chore(deps): bump all dependencies (gems + bun) across the gem and docs site

Merged
MH
2mo ago
+149-155

Summary

Bumps every dependency surface to the latest resolvable versions before further feature work.

SurfaceNotable bumps
Root gem bundle (lock gitignored)rails 8.1.3.1, mcp 0.22 → 1.3, simplecov 0.22 → 1.1, rubocop 1.90, rouge 5.1, commonmarker 2.9, zeitwerk 2.8.3
docs/ site bundlesame core bumps + rubocop-rails 2.37, brakeman 8.0.6, thruster 0.1.25, playwright-ruby-client 1.62.0
docs/ bun packagesdaisyui 5.6.13 → 5.7.22, tailwindcss + @tailwindcss/cli 4.3.3, playwright 1.62.1

Code changes required by the bumps:

  • spec/spec_helper.rb — SimpleCov 1.x renamed add_filter → skip and add_group → group (same behavior; old names deprecation-warn).
  • 4 files — RuboCop 1.90's new Style/DirectiveScope cop autocorrected single-statement disable/enable pairs to disable-next.
  • docs/ CSS rebuilt against daisyUI 5.7.

Test plan

  • bundle exec rake green at root: 945 examples, 0 failures, 94.70% line coverage, rubocop clean
  • MCP specs (33 examples) pass against the mcp 1.3 major — the JSON-RPC surface needed no code change
  • docs/ suite green: 15 examples incl. Playwright system specs on playwright 1.62 with rebuilt daisyUI 5.7 CSS
  • All bumped gems verified to support Ruby 3.2 (the CI matrix floor)

Deviations & judgment calls

  • Root Gemfile.lock is gitignored (standard for a gem), so the root bundle bump ships only as the deprecation/cop fixes — CI resolves fresh and already picks these versions.
  • bundle exec rubocop run from docs/ crashes (cannot load such file -- rubocop-rake) because RuboCop walks up and loads the parent gem's .rubocop.yml, whose plugins aren't in the docs bundle. Verified pre-existing — identical failure on the old lockfile — so left out of scope.
  • GitHub Actions versions untouched — scope kept to package-manager dependencies (gems + bun).
  • playwright npm (1.62.1) vs playwright-ruby-client gem (1.62.0) — matching minor is the compatibility contract; system specs confirm it.

Summary by cubic

Bumps all gem and bun dependencies for the gem and docs site to current versions to pick up security and compatibility updates. No runtime behavior change; only build/lint config and docs CSS are affected.

  • Updates (highlights): gem resolves to rails 8.1.3.1; mcp 0.22 → 1.3 (no code changes required); simplecov 0.22 → 1.1; rubocop 1.90; rouge 5.1; commonmarker 2.9; zeitwerk 2.8.3. Docs: rubocop-rails 2.37, brakeman 8.0.6, thruster 0.1.25, playwright-ruby-client 1.62. Frontend: daisyui 5.7.22 (from 5.6.13), tailwindcss/@tailwindcss/cli 4.3.3, playwright 1.62.1.

  • Required code tweaks: simplecov 1.x rename in spec_helper.rb (add_filter → skip, add_group → group), and rubocop 1.90’s Style/DirectiveScope autocorrect to disable-next; docs CSS rebuilt against daisyui 5.7.

  • Review notes: root Gemfile.lock is gitignored (gem conventions), so CI/local will re-resolve to these versions; playwright npm 1.62.1 and playwright-ruby-client 1.62.0 are compatible; rubocop run from docs/ still fails due to parent config plugin resolution (pre-existing).