Skip to content

Bumps 2026-05-26#285

Merged
bartes merged 2 commits into
developfrom
bumps-2026-05-26
May 26, 2026
Merged

Bumps 2026-05-26#285
bartes merged 2 commits into
developfrom
bumps-2026-05-26

Conversation

@bartes
Copy link
Copy Markdown
Contributor

@bartes bartes commented May 26, 2026

What and why

Routine dependency refresh. Pulls in the latest bug-fix releases of our test/runtime stack, picks up Rack 3.2 (security and minor fixes), brings Ruby to 3.4.9 for the patched zlib (CVE-2026-27820), and unbreaks yarn format:check along the way.

Changes

  • Gemfile.lock via bundle update
    • rack 3.1.19 → 3.2.6
    • rake 13.2.1 → 13.4.2
    • rspec 3.13.0 → 3.13.2 (+ rspec-core / -mocks / -support)
    • simplecov-html 0.13.1 → 0.13.2
    • timecop 0.9.10 → 0.9.11
    • diff-lcs 1.5.1 → 1.6.2
  • .ruby-version / .tool-versions: Ruby 3.4.6 → 3.4.9
  • .tool-versions: Node.js 24.14.1 → 24.16.0 (latest LTS)
  • Repair yarn format:check: @prettier/plugin-ruby 4.x requires syntax_tree at runtime but it was never in the Gemfile, so the format check has been silently failing with LoadError: cannot load such file -- syntax_tree. Added syntax_tree to the dev group, ran prettier --write against the 11 spec files that had drifted, and disabled two rubocop cops that conflict with prettier-ruby's output (Layout/SpaceInsideHashLiteralBraces and Style/EmptyMethod) so prettier and rubocop stay aligned.
  • CHANGELOG.md: entry under ## master

The CI matrix in .github/workflows/specs.yml pins to loose minors ('3.4', etc.), so it picks up the new patch version automatically — no workflow change needed.

- Update gems via `bundle update`: rack 3.1.19 → 3.2.6, rake 13.2.1 → 13.4.2,
  rspec 3.13.0 → 3.13.2, rspec-core/-mocks/-support, simplecov-html,
  timecop 0.9.10 → 0.9.11, diff-lcs 1.5.1 → 1.6.2.
- Bump Ruby to 3.4.9 (security: zlib CVE-2026-27820).
- Bump Node.js to 24.16.0 in `.tool-versions`.

Verified locally: `bundle exec rspec` (428 examples, 0 failures) and
`bundle exec rubocop` (no offenses).
@bartes bartes marked this pull request as ready for review May 26, 2026 09:34
@bartes bartes requested a review from afterdesign May 26, 2026 09:34
`@prettier/plugin-ruby` 4.x spawns a Ruby server that requires
`syntax_tree`, which was never added to the Gemfile, so `yarn format:check`
has been failing with `LoadError: cannot load such file -- syntax_tree`.

- Add `syntax_tree` to the dev group of the Gemfile.
- Run `yarn prettier --write .` against the 11 spec files that had drifted.
- Disable two rubocop cops that conflict with prettier-ruby's output so CI
  stays green:
  - `Layout/SpaceInsideHashLiteralBraces` (prettier breaks empty hashes
    onto two lines, which rubocop reads as space inside empty braces)
  - `Style/EmptyMethod` (prettier expands `def foo; end` to `def foo\nend`)

Verified: `bundle exec rubocop`, `yarn format:check`, `bundle exec rspec`
(428 examples, 0 failures) all pass.
@bartes bartes merged commit e12221a into develop May 26, 2026
9 checks passed
@bartes bartes deleted the bumps-2026-05-26 branch May 26, 2026 09:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants