Bump the "all" group with 2 updates across multiple ecosystems

[dependabot]

Bumps the all group with 3 updates in the / directory: json, prism and regexp_parser.

Updates json from 2.13.2 to 2.14.1

Release notes

Sourced from json's releases.

v2.14.1

What's Changed

• Fix IndexOutOfBoundsException in the JRuby extension when encoding shared strings.

Full Changelog: ruby/json@v2.14.0...v2.14.1

v2.14.0

What's Changed

• Add new allow_duplicate_key generator options. By default a warning is now emitted when a duplicated key is encountered. In json 3.0 an error will be raised.

  >> Warning[:deprecated] = true
  >> puts JSON.generate({ foo: 1, "foo" => 2 })
  (irb):2: warning: detected duplicate key "foo" in {foo: 1, "foo" => 2}.
  This will raise an error in json 3.0 unless enabled via `allow_duplicate_key: true`
  {"foo":1,"foo":2}
  >> JSON.generate({ foo: 1, "foo" => 2 }, allow_duplicate_key: false)
  detected duplicate key "foo" in {foo: 1, "foo" => 2} (JSON::GeneratorError)

• Fix JSON.generate strict: true mode to also restrict hash keys.
• Fix JSON::Coder to also invoke block for hash keys that aren't strings nor symbols.
• Fix JSON.unsafe_load usage with proc
• Fix the parser to more consistently reject invalid UTF-16 surogate pairs.
• Stop defining String.json_create, String#to_json_raw, String#to_json_raw_object when json/add isn't loaded.

Full Changelog: ruby/json@v2.13.2...v2.14.0

Changelog

Sourced from json's changelog.

2025-09-18 (2.14.1)

• Fix IndexOutOfBoundsException in the JRuby extension when encoding shared strings.

2025-09-18 (2.14.0)

• Add new allow_duplicate_key generator options. By default a warning is now emitted when a duplicated key is encountered. In json 3.0 an error will be raised.

  >> Warning[:deprecated] = true
  >> puts JSON.generate({ foo: 1, "foo" => 2 })
  (irb):2: warning: detected duplicate key "foo" in {foo: 1, "foo" => 2}.
  This will raise an error in json 3.0 unless enabled via `allow_duplicate_key: true`
  {"foo":1,"foo":2}
  >> JSON.generate({ foo: 1, "foo" => 2 }, allow_duplicate_key: false)
  detected duplicate key "foo" in {foo: 1, "foo" => 2} (JSON::GeneratorError)

• Fix JSON.generate strict: true mode to also restrict hash keys.
• Fix JSON::Coder to also invoke block for hash keys that aren't strings nor symbols.
• Fix JSON.unsafe_load usage with proc
• Fix the parser to more consistently reject invalid UTF-16 surogate pairs.
• Stop defining String.json_create, String#to_json_raw, String#to_json_raw_object when json/add isn't loaded.

Commits

• 51ce76e Release 2.14.1
• a8ff0c8 Merge pull request #860 from samyron/sm/fix-swar-index-out-of-bounds-exception
• 67ebabe fix issue reading off the end of the ByteBuffer if ptr > 0
• 1d52d18 Update changelog
• 55552ca Release 2.14.0
• d334dbf Merge pull request #856 from robinetmiller/add-branch-coverage
• 08b9eb0 Only enable test coverage when running the test suite standalone
• 6bded94 Add branch test coverage when available. Force track all files to prevent imp...
• db89486 Regenerate the Java parser
• ddffd05 Merge pull request #858 from byroot/validate-surogate
• Additional commits viewable in compare view

Updates prism from 1.4.0 to 1.5.1

Release notes

Sourced from prism's releases.

v1.5.1

Changed

• Revert of a bug introduced with static literal flags on interpolated strings.

v1.5.0

Added

• Add Prism::Translation::ParserCurrent.
• Add Integer::to_u32_digits for the Rust API.
• Add pm_comment_type_t field for the Rust API.
• Support leading logical operators for CRuby 3.5+.

Changed

• Mark Prism as ractor-safe.
• Enforce a minimum version for the parser translation layer.
• Many fixes to the parser translation layer.
• Accept a newline after the defined? keyword.
• Reject true && not true.
• Make it = it assign nil to match parse.y behavior [Bug #21139].
• Some fixes to the ruby parser translation layer.
• Ensure call nodes have the correct ending location.
• Reject foo && return bar.

Changelog

Sourced from prism's changelog.

[1.5.1] - 2025-09-13

Changed

• Revert of a bug introduced with static literal flags on interpolated strings.

[1.5.0] - 2025-09-12

Added

• Add Prism::Translation::ParserCurrent.
• Add Integer::to_u32_digits for the Rust API.
• Add pm_comment_type_t field for the Rust API.
• Support leading logical operators for CRuby 3.5+.

Changed

• Mark Prism as ractor-safe.
• Enforce a minimum version for the parser translation layer.
• Many fixes to the parser translation layer.
• Accept a newline after the defined? keyword.
• Reject true && not true.
• Make it = it assign nil to match parse.y behavior [Bug #21139].
• Some fixes to the ruby parser translation layer.
• Ensure call nodes have the correct ending location.
• Reject foo && return bar.

Commits

• 914883a Merge pull request #3644 from ruby/bump-version
• cac5118 Bump to v1.5.1
• 405d579 Merge pull request #3643 from k0kubun/reverse-sync
• f117ec6 Revert "Merge pull request #3606 from tenderlove/clear-flags"
• b4865f9 Merge pull request #3642 from ruby/bump-version
• 194edab Bump to v1.5.0
• c6ddd5d Merge pull request #3641 from ruby/memberof
• acdfd41 Merge pull request #3639 from ruby/emm
• d1d2161 Add \memberof annotations
• 53ea199 Merge pull request #3640 from ruby/linkify-docs
• Additional commits viewable in compare view

Updates regexp_parser from 2.11.2 to 2.11.3

Changelog

Sourced from regexp_parser's changelog.

[2.11.3] - 2025-09-15 - Janosch Müller

Fixed

• correctly emit backslash-escaped UTF8 characters in character classes as one token (#104)
  • thanks to Earlopain for the report and fix

Commits

• c5094a8 Release v2.11.3
• f3c3a79 Clean up ragel out put some more
• 6993fab Deduplicate transition
• a611c88 Merge pull request #106 from Earlopain/fix-utf8-escapes-in-sets
• 1500106 Merge pull request #105 from Earlopain/ragel-rake-buildin-command
• 2efa904 Fix UTF8 escapes in character classes
• fe4c477 Fix bundle exec rake install when command is buildin
• See full diff in compare view

Bumps the all group with 1 update: ruby/setup-ruby.

Updates ruby/setup-ruby from 1.257.0 to 1.259.0

Release notes

Sourced from ruby/setup-ruby's releases.

v1.259.0

What's Changed

• feat: upgrade to node 24 by @​chenrui333 in ruby/setup-ruby#804

Full Changelog: ruby/setup-ruby@v1.258.0...v1.259.0

v1.258.0

What's Changed

• Add ruby-3.4.6 by @​ruby-builder-bot in ruby/setup-ruby#802
• Add truffleruby-25.0.0,truffleruby+graalvm-25.0.0 by @​ruby-builder-bot in ruby/setup-ruby#803

Full Changelog: ruby/setup-ruby@v1.257.0...v1.258.0

Commits

• 866b91c chore: add setup-node for lint job
• c4cd38d feat: upgrade to node 24
• 3fee676 Add truffleruby-25.0.0,truffleruby+graalvm-25.0.0
• c61fbf1 Add ruby-3.4.6
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions