Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 19, 2026

Bumps the bundler-dependencies group with 7 updates in the / directory:

Package From To
ffi 1.17.2 1.17.3
google-protobuf 4.33.2 4.33.4
kramdown 2.5.1 2.5.2
listen 3.9.0 3.10.0
public_suffix 7.0.0 7.0.2
rouge 4.6.1 4.7.0
sass-embedded 1.97.1 1.97.2

Updates ffi from 1.17.2 to 1.17.3

Changelog

Sourced from ffi's changelog.

1.17.3 / 2025-12-29

Fixed:

  • Opt-in for MFA requirement explicitly. #1159
  • Fix type signature for FFI::AutoPointer#initialize, FFI::StructByReference#native_type and FFI::Struct#auto_ptr . #1158
  • Fix function signature of function_call in FFI trampoline. #1154 It failed on aarch64-mingw-ucrt.
  • Add workaround for segmentation faults on aarch64-mingw-ucrt. #1154
  • Call super in Library#freeze . #1154
  • Deny duplication of AutoPointer per #dup and #clone . #1173 They led to double free before.

Added:

  • Add binary gems for Ruby-4.0, now providing binary gems for Ruby-3.0 to 4.0.
  • Add msys2_mingw_dependencies for Windows Mingw for automatic installation of libffi. #1143
  • Mark callback dispatcher thread as fork safe for Puma. #1156
  • Add missing FFI::Platform module and LastError signatures. #1169

Removed:

  • Drop fat binary gems for Ruby < 3.0
  • Remove FFI::TypesGenerator from distributed gems. #1164
  • Remove libffi build dir after install, safing some install space. #1157
Commits
  • 68f4d3b Bump VERSION to ffi-1.17.3 and add release notes
  • 38d298e Update libffi to latest master branch
  • 77f9033 Merge pull request #1108 from lloeki/add-steep
  • 9cce647 Add ffi.gemspec to Gemfile
  • 42b2382 Fix newly introduced rbs signatures for FFI::Platform
  • 6e76f7f Add CI check for RBS files
  • b1fdbe1 Add Steep to check RBS files
  • 6076fab Merge pull request #1173 from ffi/fix-1155
  • 195f9e9 Merge pull request #1143 from johnnyshields/patch-2
  • 0ff4cb3 Binary gems don't need libffi header+lib files
  • Additional commits viewable in compare view

Updates google-protobuf from 4.33.2 to 4.33.4

Commits

Updates kramdown from 2.5.1 to 2.5.2

Commits

Updates listen from 3.9.0 to 3.10.0

Release notes

Sourced from listen's releases.

v3.10.0

What's Changed

New Contributors

Full Changelog: guard/listen@v3.9.0...v3.10.0

Commits
  • 2fa1a74 Bump VERSION to 3.10.0
  • 7c6d39e Merge pull request #596 from y-yagi/ci_against_ruby40
  • 62255c0 CI against Ruby 4.0
  • 43cb09c Merge pull request #595 from y-yagi/mention_memory_allocation_about_max_user_...
  • 030aff8 Merge pull request #594 from y-yagi/remove_unused_require
  • 4317b21 Mention the relation with fs.inotify.max_user_watches and the memory alloc...
  • 5883c5e Remove unused require
  • cde3720 Merge pull request #592 from y-yagi/fix_rubocop
  • 8e93885 Merge pull request #593 from y-yagi/remove_link_to_travis
  • 2f07a81 Remove link to Travis CI
  • Additional commits viewable in compare view

Updates public_suffix from 7.0.0 to 7.0.2

Changelog

Sourced from public_suffix's changelog.

7.0.2 - 2026-01-04

Changed

  • Excluded symlinks and unnecessary files from gem packaging. On Windows symlinks cannot be created without Administrator privileges or with developer mode enabled #496.

7.0.1 - 2026-01-03

Changed

  • Updated definitions.
Commits
  • 1e010a4 chore: Release 7.0.2
  • cdddbbc fix(build): Exclude symlink and unnecessary files
  • 698b015 ci: Update rubocop config
  • ec471ed Release 7.0.1
  • 532084d docs: FIx commit examples
  • 6e494dd test: Fix test position
  • 4642c1e Update .gitignore
  • 24c422c Update .gitignore
  • a4971b9 refactor: Split tests with excessive assertions
  • 9e86627 docs: reference Common Changelog in RELEASING
  • Additional commits viewable in compare view

Updates rouge from 4.6.1 to 4.7.0

Release notes

Sourced from rouge's releases.

v4.7.0

🎉 Happy New Year 2026! 🎉

This release brings significant enhancements to PHP language support with modern syntax features including enums, typed class constants, and asymmetric visibility. We've introduced new lexers for GJS and GTS files used by Ember projects. Language support has been improved with Python 3.14+ template strings, Go underscore support in numbers, and enhanced file detection for COBOL and Terraform files. Thanks to all our contributors for their valuable work on making Rouge more comprehensive!

Changelog

Sourced from rouge's changelog.

version 4.7.0: 2025-12-31

Comparison with the previous version

  • General
    • Bump actions/checkout to v5 (#2166 by Tan Le)
  • COBOL Lexer
    • feat: add support for highlight .cpy and .cpb files as COBOL (#2186 by simon)
  • Gjs and Gts Lexer (NEW)
    • Created lexers for gjs and gts (used by Ember projects) (#2165 by Isaac Lee)
  • Go Lexer
    • support underscore in numbers in go (#2167 by Joris Clement)
  • PHP Lexer
    • php: Support enum definition (#2171 by nsfisis)
    • php: Support typed class constants (#2174 by nsfisis)
    • php: Support asymmetric visibility (#2173 by nsfisis)
    • php: Support alternative notation of octal number literal (0o prefix) (#2170 by nsfisis)
    • php: Update built-in functions (rake builtins:php) (#2175 by nsfisis)
  • Python Lexer
    • Add Python 3.14+ template strings (#2162 by Bart Broere)
  • Terraform Lexer
    • Support .tofu for Terraform lexing (#2180 by Asherah Connor)
Commits

Updates sass-embedded from 1.97.1 to 1.97.2

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the bundler-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [ffi](https://github.com/ffi/ffi) | `1.17.2` | `1.17.3` |
| [google-protobuf](https://github.com/protocolbuffers/protobuf) | `4.33.2` | `4.33.4` |
| [kramdown](https://github.com/gettalong/kramdown) | `2.5.1` | `2.5.2` |
| [listen](https://github.com/guard/listen) | `3.9.0` | `3.10.0` |
| [public_suffix](https://github.com/weppos/publicsuffix-ruby) | `7.0.0` | `7.0.2` |
| [rouge](https://github.com/rouge-ruby/rouge) | `4.6.1` | `4.7.0` |
| [sass-embedded](https://github.com/sass-contrib/sass-embedded-host-ruby) | `1.97.1` | `1.97.2` |



Updates `ffi` from 1.17.2 to 1.17.3
- [Changelog](https://github.com/ffi/ffi/blob/master/CHANGELOG.md)
- [Commits](ffi/ffi@v1.17.2...v1.17.3)

Updates `google-protobuf` from 4.33.2 to 4.33.4
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `kramdown` from 2.5.1 to 2.5.2
- [Release notes](https://github.com/gettalong/kramdown/releases)
- [Changelog](https://github.com/gettalong/kramdown/blob/master/doc/news.page)
- [Commits](https://github.com/gettalong/kramdown/commits)

Updates `listen` from 3.9.0 to 3.10.0
- [Release notes](https://github.com/guard/listen/releases)
- [Commits](guard/listen@v3.9.0...v3.10.0)

Updates `public_suffix` from 7.0.0 to 7.0.2
- [Changelog](https://github.com/weppos/publicsuffix-ruby/blob/main/CHANGELOG.md)
- [Commits](weppos/publicsuffix-ruby@v7.0.0...v7.0.2)

Updates `rouge` from 4.6.1 to 4.7.0
- [Release notes](https://github.com/rouge-ruby/rouge/releases)
- [Changelog](https://github.com/rouge-ruby/rouge/blob/master/CHANGELOG.md)
- [Commits](rouge-ruby/rouge@v4.6.1...v4.7.0)

Updates `sass-embedded` from 1.97.1 to 1.97.2
- [Commits](sass-contrib/sass-embedded-host-ruby@v1.97.1...v1.97.2)

---
updated-dependencies:
- dependency-name: ffi
  dependency-version: 1.17.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: google-protobuf
  dependency-version: 4.33.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: kramdown
  dependency-version: 2.5.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: listen
  dependency-version: 3.10.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: public_suffix
  dependency-version: 7.0.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
- dependency-name: rouge
  dependency-version: 4.7.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: bundler-dependencies
- dependency-name: sass-embedded
  dependency-version: 1.97.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jan 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants