Skip to content

Bump the dependencies group with 4 updates#120

Merged
cbeer merged 1 commit into
masterfrom
dependabot/bundler/dependencies-0b50de719f
Jul 13, 2026
Merged

Bump the dependencies group with 4 updates#120
cbeer merged 1 commit into
masterfrom
dependabot/bundler/dependencies-0b50de719f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 4 updates: simplecov, tzinfo-data, omniauth-twitter and lograge.

Updates simplecov from 0.22.0 to 1.0.0

Release notes

Sourced from simplecov's releases.

v1.0.0

What's Changed

... (truncated)

Changelog

Sourced from simplecov's changelog.

1.0.0 (2026-07-12)

First stable release of the 1.0 line. The entries below consolidate release candidates rc1 through rc5 and describe all changes since 0.22.1.

Breaking Changes

  • Dropped support for Ruby 3.1 and JRuby 9.4. The minimum is now Ruby 3.2 (and JRuby 10, which reports RUBY_VERSION 3.4). Ruby 3.1 reached end of life in March 2025, and a recent i18n release calls Fiber[], a Ruby 3.2 API, at load time, so suites that load Rails no longer run on 3.1. Raising required_ruby_version to >= 3.2 also excludes JRuby 9.4, which reports RUBY_VERSION 3.1.x. See #1171.
  • JSON formatter: group stats changed from { "covered_percent": 80.0 } to full stats shape { "covered": 8, "missed": 2, "total": 10, "percent": 80.0, "strength": 0.0 }. The key covered_percent is renamed to percent.
  • JSON formatter: simplecov_json_formatter gem is now built in. require "simplecov_json_formatter" continues to work via a shim.
  • StringFilter now matches at path-segment boundaries. "lib" matches /lib/ but no longer matches /library/. Use a Regexp filter for substring matching.
  • SourceFile#project_filename now returns a truly relative path with no leading separator (e.g. lib/foo.rb instead of /lib/foo.rb). This also removes the leading / from file path keys in coverage.json and from the filename in minimum_coverage_by_file error messages. Anchored RegexFilters that relied on a leading / (e.g. %r{^/lib/}) should be rewritten (e.g. %r{\Alib/}).
  • Removed docile gem dependency. The SimpleCov.configure block is now evaluated via instance_exec with instance variable proxying.
  • Removed automatic activation of JSONFormatter when the CC_TEST_REPORTER_ID environment variable is set. The default HTMLFormatter now emits coverage.json alongside the HTML report (using JSONFormatter.build_hash to serialize the same payload JSONFormatter writes), so the env-var special case is no longer needed. Because of this, listing JSONFormatter alongside HTMLFormatter is redundant and can be removed.
  • SimpleCov.start now loads the test_frameworks profile by default, which filters paths under test/, spec/, features/, and autotest/. Running the suite always executes 100% of the test files themselves, which inflated the overall percentage and obscured application coverage. To opt back in (e.g. to surface dead test helpers), drop the filter with remove_filter %r{\A(test|features|spec|autotest)/}. See #816.
  • HTML and JSON formatters now write the "Coverage report generated for X to Y" status line (and the per-criterion totals beneath it) to stderr instead of stdout. The message is a diagnostic, not the program's output, and routing it to stdout polluted pipelines like rspec -f json. Suppress it entirely with silent: true on the formatter; redirect with 2>&1 if you want the old behavior. See #1060.
  • Under parallel_tests, SimpleCov now waits in the first started process (via ParallelTests.first_process?) rather than the last. This matches the convention parallel_tests's own README recommends for "do something once after all workers finish" hooks, so user code that has its own ParallelTests.wait_for_other_processes_to_finish in an RSpec.after(:suite) (or equivalent) no longer deadlocks against SimpleCov's wait when both pick the same process. As a side benefit, the previous PARALLEL_TEST_GROUPS=1 workaround for last_process?'s "" == "1" mismatch (#1066) is no longer needed — first_process? handles that case naturally. Migration: the rare project that wired its own wait via ParallelTests.last_process? now hits the symmetric deadlock and must switch to first_process?. See #922.
  • Removed SimpleCov.coverage_criterion. It was a reader/writer for a value nothing in SimpleCov ever consumed, so it duplicated primary_coverage without affecting any behavior. Use primary_coverage to choose the report's leading criterion (or the coverage :branch, primary: true form).

Deprecations

  • The configuration API has been redesigned around a smaller, more consistent set of verbs. The legacy methods continue to work but each emits a deprecation warning that names its replacement; a future release will remove them. Warnings are deduplicated by call site, so a deprecated method called in a loop or a configuration block re-evaluated once per parallel worker or spec file warns at most once per source location (see #1204). See the "Migrating from the legacy configuration API" section in the README for the full migration table and a before/after example.
    • add_filter → skip (identical matcher grammar; no behavior change)
    • add_group → group (identical matcher grammar; no behavior change)
    • track_files → cover (cover includes unloaded files like track_files did and restricts the report to the matching set; pass every directory you want reported, e.g. cover "lib/**/*.rb", "app/**/*.rb", to keep the old additive-only behavior)
    • use_merging → merging (same value)
    • enable_for_subprocesses → merge_subprocesses (same value)
    • enable_coverage_for_eval → enable_coverage :eval (folds into the same call that enables :line / :branch / :method)
    • print_error_status (reader) → print_errors (the print_error_status= writer is unaffected for now)
  • Calling SimpleCov.start from .simplecov is deprecated. Coverage tracking still begins for backward compatibility, but a one-time deprecation warning fires pointing the user at moving the call into spec_helper.rb / test_helper.rb; a future release will require the explicit SimpleCov.start from a test helper. The migration goes hand-in-hand with the bugfix below: once SimpleCov.start lives in the test helper, the parent process that auto-loads .simplecov never starts tracking and the empty-report-overwrite scenario can't arise. See #581.
  • # :nocov: toggle comments (and the configurable SimpleCov.nocov_token / SimpleCov.skip_token) are deprecated in favor of the new # simplecov:disable / # simplecov:enable directives. Each file that still uses # :nocov: emits a one-time deprecation warning to stderr at load time pointing at the recommended replacement, and any call to SimpleCov.nocov_token or SimpleCov.skip_token (getter or setter) likewise warns. The directive will be removed in a future release.
  • SimpleCov::SourceFile#branches_coverage_percent and #methods_coverage_percent are deprecated in favor of the uniform covered_percent(:branch) / covered_percent(:method). covered_percent (and covered_strength) now take a criterion argument (defaulting to :line), so the same call reaches any criterion instead of line being the unprefixed default while branch and method had their own differently-named methods. coverage_statistics also now accepts a criterion (e.g. coverage_statistics(:branch)) to return that one CoverageStatistics rather than the whole Hash.
  • minimum_coverage_by_file and minimum_coverage_by_group are deprecated in favor of the coverage method's minimum_per_file / minimum_per_group verbs. The legacy methods overloaded a single hash to carry both per-criterion defaults and per-path / per-group overrides, with minimum_coverage_by_file further distinguishing Symbol keys (criterion defaults) from String / Regexp keys (path overrides) and accepting either a bare number or a per-criterion hash as the value. The coverage block fixes the criterion so every threshold is a plain percentage with an only: target. The setter form emits a deprecation warning naming the replacement; the no-arg getter (read internally) is unchanged. Replace e.g. minimum_coverage_by_file line: 70, 'app/x.rb' => 100 with coverage(:line) { minimum_per_file 70; minimum_per_file 100, only: 'app/x.rb' }. See the "Per-criterion thresholds with coverage" README section.

Enhancements

  • simplecov uncovered gained --criterion line|branch|method (default line) so the lowest-coverage listing can rank by branch or method coverage, not just line.
  • Added the criterion-first coverage configuration method — a uniform way to configure each coverage criterion (:line, :branch, :method) in one place. coverage :line do minimum 90; minimum_per_file 80; maximum_drop 5 end (or the one-liner coverage :branch, minimum: 80) enables the criterion and declares its thresholds with identical syntax regardless of criterion, because the criterion is fixed by the enclosing call rather than smuggled into the argument as the historical "a bare number means line coverage, every other criterion needs a Hash" special case. Verbs: minimum, maximum, exact, maximum_drop, minimum_per_file (with only: String-path / Regexp overrides), and minimum_per_group. Options: primary: (the report's leading criterion), oneshot: (oneshot-lines mode for :line), and :eval. The flat minimum_coverage family remains as suite-wide sugar. Thresholds feed the same internal stores, so exit-code enforcement is unchanged. See the "Per-criterion thresholds with coverage" section in the README.
  • JSON formatter: coverage.json now carries a top-level $schema field holding the URL of the versioned canonical JSON Schema the document conforms to, plus a human-readable meta.schema_version ("major.minor", currently "1.0"). The versioned canonical lives at schemas/coverage-v1.0.schema.json and is immutable per version, an unversioned convenience alias at schemas/coverage.schema.json always tracks the latest. Downstream tools can validate inputs, generate types, or pin to a known shape, and the document-level $schema makes each payload self-describing. The schema version is independent of the gem version: additive changes bump minor, removals or shape changes bump major and ship as a new schemas/coverage-vX.0.schema.json file so prior-version consumers stay valid. meta.commit carries the git commit SHA the report was generated against (or null outside a git checkout), so tools can recover the exact source from history even when source_in_json false omits the per-file source arrays.
  • Added SimpleCov::ParallelAdapters — a pluggable adapter interface for parallel test runners. SimpleCov's coordination with parallel test runners (deciding which worker does final-result work, waiting for siblings, knowing how many resultsets to expect) now routes through an adapter chain rather than hard-coding the parallel_tests gem's API. Two adapters ship: ParallelTestsAdapter wraps the historical grosser/parallel_tests gem (precise, gem-API-based); GenericAdapter handles any runner that follows the TEST_ENV_NUMBER / PARALLEL_TEST_GROUPS env-var convention without shipping a Ruby API. The practical impact: parallel_rspec (and any similar env-var-only runner) now works out of the box — previously every worker thought it was the "final" one and they clobbered each other's resultsets. Custom runners can register their own adapter via SimpleCov::ParallelAdapters.register MyAdapter, where MyAdapter subclasses SimpleCov::ParallelAdapters::Base and overrides the four contract methods (active?, first_worker?, wait_for_siblings, expected_worker_count). See #1065.
  • Added SimpleCov.ignore_branches for opting out of synthetic :else branches that Ruby's Coverage library reports for constructs with no literal else keyword — exhaustive case/in pattern matches, case/when without else, ||= / &&=, and if / unless without else. Variadic; only :implicit_else is supported today, with room for future synthetic branch types. Calling it without (or before) enable_coverage :branch is harmless — the setting is stored and applies once branch coverage is enabled. Explicit else arms still count. See #1033.
  • Added SimpleCov.cover for declaring a positive coverage scope (the long-requested allowlist counterpart to add_filter). Accepts string globs, Regexps, blocks, or arrays of those; multiple calls union. When any cover matcher is configured the report drops every source file that doesn't match at least one of them, and string-glob matchers also expand on disk so files that exist but were never required during the run still appear in the report (at 0% coverage). Resolves the long-standing requests in #696 and #869. The companion SimpleCov.no_default_skips opts out of the filters that SimpleCov.start installs (hidden files, vendor/bundle/, test directories) so users who want to opt out wholesale don't have to call clear_filters themselves.
  • SimpleCov.formatter false (and the equivalent SimpleCov.formatters []) now opts out of formatting entirely instead of raising ConfigurationError. SimpleCov::Result#format! returns nil when no formatter is configured. Intended for worker processes in big parallel CI runs (hundreds of jobs) where only a final SimpleCov.collate step needs a report — every other worker just drops its .resultset.json and exits without paying for HTML or multi-formatter output. See #964.
  • Setting TEST_ENV_NUMBER and PARALLEL_TEST_GROUPS no longer triggers a spurious "SimpleCov guessed you were running inside parallel tests but couldn't load it" warning when the parallel_tests gem isn't actually installed. SimpleCov now treats a LoadError on the auto-require as "the user set those env vars for some other reason (custom subprocess coordination, CI sharding) and isn't using parallel_tests" and silently skips. The new SimpleCov.parallel_tests true / false setting forces the auto-require on or off when finer control is needed. See #1018.
  • SimpleCov.minimum_coverage_by_file now accepts per-path overrides alongside the existing per-criterion defaults: pass String or Regexp keys to declare file- or directory-specific thresholds, e.g. minimum_coverage_by_file line: 70, 'app/mailers/request_mailer.rb' => 100. A String ending in / matches as a directory prefix; otherwise it must equal the project-relative path. Regexp keys match against the project-relative path. Per-path values may be a Numeric (primary criterion) or a per-criterion Hash; for each file the effective threshold is the defaults merged with any matching overrides (later overrides win per criterion, overrides win over defaults). The new overrides surface in coverage.json under the existing errors.minimum_coverage_by_file block. See #575.
  • Added SimpleCov.maximum_coverage (and the convenience SimpleCov.expected_coverage, which sets minimum_coverage and maximum_coverage to the same value) so the suite can be pinned to an exact coverage figure. A drop fails per the minimum; an unexpected increase also fails, prompting you to bump the threshold up rather than silently absorbing the improvement. Accepts the same Numeric / per-criterion Hash forms as minimum_coverage. Exits with status 4 (SimpleCov::ExitCodes::MAXIMUM_COVERAGE) when violated, and surfaces in coverage.json under errors.maximum_coverage. Comparisons floor the actual percent to two decimal places, so expected_coverage 95.42 still passes when the actual is e.g. 95.4287. See #187.
  • Added a bundled strict profile (SimpleCov.start "strict") that enables line, branch, and method coverage and pins the minimum threshold for each at 100%. Drops to line-only on engines without branch/method support (JRuby). See #1061.
  • SimpleCov.coverage_path is now explicitly settable rather than always computed from SimpleCov.root + SimpleCov.coverage_dir. Setting it pins the report destination regardless of later root / coverage_dir changes — useful for out-of-tree build directories (CMake/CTest etc.) where the coverage report doesn't live under the source root. See #716.
  • The "Coverage report generated for X to Y" status line now prints the report path relative to the current working directory when it lives under cwd, and includes the entry-point filename — coverage/index.html from the HTML formatter, coverage/coverage.json from the JSON formatter — so the line points at a concrete file (and is clickable in terminals that hyperlink paths). Paths outside cwd stay absolute. See #197.
  • Added SimpleCov.disable_coverage(criterion) so a project can opt out of line coverage entirely — e.g. enable_coverage :branch; disable_coverage :line for a branch-only run. SimpleCov.start now raises SimpleCov::ConfigurationError when every criterion has been disabled. The formatter summary and JSON output emit only the criteria that were actually measured, so a branch-only run produces no Line coverage: line, no lines key in coverage.json, and no zero-padded line numbers in the HTML report. See #845.
  • Added SimpleCov.remove_filter(arg) to drop a specific filter (matching by filter_argument) and SimpleCov.clear_filters to wipe the entire chain. Useful for selectively turning off one of the defaults loaded by SimpleCov.start — e.g. remove_filter(/\A\..*/) to stop hiding paths that begin with a dot. The README's "Default filters" section enumerates what's loaded by default and how to disable each piece. See #803.
  • Terminal output is now colorized when stderr is a TTY: coverage percentages in the formatter summary line and threshold-violation messages are rendered green (>= 90%), yellow (>= 75%), or red (< 75%) — matching the HTML report's thresholds. The "SimpleCov failed with exit N…" line is red and the "Stopped processing SimpleCov…" line is yellow. Respects NO_COLOR (force off, per no-color.org) and FORCE_COLOR (force on); NO_COLOR wins if both are set. See #1157.
  • CLI subcommands coverage, report, uncovered, and diff now colorize their printed percentages by the same threshold (and diff colors regressions red, improvements green). Auto-detect based on whether stdout is a TTY; the same NO_COLOR / FORCE_COLOR env vars apply. Each subcommand also accepts a --no-color flag as a per-invocation override.

... (truncated)

Commits
  • 6690dae Bump version to 1.0.0
  • feaf13b Consolidate release candidate CHANGELOG entries into 1.0.0
  • 4b8b46b bundle update
  • 55381a2 Potential fix for pull request finding
  • db335da Reproduce turbo_tests2 external collation output
  • bd08a84 Bump ruby/setup-ruby from 1.314.0 to 1.315.0
  • f57ad27 Bump version to 1.0.0.rc5
  • 33f258c Add CHANGELOG entries for the HTML report performance work
  • a45c4c9 Window file lists past 1,000 rows in the HTML report
  • 0068c09 Cut redundant DOM work in report sorting and filtering
  • Additional commits viewable in compare view

Updates tzinfo-data from 1.2026.2 to 1.2026.3

Release notes

Sourced from tzinfo-data's releases.

v1.2026.3

Based on version 2026c of the IANA Time Zone Database (https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/message/NVHSX2PAQIT44U5FCCEVNJJYXQMMTJSA/).

Commits

Updates omniauth-twitter from 1.4.0 to 1.5.0

Changelog

Sourced from omniauth-twitter's changelog.

[1.5.0] - Jul 6, 2026

Commits
  • 79ef26d Bump version to 1.5.0
  • b9009e2 Merge pull request #158 from arunagw/update-omniauth-oauth
  • 821c759 Update omniauth-oauth gem to 1.2
  • 4464ec1 Merge pull request #157 from arunagw/rays-readme-changes
  • 73b480c Update links in README
  • e898df6 Merge pull request #153 from seanpdoyle/ruby-4-0
  • f08dd48 Add ruby@4.0 to the CI matrix
  • 8d9eac7 Merge pull request #155 from arunagw/raysrashmi-remove-bundler-dependency
  • 8febaa3 Remove bundler as development_dependency from gemspec file
  • 6115fc8 Merge pull request #152 from willnet/add-ruby-3-3-and-3-4
  • Additional commits viewable in compare view

Updates lograge from 0.14.0 to 0.15.0

Changelog

Sourced from lograge's changelog.

0.15.0

  • Test and support Rails 7.2, 8.0, and 8.1 #399, #400
  • Test and support Ruby 3.4 and 4.0, JRuby 10.0, and TruffleRuby 34 #399, #400
  • Explicitly require 'logger' to fix loading on Ruby 3.4+ where it is no longer autoloaded #399
  • Replace deprecated add_runtime_dependency with add_dependency in the gemspec #399
Commits
  • e5caed7 Merge pull request #400 from roidrage/chore/ci-refresh-2026
  • 5efead4 docs: clarify supported Ruby/Rails releases in README
  • e1e9aa0 Release 0.15.0
  • 73f4273 ci: fix JRuby 10 build (declare bigdecimal, cap rdoc < 8)
  • ce7b877 ci: refresh matrix for 2026 Ruby/Rails, fix TruffleRuby build
  • 46fce4c chore: refresh stale CI/docs metadata
  • 37a1ca0 Merge pull request #399 from ixti/add-new-ruby-and-rails
  • 7d13492 ci: Exclude rails-8.X + truffleruby
  • 2f691a6 ci: Add explicit logger dependency for ruby-head
  • beecf7e ci(gemspec): Replace add_runtime_dependency with add_dependency
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dependencies group with 4 updates
5b3aa8e 
Bumps the dependencies group with 4 updates: [simplecov](https://github.com/simplecov-ruby/simplecov), [tzinfo-data](https://github.com/tzinfo/tzinfo-data), [omniauth-twitter](https://github.com/arunagw/omniauth-twitter) and [lograge](https://github.com/roidrage/lograge).


Updates `simplecov` from 0.22.0 to 1.0.0
- [Release notes](https://github.com/simplecov-ruby/simplecov/releases)
- [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md)
- [Commits](simplecov-ruby/simplecov@v0.22.0...v1.0.0)

Updates `tzinfo-data` from 1.2026.2 to 1.2026.3
- [Release notes](https://github.com/tzinfo/tzinfo-data/releases)
- [Commits](tzinfo/tzinfo-data@v1.2026.2...v1.2026.3)

Updates `omniauth-twitter` from 1.4.0 to 1.5.0
- [Changelog](https://github.com/arunagw/omniauth-twitter/blob/master/CHANGELOG.md)
- [Commits](arunagw/omniauth-twitter@v1.4.0...v1.5.0)

Updates `lograge` from 0.14.0 to 0.15.0
- [Changelog](https://github.com/roidrage/lograge/blob/master/CHANGELOG.md)
- [Commits](roidrage/lograge@v0.14.0...v0.15.0)

---
updated-dependencies:
- dependency-name: simplecov
  dependency-version: 1.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: tzinfo-data
  dependency-version: 1.2026.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: omniauth-twitter
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: lograge
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Jul 13, 2026
@cbeer cbeer merged commit 6917851 into master Jul 13, 2026
1 check failed
@dependabot dependabot Bot deleted the dependabot/bundler/dependencies-0b50de719f branch July 13, 2026 22:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@cbeer