.3.0

• Unicode / Emoji 18.0

Commits

• db9d94d Release v4.3.0
• 4ececcc Regenerate Emoji regexes for Unicode 18.0
• 49b3769 Update Unicode version numbers to 18.0
• 978b151 Unicode 18.0
• b7ad287 Update license year
• 781d792 Update CI Rubies: Remove Ruby 3.1
• aeb6e18 Update CI Rubies: Remove Ruby 3.0
• 71932f1 README: Update CLDR version
• 0ad1de0 Merge pull request #26 from OskarEichler/codex/security-pin-ci-actions
• 0db774a Merge pull request #21 from OskarEichler/codex/freeze-subdivision-data
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[Copilot]

Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.