Bump the minor_updates group with 3 updates

[dependabot]

Bumps the minor_updates group with 3 updates: mocha, rubocop-rails and activesupport.

Updates mocha from 2.6.1 to 2.7.1

Changelog

Sourced from mocha's changelog.

2.7.1

External changes

• Deprecate Configuration#stubbing_method_on_nil= (#694)
• Indicate when parameter matcher logic is defined by block passed to Expectation#with (#698, b30e4434)
• Improve documentation for Expectation#with, especially when it is passed a block (#698, #682, #606 & #681)

2.7.0

External changes

• Fail fast if invocation matches never expectation (#679, #678, #490, #131 & #44) - thanks to @​ducmtran & @​davidstosik for reporting

Internal changes

• Workaround for JRuby jar-dependencies issue (#690)
• Ruby v3.4 stacktrace uses single-quote vs backtick (#688 & #689) - thanks to Vít Ondruch

WARNING: This release fixes a very old bug

• The bug relates to the use of Expectation#never in combination with other expectations on the same method.

• Please ensure you fix the relevant deprecation warnings when running against v2.6.1 before upgrading to v2.7.0.

• Previously, the following test would have passed, but now it will fail with an unexpected invocation error on the foo.bar line.

  foo = mock('foo') foo.stubs(:bar) foo.expects(:bar).never foo.bar

Commits

• cb0909e [skip ci] Update documentation for v2.7.1
• d6ba8b9 Bump version to 2.7.1 & prepare for release
• 4d4a027 Merge pull request #698 from freerange/expectation-with-improvements
• b30e443 Indicate when matcher logic is defined by block
• fed3387 Add custom matcher example to Expectatation#with docs
• 17a4856 Improve docs for Expectation#with when passed block
• 3ca865f Document argument precedence for Expectation#with
• 558d521 Add docs for Expectation#with when passed block
• 99f3f6b Document Expectation#with called multiple times
• c3b4b8e Clarify docs for Expectation#with yieldparam
• Additional commits viewable in compare view

Updates rubocop-rails from 2.27.0 to 2.28.0

Release notes

Sourced from rubocop-rails's releases.

RuboCop Rails 2.28.0

New features

• #1383: Introduce AllCops: MigratedSchemaVersion config. (@​koic)

Bug fixes

• #1390: Fix an incorrect autocorrect for Rails/SelectMap when select has no receiver and method chains are used. (@​masato-bkn)
• #1382: Fix false negatives for Rails/RedundantActiveRecordAllMethod when using all method in block. (@​masato-bkn)
• #1397: Fix Rails/FilePath cop error on join method with implicit receiver. (@​viralpraxis)
• #1398: Fix Rails/FilePath cop error in case of extra operations in Rails.root interpolation. (@​viralpraxis)
• #1392: Fix Rails/FilePath cop error with rescued Rails.root. (@​viralpraxis)

Changes

• #1388: Modify Rails/Pluck to ignore map/collect when used inside blocks to prevent potential N+1 queries. (@​masato-bkn)

Changelog

Sourced from rubocop-rails's changelog.

2.28.0 (2024-12-25)

New features

• #1383: Introduce AllCops: MigratedSchemaVersion config. ([@​koic][])

Bug fixes

• #1390: Fix an incorrect autocorrect for Rails/SelectMap when select has no receiver and method chains are used. ([@​masato-bkn][])
• #1382: Fix false negatives for Rails/RedundantActiveRecordAllMethod when using all method in block. ([@​masato-bkn][])
• #1397: Fix Rails/FilePath cop error on join method with implicit receiver. ([@​viralpraxis][])
• #1398: Fix Rails/FilePath cop error in case of extra operations in Rails.root interpolation. ([@​viralpraxis][])
• #1392: Fix Rails/FilePath cop error with rescued Rails.root. ([@​viralpraxis][])

Changes

• #1388: Modify Rails/Pluck to ignore map/collect when used inside blocks to prevent potential N+1 queries. ([@​masato-bkn][])

Commits

• fcc4cf6 Cut 2.28.0
• bac0f3e Update Changelog
• 2c357f0 Merge pull request #1383 from koic/intro_migrated_schema_version
• 86b7a55 Introduce AllCops: MigratedSchemaVersion config
• 2671fb4 Merge pull request #1398 from viralpraxis/fix-rails-file-path-cop-error-on-jo...
• 815d119 Fix Rails/FilePath cop error on join method with implicit receiver
• fecead8 Merge pull request #1399 from viralpraxis/fix-rails-file-path-cop-error-on-ex...
• e4aee6b Fix Rails/FilePath cop error in case of extra operations in Rails.root in...
• c6f869b Merge pull request #1392 from viralpraxis/fix-rails-file-path-cop-error-with-...
• bb03d6b Fix Rails/FilePath cop error with rescued Rails.root
• Additional commits viewable in compare view

Updates activesupport from 7.2.2 to 7.2.2.1

Release notes

Sourced from activesupport's releases.

7.2.2.1

Active Support

• No changes.

Active Model

• No changes.

Active Record

• No changes.

Action View

• No changes.

Action Pack

• Add validation to content security policies to disallow spaces and semicolons. Developers should use multiple arguments, and different directive methods instead.

  [CVE-2024-54133]

  Gannon McGibbon

Active Job

• No changes.

Action Mailer

• No changes.

Action Cable

• No changes.

Active Storage

• No changes.

... (truncated)

Commits

• 33beb0a Preparing for 7.2.2.1 release
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.