Bump the rails_default group across 1 directory with 5 updates

[dependabot]

Bumps the rails_default group with 5 updates in the / directory:

Package	From	To
rails	7.2.1	7.2.1.1
turbo-rails	2.0.10	2.0.11
brakeman	6.2.1	6.2.2
rubocop-rspec	3.0.5	3.1.0
slim_lint	0.29.0	0.31.0

Updates rails from 7.2.1 to 7.2.1.1

Release notes

Sourced from rails's releases.

7.2.1.1

Active Support

• No changes.

Active Model

• No changes.

Active Record

• No changes.

Action View

• No changes.

Action Pack

• Avoid regex backtracking in HTTP Token authentication

  [CVE-2024-47887]

• Avoid regex backtracking in query parameter filtering

  [CVE-2024-41128]

Active Job

• No changes.

Action Mailer

• Avoid regex backtracking in block_format helper

  [CVE-2024-47889]

Action Cable

• No changes.

Active Storage

• No changes.

... (truncated)

Commits

• a1f6a13 Preparing for 7.2.1.1 release
• de33c73 Update CHANGELOGs
• be898cc Avoid backtracking in ActionMailer block_format
• ba286c0 Avoid backtracing in plain_text_for_blockquote_node
• 27121e8 Avoid backtracking in filtered_query_string
• f4dc83d Avoid backtracking in Token#raw_params
• f9d96f2 Merge pull request #53053 from gabriel-amaral/gabriel-amaral/fix-devcontainer...
• d7ab27b Merge pull request #52962 from rails/rm-releser
• See full diff in compare view

Updates turbo-rails from 2.0.10 to 2.0.11

Release notes

Sourced from turbo-rails's releases.

v2.0.11

What's Changed

• Address warning: *' interpreted as argument prefix` by @​yahonda in hotwired/turbo-rails#689
• Migrate Turbo Native helpers to Hotwire Native by @​joemasilotti in hotwired/turbo-rails#691
• Update readme - incorrect URL for source file SystemTestHelper by @​mlpinit in hotwired/turbo-rails#692

New Contributors

• @​yahonda made their first contribution in hotwired/turbo-rails#689
• @​mlpinit made their first contribution in hotwired/turbo-rails#692

Full Changelog: hotwired/turbo-rails@v2.0.10...v2.0.11

Commits

• 52727cb Update to turbo 8.0.12
• 8c681dd Bump turbo version
• b775fe4 Update readme - incorrect URL for source file (#692)
• 567520f Migrate Turbo Native helpers to Hotwire Native (#691)
• 4bbe142 Merge pull request #689 from yahonda/address_splat_warning
• fad15fa Address warning: *' interpreted as argument prefix`
• See full diff in compare view

Updates brakeman from 6.2.1 to 6.2.2

Release notes

Sourced from brakeman's releases.

6.2.2

• New end-of-support dates for Rails
• Revamp command injection detection in pipeline* calls (#1862)
• Exclude more native gems from vendored gems in brakeman gem (#1869)

Changelog

Sourced from brakeman's changelog.

6.2.2 - 2024-10-15

• Ignore more native gems when building gem
• Revamp command injection in pipeline* calls
• New end-of-support dates for Rails

Commits

• 0aeceda Bump to 6.2.2
• 43612a6 Merge pull request #1872 from presidentbeef/more_native_gems_to_ignore
• 2ece3b4 Update CHANGES
• 72df013 Ignore more native gems when building gem
• e4f49f6 Merge pull request #1868 from presidentbeef/revamp_pipeline_check
• 9e8cd79 Revamp command injection in pipeline* calls
• f99539b Merge pull request #1865 from presidentbeef/update_eol_dates_for_rails
• 1713d5f Remove Gitter link from README
• c25fcae Merge pull request #1864 from presidentbeef/fix_docker_once_more
• 8da2a28 New end-of-support dates for Rails
• Additional commits viewable in compare view

Updates rubocop-rspec from 3.0.5 to 3.1.0

Release notes

Sourced from rubocop-rspec's releases.

RuboCop RSpec v3.1.0

• Add RSpec/StringAsInstanceDoubleConstant to check for and correct strings used as instance_doubles. (@​corsonknowles)
• Fix false-positive for RSpec/UnspecifiedException when a method is literally named raise_exception. (@​aarestad)
• Fix false-positive for RSpec/UnspecifiedException when not_to raise_error is used within a block. (@​aarestad, @​G-Rath)

Changelog

Sourced from rubocop-rspec's changelog.

3.1.0 (2024-10-01)

• Add RSpec/StringAsInstanceDoubleConstant to check for and correct strings used as instance_doubles. ([@​corsonknowles])
• Fix false-positive for RSpec/UnspecifiedException when a method is literally named raise_exception. ([@​aarestad])
• Fix false-positive for RSpec/UnspecifiedException when not_to raise_error is used within a block. ([@​aarestad], [@​G-Rath])

Commits

• 5e06176 Merge pull request #1963 from rubocop/release
• 34c042e Bump version to v3.1.0
• dea7de9 Merge pull request #1957 from corsonknowles/master
• 324552c Add RSpec/StringAsInstanceDoubleConstant
• 5959ad6 Merge pull request #1962 from G-Rath/add-spec
• 1f48c7b test: showcase RSpec/UnspecifiedException block/chain confusion is fixed
• 79e0bf7 Merge pull request #1960 from aarestad/unspecified-exception-fix
• a59315f fix false positive on UnspecifiedException cop when function is named raise_e...
• cf0ac65 Merge pull request #1958 from rubocop/cop-config-order
• 5b91d18 Merge pull request #1959 from rubocop/fix-RedundantSourceRange-offenses
• Additional commits viewable in compare view

Updates slim_lint from 0.29.0 to 0.31.0

Release notes

Sourced from slim_lint's releases.

0.30.0

• Speed up load time by preferring require_relative in internal gem file loading

Changelog

Sourced from slim_lint's changelog.

0.31.0

• Add GitHub reporter

0.30.0

• Speed up load time by preferring require_relative in internal gem file loading

Commits

• 695f0b1 Cut version 0.31.0 (#189)
• b4d1a56 Create GitHub reporter (#188)
• cf1f80b Remove note about Ruby 2.x support
• 0dd0903 Cut version 0.30.0 (#187)
• 6e4630d Prefer require_relative for internal requires (#186)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.