chore(deps): bump the dependencies group across 1 directory with 2 updates by dependabot[bot] · Pull Request #5238 · github/explore

dependabot · 2026-07-06T08:53:05Z

Bumps the dependencies group with 2 updates in the / directory: json and rubocop.

Updates json from 2.19.9 to 2.20.0

Release notes

v2.20.0

What's Changed

Both C and Java parsers are no longer recursive, so parsing very deep documents with max_nesting: false will no longer result in SystemStackError stack level too deep errors.

The :max_nesting option still defaults to 100.

Optimized floating point number parsing further by replacing the ryu algorithm by a port of Eisel-Lemire Fast Float.

Added JSON::ResumableParser to parse streams of JSON documents. Not yet available on JRuby.

Deprecate default support of JavaScript comments in the parser and add allow_comments: true parsing option.

Integrate with Ruby 4.1 ruby_sized_xfree.

Full Changelog: ruby/json@v2.19.8...v2.20.0

Changelog

Sourced from json's changelog.

2026-06-23 (2.20.0)

Both C and Java parsers are no longer recursive, so parsing very deep documents with max_nesting: false will no longer result in SystemStackError stack level too deep errors.

The :max_nesting option still defaults to 100.

Optimized floating point number parsing further by replacing the ryu algorithm by a port of Eisel-Lemire Fast Float.

Added JSON::ResumableParser to parse streams of JSON documents. Not yet available on JRuby.

Deprecate default support of JavaScript comments in the parser and add allow_comments: true parsing option.

Integrate with Ruby 4.1 ruby_sized_xfree.

Commits

1316292 Release 2.20.0
1443265 Remove useless executable bits
532065c Preserve UTF-8 encoding when reallocating a frozen ResumableParser buffer
7c8af4b Update extconf.rb guard to use RUBY_ENGINE_VERSION
2afd1a9 Cleanup the rb_catch_obj workaround
9892514 Simplify parser_config_init
b30a8f8 ResumableParser: eagerly drop the buffer when reaching EOS
f08c663 ResumableParser: accept only keyword arguments
9d8efcb Workaround TruffleRuby buggy rb_catch_obj implementation
4bd1e9b ResumableParser: use throw rather than raise for handled EOS
Additional commits viewable in compare view

Updates rubocop from 1.88.0 to 1.88.1

Release notes

Sourced from rubocop's releases.

RuboCop v1.88.1

Bug fixes

#15408: Fix a crash for Bundler/GemComment with a non-literal gem option key. ([@bbatsov][])

#9571: Fix a crash for Layout/ClassStructure when a class body is a single safe-navigation call (e.g. test&.private_methods(def foo; end)). ([@bbatsov][])

#15413: Fix a crash for Gemspec/DevelopmentDependencies when AllowedGems is nil. ([@bbatsov][])

#15404: Fix a crash for Metrics/MethodLength with an anonymous define_method. ([@bbatsov][])

#15414: Fix a crash for Naming/InclusiveLanguage with nil or empty FlaggedTerms. ([@bbatsov][])

#15405: Fix a crash for Security/IoMethods with a non-string-literal argument. ([@bbatsov][])

#15330: Fix a crash for Style/EmptyStringInsideInterpolation with a modifier conditional. ([@bbatsov][])

#15351: Fix a crash for Style/OpenStructUse with a bare OpenStruct root node. ([@bbatsov][])

#15379: Fix a crash for Style/TrailingUnderscoreVariable when a nested destructuring group consists only of underscore variables. ([@bbatsov][])

#15412: Fix a false negative for Security/MarshalLoad with a proc argument. ([@bbatsov][])

#15386: Fix a false negative for Style/MethodDefParentheses with named rest arguments under EnforcedStyle: require_no_parentheses. ([@bbatsov][])

#15396: Fix a false negative for Style/MultilineMethodSignature where a signature that fits on one line was skipped because the multi-line source length was measured instead of the collapsed width. ([@bbatsov][])

#15386: Fix a false negative for Style/OptionalArguments with singleton methods. ([@bbatsov][])

#15383: Fix a false negative for Style/RedundantFilterChain with numbered-parameter blocks. ([@bbatsov][])

#15290: Fix a false negative for Lint/ToEnumArguments when a braced hash is passed to keyword parameters (e.g. to_enum(:m, { required: required })), which raises ArgumentError when the enumerator is used. ([@RedZapdos123][])

#11956: Fix a false positive for Naming/FileName when a class or module name contains multiple consecutive AllowedAcronyms. ([@camallen][])

#15324: Fix a false positive for Style/DirEmpty with a block. ([@bbatsov][])

#15326: Fix a false positive for Style/EmptyLiteral with numbered and it block parameters. ([@bbatsov][])

#15335: Fix a false positive for Style/EnvHome. ([@bbatsov][])

#15345: Fix a false positive for Style/InlineComment with rubocop:todo directives. ([@bbatsov][])

#15348: Fix a false positive for Style/MultilineIfThen. ([@bbatsov][])

#15383: Fix a false positive for Style/NumericPredicate when an allowed method encloses a numbered-parameter or it block. ([@bbatsov][])

#15389: Fix a false positive for Style/OptionHash when the options hash is forwarded with an explicit super. ([@bbatsov][])

#15350: Fix a false positive for Style/RedundantFormat with a lone format sequence. ([@bbatsov][])

#15374: Fix a false positive for Style/RedundantSelf with a rescue exception variable. ([@bbatsov][])

#15376: Fix a false positive for Style/Semicolon with a semicolon inside a string literal. ([@bbatsov][])

#15398: Fix an incorrect autocorrect for Layout/ConditionPosition that dropped a body statement sharing the condition's line via a semicolon. ([@bbatsov][])

#15399: Fix an incorrect autocorrect for Layout/EmptyComment that deleted a heredoc when removing an empty comment trailing its opener. ([@bbatsov][])

#15400: Fix an incorrect autocorrect for Layout/EmptyLineBetweenDefs that inserted a blank line inside a heredoc body when an endless method's body was a heredoc. ([@bbatsov][])

#15401: Fix an incorrect autocorrect for Layout/SpaceAroundOperators that turned **= and /= compound assignments into **//, dropping the assignment. ([@bbatsov][])

#15406: Fix an incorrect autocorrect for Naming/MemoizedInstanceVariableName. ([@bbatsov][])

#15411: Fix an incorrect autocorrect for Naming/RescuedExceptionsVariableName. ([@bbatsov][])

#15319: Fix an incorrect autocorrect for Style/DataInheritance with a brace block. ([@bbatsov][])

#15323: Fix an incorrect autocorrect for Style/EmptyCaseCondition as a yield/super argument. ([@bbatsov][])

#15323: Fix an incorrect autocorrect for Style/EmptyCaseCondition with low-precedence when values. ([@bbatsov][])

#15322: Fix an incorrect autocorrect for Style/EmptyClassDefinition with a namespaced constant. ([@bbatsov][])

#15336: Fix an incorrect autocorrect for Style/EmptyHeredoc. ([@bbatsov][])

#15332: Fix an incorrect autocorrect for Style/EvenOdd. ([@bbatsov][])

#15329: Fix an incorrect autocorrect for Style/ExactRegexpMatch with a single quote. ([@bbatsov][])

#15333: Fix an incorrect autocorrect for Style/FileNull. ([@bbatsov][])

#15334: Fix an incorrect autocorrect for Style/For. ([@bbatsov][])

#15331: Fix an incorrect autocorrect for Style/FormatString with a low-precedence argument. ([@bbatsov][])

#15331: Fix an incorrect autocorrect for Style/FormatString with a splat argument. ([@bbatsov][])

#15337: Fix an incorrect autocorrect for Style/HashSlice. ([@bbatsov][])

#15327: Fix an incorrect autocorrect for Style/HashSyntax with a multi-pair braceless return. ([@bbatsov][])

#15368: Fix an incorrect autocorrect for Style/IfWithSemicolon that changed semantics when the condition was an assignment, by parenthesizing it in the resulting ternary. ([@bbatsov][])

#15340: Fix an incorrect autocorrect for Style/KeywordArgumentsMerging with a block-pass argument. ([@bbatsov][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.88.1 (2026-07-01)

Bug fixes

#15408: Fix a crash for Bundler/GemComment with a non-literal gem option key. ([@bbatsov][])

#9571: Fix a crash for Layout/ClassStructure when a class body is a single safe-navigation call (e.g. test&.private_methods(def foo; end)). ([@bbatsov][])

#15413: Fix a crash for Gemspec/DevelopmentDependencies when AllowedGems is nil. ([@bbatsov][])

#15404: Fix a crash for Metrics/MethodLength with an anonymous define_method. ([@bbatsov][])

#15414: Fix a crash for Naming/InclusiveLanguage with nil or empty FlaggedTerms. ([@bbatsov][])

#15405: Fix a crash for Security/IoMethods with a non-string-literal argument. ([@bbatsov][])

#15330: Fix a crash for Style/EmptyStringInsideInterpolation with a modifier conditional. ([@bbatsov][])

#15351: Fix a crash for Style/OpenStructUse with a bare OpenStruct root node. ([@bbatsov][])

#15379: Fix a crash for Style/TrailingUnderscoreVariable when a nested destructuring group consists only of underscore variables. ([@bbatsov][])

#15412: Fix a false negative for Security/MarshalLoad with a proc argument. ([@bbatsov][])

#15386: Fix a false negative for Style/MethodDefParentheses with named rest arguments under EnforcedStyle: require_no_parentheses. ([@bbatsov][])

#15396: Fix a false negative for Style/MultilineMethodSignature where a signature that fits on one line was skipped because the multi-line source length was measured instead of the collapsed width. ([@bbatsov][])

#15386: Fix a false negative for Style/OptionalArguments with singleton methods. ([@bbatsov][])

#15383: Fix a false negative for Style/RedundantFilterChain with numbered-parameter blocks. ([@bbatsov][])

#15290: Fix a false negative for Lint/ToEnumArguments when a braced hash is passed to keyword parameters (e.g. to_enum(:m, { required: required })), which raises ArgumentError when the enumerator is used. ([@RedZapdos123][])

#11956: Fix a false positive for Naming/FileName when a class or module name contains multiple consecutive AllowedAcronyms. ([@camallen][])

#15324: Fix a false positive for Style/DirEmpty with a block. ([@bbatsov][])

#15326: Fix a false positive for Style/EmptyLiteral with numbered and it block parameters. ([@bbatsov][])

#15335: Fix a false positive for Style/EnvHome. ([@bbatsov][])

#15345: Fix a false positive for Style/InlineComment with rubocop:todo directives. ([@bbatsov][])

#15348: Fix a false positive for Style/MultilineIfThen. ([@bbatsov][])

#15383: Fix a false positive for Style/NumericPredicate when an allowed method encloses a numbered-parameter or it block. ([@bbatsov][])

#15389: Fix a false positive for Style/OptionHash when the options hash is forwarded with an explicit super. ([@bbatsov][])

#15350: Fix a false positive for Style/RedundantFormat with a lone format sequence. ([@bbatsov][])

#15374: Fix a false positive for Style/RedundantSelf with a rescue exception variable. ([@bbatsov][])

#15376: Fix a false positive for Style/Semicolon with a semicolon inside a string literal. ([@bbatsov][])

#15398: Fix an incorrect autocorrect for Layout/ConditionPosition that dropped a body statement sharing the condition's line via a semicolon. ([@bbatsov][])

#15399: Fix an incorrect autocorrect for Layout/EmptyComment that deleted a heredoc when removing an empty comment trailing its opener. ([@bbatsov][])

#15400: Fix an incorrect autocorrect for Layout/EmptyLineBetweenDefs that inserted a blank line inside a heredoc body when an endless method's body was a heredoc. ([@bbatsov][])

#15401: Fix an incorrect autocorrect for Layout/SpaceAroundOperators that turned **= and /= compound assignments into **//, dropping the assignment. ([@bbatsov][])

#15406: Fix an incorrect autocorrect for Naming/MemoizedInstanceVariableName. ([@bbatsov][])

#15411: Fix an incorrect autocorrect for Naming/RescuedExceptionsVariableName. ([@bbatsov][])

#15319: Fix an incorrect autocorrect for Style/DataInheritance with a brace block. ([@bbatsov][])

#15323: Fix an incorrect autocorrect for Style/EmptyCaseCondition as a yield/super argument. ([@bbatsov][])

#15323: Fix an incorrect autocorrect for Style/EmptyCaseCondition with low-precedence when values. ([@bbatsov][])

#15322: Fix an incorrect autocorrect for Style/EmptyClassDefinition with a namespaced constant. ([@bbatsov][])

#15336: Fix an incorrect autocorrect for Style/EmptyHeredoc. ([@bbatsov][])

#15332: Fix an incorrect autocorrect for Style/EvenOdd. ([@bbatsov][])

#15329: Fix an incorrect autocorrect for Style/ExactRegexpMatch with a single quote. ([@bbatsov][])

#15333: Fix an incorrect autocorrect for Style/FileNull. ([@bbatsov][])

#15334: Fix an incorrect autocorrect for Style/For. ([@bbatsov][])

#15331: Fix an incorrect autocorrect for Style/FormatString with a low-precedence argument. ([@bbatsov][])

#15331: Fix an incorrect autocorrect for Style/FormatString with a splat argument. ([@bbatsov][])

#15337: Fix an incorrect autocorrect for Style/HashSlice. ([@bbatsov][])

#15327: Fix an incorrect autocorrect for Style/HashSyntax with a multi-pair braceless return. ([@bbatsov][])

#15368: Fix an incorrect autocorrect for Style/IfWithSemicolon that changed semantics when the condition was an assignment, by parenthesizing it in the resulting ternary. ([@bbatsov][])

... (truncated)

Commits

d35b321 Cut 1.88.1
b4cb565 Update Changelog
3988056 Merge pull request #15352 from rubocop/fix-parallel-assignment-literal-escaping
3abe081 Merge pull request #15365 from rubocop/fix-redundant-line-continuation-eof
f391d5a Merge pull request #15394 from rubocop/fix-nil-lambda-proc-return
37b29a9 Merge pull request #15398 from rubocop/fix-condition-position-semicolon-body
839d492 Merge pull request #15399 from rubocop/fix-empty-comment-heredoc
2d191a4 Merge pull request #15412 from rubocop/fix-marshal-load-extra-args
1767e56 Merge pull request #15406 from rubocop/fix-memoized-ivar-operator-method
c923d29 Merge pull request #15368 from rubocop/fix-if-with-semicolon-assignment
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates Bumps the dependencies group with 2 updates in the / directory: [json](https://github.com/ruby/json) and [rubocop](https://github.com/rubocop/rubocop). Updates `json` from 2.19.9 to 2.20.0 - [Release notes](https://github.com/ruby/json/releases) - [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md) - [Commits](ruby/json@v2.19.9...v2.20.0) Updates `rubocop` from 1.88.0 to 1.88.1 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.88.0...v1.88.1) --- updated-dependencies: - dependency-name: json dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: rubocop dependency-version: 1.88.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added bundler dependabot dependencies labels Jul 6, 2026

dependabot Bot requested a review from a team as a code owner July 6, 2026 08:53

dependabot Bot added dependencies dependabot bundler labels Jul 6, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the dependencies group across 1 directory with 2 updates#5238

chore(deps): bump the dependencies group across 1 directory with 2 updates#5238
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/dependencies-b9b3e996ff

dependabot Bot commented on behalf of github Jul 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 6, 2026

v2.20.0

What's Changed

2026-06-23 (2.20.0)

RuboCop v1.88.1

Bug fixes

1.88.1 (2026-07-01)

Bug fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants