DEPS: Bump the gems group with 3 updates

[dependabot]

Bumps the gems group with 3 updates: simplecov, regexp_parser and sorbet-runtime.

Updates simplecov from 1.3.0 to 1.3.1

Release notes

Sourced from simplecov's releases.

v1.3.1

Bugfixes

• cover_views compiles templates on Rails main again. Rails removed ActionView::Template.registered_template_handler; the lookup reads ActionView::Template::Handlers.template_handlers and still skips an extension with no handler. See simplecov-ruby/simplecov#1300.
• require "simplecov" works again on JRuby on Windows, where 1.3.0 raised LoadError: Could not open library '.../libprism.dll'. Prism's FFI backend cannot open its native library there, and 1.3.0 required Prism as soon as SimpleCov loaded. Prism now loads only when branch or method coverage needs the static extractor, which a line-only run never does. Where it cannot load at all, the extractor falls back to empty branch and method tables for never-loaded files, as it did before 1.3.0. See simplecov-ruby/simplecov#1299.
• simplecov affected --run works on JRuby on Windows, where it crashed with NoMethodError because Process.wait2 answers no status there. On that platform the runner starts through Kernel#system instead.
• simplecov serve refuses a symlink that points outside the report on JRuby on Windows too. JRuby's File.realpath follows no symlinks there, so serve would have served the file the link pointed to, and simplecov clean and the coverage.json lookup compared paths that were never resolved. On JRuby the CLI now resolves paths through the JDK.

Changelog

Sourced from simplecov's changelog.

1.3.1 (2026-09-24)

Bugfixes

• cover_views compiles templates on Rails main again. Rails removed ActionView::Template.registered_template_handler; the lookup reads ActionView::Template::Handlers.template_handlers and still skips an extension with no handler. See simplecov-ruby/simplecov#1300.
• require "simplecov" works again on JRuby on Windows, where 1.3.0 raised LoadError: Could not open library '.../libprism.dll'. Prism's FFI backend cannot open its native library there, and 1.3.0 required Prism as soon as SimpleCov loaded. Prism now loads only when branch or method coverage needs the static extractor, which a line-only run never does. Where it cannot load at all, the extractor falls back to empty branch and method tables for never-loaded files, as it did before 1.3.0. See simplecov-ruby/simplecov#1299.
• simplecov affected --run works on JRuby on Windows, where it crashed with NoMethodError because Process.wait2 answers no status there. On that platform the runner starts through Kernel#system instead.
• simplecov serve refuses a symlink that points outside the report on JRuby on Windows too. JRuby's File.realpath follows no symlinks there, so serve would have served the file the link pointed to, and simplecov clean and the coverage.json lookup compared paths that were never resolved. On JRuby the CLI now resolves paths through the JDK.

Commits

• 4ee7894 Bump version to 1.3.1
• 486e55e bundle update
• d2a62a8 Resolve paths and wait on runners correctly on JRuby on Windows
• 3a2e08e Load Prism only when the static extractor runs
• 08006c4 Look up Action View handlers on the new registry
• 0e0b168 Bump oxlint from 1.82.0 to 1.83.0 in /html_frontend
• c1641b7 Bump @​happy-dom/global-registrator in /html_frontend
• 26920af Bump ruby/setup-ruby from 1.321.0 to 1.323.0
• b18f50d Bump oxlint from 1.81.0 to 1.82.0 in /html_frontend
• a7fa17e Bump @​types/bun from 1.4.1 to 1.4.2 in /html_frontend
• See full diff in compare view

Updates regexp_parser from 2.12.0 to 2.13.1

Changelog

Sourced from regexp_parser's changelog.

[2.13.1] - 2026-09-28 - Janosch Müller

Fixed

• support lone \p expressions and scan them as escaped literal (#111)
  • match Ruby's behavior, which only warns for \p without a curly bracket
  • thanks to Jason Barnabe for the report

[2.13.0] - 2026-09-21 - Janosch Müller

Added

• greatly improved scanning, lexing, and parsing performance
  • ~5x for a single-expression patterns, ~2x for a 500-expression pattern
• improved performance of #each_expression and #traverse
• greatly improved performance when comparing parse results (via #==)
• improved scanner error messages for invalid patterns, e.g. '\xZ'

Fixed

• SystemStackError when parsing or traversing very deeply nested trees (#109)
• minor memory leak when accepting arbitrary user input as syntax version (#109)
• #match_length now respects the quantifier of backrefs and subexp calls (#107)
• #match_length now handles backref/subexp call multiplexing (#107)
• thanks to Oskar Eichler for reporting these

Commits

• c0f4098 Release v2.13.1
• 5e4ba3b Handle lone \p, fixes #111
• a706d28 Release v2.13.0
• 9364abd Update year [ci skip]
• 495b2c4 Merge pull request #110 from ammar/improve-performance-and-memory-use
• 6aa5f4d Improve performance and prevent SystemStackError
• 4fedf0c Remove redundant gemspec metadata ...
• 13c9b53 Remove unnecessary load path pollution
• 9396d6a Omit platform from gemspec ...
• ed1db74 Omit Gemfile, Rakefile, rl files from bundled gem
• Additional commits viewable in compare view

Updates sorbet-runtime from 0.6.13506 to 0.6.13511

Release notes

Sourced from sorbet-runtime's releases.

sorbet 0.6.13510.20260929145003-b9f6c75ad

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13510', :group => :development
gem 'sorbet-runtime', '0.6.13510'

sorbet 0.6.13509.20260928165322-1f8e682ad

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13509', :group => :development
gem 'sorbet-runtime', '0.6.13509'

sorbet 0.6.13508.20260924205159-4149e019c

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13508', :group => :development
gem 'sorbet-runtime', '0.6.13508'

sorbet 0.6.13507.20260924200523-3362ceb59

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13507', :group => :development
gem 'sorbet-runtime', '0.6.13507'

sorbet 0.6.13506.20260917151229-0eac3406f

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13506', :group => :development
gem 'sorbet-runtime', '0.6.13506'

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions