You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
#11051: Fix Style/AccessModifierDeclarations inline autocorrect dropping comments between the access modifier and the following method definition. (@dduugg)
#14665: Cache plugin integration in CopHelper to avoid repeated loading. (@55728)
#15091: Fix Lint/DuplicateMethods false positives for anonymous classes in constant assignments and method return values. (@eugeneius)
#15055: Fix Lint/DuplicateMethods false positives with anonymous classes inside blocks (e.g. RSpec let, describe). (@ShkumbinDelija)
#15035: Exclude included_modules from Style/ModuleMemberExistenceCheck. (@koic)
#15087: Fix false positive for Style/RedundantLineContinuation when using interpolated string literals. (@koic)
#14361: Fix false positive in file_to_include? when a relative Include pattern matches a parent directory name in the absolute file path. (@jonas054)
#15090: Fix false positives for Layout/EmptyLineAfterGuardClause when consecutive guard clauses use and return. (@eugeneius)
#15070: Fix false positive for Lint/RedundantSafeNavigation when chained safe navigation is used in a conditional expression with InferNonNilReceiver enabled. (@koic)
#15074: Fix false positives in Style/RedundantParentheses when using parentheses around an endless range in assignment. (@koic)
#15048: Fix issue where the url_for is missing for Cops without instance methods. (@Fryguy)
#15051: Fix Style/RedundantParentheses handling of beginless ranges. (@oggy)
#14980: Fix Lint/Syntax zero-length diagnostic range for syntax errors at EOF. (@55728)
#15084: Handle heredocs with methods calls correctly when fixing guard clauses. (@G-Rath)
#11398: Fix incorrect Include path adjustment when local config overrides an inherited Include. (@jonas054)
#15092: Fix Layout/EndAlignment cop error on an empty begin. (@viralpraxis)
#15059: Fix an error in Layout/LineLength when SplitStrings option is enabled and __FILE__ is used. (@jeromedalbert)
#5876: Fix Lint/UnusedMethodArgument false positive when block argument is used via yield. (@dduugg)
#15093: Return tool execution errors instead of protocol errors in MCP server. (@koic)
Changes
#15005: Make Style/OneClassPerFile exclude spec/**/* and test/**/* by default. (@koic)
#15081: Relax parallel dependency to >= 1.10. (@koic)
#15063: Disable Style/RedundantStructKeywordInit cop by default. (@koic)
RuboCop v1.86.0
New features
#15000: Display ZJIT usage when running under LSP. (@koic)
#14961: Add AllowedParentClasses option to Style/EmptyClassDefinition. ([@hammadkhan][])
#14977: Support AllowedReceivers for Style/HashLookupMethod. (@koic)
#11051: Fix Style/AccessModifierDeclarations inline autocorrect dropping comments between the access modifier and the following method definition. ([@dduugg][])
#14665: Cache plugin integration in CopHelper to avoid repeated loading. ([@55728][])
#15091: Fix Lint/DuplicateMethods false positives for anonymous classes in constant assignments and method return values. ([@eugeneius][])
#15055: Fix Lint/DuplicateMethods false positives with anonymous classes inside blocks (e.g. RSpec let, describe). ([@ShkumbinDelija][])
#15035: Exclude included_modules from Style/ModuleMemberExistenceCheck. ([@koic][])
#15087: Fix false positive for Style/RedundantLineContinuation when using interpolated string literals. ([@koic][])
#14361: Fix false positive in file_to_include? when a relative Include pattern matches a parent directory name in the absolute file path. ([@jonas054][])
#15090: Fix false positives for Layout/EmptyLineAfterGuardClause when consecutive guard clauses use and return. ([@eugeneius][])
#15070: Fix false positive for Lint/RedundantSafeNavigation when chained safe navigation is used in a conditional expression with InferNonNilReceiver enabled. ([@koic][])
#15074: Fix false positives in Style/RedundantParentheses when using parentheses around an endless range in assignment. ([@koic][])
#15048: Fix issue where the url_for is missing for Cops without instance methods. ([@Fryguy][])
#15051: Fix Style/RedundantParentheses handling of beginless ranges. ([@oggy][])
#14980: Fix Lint/Syntax zero-length diagnostic range for syntax errors at EOF. ([@55728][])
#15084: Handle heredocs with methods calls correctly when fixing guard clauses. ([@G-Rath][])
#11398: Fix incorrect Include path adjustment when local config overrides an inherited Include. ([@jonas054][])
#15092: Fix Layout/EndAlignment cop error on an empty begin. ([@viralpraxis][])
#15059: Fix an error in Layout/LineLength when SplitStrings option is enabled and __FILE__ is used. ([@jeromedalbert][])
#5876: Fix Lint/UnusedMethodArgument false positive when block argument is used via yield. ([@dduugg][])
#15093: Return tool execution errors instead of protocol errors in MCP server. ([@koic][])
Changes
#15005: Make Style/OneClassPerFile exclude spec/**/* and test/**/* by default. ([@koic][])
#15081: Relax parallel dependency to >= 1.10. ([@koic][])
#15063: Disable Style/RedundantStructKeywordInit cop by default. ([@koic][])
1.86.0 (2026-03-23)
New features
#15000: Display ZJIT usage when running under LSP. ([@koic][])
#14961: Add AllowedParentClasses option to Style/EmptyClassDefinition. ([@hammadkhan][])
#14977: Support AllowedReceivers for Style/HashLookupMethod. ([@koic][])
Bug fixes
#15015: Fix Style/ConcatArrayLiterals autocorrect deleting code for percent literals with interpolation. ([@bbatsov][])
#14897: Detect constant reassignment after class/module definition in Lint/ConstantReassignment. ([@ydakuka][])
#11829: Fix false negatives for Lint/DuplicateMethods when duplicate methods are defined in anonymous classes and modules not assigned to a constant. ([@Darhazer][])
#14988: Fix false negative in Style/RedundantParentheses when redundant parentheses around range literals in block body. ([@koic][])
#14916: Fix false positive for Layout/MultilineMethodCallIndentation when method chain is inside a hash pair value passed to a multiline chained method call. ([@ydakuka][])
#15010: Fix a false positive for Lint/DuplicateMethods when modules blocks are passed as method arguments. ([@5hun-s][])
#15028: Fix a false positive for Lint/DuplicateMethods when the same method is defined in different anonymous module blocks passed to a no-receiver call (e.g. stub_const). ([@Darhazer][])
#15021: Fix false positives in Layout/EmptyLineAfterGuardClause when using a guard clause followed by a multi-line guard clause with raise, fail, return, break, or next. ([@koic][])
#15001: Fix false positives in Layout/RedundantLineBreak when setting InspectBlocks: true and using rescue or ensure in the block. ([@koic][])
#14997: Fix false positives in Style/FileOpen when assigning File.open to an instance variable, class variable, global variable, or constant. ([@koic][])
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
This PR cannot be merged due to a high-severity security concern: several gem versions specified in the Gemfile.lock (including RuboCop 1.86.1 and Parallel 2.1.0) do not exist on the public RubyGems registry, indicating a potential dependency confusion attack.
Beyond the security risk, there are functional gaps. A version jump from 1.80 to 1.86 typically introduces new linting rules, yet no changes were made to .rubocop.yml or the codebase to address them. Furthermore, the update to 'parallel' 2.1.0 is a major version jump that may break application logic if that gem is used directly.
About this PR
The PR updates RuboCop by six minor versions but includes no changes to .rubocop.yml or the codebase. This version range typically introduces new rules or changes default behaviors (e.g., Style/RedundantStructKeywordInit is now disabled by default) that should be addressed to maintain consistency.
Test suggestions
Run the full RuboCop suite against the project to verify that the new version does not introduce breaking linting errors or false positives with current configurations.
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Run the full RuboCop suite against the project to verify that the new version does not introduce breaking linting errors or false positives with current configurations.
Low confidence findings
The 'parallel' gem is being updated to a new major version (2.1.0). If this gem is utilized directly within the application logic (outside of RuboCop's internal use), this jump may introduce breaking changes that haven't been accounted for.
The reason will be displayed to describe this comment to others. Learn more.
🔴 HIGH RISK
The versions for rubocop (1.86.1) and its dependencies (json 2.19.5, parallel 2.1.0) do not exist on the public RubyGems registry. Furthermore, the internal dependency constraint for 'parallel' was changed from '~> 1.10' to '>= 1.10' to accommodate this non-existent version jump. This is a strong indicator of a dependency confusion attack. Verify the availability of these versions on RubyGems.org and inspect the Gemfile for untrusted sources or malicious overrides.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
dependenciesPull requests that update a dependency filerubyPull requests that update ruby code
0 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
dependabot
Bot
added
dependencies
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
![codacy-production[bot]](https://avatars.githubusercontent.com/in/56611?s=60&v=4){kind=small}
Bumps rubocop from 1.80.2 to 1.86.1.
Release notes
Sourced from rubocop's releases.
... (truncated)
Changelog
Sourced from rubocop's changelog.
... (truncated)
Commits
af80266Cut 1.86.1eb504ceUpdate Changelog9c8fe2cMerge pull request #15085 from G-Rath/fix-style-guard11d796aMerge pull request #15093 from koic/fix_return_tool_execution_errors_instead_...4450067Return tool execution errors instead of protocol errors in MCP serverff64180Merge pull request #15092 from viralpraxis/fix-an-error-for-layout-end-alignm...11e04c0Merge pull request #15091 from eugeneius/duplicate_methods_anonymous_classesb8deea4Merge pull request #15090 from eugeneius/guard_clause_and_returne130020FixLayout/EndAlignmentcop error on an emptybegin4808594FixDuplicateMethodsfor anonymous classes in constant assignments and methodsDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)