Rubocop Ruby Matrix Gems

1

Depfu

Compounding factor #4: Dependency greening tools, like GitHub's dependabot, or the excellent alternatives depfu, and renovate will all send a PR whenever a new version of rubocop comes out, asking to upgrade from ancient to hot-right-now. While this is often a non-starter for a library, the repeated invalid PRs can be a time sink, and a distraction.

#License Management #Security #Security & Privacy 4 social mentions

2

Bundler

Compounding factor #3: The real dependency, the one that prevents the rubocop upgrade is the version of Ruby. Unfortunately the Ruby version dependency, as listed in the .gemspec, isn't baked into bundler's dependency resolution, so is has to be resolved manually.

#Cloud Storage #File Sharing #Secure File Sharing 19 social mentions