build(deps-dev): bump the minor-and-patch group across 1 directory with 3 updates

[dependabot]

Bumps the minor-and-patch group with 3 updates in the / directory: falcon, rbs and steep.

Updates falcon from 0.55.6 to 0.57.0

Release notes

Sourced from falcon's releases.

v0.57.0

• Update the Envoy cluster example to use dedicated CDS and EDS services from async-service-supervisor-envoy v0.5.

Rack Compatibility

Falcon is shifting its application boundary from a Rack-centric design to {ruby Protocol::HTTP::Middleware}. falcon serve now prefers protocol HTTP middleware configured by config/serve.rb, while continuing to discover and run Rack config.ru applications through {ruby Protocol::Rack::Adapter}.

Use {ruby Falcon::Server.protocol_middleware} for protocol HTTP applications and {ruby Falcon::Server.rack_middleware} for Rack applications. {ruby Falcon::Server.middleware} is deprecated. Explicit .rb serve configurations are now interpreted as {ruby Protocol::HTTP::Middleware}; Rack applications defined in Ruby files should use config.ru or wrap the application explicitly with {ruby Protocol::Rack::Adapter}.

v0.56.0

• Add Falcon::Environment::Cluster and Falcon::Service::Cluster for running workers with independently bound endpoints.
• Add Falcon::Listener to describe bound listeners shared by regular server workers or owned by cluster workers.

Changelog

Sourced from falcon's changelog.

v0.57.0

• Update the Envoy cluster example to use dedicated CDS and EDS services from async-service-supervisor-envoy v0.5.

Rack Compatibility

Falcon is shifting its application boundary from a Rack-centric design to {ruby Protocol::HTTP::Middleware}. falcon serve now prefers protocol HTTP middleware configured by config/serve.rb, while continuing to discover and run Rack config.ru applications through {ruby Protocol::Rack::Adapter}.

Use {ruby Falcon::Server.protocol_middleware} for protocol HTTP applications and {ruby Falcon::Server.rack_middleware} for Rack applications. {ruby Falcon::Server.middleware} is deprecated. Explicit .rb serve configurations are now interpreted as {ruby Protocol::HTTP::Middleware}; Rack applications defined in Ruby files should use config.ru or wrap the application explicitly with {ruby Protocol::Rack::Adapter}.

v0.56.0

• Add Falcon::Environment::Cluster and Falcon::Service::Cluster for running workers with independently bound endpoints.
• Add Falcon::Listener to describe bound listeners shared by regular server workers or owned by cluster workers.

Commits

• 5107b07 Bump minor version.
• 5dd9d63 Support protocol applications in falcon serve. (#366)
• 76231c6 Update Envoy cluster discovery configuration. (#365)
• 1696598 Add load-aware Envoy cluster example. (#364)
• 61be5a7 Bump minor version.
• b80e738 Modernize code.
• 4cae0c8 Add Falcon cluster service. (#356)
• See full diff in compare view

Updates rbs from 4.1.1 to 4.2.0

Release notes

Sourced from rbs's releases.

4.2.0

Release note

RBS 4.2 accepts non-ASCII characters in identifiers. Method names, instance variable names and parameter names can be written in any script, and other names may contain non-ASCII characters as long as they start with an ASCII letter, which is what tells a constant from a method name.

class Greeter
  @挨拶: String
def こんにちは: () -> String
end

The parser and the AST support Ruby-style ... forwarding parameters in method types, but the layers built on top of the parser do not yet. The syntax is disabled by default in 4.2 and is not enabled by the public RBS::Parser API, so it cannot be used in regular RBS signatures yet.

Ruby 3.2 reached EOL on 2026-04-01, and this release requires Ruby 3.3 or later. Applications on 3.2 stay on the 4.1 line.

Signature updates

Updated classes/modules/methods: ERB, ERB::DefMethod, IO, Monitor, MonitorMixin::ConditionVariable, Singleton, StringIO, Zlib::GzipFile, Zlib::GzipWriter

• Replace deterministic untyped return types with concrete types (#2966)
• Declare Singleton::SingletonInstanceMethods (#3037)

Language updates

• Gate forwarding parameter syntax behind parser option (#3087)
• Support non-ASCII identifiers (#3082)
• Support forwarding parameters in method types (#3042)

Library changes

• Drop runtime support for Ruby 3.2 (#3095)
• Stop the lexer reading past the end of a byte_range (#3040)
• Exclude CR from comment tokens to fix an off-by-one Location#end_line on CRLF files (#3069)
• Handle the NULL parser in the WebAssembly shim (#3085)
• Reject a byte position the lexer cannot start on (#3083)
• Don't use Clang nullability qualifiers in strict ISO C mode (#3074)
• Avoid eagerly inspecting call traces in type assertions (#3073)
• Fix TypeParam.rename to substitute variables in bounds and default types (#3068)
• Extract per-declaration type param alignment into entry-level align_params (#3070)
• Align type params across declarations in module-self types and superclass validation (#3067)
• Build the wasm module with -DNDEBUG (#3066)
• Rename NODISCARD macro to RBS_NODISCARD (#3065)

Miscellaneous

• Omit forwarding parameter tests on JRuby (#3092)
• Skip JSON 2-only tests with JSON 3 (#3084)
• Pin GitHub Actions to commit hashes (#3020)

... (truncated)

Changelog

Sourced from rbs's changelog.

4.2.0 (2026-08-23)

RBS 4.2 accepts non-ASCII characters in identifiers. Method names, instance variable names and parameter names can be written in any script, and other names may contain non-ASCII characters as long as they start with an ASCII letter, which is what tells a constant from a method name.

class Greeter
  @挨拶: String
def こんにちは: () -> String
end

The parser and the AST support Ruby-style ... forwarding parameters in method types, but the layers built on top of the parser do not yet. The syntax is disabled by default in 4.2 and is not enabled by the public RBS::Parser API, so it cannot be used in regular RBS signatures yet.

Ruby 3.2 reached EOL on 2026-04-01, and this release requires Ruby 3.3 or later. Applications on 3.2 stay on the 4.1 line.

Signature updates

Updated classes/modules/methods: ERB, ERB::DefMethod, IO, Monitor, MonitorMixin::ConditionVariable, Singleton, StringIO, Zlib::GzipFile, Zlib::GzipWriter

• Replace deterministic untyped return types with concrete types (#2966)
• Declare Singleton::SingletonInstanceMethods (#3037)

Language updates

• Gate forwarding parameter syntax behind parser option (#3087)
• Support non-ASCII identifiers (#3082)
• Support forwarding parameters in method types (#3042)

Library changes

• Drop runtime support for Ruby 3.2 (#3095)
• Stop the lexer reading past the end of a byte_range (#3040)
• Exclude CR from comment tokens to fix an off-by-one Location#end_line on CRLF files (#3069)
• Handle the NULL parser in the WebAssembly shim (#3085)
• Reject a byte position the lexer cannot start on (#3083)
• Don't use Clang nullability qualifiers in strict ISO C mode (#3074)
• Avoid eagerly inspecting call traces in type assertions (#3073)
• Fix TypeParam.rename to substitute variables in bounds and default types (#3068)
• Extract per-declaration type param alignment into entry-level align_params (#3070)
• Align type params across declarations in module-self types and superclass validation (#3067)
• Build the wasm module with -DNDEBUG (#3066)
• Rename NODISCARD macro to RBS_NODISCARD (#3065)

Miscellaneous

• Omit forwarding parameter tests on JRuby (#3092)
• Skip JSON 2-only tests with JSON 3 (#3084)
• Pin GitHub Actions to commit hashes (#3020)

... (truncated)

Commits

• 8aee3b6 Merge pull request #3096 from ruby/claude/4-2-release-tasks-h6thzx
• 6f97c87 Version 4.2.0
• 03d4281 Merge pull request #2966 from zonuexe/fix/concrete-untyped-returns
• bdecacf Make putc signatures type-preserving overloads
• 69539d6 Replace deterministic untyped return types with concrete types
• c9957e4 Merge pull request #3037 from infiton/rxc/declare-singleton-instance-methods
• 1f40487 Merge pull request #3095 from ruby/claude/4-2-release-tasks-h6thzx
• e721ad1 Drop runtime support for Ruby 3.2
• 584b4cf Merge pull request #3092 from ruby/claude/rbs-ci-failure-sinnfd
• e709673 Merge pull request #3090 from ruby/claude/release-4-2-0-pre-1-vyzb7g
• Additional commits viewable in compare view

Updates steep from 2.0.0 to 2.1.0

Release notes

Sourced from steep's releases.

2.1.0

Release note

Steep 2.1 opens the running server to commands other than the editor's. steep langserver now binds the per-project UNIX socket that steep server serves, so steep check and steep query reach the language server the editor is already running instead of needing a daemon of their own, and the new steep query diagnostics reads the diagnostics that server has already computed rather than starting a type check of its own. Both are aimed at tools that edit files on disk and want fast feedback, coding agents in particular.

The type checker gains support for Ruby 3.4's it block parameter, and RBS is updated to 4.2.0.

Type checker core

• Infer tuple types for array literals against pair interface hints like Hash::_Pair (#2253)
• Accept a type alias as the type of a lambda's block parameter (#2263)
• Build expensive log tags only when something is logged (#2271)
• Accept block-pass arguments for optional blocks (#2261)
• feat: support the it block parameter (#2238)
• Fix UnreachableBranch on == against literal supertype (Symbol / Integer / String) (#2223)

Commandline tool

• Stop steep query definition from hanging on inline sources (#2276)
• Serve steep query/check through the language server's UNIX socket (#2273)
• Add steep query diagnostics (#2274)
• Point the Steepfile template, README and CLAUDE.md at rbs collection (#2269)

Miscellaneous

• Update RBS to 4.2.0 (#2277)
• Fix bin/steep-check.rb for the current API (#2270)
• Update RBS to 4.2.0.pre.1 (#2267)
• Fix Ruby warnings printed while running tests (#2266)
• Run test subprocesses outside the parent Bundler env (#2225)

Changelog

Sourced from steep's changelog.

2.1.0 (2026-08-27)

Steep 2.1 opens the running server to commands other than the editor's. steep langserver now binds the per-project UNIX socket that steep server serves, so steep check and steep query reach the language server the editor is already running instead of needing a daemon of their own, and the new steep query diagnostics reads the diagnostics that server has already computed rather than starting a type check of its own. Both are aimed at tools that edit files on disk and want fast feedback, coding agents in particular.

The type checker gains support for Ruby 3.4's it block parameter, and RBS is updated to 4.2.0.

Type checker core

• Infer tuple types for array literals against pair interface hints like Hash::_Pair (#2253)
• Accept a type alias as the type of a lambda's block parameter (#2263)
• Build expensive log tags only when something is logged (#2271)
• Accept block-pass arguments for optional blocks (#2261)
• feat: support the it block parameter (#2238)
• Fix UnreachableBranch on == against literal supertype (Symbol / Integer / String) (#2223)

Commandline tool

• Stop steep query definition from hanging on inline sources (#2276)
• Serve steep query/check through the language server's UNIX socket (#2273)
• Add steep query diagnostics (#2274)
• Point the Steepfile template, README and CLAUDE.md at rbs collection (#2269)

Miscellaneous

• Update RBS to 4.2.0 (#2277)
• Fix bin/steep-check.rb for the current API (#2270)
• Update RBS to 4.2.0.pre.1 (#2267)
• Fix Ruby warnings printed while running tests (#2266)
• Run test subprocesses outside the parent Bundler env (#2225)

Commits

• 3b75b36 Merge pull request #2279 from soutaro/claude/release-2-1-0-prep-892981
• 89d69d5 Version 2.1.0
• d09cc36 Merge pull request #2277 from soutaro/claude/rbs-4-2-update-3eb855
• 219391e Stop checking whether Process.warmup is defined
• 716b3b5 Update RBS to 4.2.0
• e610187 Merge pull request #2240 from soutaro/dependabot/github_actions/actions/check...
• 9c67151 Merge pull request #2253 from sferik/pair-interface-tuple-hint
• 5812d9f Add regression tests for pair interface hints on array literals
• 75255a9 Merge pull request #2276 from soutaro/claude/fix-goto-inline-source
• 5431215 Merge pull request #2278 from soutaro/claude/gemspec-dependabot-block-3eb855
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Preview: https://pr-583-dependabot-bundler-minor-and-patc-andrewm-codes.andrewmcodes.workers.dev