Skip to content

build(deps): bump rubocop-md from 2.0.2 to 2.0.4#989

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/bundler/rubocop-md-2.0.4
Open

build(deps): bump rubocop-md from 2.0.2 to 2.0.4#989
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/bundler/rubocop-md-2.0.4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps rubocop-md from 2.0.2 to 2.0.4.

Changelog

Sourced from rubocop-md's changelog.

2.0.4 (2026-01-28)

  • Enable caching when no offenses detected.

2.0.3 (2025-09-30)

  • Fix compatibility with RuboCop upstream (get_processed_source signature)
Commits
  • d96f4a3 Bump 2.0.4
  • a006b52 Merge pull request #47 from byroot/fix-caching
  • 03c1346 Allow caching when there is no offenses
  • da7add1 Bump 2.0.3
  • 88d1fe8 Merge pull request #46 from rubocop/dependabot/github_actions/actions/checkout-6
  • 18bac0e Bump actions/checkout from 5 to 6
  • ff64e28 Merge pull request #45 from Rylan12/get_processed_source-kwargs
  • a9bbf46 Use ... instead of *args, **kwargs for argument forwarding
  • 4d6c7e8 Allow other private extension methods to accept/pass along any arguments
  • 5762985 Update get_processed_source to accept keyword arguments
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rubocop-md](https://github.com/rubocop/rubocop-md) from 2.0.2 to 2.0.4.
- [Release notes](https://github.com/rubocop/rubocop-md/releases)
- [Changelog](https://github.com/rubocop/rubocop-md/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop-md@v2.0.2...v2.0.4)

---
updated-dependencies:
- dependency-name: rubocop-md
  dependency-version: 2.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels May 4, 2026
Copy link
Copy Markdown

@github-actions github-actions Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dependabot merge

@codacy-production
Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity

Metric Results
Complexity 0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

Run reviewer

TIP This summary will be updated as you push new changes.

Copy link
Copy Markdown

@codacy-production codacy-production Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

The PR successfully updates rubocop-md to version 2.0.4, meeting the primary acceptance criterion. However, there is significant scope creep; several other dependencies (including json, prism, and regexp_parser) were updated in the same commit. While Codacy indicates the PR is up to standards, this undocumented expansion of scope increases the risk of regressions in the primary application logic. It is recommended to either isolate the rubocop-md update or update the PR documentation to reflect the full set of changes.

Test suggestions

  • Run the project's linting suite to verify that rubocop-md 2.0.4 correctly identifies (or ignores) offenses in Markdown files without runtime errors.
  • Verify that the updated transitive dependencies (especially prism and json) do not introduce regressions in the primary application logic.
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Run the project's linting suite to verify that `rubocop-md` 2.0.4 correctly identifies (or ignores) offenses in Markdown files without runtime errors.
2. Verify that the updated transitive dependencies (especially `prism` and `json`) do not introduce regressions in the primary application logic.

TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback

Comment thread Gemfile.lock
actionview (>= 7.0.0)
activesupport (>= 7.0.0)
json (2.15.0)
json (2.19.5)
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 MEDIUM RISK

This PR includes updates for several dependencies (json, parallel, prism, regexp_parser, and unicode-emoji) that are not mentioned in the PR title. If these updates were unintentional side effects of a broad bundle update, consider running bundle update rubocop-md instead to isolate the change. Otherwise, please update the PR title and description to reflect that multiple dependencies are being refreshed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants