Bump devise, devise-jwt, warden-jwt_auth, dotenv-rails, pry-byebug, rubocop, ruby-lsp and byebug by dependabot[bot] · Pull Request #550 · datafruits/streampusher-api

dependabot · 2026-06-06T02:07:17Z

Bumps devise, devise-jwt, warden-jwt_auth, dotenv-rails, pry-byebug, rubocop, ruby-lsp and byebug. These dependencies needed to be updated together.
Updates devise from 4.9.4 to 5.0.4

Release notes

Sourced from devise's releases.

v5.0.4

https://github.com/heartcombo/devise/blob/v5.0.4/CHANGELOG.md#504---2026-05-08

v5.0.3

https://github.com/heartcombo/devise/blob/v5.0.3/CHANGELOG.md#503---2026-03-16

v5.0.2

https://github.com/heartcombo/devise/blob/v5.0.2/CHANGELOG.md#502---2026-02-18

v5.0.1

https://github.com/heartcombo/devise/blob/v5.0.1/CHANGELOG.md#501---2026-02-13

v5.0.0

https://github.com/heartcombo/devise/blob/v5.0.0/CHANGELOG.md#500---2026-01-23

v5.0.0.rc

https://github.com/heartcombo/devise/blob/v5.0.0.rc/CHANGELOG.md#500rc---2025-12-31

Changelog

Sourced from devise's changelog.

5.0.4 - 2026-05-08

security fixes

Fix open redirect in FailureApp via unvalidated Referer header on non-GET session timeout. CVE-2026-40295 GHSA-jp94-3292-c3xv

5.0.3 - 2026-03-16

security fixes

Fix race condition vulnerability on confirmable "change email" which would allow confirming an email they don't own CVE-2026-32700 GHSA-57hq-95w6-v4fc #5783 #5784

5.0.2 - 2026-02-18

enhancements

Allow resource class scopes to override the global configuration for sign_in_after_change_password behaviour. #5825

Note: some users ran into an issue with this change because RegistrationsController now relies on a setting from the :registerable module. These users were configuring their own routes pointing to the RegistrationsController for resource edit/update actions mostly, without relying on the other registration actions (e.g. user sign up.), so they omitted :registerable from the model declaration. While using just a portion of the controller functionality is a valid use for :registerable (or any module really), the module must still be declared in the model, much like the other modules must be declared if you plan on using just a portion of their behavior. Please check this issue for more info.

Add sign_in_after_reset_password? check hook to passwords controller, to allow it to be customized by users. #5826

5.0.1 - 2026-02-13

bug fixes

Fix translation issue with German E-Mail on invalid authentication messages caused by previous fix for incorrect grammar #5822

5.0.0 - 2026-01-23

no changes

5.0.0.rc - 2025-12-31
breaking changes
Drop support to Ruby < 2.7

Drop support to Rails < 7.0

Remove deprecated :bypass option from sign_in helper, use bypass_sign_in instead. #5803

Remove deprecated devise_error_messages! helper, use render "devise/shared/error_messages", resource: resource instead. #5803

Remove deprecated scope second argument from sign_in(resource, :admin) controller test helper, use sign_in(resource, scope: :admin) instead. #5803

Remove deprecated Devise::TestHelpers, use Devise::Test::ControllerHelpers instead. #5803

Remove deprecated Devise::Models::Authenticatable::BLACKLIST_FOR_SERIALIZATION #5598

Remove deprecated Devise.activerecord51? method.
Remove SecretKeyFinder and use app.secret_key_base as the default secret key for Devise.secret_key if a custom Devise.secret_key is not provided.

This is potentially a breaking change because Devise previously used the following order to find a secret key:
app.credentials.secret_key_base > app.secrets.secret_key_base > application.config.secret_key_base > application.secret_key_base
Now, it always uses application.secret_key_base. Make sure you're using the same secret key after the upgrade; otherwise, previously generated tokens for recoverable, lockable, and confirmable will be invalid. #5645
Change password instructions button label on devise view from Send me reset password instructions to Send me password reset instructions #5515

Change <br> tags separating form elements to wrapping them in <p> tags #5494

Replace [data-turbo-cache=false] with [data-turbo-temporary] on devise/shared/error_messages partial. This has been deprecated by Turbo since v7.3.0 (released on Mar 1, 2023).

... (truncated)

Commits

9ea459d Release v5.0.4 with sec fix for timeoutable
025fe21 Merge commit from fork
7ca7ed9 Add GHSA link to the v5.0.3 sec fix changelog entry [ci skip]
605de86 Update links to https [ci skip]
5e3a8bf Bundle update
5d20277 Cleanup old Rails.version check for db migration path
4ffb0b7 Fix Gemfile for Rails 7.2, incorrectly testing against 7.1
2f80920 Release v5.0.3
5334707 Add CVE to changelog [ci skip]
0252777 Fix race condition vulnerability, by ensuring the unconfirmed_email is alwa...
Additional commits viewable in compare view

Updates devise-jwt from 0.11.0 to 0.13.0

Changelog

Sourced from devise-jwt's changelog.

[0.13.0] - 2026-01-13

Support devise 5.0

[0.12.1] - 2024-07-12

Fix properly support for token_header & issuer config options

[0.12.0] - 2024-07-10

Added

Add support for token_header config

Add support for issuer config

Commits

See full diff in compare view

Updates warden-jwt_auth from 296f0e4 to 0.12.0

Release notes

Sourced from warden-jwt_auth's releases.

v0.12.0

Support jwt v3 (65)

Commits

f11eacb Release v0.12.0
aab14c1 Relax the version requirement of the jwt gem (#65)
25ed5bb Add Ruby 3.4 to CI matrix and drop Ruby 3.0 (#62)
2021439 Bump version and update changelog
ca73fa1 Reorganize strategy tests
b66f150 Better readability for the tuple destructuring in functions
14052e7 Prevent strategy from running when the current path matches a dispatch reques...
786f61f Remove travis config
fcc8152 Fix issuer claim tests
787164d Configure github actions and fix autocorrectable rubocop issues
Additional commits viewable in compare view

Updates dotenv-rails from 3.1.2 to 3.2.0

Release notes

Sourced from dotenv-rails's releases.

v3.2.0

What's Changed

Boost app startup time by removing to_sentence usage by @ThomasCrambert in bkeepers/dotenv#534

Handle parentheses in variables in commands by @i7an in bkeepers/dotenv#540

allow warning when a env var was not overwritten by @grosser in bkeepers/dotenv#531

fix a few small issues by @grosser in bkeepers/dotenv#532

New Contributors

@ThomasCrambert made their first contribution in bkeepers/dotenv#534

@i7an made their first contribution in bkeepers/dotenv#540

Full Changelog: bkeepers/dotenv@v3.1.8...v3.2.0

v3.1.8

Thanks to Stoked Seagull Software for sponsoring this release of dotenv!
Need help with a software project but don't know where to begin? Stoked Seagull can help.

Interested in sponsoring dotenv?

What's Changed

fix crash when .env is a folder by @Roupiye in bkeepers/dotenv#527

docs: Clarify order of configuration files for flag -f by @webrails in bkeepers/dotenv#529

docs: Provide a 'Changelog' link on rubygems.org/gems/dotenv-rails by @mark-young-atg in bkeepers/dotenv#524

New Contributors

@webrails made their first contribution in bkeepers/dotenv#529

@Roupiye made their first contribution in bkeepers/dotenv#527

Full Changelog: bkeepers/dotenv@v3.1.7...v3.1.8

v3.1.7

What's Changed

Fix issue with repeated linebreaks when normalizing line endings by @bkeepers in bkeepers/dotenv#523

Generate build matrix from endoflife.date by @bkeepers in bkeepers/dotenv#521

Full Changelog: bkeepers/dotenv@v3.1.6...v3.1.7

3.1.6

What's Changed

Fix: Restore previous parser behavior of returning existing variables by @bkeepers in bkeepers/dotenv#519

Full Changelog: bkeepers/dotenv@v3.1.5...v3.1.6

v3.1.5

What's Changed

... (truncated)

Commits

34156bf Prepare for 3.2.0 release
ab47820 Merge pull request #531 from grosser/grosser/warn
fae6120 Merge branch 'main' into grosser/warn
4f510f4 Merge pull request #532 from grosser/grosser/fixes
959e1da Merge pull request #539 from bkeepers/dependabot/github_actions/actions/check...
041451e Update spec message
b300f26 Bump actions/checkout from 4 to 6
5f4ca01 Merge branch 'main' into grosser/warn
209dca4 Merge pull request #540 from i7an/handle-parentheses
48c4956 Merge branch 'main' into handle-parentheses
Additional commits viewable in compare view

Updates pry-byebug from 3.10.1 to 3.12.0

Release notes

Sourced from pry-byebug's releases.

3.12.0

Added

Allow usage with Byebug 13 (#466).

Allow pry 0.16 (#462).

Removed

Support for Ruby 3.1. Pry-byebug no longer installs on these platforms (#467).

3.11.0

Added

Byebug 12 compatibility, with Ruby 3.1, 3.2, and 3.3 support (#434).

Support for pry 0.15 (#428).

Removed

Support for Ruby 2.7, and 3.0. Pry-byebug no longer installs on these platforms (#433).

Changelog

Sourced from pry-byebug's changelog.

3.12.0 (2026-01-16)

Added

Allow usage with Byebug 13 (#466).

Allow pry 0.16 (#462).

Removed

Support for Ruby 3.1. Pry-byebug no longer installs on these platforms (#467).

3.11.0 (2025-03-28)

Added

Byebug 12 compatibility, with Ruby 3.1, 3.2, and 3.3 support (#434).

Support for pry 0.15 (#428).

Removed

Support for Ruby 2.7, and 3.0. Pry-byebug no longer installs on these platforms (#433).

Commits

0b5aea2 Get ready for 3.12.0 release (#469)
366bc8f bundle update unicode-emoji (#468)
2a8240a Merge pull request #466 from Jack12816/upstream-rubyb34-bb13
18606e6 Update minimum supported version in README
4a18acf Allow byebug 13
4aa7268 Drop support for Ruby 3.1 (#467)
c53a349 Update pry requirement from >= 0.13, < 0.16 to >= 0.13, < 0.17 (#462)
7cc4b24 Bump minitest-bisect from 1.7.0 to 1.8.0 (#463)
4509cce Bump mdl from 0.13.0 to 0.14.0 (#464)
63c9111 Bump faraday-retry from 2.3.2 to 2.4.0 (#465)
Additional commits viewable in compare view

Updates rubocop from 1.64.0 to 1.87.0

Release notes

Sourced from rubocop's releases.

RuboCop v1.87.0

New features

#15167: Add --enable-all-cops and --disable-all-cops command line options that override AllCops/EnabledByDefault and AllCops/DisabledByDefault in configuration files. (@koic)

#15185: Make Layout/EmptyLineAfterGuardClause accept the new # simplecov:disable and # simplecov:enable directive comments. (@koic)

#15173: Add optional Rubydex integration via AllCops/UseProjectIndex to enable cross-file detection in Lint/ConstantReassignment (experimental). (@koic)

Bug fixes

#15168: Fix false positives in Lint/ParenthesesAsGroupedExpression when the first argument is a call-like expression with its own parentheses, such as yield(...). (@koic)

#15188: Fix false positives in Style/YodaCondition when one side is an array or hash literal containing non-literal elements. (@koic)

#15182: Fix incorrect autocorrect for Style/Alias causing a syntax error when the return value of alias_method is used, such as an argument to public, private, protected, or module_function, or the right-hand side of an assignment. (@koic)

#15174: Fix incorrect autocorrect for Style/ClassAndModuleChildren causing a syntax error when the namespace contains a method call (e.g., class self.class::Foo; end). (@koic)

#15180: Fix incorrect autocorrect for Style/FileWrite causing a syntax error when the written heredoc is chained with another method call. (@koic)

#15186: Fix incorrect autocorrect for Style/HashConversion causing a syntax error when Hash[...] is passed an anonymous splat (*). (@koic)

#15192: Fix incorrect autocorrect for Style/StructInheritance causing a syntax error when the inherited Struct.new is called without parentheses. (@koic)

#15170: Fix an infinite loop for Layout/RedundantLineBreak when a single-line block is chained with a safe navigation method call. (@koic)

#15175: Fix Layout/IndentationWidth to indent block bodies relative to the method selector for trailing-dot multi-line method chains when EnforcedStyleAlignWith is relative_to_receiver. (@ddbrendan)

#15135: Fix incorrect autocorrect for Style/RedundantParentheses that swallowed chained method calls into a trailing inline comment on the line above the closing parenthesis. (@hammadxcm)

#15184: Fix various typos and grammar mistakes in documentation and cop descriptions. (@bbatsov)

Changes

#15171: Cache FilePatterns#match? results per path so cops sharing the same Include/Exclude configuration do not each repeat File.fnmatch? work on every file. (@Darhazer)

RuboCop v1.86.2

New features

#15075: Implement true runner parallelism. ([@tdeo][])

Bug fixes

#15156: Fix an error for Style/HashLookupMethod when chaining fetch (or []) calls on the same expression. (@koic)

#15161: Fix an error for Style/ReduceToHash when nested each_with_object/inject/reduce calls would build hashes. (@koic)

#15144: Fix an error in Style/SoleNestedConditional when autocorrecting nested conditionals containing comments. (@koic)

#15040: Exclude constants from Style/ModuleMemberExistenceCheck. ([@t-daisuke][])

#15155: Fix false negatives in Style/RedundantSelf when an explicit self receiver in one scope matches the LHS of an ||=, &&=, or op_asgn in another scope. (@koic)

#15107: Fix false positives in Lint/RequireRelativeSelfPath when a non-.rb file uses require_relative with its own basename. (@koic)

#15137: Fix incorrect "does not support IndentationWidth parameter" warning for Layout/ClosingParenthesisIndentation and Layout/CommentIndentation. (@koic)

#15148: Fix false positives in Lint/RedundantSafeNavigation when safe navigation appears in rescue or ensure bodies. (@koic)

#15147: Fix false positives in Lint/RedundantSafeNavigation when safe navigation appears in the body of unless. (@koic)

#15163: Fix false positives in Style/Copyright when Notice pattern starts with \A#, uses \s metacharacters, or has multiple spaces after #. (@koic)

#10179: Fix false positives in Style/DocumentDynamicEvalDefinition when the heredoc contains an escaped interpolation (\#{...}). ([@eyupcanakman][])

#15154: Fix bug where specifying --out disables parallelization. ([@deivid-rodriguez][])

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.87.0 (2026-05-30)

New features

#15167: Add --enable-all-cops and --disable-all-cops command line options that override AllCops/EnabledByDefault and AllCops/DisabledByDefault in configuration files. ([@koic][])

#15185: Make Layout/EmptyLineAfterGuardClause accept the new # simplecov:disable and # simplecov:enable directive comments. ([@koic][])

#15173: Add optional Rubydex integration via AllCops/UseProjectIndex to enable cross-file detection in Lint/ConstantReassignment (experimental). ([@koic][])

Bug fixes

#15168: Fix false positives in Lint/ParenthesesAsGroupedExpression when the first argument is a call-like expression with its own parentheses, such as yield(...). ([@koic][])

#15188: Fix false positives in Style/YodaCondition when one side is an array or hash literal containing non-literal elements. ([@koic][])

#15182: Fix incorrect autocorrect for Style/Alias causing a syntax error when the return value of alias_method is used, such as an argument to public, private, protected, or module_function, or the right-hand side of an assignment. ([@koic][])

#15174: Fix incorrect autocorrect for Style/ClassAndModuleChildren causing a syntax error when the namespace contains a method call (e.g., class self.class::Foo; end). ([@koic][])

#15180: Fix incorrect autocorrect for Style/FileWrite causing a syntax error when the written heredoc is chained with another method call. ([@koic][])

#15186: Fix incorrect autocorrect for Style/HashConversion causing a syntax error when Hash[...] is passed an anonymous splat (*). ([@koic][])

#15192: Fix incorrect autocorrect for Style/StructInheritance causing a syntax error when the inherited Struct.new is called without parentheses. ([@koic][])

#15170: Fix an infinite loop for Layout/RedundantLineBreak when a single-line block is chained with a safe navigation method call. ([@koic][])

#15175: Fix Layout/IndentationWidth to indent block bodies relative to the method selector for trailing-dot multi-line method chains when EnforcedStyleAlignWith is relative_to_receiver. ([@ddbrendan][])

#15135: Fix incorrect autocorrect for Style/RedundantParentheses that swallowed chained method calls into a trailing inline comment on the line above the closing parenthesis. ([@hammadxcm][])

#15184: Fix various typos and grammar mistakes in documentation and cop descriptions. ([@bbatsov][])

Changes

#15171: Cache FilePatterns#match? results per path so cops sharing the same Include/Exclude configuration do not each repeat File.fnmatch? work on every file. ([@Darhazer][])

1.86.2 (2026-05-14)

New features

#15075: Implement true runner parallelism. ([@tdeo][])

Bug fixes

#15156: Fix an error for Style/HashLookupMethod when chaining fetch (or []) calls on the same expression. ([@koic][])

#15161: Fix an error for Style/ReduceToHash when nested each_with_object/inject/reduce calls would build hashes. ([@koic][])

#15144: Fix an error in Style/SoleNestedConditional when autocorrecting nested conditionals containing comments. ([@koic][])

#15040: Exclude constants from Style/ModuleMemberExistenceCheck. ([@t-daisuke][])

#15155: Fix false negatives in Style/RedundantSelf when an explicit self receiver in one scope matches the LHS of an ||=, &&=, or op_asgn in another scope. ([@koic][])

#15107: Fix false positives in Lint/RequireRelativeSelfPath when a non-.rb file uses require_relative with its own basename. ([@koic][])

#15137: Fix incorrect "does not support IndentationWidth parameter" warning for Layout/ClosingParenthesisIndentation and Layout/CommentIndentation. ([@koic][])

#15148: Fix false positives in Lint/RedundantSafeNavigation when safe navigation appears in rescue or ensure bodies. ([@koic][])

#15147: Fix false positives in Lint/RedundantSafeNavigation when safe navigation appears in the body of unless. ([@koic][])

#15163: Fix false positives in Style/Copyright when Notice pattern starts with \A#, uses \s metacharacters, or has multiple spaces after #. ([@koic][])

#10179: Fix false positives in Style/DocumentDynamicEvalDefinition when the heredoc contains an escaped interpolation (\#{...}). ([@eyupcanakman][])

#15154: Fix bug where specifying --out disables parallelization. ([@deivid-rodriguez][])

#15106: Fix TargetFinder to work correctly inside hidden parent directories. ([@alpaca-tc][])

#15102: Fix FrozenError in DisabledConfigFormatter for frozen array config parameters. ([@koic][])

#15141: Fix incorrect autocorrect for Gemspec/RequireMFA causing an infinite loop when rubygems_mfa_required metadata uses a symbol key. ([@koic][])

#15142: Fix infinite loop for --disable-uncorrectable and offense near heredoc. ([@jonas054][])

... (truncated)

Commits

e5b788d Cut 1.87
65aece8 Update Changelog
810c790 Fix incorrect autocorrect for Style/StructInheritance cop
1ec0554 [Fix #15185] Make Layout/EmptyLineAfterGuardClause accept new SimpleCov dir...
11cd569 Merge pull request #15190 from koic/fix_false_positives_in_style_yoda_condition
ceff136 [Fix #15188] Fix false positives for Style/YodaCondition
4a12596 Fix incorrect autocorrect for Style/HashConversion cop
4801e9d Merge pull request #15184 from rubocop/fix-typos-and-grammar-in-docs
bfe7dc5 Fix various typos and grammar mistakes in documentation
6988aa4 Merge pull request #15182 from koic/fix_incorrect_autocorrect_for_style_alias...
Additional commits viewable in compare view

Updates ruby-lsp from 0.16.7 to 0.26.9

Release notes

Sourced from ruby-lsp's releases.

v0.26.9

🐛 Bug Fixes

Prevent workspace_dependencies failing if directory gets removed during execution (Shopify/ruby-lsp#3980) by @vinistock

Fix semantic token defaultLibrary modifier casing (Shopify/ruby-lsp#4005) by @a-lavis

Fix document links for source comments above sig blocks (Shopify/ruby-lsp#4018) by @KaanOzkan

v0.26.8

🐛 Bug Fixes

Fix send_log_message ignoring type parameter (Shopify/ruby-lsp#3969) by @vinistock

Properly reset state after leaving a regex capture (Shopify/ruby-lsp#3970) by @vinistock

Clean up cancelled requests after processing them (Shopify/ruby-lsp#3971) by @vinistock

Apply lower bound ruby-lsp version constraint in composed bundle (Shopify/ruby-lsp#3985) by @st0012

Ensure the original CLI arguments are used when updating (Shopify/ruby-lsp#3986) by @vinistock

Ensure bundle is re-composed when CLI arguments change (Shopify/ruby-lsp#3987) by @vinistock

📦 Other Changes

Start accepting --beta flag to install beta server version (Shopify/ruby-lsp#3976) by @vinistock

v0.26.7

🐛 Bug Fixes

Skip disable line action for self-resolving cops (Shopify/ruby-lsp#3945) by @sucicfilip

Fix test runner silent failure on dual-stack IPv4/IPv6 systems (Shopify/ruby-lsp#3953) by @Copilot

Fix Bundler::GemNotFound error introduced in 0.26.5 (Shopify/ruby-lsp#3961) by @jesse-shopify

Fix incompatible addon version activation when Bundler.setup fails after retry (Shopify/ruby-lsp#3963) by @KaanOzkan

Avoid failing if needs_update file is deleted by concurrent process (Shopify/ruby-lsp#3964) by @vinistock

📦 Other Changes

Support IPv4 and IPv6 for LSP reporter connection (Shopify/ruby-lsp#3965) by @vinistock

Decouple test reporter IO from test execution (Shopify/ruby-lsp#3962) by @alexcrocha

v0.26.6

🐛 Bug Fixes

Fix infinite loop when collecting transitive excluded gems (Shopify/ruby-lsp#3913) by @rafaelfranca

Don't include test files in the gem package (Shopify/ruby-lsp#3916) by @rafaelfranca

Add rbs to composed bundle update commands (Shopify/ruby-lsp#3938) by @modille

Extract GEMS_TO_UPDATE constant and fix missing prism in command path (Shopify/ruby-lsp#3939) by @st0012

📦 Other Changes

[DOC] Add security documentation (Shopify/ruby-lsp#3928) by @st0012

v0.26.5

✨ Enhancements

... (truncated)

Commits

29ecc8d Merge commit from fork
f6d9ee4 Bump version to v0.26.9
97f817d Remove --branch flag from server
9e53e7e Merge commit from fork
eb746d3 Bump extension version to v0.10.2
8834520 Merge pull request #4030 from Shopify/use-prism-parser
e4026ea Use Prism parser for Sorbet
81843e7 Bump Sorbet to 0.6.13055
b61a594 Remove rubyLsp.branch setting
8c1e9b6 Merge pull request #4028 from Shopify/dependabot/npm_and_yarn/vscode/minor-an...
Additional commits viewable in compare view

Updates byebug from 11.1.3 to 13.0.0

Release notes

Sourced from byebug's releases.

13.0.0

Fixed

#924: Use typed data APIs to fix Ruby 4.0 deprecation ([@nobu]).

#876: Add explicit require of stringio ([@pabloh]).

#909: Avoid loading readline at all to play nice with Ruby 4.0.

#905: Make reline an explicit dependency to fix Ruby 3.4 warnings.

#824: Improve startup by loading IRB lazily ([@pocke]).

#848: Grammar fixes in GUIDE.md ([@alexymik]).

#804: Fix typo in context.rb documentation ([@ono-max]).

Removed

Support for MRI 3.1. Byebug no longer installs on this platform.

... (truncated)

Changelog

Sourced from byebug's changelog.

[13.0.0] - 2026-01-15

Fixed

#924: Use typed data APIs to fix Ruby 4.0 deprecation ([@nobu]).

#876: Add explicit require of stringio ([@pabloh]).

#909: Avoid loading readline at all to play nice with Ruby 4.0.

#905: Make reline an explicit dependency to fix Ruby 3.4 warnings.

#824: Improve startup by loading IRB lazily ([@pocke]).

#848: Grammar fixes in GUIDE.md ([@alexymik]).

#804: Fix typo in context.rb documentation ([@ono-max]).

Removed

Support for MRI 3.1. Byebug no longer installs on this platform.

[12.0.0] - 2025-03-25

Changed

#690: break without any arguments now sets a breakpoint on the current line, just like gdb ([@sergioro9]).

Fixed

#741: Small consistency issues in help messages.

#743: untracevar command crashing when giving a non existent global variable.

#744: Another punctuation tweak in enable breakpoints help message.

#736: Skip warning about $SAFE global variable on ruby 2.7 when listing global variables.

Added

#847 and #850: Support for MRI 3.1, 3.2, and 3.3 ([@marshall-lee]).

#688: where command now receives an optional numeric argument <n> to print the nth first frames ([@sergioro9].

Removed

Support for MRI 2.4, 2.5, 2.6, 2.7, and 3.0. Byebug no longer installs on this platform.

Commits

aff6440 Get ready for 13.0.0 release (#933)
ecbf2e6 Bump irb from 1.15.2 to 1.15.3 (#919)
fbf77e4 Bump mdl from 0.13.0 to 0.15.0 in /gemfiles/lint (#923)
3a75957 Bump yard from 0.9.37 to 0.9.38 in /gemfiles/lint (#925)
5f35116 Bump yard from 0.9.37 to 0.9.38 (#926)
18cdb7d Bump reline from 0.6.2 to 0.6.3 (#921)
5e09b34 Bump minitest from 5.26.0 to 5.27.0 (#927)
2e5beca Bump rake-compiler from 1.3.0 to 1.3.1 (#928)
ad3a454 Bump rubocop from 1.81.6 to 1.82.1 in /gemfiles/lint (#930)
1712bc6 Bump uri from 1.0.3 to 1.0.4 (#932)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

…ubocop, ruby-lsp and byebug Bumps [devise](https://github.com/heartcombo/devise), [devise-jwt](https://github.com/waiting-for-dev/devise-jwt), [warden-jwt_auth](https://github.com/waiting-for-dev/warden-jwt_auth), [dotenv-rails](https://github.com/bkeepers/dotenv), [pry-byebug](https://github.com/deivid-rodriguez/pry-byebug), [rubocop](https://github.com/rubocop/rubocop), [ruby-lsp](https://github.com/Shopify/ruby-lsp) and [byebug](https://github.com/deivid-rodriguez/byebug). These dependencies needed to be updated together. Updates `devise` from 4.9.4 to 5.0.4 - [Release notes](https://github.com/heartcombo/devise/releases) - [Changelog](https://github.com/heartcombo/devise/blob/main/CHANGELOG.md) - [Commits](heartcombo/devise@v4.9.4...v5.0.4) Updates `devise-jwt` from 0.11.0 to 0.13.0 - [Release notes](https://github.com/waiting-for-dev/devise-jwt/releases) - [Changelog](https://github.com/waiting-for-dev/devise-jwt/blob/main/CHANGELOG.md) - [Commits](https://github.com/waiting-for-dev/devise-jwt/commits) Updates `warden-jwt_auth` from `296f0e4` to 0.12.0 - [Release notes](https://github.com/waiting-for-dev/warden-jwt_auth/releases) - [Commits](waiting-for-dev/warden-jwt_auth@296f0e4...v0.12.0) Updates `dotenv-rails` from 3.1.2 to 3.2.0 - [Release notes](https://github.com/bkeepers/dotenv/releases) - [Changelog](https://github.com/bkeepers/dotenv/blob/main/Changelog.md) - [Commits](bkeepers/dotenv@v3.1.2...v3.2.0) Updates `pry-byebug` from 3.10.1 to 3.12.0 - [Release notes](https://github.com/deivid-rodriguez/pry-byebug/releases) - [Changelog](https://github.com/deivid-rodriguez/pry-byebug/blob/master/CHANGELOG.md) - [Commits](deivid-rodriguez/pry-byebug@v3.10.1...v3.12.0) Updates `rubocop` from 1.64.0 to 1.87.0 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](rubocop/rubocop@v1.64.0...v1.87.0) Updates `ruby-lsp` from 0.16.7 to 0.26.9 - [Release notes](https://github.com/Shopify/ruby-lsp/releases) - [Commits](Shopify/ruby-lsp@v0.16.7...v0.26.9) Updates `byebug` from 11.1.3 to 13.0.0 - [Release notes](https://github.com/deivid-rodriguez/byebug/releases) - [Changelog](https://github.com/deivid-rodriguez/byebug/blob/main/CHANGELOG.md) - [Commits](deivid-rodriguez/byebug@v11.1.3...v13.0.0) --- updated-dependencies: - dependency-name: devise dependency-version: 5.0.4 dependency-type: direct:production - dependency-name: devise-jwt dependency-version: 0.13.0 dependency-type: direct:production - dependency-name: warden-jwt_auth dependency-version: 0.12.0 dependency-type: direct:production - dependency-name: dotenv-rails dependency-version: 3.2.0 dependency-type: direct:production - dependency-name: pry-byebug dependency-version: 3.12.0 dependency-type: direct:development - dependency-name: rubocop dependency-version: 1.87.0 dependency-type: direct:development - dependency-name: ruby-lsp dependency-version: 0.26.9 dependency-type: direct:development - dependency-name: byebug dependency-version: 13.0.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jun 6, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump devise, devise-jwt, warden-jwt_auth, dotenv-rails, pry-byebug, rubocop, ruby-lsp and byebug#550

Bump devise, devise-jwt, warden-jwt_auth, dotenv-rails, pry-byebug, rubocop, ruby-lsp and byebug#550
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/multi-7991475250

dependabot Bot commented on behalf of github Jun 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 6, 2026

v5.0.4

v5.0.3

v5.0.2

v5.0.1

v5.0.0

v5.0.0.rc

5.0.4 - 2026-05-08

5.0.3 - 2026-03-16

5.0.2 - 2026-02-18

5.0.1 - 2026-02-13

5.0.0 - 2026-01-23

5.0.0.rc - 2025-12-31

[0.13.0] - 2026-01-13

[0.12.1] - 2024-07-12

[0.12.0] - 2024-07-10

Added

v0.12.0

v3.2.0

What's Changed

New Contributors

v3.1.8

What's Changed

New Contributors

v3.1.7

What's Changed

3.1.6

What's Changed

v3.1.5

What's Changed

3.12.0

Added

Removed

3.11.0

Added

Removed

3.12.0 (2026-01-16)

Added

Removed

3.11.0 (2025-03-28)

Added

Removed

RuboCop v1.87.0

New features

Bug fixes

Changes

RuboCop v1.86.2

New features

Bug fixes

1.87.0 (2026-05-30)

New features

Bug fixes

Changes

1.86.2 (2026-05-14)

New features

Bug fixes

v0.26.9

🐛 Bug Fixes

v0.26.8

🐛 Bug Fixes

📦 Other Changes

v0.26.7

🐛 Bug Fixes

📦 Other Changes

v0.26.6

🐛 Bug Fixes

📦 Other Changes

v0.26.5

✨ Enhancements

13.0.0

Fixed

Removed

[13.0.0] - 2026-01-15

Fixed

Removed

[12.0.0] - 2025-03-25

Changed

Fixed