chore(deps): bump the ruby group with 9 updates

[dependabot]

Bumps the ruby group with 9 updates:

Package	From	To
html2rss	4a23fb6	eaebbf2
async	2.43.0	2.44.0
async-http	0.98.1	0.99.0
io-event	1.19.3	1.19.4
json	2.21.1	2.21.2
protocol-http	0.64.0	0.68.0
protocol-http1	0.39.0	0.40.0
protocol-url	0.4.0	0.5.0
zeitwerk	2.8.2	2.8.3

Updates html2rss from 4a23fb6 to eaebbf2

Commits

• eaebbf2 feat(pagination): generalized multi-strategy pagination framework (#404)
• 5cd48df refactor: deepen AutoSource and request seams (+ guard/budget fixes) (#402)
• 28c9964 fix: resolve rubocop and yard-lint offenses from gem updates
• dc5b2e7 chore(deps): bump the ruby-deps group with 5 updates
• See full diff in compare view

Updates async from 2.43.0 to 2.44.0

Release notes

Sourced from async's releases.

v2.44.0

• Fixed scheduler cleanup after forking while other fibers are blocked.

Changelog

Sourced from async's changelog.

v2.44.0

• Fixed scheduler cleanup after forking while other fibers are blocked.

Commits

• 9bbc07d Bump minor version.
• 66656f4 Reset blocked operations after fork. (#463)
• See full diff in compare view

Updates async-http from 0.98.1 to 0.99.0

Release notes

Sourced from async-http's releases.

v0.99.0

• Retry safe requests when a remote HTTP/2 endpoint resets the stream with INTERNAL_ERROR before returning a response.

Changelog

Sourced from async-http's changelog.

v0.99.0

• Retry safe requests when a remote HTTP/2 endpoint resets the stream with INTERNAL_ERROR before returning a response.

Commits

• 710f4be Bump minor version.
• fb7e8e5 Wait for HTTP/2 requests to finish. (#235)
• e00ce34 Close HTTP/2 request queue. (#234)
• c199edb Use promises for protocol readiness. (#233)
• 7a635cd Retry remote HTTP/2 internal errors. (#232)
• See full diff in compare view

Updates io-event from 1.19.3 to 1.19.4

Release notes

Sourced from io-event's releases.

v1.19.4

• Capture errno immediately after epoll_wait / kevent, preventing stale or subsequently clobbered values from raising a spurious Errno::* when a native selector wait is interrupted or skipped.

Changelog

Sourced from io-event's changelog.

v1.19.4

• Capture errno immediately after epoll_wait / kevent, preventing stale or subsequently clobbered values from raising a spurious Errno::* when a native selector wait is interrupted or skipped.

Commits

• cfb0645 Bump patch version.
• 12e5cf0 Capture selector wait errors immediately. (#206)
• See full diff in compare view

Updates json from 2.21.1 to 2.21.2

Release notes

Sourced from json's releases.

v2.21.2

What's Changed

• Fix a use-after-free bug in JSON::ResumableParser. [GHSA-9hj4-r449-hfvc].

Full Changelog: ruby/json@v2.21.1...v2.21.2

Changelog

Sourced from json's changelog.

2026-07-31 (2.21.2)

• Fix a use-after-free bug in JSON::ResumableParser. [GHSA-9hj4-r449-hfvc].

Commits

• 5a32e43 Release 2.21.2
• 2c332bf Also don't compute ResumableParser cursor position for warning
• 5499aa5 Improve max_nesting documentation
• 499d9bc Fix the parser benchmark bytes report
• f5fc245 Pass '-mno-outline' to the compiler (if supported) to prevent function outlin...
• See full diff in compare view

Updates protocol-http from 0.64.0 to 0.68.0

Release notes

Sourced from protocol-http's releases.

v0.68.0

• Add HTTP status descriptions.

v0.67.0

• Parse and resolve HTTP Range header values according to the default headers policy.

v0.66.0

• Introduce Protocol::HTTP::RemoteError for remote endpoint failures where application processing may have occurred.

v0.65.0

• Improve Accept header parsing for quoted pairs, malformed parameters, invalid wildcards, and invalid quality factors.
• Emit multiple Set-Cookie values as separate header fields and delimit combined Cookie values with a space after each semicolon.

Changelog

Sourced from protocol-http's changelog.

v0.68.0

• Add HTTP status descriptions.

v0.67.0

• Parse and resolve HTTP Range header values according to the default headers policy.

v0.66.0

• Introduce Protocol::HTTP::RemoteError for remote endpoint failures where application processing may have occurred.

v0.65.0

• Improve Accept header parsing for quoted pairs, malformed parameters, invalid wildcards, and invalid quality factors.
• Emit multiple Set-Cookie values as separate header fields and delimit combined Cookie values with a space after each semicolon.

Commits

• a0a0c98 Bump minor version.
• b49d0cd Add HTTP status descriptions. (#114)
• 42cebb1 Bump minor version.
• 834c452 Parse Range header values. (#112)
• 5a09a3b Bump minor version.
• bcb58b1 Introduce remote error. (#110)
• 8f597ae Bump minor version.
• 2effe9d Use multiple fields for set-cookie header. (#101)
• 787d6db Harden Accept header parsing. (#109)
• See full diff in compare view

Updates protocol-http1 from 0.39.0 to 0.40.0

Release notes

Sourced from protocol-http1's releases.

v0.40.0

• Use Protocol::HTTP::Status for standard HTTP status descriptions and remove the duplicate Protocol::HTTP1::Reason table.

Changelog

Sourced from protocol-http1's changelog.

v0.40.0

• Use Protocol::HTTP::Status for standard HTTP status descriptions and remove the duplicate Protocol::HTTP1::Reason table.

Commits

• 8d4b9e5 Bump minor version.
• df655f3 Use protocol-http status descriptions. (#55)
• See full diff in compare view

Updates protocol-url from 0.4.0 to 0.5.0

Changelog

Sourced from protocol-url's changelog.

v0.5.0

• Add Protocol::URL::Encoding.decode_www_form for decoding HTML form data where + represents a space.

Commits

• b4fd25d Bump minor version.
• c66809e Decode URL encoded form data. (#1)
• 3989cd6 100% documentation coverage.
• See full diff in compare view

Updates zeitwerk from 2.8.2 to 2.8.3

Changelog

Sourced from zeitwerk's changelog.

2.8.3 (1 Aug 2026)

• 2.8.0 introduced a regression: Collapsed directories that were also configured as eager load exclusions were eager loaded. The exclusion was not honored. This has been fixed.

Commits

• 607973f Ready for 2.8.3
• 8f09b96 Let eager loading skip collapsed eager loading exceptions
• f548f2c Remove unused variables
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-08-03 07:18 UTC · Rule: dependabot · triggered by rule refactored queue action rule
• ✅ Checks passed · on draft merge queue: checking main (99b3bb4) and #1217 together #1218
• ✅ Merged — 2026-08-03 07:20 UTC · at 591608405f19e732b1826c6082480b4f93e297be · squash

This pull request spent 2 minutes 14 seconds in the queue, including 1 minute 14 seconds running CI.

Required conditions to merge

• author=dependabot[bot]
  • chore(deps): bump the ruby group with 9 updates #1217
• base=main
• github-review-approved [🛡 GitHub repository ruleset rule main]
  • chore(deps): bump the ruby group with 9 updates #1217
• status-success=build
• any of [🛡 GitHub repository ruleset rule main]:
  • check-success = @github-actions/build
  • check-neutral = @github-actions/build
  • check-skipped = @github-actions/build
• any of [🛡 GitHub repository ruleset rule main]:
  • check-success = @github-actions/lint
  • check-neutral = @github-actions/lint
  • check-skipped = @github-actions/lint