Bump the minor-and-patch group with 4 updates

[dependabot]

Bumps the minor-and-patch group with 4 updates: graphql, sorbet-static, rubydex and sorbet-static-and-runtime.

Updates graphql from 2.6.3 to 2.6.5

Changelog

Sourced from graphql's changelog.

2.6.5 (6 Jul 2026)

New features

• Execution::Next: improve non-null error propagation #5644
• Dataloader: optimize memory usage in Dataloader::Source #5658
• AsyncDataloader: fix concurrency errors #5656
• Generators: don't generate fields for filtered parameters #5653

2.6.4 (22 Jun 2026)

Yanked due to problems introduced to AsyncDataloader.

Bug fixes

• AsyncDataloader: rework to avoid deadlocks with Falcon #5479
• Execution::Next: fix tracer arguments #5650

Commits

• 44676aa 2.6.5
• fa9e31e Merge pull request #5656 from rmosolgo/fix-closed-queue-error
• ad08aa6 Merge branch 'master' into fix-closed-queue-error
• 64adaf4 Merge pull request #5658 from rmosolgo/optimize-dataloader-source
• fb3c3ea lint fixes
• 164093a Fix lint error, update spec
• b6c093d Clean up
• 402e396 Fix lint errors, move lazies to Run also
• 0d2f957 Move pending jobs state to Run object
• 6e2324d Fix task queue logic for lazies
• Additional commits viewable in compare view

Updates sorbet-static from 0.6.13321 to 0.6.13323

Release notes

Sourced from sorbet-static's releases.

sorbet 0.6.13322.20260701101727-5335245a1

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13322', :group => :development
gem 'sorbet-runtime', '0.6.13322'

sorbet 0.6.13321.20260629154814-aedbfe674

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13321', :group => :development
gem 'sorbet-runtime', '0.6.13321'

Commits

• See full diff in compare view

Updates rubydex from 0.2.6 to 0.2.7

Release notes

Sourced from rubydex's releases.

v0.2.7

What's Changed

✨ Enhancements

• Introduce configuration file support by @​vinistock in Shopify/rubydex#888

🐛 Bug Fixes

• Return Diagnostic#rule as Symbol by @​st0012 in Shopify/rubydex#884

🛠 Other Changes

• Create Config object and move excluded paths inside by @​vinistock in Shopify/rubydex#878
• Store workspace path in config by @​vinistock in Shopify/rubydex#887
• Remove declaration diagnostics by @​vinistock in Shopify/rubydex#890
• Use jemalloc as the global allocator by @​vinistock in Shopify/rubydex#895

Full Changelog: Shopify/rubydex@v0.2.6...v0.2.7

Commits

• 0bbe2a4 Bump version to v0.2.7
• 6ec70a1 Merge pull request #888 from Shopify/vs_introduce_config_file
• 6d7fc24 Use default Rubydex configuration
• 16487c3 Expose load config in the Ruby API
• 64f7e69 Add support for loading configuration from a file
• e6b7530 Merge pull request #895 from Shopify/vs_jemalloc
• ece2050 Use jemalloc as the global allocator
• 558509e Merge pull request #890 from Shopify/vs_remove_declaration_diagnostics
• 6fa4855 Extract Rubydex native adapter helpers (#886)
• 3fa5dae Remove declaration diagnostics
• Additional commits viewable in compare view

Updates sorbet-static-and-runtime from 0.6.13321 to 0.6.13323

Release notes

Sourced from sorbet-static-and-runtime's releases.

sorbet 0.6.13322.20260701101727-5335245a1

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13322', :group => :development
gem 'sorbet-runtime', '0.6.13322'

sorbet 0.6.13321.20260629154814-aedbfe674

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13321', :group => :development
gem 'sorbet-runtime', '0.6.13321'

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions