Skip to content

Bump the minor-and-patch group with 5 updates #2503

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump the minor-and-patch group with 5 updates #2503

dependabot wants to merge 1 commit into from
+16 −15

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 26, 2026

Bumps the minor-and-patch group with 5 updates:

Package From To
ruby-lsp 0.26.4 0.26.5
dalli 4.0.0 4.1.0
graphql 2.5.16 2.5.18
sorbet-static 0.6.12887 0.6.12897
sorbet-static-and-runtime 0.6.12887 0.6.12897

Updates ruby-lsp from 0.26.4 to 0.26.5

Release notes

Sourced from ruby-lsp's releases.

v0.26.5

✨ Enhancements

🐛 Bug Fixes

📦 Other Changes

Commits
  • 7eb2eb7 Refactor release workflows (#3911)
  • e25d484 Bump extension version to v0.9.33
  • 3d510bf Merge pull request #3910 from Shopify/rmf-nix
  • ff46475 Use nix to manage dependencies of this project
  • 4c6c71e Merge pull request #3909 from reese/reese-bare-heredoc-highlighting
  • 59da6a0 Fix bare heredoc syntax highlighting
  • f397736 Merge pull request #3882 from sucicfilip/feature/goto-definition-for-send-and...
  • 25bab9d Remove dupplication to get enclosing call and its name
  • 939ee92 Remove redundant code for send and public_send definition handling
  • 4505f5b Implement goto definition for send and public send
  • Additional commits viewable in compare view

Updates dalli from 4.0.0 to 4.1.0

Changelog

Sourced from dalli's changelog.

4.1.0

New Features:

  • Add set_multi for efficient bulk set operations using pipelined requests
  • Add delete_multi for efficient bulk delete operations using pipelined requests
  • Add fetch_with_lock for thundering herd protection using meta protocol's vivify/recache flags (requires memcached 1.6+)
  • Add thundering herd protection support to meta protocol (requires memcached 1.6+):
    • N (vivify) flag for creating stubs on cache miss
    • R (recache) flag for winning recache race when TTL is below threshold
    • Response flags W (won recache), X (stale), Z (lost race)
    • delete_stale method for marking items as stale instead of deleting
  • Add get_with_metadata for advanced cache operations with metadata retrieval (requires memcached 1.6+):
    • Returns hash with :value, :cas, :won_recache, :stale, :lost_recache
    • Optional :return_hit_status returns :hit_before (true/false for previous access)
    • Optional :return_last_access returns :last_access (seconds since last access)
    • Optional :skip_lru_bump prevents LRU update on access
    • Optional :vivify_ttl and :recache_ttl for thundering herd protection

Deprecations:

  • Binary protocol is deprecated and will be removed in Dalli 5.0. Use protocol: :meta instead (requires memcached 1.6+)
  • SASL authentication is deprecated and will be removed in Dalli 5.0. Consider using network-level security or memcached's TLS support

4.0.1

  • Add :raw client option to skip serialization entirely, returning raw byte strings
  • Handle OpenSSL::SSL::SSLError in connection manager
Commits
  • 060cb14 Dalli 4.1.0 release
  • 486e3eb Update roadmap: mark h, l, u flags and get_with_metadata as complete
  • dc0f230 Add get_with_metadata and meta protocol h, l, u flags
  • 0887f4f Fix roadmap: clarify which meta flags are actually implemented
  • a17ddf3 Add v5.0 roadmap document
  • 692864f Update version to 4.1.0 in CHANGELOG
  • c606c87 Add v4.2.0 features: set_multi, delete_multi, thundering herd protection
  • 39b5d07 Dalli 4.0.1 release
  • 857b4b2 Improve StringMarshaller and :raw option documentation
  • 4e6a9ab Add :raw client option
  • Additional commits viewable in compare view

Updates graphql from 2.5.16 to 2.5.18

Changelog

Sourced from graphql's changelog.

2.5.18 (22 Jan 2026)

  • GraphQL::Dashboard: properly require action_controller before using it #5510
  • GraphQL::Dashboard: don't use config.asset_host for Dashboard assets since they're handled by the dashboard itself #5511

2.5.17 (21 Jan 2026)

Bug fixes

  • GraphQL::Dashboard: fix routes compatibility with Devise #5505
  • GraphQL::Dashboard: fix HTML/erb lint issues #5497
  • Parser: improve check for invalid number followed by name #5492 #5492
  • GraphQL::Field: optimize boot memory by removing Field.from_options #5495
  • field, argument: improve API documentation for DSL methods #5491
Commits
  • 398efef 2.5.18
  • c81aa29 Merge pull request #5511 from rmosolgo/skip-asset-pipeline
  • 179a4e1 Fix system tests now that config.asset_host is set
  • 424a775 Merge pull request #5513 from duffuniverse/fix-docs-link-in-relay-subscriptio...
  • 4c5da18 Merge pull request #5510 from rafaelfranca/patch-1
  • 4150c5f Update internal link for compressed payloads section
  • 74c58f6 Don't use config.asset_host for GraphQL::Dashboard assets
  • e7e2e12 Require action_controller before using it
  • 53260f8 2.5.17
  • 8298e97 Merge pull request #5505 from rmosolgo/fix-engine-routes
  • Additional commits viewable in compare view

Updates sorbet-static from 0.6.12887 to 0.6.12897

Release notes

Sourced from sorbet-static's releases.

sorbet 0.6.12896.20260122120347-4bd9e420f

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12896', :group => :development
gem 'sorbet-runtime', '0.6.12896'

sorbet 0.6.12895.20260122140057-f9309caef

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12895', :group => :development
gem 'sorbet-runtime', '0.6.12895'

sorbet 0.6.12894.20260116174224-d68b882e7

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12894', :group => :development
gem 'sorbet-runtime', '0.6.12894'

sorbet 0.6.12893.20260116152729-4de7be727

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12893', :group => :development
gem 'sorbet-runtime', '0.6.12893'

sorbet 0.6.12892.20260116141858-c9abe0cba

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12892', :group => :development
gem 'sorbet-runtime', '0.6.12892'

sorbet 0.6.12891.20260116100328-71b36015c

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12891', :group => :development
gem 'sorbet-runtime', '0.6.12891'

sorbet 0.6.12890.20260115235225-1f761eaaa

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12890', :group => :development
gem 'sorbet-runtime', '0.6.12890'

sorbet 0.6.12889.20260115141659-d64db3e1d

... (truncated)

Commits

Updates sorbet-static-and-runtime from 0.6.12887 to 0.6.12897

Release notes

Sourced from sorbet-static-and-runtime's releases.

sorbet 0.6.12896.20260122120347-4bd9e420f

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12896', :group => :development
gem 'sorbet-runtime', '0.6.12896'

sorbet 0.6.12895.20260122140057-f9309caef

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12895', :group => :development
gem 'sorbet-runtime', '0.6.12895'

sorbet 0.6.12894.20260116174224-d68b882e7

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12894', :group => :development
gem 'sorbet-runtime', '0.6.12894'

sorbet 0.6.12893.20260116152729-4de7be727

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12893', :group => :development
gem 'sorbet-runtime', '0.6.12893'

sorbet 0.6.12892.20260116141858-c9abe0cba

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12892', :group => :development
gem 'sorbet-runtime', '0.6.12892'

sorbet 0.6.12891.20260116100328-71b36015c

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12891', :group => :development
gem 'sorbet-runtime', '0.6.12891'

sorbet 0.6.12890.20260115235225-1f761eaaa

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.12890', :group => :development
gem 'sorbet-runtime', '0.6.12890'

sorbet 0.6.12889.20260115141659-d64db3e1d

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the minor-and-patch group with 5 updates
893ca07 
Bumps the minor-and-patch group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [ruby-lsp](https://github.com/Shopify/ruby-lsp) | `0.26.4` | `0.26.5` |
| [dalli](https://github.com/petergoldstein/dalli) | `4.0.0` | `4.1.0` |
| [graphql](https://github.com/rmosolgo/graphql-ruby) | `2.5.16` | `2.5.18` |
| [sorbet-static](https://github.com/sorbet/sorbet) | `0.6.12887` | `0.6.12897` |
| [sorbet-static-and-runtime](https://github.com/sorbet/sorbet) | `0.6.12887` | `0.6.12897` |


Updates `ruby-lsp` from 0.26.4 to 0.26.5
- [Release notes](https://github.com/Shopify/ruby-lsp/releases)
- [Commits](Shopify/ruby-lsp@v0.26.4...v0.26.5)

Updates `dalli` from 4.0.0 to 4.1.0
- [Changelog](https://github.com/petergoldstein/dalli/blob/main/CHANGELOG.md)
- [Commits](petergoldstein/dalli@v4.0.0...v4.1.0)

Updates `graphql` from 2.5.16 to 2.5.18
- [Release notes](https://github.com/rmosolgo/graphql-ruby/releases)
- [Changelog](https://github.com/rmosolgo/graphql-ruby/blob/master/CHANGELOG.md)
- [Commits](rmosolgo/graphql-ruby@v2.5.16...v2.5.18)

Updates `sorbet-static` from 0.6.12887 to 0.6.12897
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `sorbet-static-and-runtime` from 0.6.12887 to 0.6.12897
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

---
updated-dependencies:
- dependency-name: ruby-lsp
  dependency-version: 0.26.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: dalli
  dependency-version: 4.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: graphql
  dependency-version: 2.5.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: sorbet-static
  dependency-version: 0.6.12897
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: sorbet-static-and-runtime
  dependency-version: 0.6.12897
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jan 26, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 26, 2026 23:04
@dependabot dependabot bot added the ruby Pull requests that update Ruby code label Jan 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants