[dependabot]

Bumps the ruby group with 6 updates:

Package	From	To
simplecov	1.1.1	1.3.1
rubyzip	3.5.0	3.7.0
grpc	1.83.0	1.84.0
grpc-tools	1.83.0	1.84.0
bigdecimal	4.1.2	4.1.3
google-protobuf	4.36.1	4.36.2

Updates simplecov from 1.1.1 to 1.3.1

Release notes

Sourced from simplecov's releases.

v1.3.1

Bugfixes

• cover_views compiles templates on Rails main again. Rails removed ActionView::Template.registered_template_handler; the lookup reads ActionView::Template::Handlers.template_handlers and still skips an extension with no handler. See simplecov-ruby/simplecov#1300.
• require "simplecov" works again on JRuby on Windows, where 1.3.0 raised LoadError: Could not open library '.../libprism.dll'. Prism's FFI backend cannot open its native library there, and 1.3.0 required Prism as soon as SimpleCov loaded. Prism now loads only when branch or method coverage needs the static extractor, which a line-only run never does. Where it cannot load at all, the extractor falls back to empty branch and method tables for never-loaded files, as it did before 1.3.0. See simplecov-ruby/simplecov#1299.
• simplecov affected --run works on JRuby on Windows, where it crashed with NoMethodError because Process.wait2 answers no status there. On that platform the runner starts through Kernel#system instead.
• simplecov serve refuses a symlink that points outside the report on JRuby on Windows too. JRuby's File.realpath follows no symlinks there, so serve would have served the file the link pointed to, and simplecov clean and the coverage.json lookup compared paths that were never resolved. On JRuby the CLI now resolves paths through the JDK.

v1.3.0

SimpleCov 1.3 raises the minimum Ruby to 3.3, brings the coverage directives to ERB, Haml, and Slim templates, teaches simplecov patch and simplecov uncovered to annotate CI hosts natively, and settles what the report says about files and groups that hold nothing.

Highlights

• Ruby 3.2 is no longer supported. The minimum is Ruby 3.3, which bundles Prism, so the static coverage extractor stops probing for it and the emulation of 3.2's constant folding is gone.
• # simplecov:disable and # simplecov:enable work inside ERB, Haml, and Slim templates measured with cover_views, in each language's own comment syntax or as Ruby comments on a code line.
• --annotate KIND turns simplecov patch and simplecov uncovered into inline CI annotations for GitHub, GitLab, reviewdog, Azure, TeamCity, and Buildkite, so one CI step can both annotate and gate.
• Groups that match no files are omitted from the report instead of padding it at 100%, and the rails profile declares its groups alphabetically.
• cover_views is the only way to measure a template now: a cover glob that matches one warns and leaves it out, and ignore: :eval_generated no longer drops a template's real branches and methods.
• A file with nothing to cover reports the same percentage in the file list as it does in the source view.

Upgrade notes

• The minimum supported Ruby is now 3.3. Ruby 3.2 reached end of life in March 2026. JRuby 10 remains supported for line coverage.
• A group that matched no files disappears from the HTML report, coverage.json, and the history file, and a per-group minimum on it passes silently rather than complaining that the group does not exist.
• The rails profile's group tabs come out in alphabetical order, so an existing project's tabs move.
• A never-loaded file with no branches or methods reports 100% for those criteria rather than 0%, so a per-file branch or method threshold that failed such a file passes now. A file the report carries no branch or method table for at all is still unaccounted for, and keeps its 0%.
• A cover glob matching .erb, .haml, or .slim warns and drops those files from the report. Measure templates with cover_views instead.
• coverage.json stays at schema 1.3, unchanged by this release.

Breaking Changes

• Dropped support for Ruby 3.2. The minimum supported Ruby is now 3.3 (required_ruby_version >= 3.3), with JRuby 10 still supported and TruffleRuby exercised only by the nightly unstable build. Prism is bundled with every supported Ruby, so the static coverage extractor stops probing for it: StaticCoverageExtractor.available? and the empty-hash fallbacks for its absence are gone. So is the emulation of Ruby 3.2's constant folding, where parentheses were transparent for every literal and a folded dead arm's branches survived in the branch table.

Enhancements

• # simplecov:disable and # simplecov:enable work inside ERB, Haml, and Slim templates measured with cover_views, in each language's own comment syntax (<%# simplecov:disable %>, -# simplecov:disable, / simplecov:disable) or as Ruby comments on a code line. A template's directives were never found before: the comment scan tokenizes a file as Ruby, and in ERB %> opens a percent literal that swallowed every comment after the template's first tag, while Haml and Slim comments are not Ruby comments at all and a Slim - # simplecov:disable line even read as an inline directive that disabled only itself. The scan now reads only the Ruby a template holds, at the template's own lines, so a Devise app can disable the confirmable link it never renders instead of carrying it as uncovered. See simplecov-ruby/simplecov#1295.
• Groups that match no files are omitted from the report instead of appearing as 100% covered with nothing in them. Formatters, coverage.json, and the history file all skip them, so the rails profile's Channels, Mailers, and Views tabs no longer pad the HTML report of an app without those directories, and a project can declare a group per directory it might have (Dir["app/*"].each { |dir| group File.basename(dir).capitalize, dir }) without checking each one for Ruby files first. A minimum_coverage_by_group threshold on a group that matched nothing passes silently, as it did when the empty group reported 100%, rather than complaining that the group does not exist. See simplecov-ruby/simplecov#1293.
• The rails profile declares its groups in alphabetical order: Channels, Controllers, Helpers, Jobs, Libraries, Mailers, Models, Views. Group tabs render in declaration order, so the report of a Rails app lists them that way instead of in the order they accumulated over the years. Nothing else about the groups changes, and a project that declares its own groups is unaffected.
• simplecov patch and simplecov uncovered annotate CI hosts natively. --annotate KIND on both commands turns the answer into inline annotations in the host's own channel, one per contiguous missed range with project-relative paths (patch adds one per uncovered touched branch or method when the report measured them): github emits ::warning workflow commands, gitlab a Code Quality report for the codequality artifact, rdjson reviewdog's Diagnostic Format for any host reviewdog posts to, azure ##vso[task.logissue] logging commands, teamcity code inspection service messages, and buildkite the Markdown body for buildkite-agent annotate. uncovered previously offered only github, and its annotations now name the chosen criterion the way patch's do. Nothing else reaches stdout in that mode and patch --minimum still sets the exit status, so one CI step can annotate and gate. Documented under CI annotations in docs/CLI.md.

Bugfixes

• A file with no branches or no methods reports the same percentage everywhere. A file tracked but never loaded had its empty branch and method sets forced to 0% (simplecov-ruby/simplecov#902), from a time when simulation recorded no tuples for such a file and an empty set really did mean "nobody knows". Simulation has synthesized those tuples statically for a while now, so an empty set is a fact about the file: it has no branches, or a directive skipped the ones it has. Such a file now reports 100% the way a loaded file with none always has, so the file list stops showing 0% beside a source view that says 100%, and a per-file branch or method minimum stops failing a file that has nothing to cover. A file carrying no table at all for the criterion is still unaccounted for, and 0% stands there. The HTML report's source view also takes each header percentage from the report rather than recomputing it from the fraction, so the two views cannot drift again. See simplecov-ruby/simplecov#1296.
• A cover glob that matches a template warns and leaves it out instead of simulating it. Simulation classifies lines as Ruby and parses for branches, so a swept-in template appeared with a comment counted as a missed line, an #id tag counted as never relevant, and no branches at all. The warning names the templates and points at cover_views, which compiles them and measures the real thing.
• The deprecated # :nocov: toggle works in a template's own comment syntax (<%# :nocov: %>, -# :nocov:, / :nocov:) and emits its deprecation warning there. The matcher read raw lines and needed the line to begin with #, so those forms were silently ignored while the Ruby-comment form inside an ERB code tag happened to work. The matcher now reads the same extracted Ruby the directives do.
• ignore: :eval_generated no longer drops a template's real branches and methods. The filter keeps a Coverage entry only when Prism finds a matching construct in the static source, which for a template measured with cover_views meant parsing ERB, Haml, or Slim as Ruby. That usually fails and the entry is kept, but a template whose text happens to parse (a Haml or Slim #id tag reads as a Ruby comment, and so does an ERB text line starting with #) yielded a confident wrong parse, and the template's own conditionals vanished from branch coverage. Templates now skip the parse, since everything a template reports is eval-generated by construction and the filter has nothing to distinguish there.

v1.2.0

SimpleCov 1.2 adds change-focused coverage, per-test attribution, production coverage, and a substantially expanded CLI while keeping the existing configuration API working through deprecation aliases.

Highlights

• track_tests, simplecov tests, and simplecov affected connect covered lines to the tests that exercised them; the HTML report displays the same attribution and simplecov watch uses it for focused reruns.

... (truncated)

Changelog

Sourced from simplecov's changelog.

1.3.1 (2026-09-24)

Bugfixes

• cover_views compiles templates on Rails main again. Rails removed ActionView::Template.registered_template_handler; the lookup reads ActionView::Template::Handlers.template_handlers and still skips an extension with no handler. See simplecov-ruby/simplecov#1300.
• require "simplecov" works again on JRuby on Windows, where 1.3.0 raised LoadError: Could not open library '.../libprism.dll'. Prism's FFI backend cannot open its native library there, and 1.3.0 required Prism as soon as SimpleCov loaded. Prism now loads only when branch or method coverage needs the static extractor, which a line-only run never does. Where it cannot load at all, the extractor falls back to empty branch and method tables for never-loaded files, as it did before 1.3.0. See simplecov-ruby/simplecov#1299.
• simplecov affected --run works on JRuby on Windows, where it crashed with NoMethodError because Process.wait2 answers no status there. On that platform the runner starts through Kernel#system instead.
• simplecov serve refuses a symlink that points outside the report on JRuby on Windows too. JRuby's File.realpath follows no symlinks there, so serve would have served the file the link pointed to, and simplecov clean and the coverage.json lookup compared paths that were never resolved. On JRuby the CLI now resolves paths through the JDK.

1.3.0 (2026-09-12)

SimpleCov 1.3 raises the minimum Ruby to 3.3, brings the coverage directives to ERB, Haml, and Slim templates, teaches simplecov patch and simplecov uncovered to annotate CI hosts natively, and settles what the report says about files and groups that hold nothing.

Highlights

• Ruby 3.2 is no longer supported. The minimum is Ruby 3.3, which bundles Prism, so the static coverage extractor stops probing for it and the emulation of 3.2's constant folding is gone.
• # simplecov:disable and # simplecov:enable work inside ERB, Haml, and Slim templates measured with cover_views, in each language's own comment syntax or as Ruby comments on a code line.
• --annotate KIND turns simplecov patch and simplecov uncovered into inline CI annotations for GitHub, GitLab, reviewdog, Azure, TeamCity, and Buildkite, so one CI step can both annotate and gate.
• Groups that match no files are omitted from the report instead of padding it at 100%, and the rails profile declares its groups alphabetically.
• cover_views is the only way to measure a template now: a cover glob that matches one warns and leaves it out, and ignore: :eval_generated no longer drops a template's real branches and methods.
• A file with nothing to cover reports the same percentage in the file list as it does in the source view.

Upgrade notes

• The minimum supported Ruby is now 3.3. Ruby 3.2 reached end of life in March 2026. JRuby 10 remains supported for line coverage.
• A group that matched no files disappears from the HTML report, coverage.json, and the history file, and a per-group minimum on it passes silently rather than complaining that the group does not exist.
• The rails profile's group tabs come out in alphabetical order, so an existing project's tabs move.
• A never-loaded file with no branches or methods reports 100% for those criteria rather than 0%, so a per-file branch or method threshold that failed such a file passes now. A file the report carries no branch or method table for at all is still unaccounted for, and keeps its 0%.
• A cover glob matching .erb, .haml, or .slim warns and drops those files from the report. Measure templates with cover_views instead.
• coverage.json stays at schema 1.3, unchanged by this release.

Breaking Changes

• Dropped support for Ruby 3.2. The minimum supported Ruby is now 3.3 (required_ruby_version >= 3.3), with JRuby 10 still supported and TruffleRuby exercised only by the nightly unstable build. Prism is bundled with every supported Ruby, so the static coverage extractor stops probing for it: StaticCoverageExtractor.available? and the empty-hash fallbacks for its absence are gone. So is the emulation of Ruby 3.2's constant folding, where parentheses were transparent for every literal and a folded dead arm's branches survived in the branch table.

Enhancements

• # simplecov:disable and # simplecov:enable work inside ERB, Haml, and Slim templates measured with cover_views, in each language's own comment syntax (<%# simplecov:disable %>, -# simplecov:disable, / simplecov:disable) or as Ruby comments on a code line. A template's directives were never found before: the comment scan tokenizes a file as Ruby, and in ERB %> opens a percent literal that swallowed every comment after the template's first tag, while Haml and Slim comments are not Ruby comments at all and a Slim - # simplecov:disable line even read as an inline directive that disabled only itself. The scan now reads only the Ruby a template holds, at the template's own lines, so a Devise app can disable the confirmable link it never renders instead of carrying it as uncovered. See simplecov-ruby/simplecov#1295.
• Groups that match no files are omitted from the report instead of appearing as 100% covered with nothing in them. Formatters, coverage.json, and the history file all skip them, so the rails profile's Channels, Mailers, and Views tabs no longer pad the HTML report of an app without those directories, and a project can declare a group per directory it might have (Dir["app/*"].each { |dir| group File.basename(dir).capitalize, dir }) without checking each one for Ruby files first. A minimum_coverage_by_group threshold on a group that matched nothing passes silently, as it did when the empty group reported 100%, rather than complaining that the group does not exist. See simplecov-ruby/simplecov#1293.
• The rails profile declares its groups in alphabetical order: Channels, Controllers, Helpers, Jobs, Libraries, Mailers, Models, Views. Group tabs render in declaration order, so the report of a Rails app lists them that way instead of in the order they accumulated over the years. Nothing else about the groups changes, and a project that declares its own groups is unaffected.
• simplecov patch and simplecov uncovered annotate CI hosts natively. --annotate KIND on both commands turns the answer into inline annotations in the host's own channel, one per contiguous missed range with project-relative paths (patch adds one per uncovered touched branch or method when the report measured them): github emits ::warning workflow commands, gitlab a Code Quality report for the codequality artifact, rdjson reviewdog's Diagnostic Format for any host reviewdog posts to, azure ##vso[task.logissue] logging commands, teamcity code inspection service messages, and buildkite the Markdown body for buildkite-agent annotate. uncovered previously offered only github, and its annotations now name the chosen criterion the way patch's do. Nothing else reaches stdout in that mode and patch --minimum still sets the exit status, so one CI step can annotate and gate. Documented under CI annotations in docs/CLI.md.

Bugfixes

• A file with no branches or no methods reports the same percentage everywhere. A file tracked but never loaded had its empty branch and method sets forced to 0% (simplecov-ruby/simplecov#902), from a time when simulation recorded no tuples for such a file and an empty set really did mean "nobody knows". Simulation has synthesized those tuples statically for a while now, so an empty set is a fact about the file: it has no branches, or a directive skipped the ones it has. Such a file now reports 100% the way a loaded file with none always has, so the file list stops showing 0% beside a source view that says 100%, and a per-file branch or method minimum stops failing a file that has nothing to cover. A file carrying no table at all for the criterion is still unaccounted for, and 0% stands there. The HTML report's source view also takes each header percentage from the report rather than recomputing it from the fraction, so the two views cannot drift again. See simplecov-ruby/simplecov#1296.
• A cover glob that matches a template warns and leaves it out instead of simulating it. Simulation classifies lines as Ruby and parses for branches, so a swept-in template appeared with a comment counted as a missed line, an #id tag counted as never relevant, and no branches at all. The warning names the templates and points at cover_views, which compiles them and measures the real thing.
• The deprecated # :nocov: toggle works in a template's own comment syntax (<%# :nocov: %>, -# :nocov:, / :nocov:) and emits its deprecation warning there. The matcher read raw lines and needed the line to begin with #, so those forms were silently ignored while the Ruby-comment form inside an ERB code tag happened to work. The matcher now reads the same extracted Ruby the directives do.
• ignore: :eval_generated no longer drops a template's real branches and methods. The filter keeps a Coverage entry only when Prism finds a matching construct in the static source, which for a template measured with cover_views meant parsing ERB, Haml, or Slim as Ruby. That usually fails and the entry is kept, but a template whose text happens to parse (a Haml or Slim #id tag reads as a Ruby comment, and so does an ERB text line starting with #) yielded a confident wrong parse, and the template's own conditionals vanished from branch coverage. Templates now skip the parse, since everything a template reports is eval-generated by construction and the filter has nothing to distinguish there.

1.2.0 (2026-09-04)

... (truncated)

Commits

• 4ee7894 Bump version to 1.3.1
• 486e55e bundle update
• d2a62a8 Resolve paths and wait on runners correctly on JRuby on Windows
• 3a2e08e Load Prism only when the static extractor runs
• 08006c4 Look up Action View handlers on the new registry
• 0e0b168 Bump oxlint from 1.82.0 to 1.83.0 in /html_frontend
• c1641b7 Bump @​happy-dom/global-registrator in /html_frontend
• 26920af Bump ruby/setup-ruby from 1.321.0 to 1.323.0
• b18f50d Bump oxlint from 1.81.0 to 1.82.0 in /html_frontend
• a7fa17e Bump @​types/bun from 1.4.1 to 1.4.2 in /html_frontend
• Additional commits viewable in compare view

Updates rubyzip from 3.5.0 to 3.7.0

Release notes

Sourced from rubyzip's releases.

v3.7.0

Version 3.7.0

The 3.7.x line adds AES encryption; bulk adding and extraction of entries, and; supports setting the encoding of an InputStream. See README.md for details.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

v3.6.0

Version 3.6.0

The 3.6.x line lazy-loads OpenSSL only when really needed (for faster start-up times) and clamps internal (DOS-based) dates and times to the allowed range. See README.md for details.

⚠️ There are breaking changes in the 3.x series ⚠️

Please see the README and Updating to version 3.x in the wiki for help upgrading from version 2.4.x to version 3.x.

Changelog

Sourced from rubyzip's changelog.

3.7.0 (2026-09-18)

• Add AES Encryption. #678
• Add methods to Zip::File for bulk adding and extraction of entries. #679
• Support setting the encoding of an InputStream. #668

Tooling/internal:

• Add an AGENTS.md for those using such.
• Attempt to fix transient failures in encryption tests.

3.6.0 (2026-09-01)

• Forward options from OutputStream.open without a block. #674
• Clamp DOS date and time to the range the fields can hold. #671

Tooling/internal:

• Unix owner ids no longer default to 0 (root).
• Legacy Unix owner ids no longer default to 0 (root).
• Handle short reads in copy_stream_n. #675
• Retain required Zip64 offset fields. #676
• Load openssl only when AES encryption is used. #672

Commits

• 77dfc13 Update Changelog for release.
• d2a9664 Document AES encryption in the README.
• 6f57d4d Fix AES encryption errors under JRuby.
• b96b1b4 Add tests for AES encryption.
• 8b5b86b Ensure the correct extraction version number is used with Zip64.
• 326765b Ensure entries have the correct compression method when written.
• a9b2289 Wire AES encryption into OutputStream.
• 4aa008c Fix PassThruCompressor to actually encrypt STORED data.
• bdcef49 Add stub methods to the parent Encrypter class.
• 137f678 Add AESEncrypter class.
• Additional commits viewable in compare view

Updates grpc from 1.83.0 to 1.84.0

Release notes

Sourced from grpc's releases.

Release v1.84.0

This is release 1.84.0 (gimbal) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [promise_based_filter] enable v2_non_owning_waker_implementation experiment. (#43253)
• [xDS] allow server listener address to match wildcard port. (#43247)
• [WRR] remove env var guard for custom backend metrics. (#43198)
• [subchannel] enable connection scaling service config fields. (#43116)
• [subchannel] add metrics as per A94. (#43140)
• Fix incorrect hostname suffix matching in no_proxy handling (prevents proxy bypass). (#41915)

C#

• [C# Grpc.Tools] Add native macOS ARM64 support via universal binaries. (#41222)

Python

• [Python] Fix -Werror=unused-result error triggered by Cythonized code. (#43313)
• [Python] Release Python 3.15 wheels publicly. (#43259)
• [Python][AsyncIO] Fixed reference cycles. (#43121)
• [Python] fix: remove ghost key in grpc.aio.Metadata.delitem when last value is deleted. (#42974)
• [Python] Fix the StatusCode Enums to be int. (#43167)
• [Python] Fixed the parenthesis placement. (#43111)
• [Python] Removed UsageError exception from registered method. (#43086)
• [Python] Added registered methods support in AsyncIO stack . (#41796)
• [Python] AIO Part 4 - Typehints fixes and add Pyright for aio/_channel.py. (#42736)
• [Python] grpc-status: Relax protobuf dependency lower bound to allow 6.x. (#43000)
• [Python] Observability plugin fixes. (#42785)

Ruby

• [Ruby] Fix: Addressed Array of strings passed as metadata. (#42827)

Release v1.84.0-pre2

This is a prerelease of gRPC Core 1.84.0 (gimbal).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This is a Python-only pre-release that introduces pre-built wheels for Python 3.15.

... (truncated)

Commits

• 3252a89 Bump release version to 1.84.0 on v1.84.x branch (#43405)
• c633e39 [Release] Bump version to 1.84.0-pre2 (on v1.84.x branch) (#43401)
• 12cafee [Backport][v1.84.x] Revert "[Python] Revert Python 3.15 changes due to sanity...
• 56e86cb Bump release version to 1.84.0-pre1 on v1.84.x branch (#43327)
• 7ef6a9e [build] Source reflection and channelz v1 schemas from BCR (@​grpc_proto) (#43...
• c337c3e [core][filters] Unit test framework for v3 filter (#42969)
• ce22bb4 [PH2][CHTTP2] Retire stream flow control delta early to avoid data race
• a7fabec [Python] Fix -Werror=unused-result error triggered by Cythonized code (#43313)
• d92ee43 [util] remove LoadFile() option to append null byte (#41478)
• 7e68550 [Core] Fix filter ordering semantics for v3 stack on server side (#43005)
• Additional commits viewable in compare view

Updates grpc-tools from 1.83.0 to 1.84.0

Release notes

Sourced from grpc-tools's releases.

Release v1.84.0

This is release 1.84.0 (gimbal) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [promise_based_filter] enable v2_non_owning_waker_implementation experiment. (#43253)
• [xDS] allow server listener address to match wildcard port. (#43247)
• [WRR] remove env var guard for custom backend metrics. (#43198)
• [subchannel] enable connection scaling service config fields. (#43116)
• [subchannel] add metrics as per A94. (#43140)
• Fix incorrect hostname suffix matching in no_proxy handling (prevents proxy bypass). (#41915)

C#

• [C# Grpc.Tools] Add native macOS ARM64 support via universal binaries. (#41222)

Python

• [Python] Fix -Werror=unused-result error triggered by Cythonized code. (#43313)
• [Python] Release Python 3.15 wheels publicly. (#43259)
• [Python][AsyncIO] Fixed reference cycles. (#43121)
• [Python] fix: remove ghost key in grpc.aio.Metadata.delitem when last value is deleted. (#42974)
• [Python] Fix the StatusCode Enums to be int. (#43167)
• [Python] Fixed the parenthesis placement. (#43111)
• [Python] Removed UsageError exception from registered method. (#43086)
• [Python] Added registered methods support in AsyncIO stack . (#41796)
• [Python] AIO Part 4 - Typehints fixes and add Pyright for aio/_channel.py. (#42736)
• [Python] grpc-status: Relax protobuf dependency lower bound to allow 6.x. (#43000)
• [Python] Observability plugin fixes. (#42785)

Ruby

• [Ruby] Fix: Addressed Array of strings passed as metadata. (#42827)

Release v1.84.0-pre2

This is a prerelease of gRPC Core 1.84.0 (gimbal).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This is a Python-only pre-release that introduces pre-built wheels for Python 3.15.

... (truncated)

Commits

• 3252a89 Bump release version to 1.84.0 on v1.84.x branch (#43405)
• c633e39 [Release] Bump version to 1.84.0-pre2 (on v1.84.x branch) (#43401)
• 56e86cb Bump release version to 1.84.0-pre1 on v1.84.x branch (#43327)
• 838b91e [call creds] add GDCH service account credentials (#42565)
• 80ad4b6 port from multi_json to standard lib json (#43249)
• 7c0fba6 [Ruby] Fix: Addressed Array of strings passed as metadata (#42827)
• 5cdbc3a Internal change
• 44361af [Ruby] Copied nativedebug package to pkg/ruby-native-debug-symbols for publis...
• 8f3bb34 [Release] Bump version to 1.84.0-dev (on master branch) (#42935)
• See full diff in compare view

Updates bigdecimal from 4.1.2 to 4.1.3

Release notes

Sourced from bigdecimal's releases.

v4.1.3

What's Changed

• Stop use RB_GC_GUARD on uninitialized value by @​tompng in ruby/bigdecimal#536
• Fix unused-but-set-global warnings in clang-23 by @​nobu in ruby/bigdecimal#540
• Declare TypedData with RUBY_TYPED_THREAD_SAFE_FREE by @​byroot in ruby/bigdecimal#541
• Bit-burst algorithm version of BigMath.erf and BigMath.erfc by @​tompng in ruby/bigdecimal#458
• Keep Newton division divisor alive by @​OskarEichler in ruby/bigdecimal#548
• Correct nullable BigDecimal conversion signature by @​OskarEichler in ruby/bigdecimal#551
• Fix out-of-bounds write in Newton-Raphson division, Improve normalize by @​tompng in ruby/bigdecimal#553
• Fix precision loss in Newton-Raphson inverse by @​tompng in ruby/bigdecimal#552
• Honor exception: false for complex conversion by @​OskarEichler in ruby/bigdecimal#549
• Honor exception: false for strings with null bytes by @​OskarEichler in ruby/bigdecimal#550
• Guard string VALUEs while parsing their C string by @​tompng in ruby/bigdecimal#556
• Make String#to_d accept embedded NUL bytes and reject ASCII-incompatible strings by @​tompng in ruby/bigdecimal#557
• Faster gamma calculation by @​tompng in ruby/bigdecimal#524
• Bump version to v4.1.3 by @​tompng in ruby/bigdecimal#558

New Contributors

• @​OskarEichler made their first contribution in ruby/bigdecimal#548

Full Changelog: ruby/bigdecimal@v4.1.2...v4.1.3

Changelog

Sourced from bigdecimal's changelog.

4.1.3

• Faster gamma and lgamma calculation using Lagrange interpolation GH-524

  @​tompng

• Bit-burst algorithm version of BigMath.erf and BigMath.erfc GH-458

  @​tompng

• Fix Newton-Raphson division bugs: precision loss, out-of-bounds write, and missing GC guard for the divisor GH-548 GH-552 GH-553

  @​OskarEichler @​tompng

• Fix GC safety issues around RB_GC_GUARD and string arguments GH-536 GH-556

  @​tompng

• Honor exception: false for Complex and strings with null bytes GH-549 GH-550

  @​OskarEichler

• Make String#to_d accept embedded NUL bytes and reject ASCII-incompatible strings GH-557

  @​tompng

• Correct nullable BigDecimal conversion RBS signature GH-551

  @​OskarEichler

• Declare TypedData with RUBY_TYPED_THREAD_SAFE_FREE GH-541

  @​byroot

• Fix unused-but-set-global warnings in clang-23 GH-540

  @​nobu

Commits

• 8ed99ea Bump version to v4.1.3 (#558)
• 60829da Faster gamma calculation (#524)
• 00d26a2 Make String#to_d accept embedded NUL bytes and reject ASCII-incompatible stri...
• 7471291 Guard string VALUEs while parsing their C string (#556)
• d2f2d20 Honor exception: false for strings with null bytes (#550)
• 0d5a486 Honor exception: false for complex conversion (#549)
• d345bb3 Merge pull request #555 from ruby/dependabot/github_actions/step-security/har...
• fc595d3 Bump step-security/harden-runner from 2.21.0 to 2.21.1
• 4799dd5 Fix precision loss in Newton-Raphson inverse (#552)
• 881af5c Bump step-security/harden-runner from 2.20.0 to 2.21.0 (#546)
• Additional commits viewable in compare view

Updates google-protobuf from 4.36.1 to 4.36.2

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions