[dependabot]

Bumps the ruby-deps group with 2 updates: view_component and overcommit.

Updates view_component from 4.22.0 to 4.23.0

Release notes

Sourced from view_component's releases.

4.23.0

• Restore request-dependent URL generation when using render_preview inside with_request_url.

  Joel Hawksley

• Speed up cold cache digests by skipping the # Template Dependency: scan for sources that declare none, and by not translating class names in synthetic templates, which only declare paths.

  Erik Axel Nielsen

Changelog

Sourced from view_component's changelog.

4.23.0

• Restore request-dependent URL generation when using render_preview inside with_request_url.

  Joel Hawksley

• Speed up cold cache digests by skipping the # Template Dependency: scan for sources that declare none, and by not translating class names in synthetic templates, which only declare paths.

  Erik Axel Nielsen

Commits

• 05b5c98 Merge pull request #2778 from ViewComponent/release-4-23-0
• bd38985 release 4.23.0
• 38567b1 Merge pull request #2777 from ViewComponent/joelhawksley-content-behavior-reg...
• e93c3f5 Restore compiler override on the original reloaded class
• ac4183b Exercise preview parameter precedence through rendered output
• 0a2fcc7 Preserve request routing context when rendering previews
• 19ea003 Merge pull request #2775 from erikaxel/cache-digest-skip-scans
• 66a53c6 Skip cache digest scans that can't find anything
• See full diff in compare view

Updates overcommit from 0.74.0 to 0.75.0

Release notes

Sourced from overcommit's releases.

0.75.0

What's Changed

• Read .overcommit.yml as UTF-8 in the hook template by @​ChandraChaan in sds/overcommit#910
• Re-enable the full Windows test matrix and fix platform failures by @​sds in sds/overcommit#911

New Contributors

• @​ChandraChaan made their first contribution in sds/overcommit#910

Full Changelog: sds/overcommit@v0.74.0...v0.75.0

Changelog

Sourced from overcommit's changelog.

0.75.0

• Remember all locally approved configuration and hook signatures across rebases

• Gracefully handle hook loading on systems with non-UTF8 locale

• Re-enable running test suite on Windows environments

Commits

• 35b58cd Cut version 0.75.0 (#912)
• c5101bd Re-enable the full Windows test matrix and fix platform failures (#911)
• 51a541d Read .overcommit.yml as UTF-8 in the hook template (#910)
• 50f3e86 Update Overcommit logo (#907)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[mroderick]

Dependency Upgrade Review

Verdict: Compatible (head 9ef8f647a83d668b5a3c88bad7c727c25c4400d9) · Confidence: High

Lockfile-only bump of view_component 4.22.0→4.23.0 and overcommit 0.74.0→0.75.0. view_component changes touch cache-digest scanning and preview test helpers — neither breaks this repo's usage; overcommit changes are UTF-8/Windows fixes in dev tooling. Both suites and the probe pass.

Checks

Check	Result
planner suite	pass
auth suite	pass
round-trip probe	pass

Contracts

Contract	Status	Basis
Rendered component HTML with fragment-cache digests (event card)	Verified	planner-suite pass including event_card cached-fragment spec (warm-cache render equality, locale key isolation)
No cross-service consumers documented in AGENTS.md	Verified	No runtime contract: overcommit is dev tooling, only runs as a local git pre-commit hook (bundle exec overcommit)

Compatibility analysis — 2 packages

• view_component 4.22.0 → 4.23.0: Minor bump; diff touches only cache_digest dependency tracking (skip/short-circuit scans), render_preview request context handling in test_helpers, and version. Repo subclasses ViewComponent::Base (unchanged API) and requires test_helpers (file kept). Cache-digest changes are behavior-preserving for templates without 'Template Dependency:' declarations; app has none.
• overcommit 0.74.0 → 0.75.0: Development-only pre-commit hook runner (require: false). Diff is UTF-8 reading of .overcommit.yml in the hook template plus Windows-only fixes and a File.read refactor; none affect the repo's single RuboCop pre-commit hook on Linux/macOS.

Usage of 2 dependencies

• view_component: app/components/*.rb (7 classes subclassing ViewComponent::Base); app/components/event_card_component.html.erb and chapters_sidebar_component.html.erb (fragment cache / skip_digest); spec/rails_helper.rb (require view_component/test_helpers, type: :component specs)
• overcommit: .overcommit.yml (RuboCop PreCommit hook); docs/rubocop.md setup instructions; Gemfile (require: false)

Test coverage

• Strong: component specs cover rendering and the cached-fragment path (spec/components/event_card_component_spec.rb exercises digested cache keys under MemoryStore).
• Gap: no spec uses render_preview, so the changed test_helpers code path is unexercised — but the repo never calls it.
• Gap: overcommit hooks are not run by CI; dev tooling relies on diff inspection alone.

Calibration and confidence

Confidence: High — Both dependency diffs read in full; the only changed path the repo exercises (cache digest in component fragment caching) is covered by a passing regression spec, and no cross-service contracts exist for this app.

1. Weakest claim: The cache_digest short-circuit is verified as behavior-preserving by reading the diff plus absence of 'Template Dependency:' in app/; a source containing the marker string would take the changed swap path.
2. Relied on but unverified: That the render_preview routing-context change is irrelevant — repo never calls render_preview, so unverified locally but unused.
3. Falsifier: A component spec failing on fragment-cache digest mismatch after this bump, or an overcommit pre-commit hook misreading .overcommit.yml, would prove the verdict wrong.