build(deps-dev): bump rbs from 4.0.3 to 4.1.0

[dependabot]

Bumps rbs from 4.0.3 to 4.1.0.

Release notes

Sourced from rbs's releases.

4.1.0

Release note

RBS 4.1 ships with JRuby support. The RBS parser is written in plain C without depending on the Ruby C API, so it is compiled to WebAssembly and runs on a Wasm runtime, with the parsed AST serialized in a binary format and decoded into RBS objects. The full test suite runs on JRuby in CI.

The inline RBS syntax gets three new features: singleton method definitions (def self.), the module-self constraint, and instance variable annotations in module declarations. Note that RBS inline is still experimental and may change in future releases.

This release also introduces RBS::Rewriter, an API to edit RBS source text while preserving the surrounding content, which rbs annotate is now built on. Parsing performance is improved by interning type names in a shared trie and reducing allocations per node.

RBS::Prototype::Runtime, the RDoc plugin parser, and the top-level float type alias are deprecated in this release.

Signature updates

Updated classes/modules/methods: ARGF, Array, CSV, Class, Delegator, Digest, ERB, Enumerable, Enumerator, Enumerator::Product, Etc, File, File::Constants, File::Stat, FileUtils, Float, Gem, Hash, IO, IPAddr, Integer, JSON, Kernel, MatchData, Module, Monitor, Numeric, ObjectSpace::WeakKeyMap, OpenSSL, Pathname, RBS::Ops, Ractor, Range, Resolv, RubyVM::InstructionSequence, Set, Shellwords, String, StringIO, StringScanner, Struct, Tempfile, Thread, Timeout, TSort, URI::Generic, Zlib::GzipReader, Zlib::ZStream

• Remove stale Float constants and add a constant drift test (#2994)
• Update RDoc comments with Ruby 4.0.6 (#3035)
• Add a dependency on tempfile. (#3025)
• Support %a{implicitly-returns-nil} on MatchData#[] (#2990)
• Update Array (#2987)
• Allow nil output buffers for reader methods (#3002)
• Add stdlib signature tests for #2967 (#2989)
• Update Integer, phase 1 (#2995)
• Add RBS::Ops (#2934)
• Update Module (#2933)
• Correct core/stdlib signatures to match Ruby 4.0 (#2967)
• Revert Digest::Class method changes (#2980)
• Add stdlib tests for updated StringScanner signatures (#2968)
• Update StringScanner signatures to match strscan 3.1.6 (#2959)
• Remove StringScanner methods absent from the latest Ruby release (#2961)
• Fix Resolv#initialize signature: array of resolvers + use_ipv6: (#2960)
• [Hash] Update Hash's signatures and tests to be correct (#2694)
• update rbs signatures to be more consistent with generics (#2867)
• Use top-level path in fileutils.rbs to suppress deprecation warning (#2949)
• Update File::Constants and File::Stat (#2942)
• Add signature for RubyVM::InstructionSequence.of (#2916)
• fix OpenSSL#session_new_cb signature (#2924)
• [Class] update class.rbs (#2898)
• Deprecate top-level float (#2695)
• [Kernel] Updated querying methods (#2685)

Library changes

• Convert character offset to byte offset in parse_inline_*_annotation (#2945)
• Guard against underflow when sysconf(_SC_PAGESIZE) returns 0 (#3031)
• Report invalid UTF-8 byte in a comment as a parsing error (#2983)
• Fetch Chicory/ASM jars from Maven instead of bundling in gem (#3019)
• Add write barrier protection to RBS Location objects (#3022)
• Rename parameter in rbs_intern_type_name for clarity (#3023)
• Deprecate RDoc plugin parser (#3016)

... (truncated)

Changelog

Sourced from rbs's changelog.

4.1.0 (2026-07-27)

RBS 4.1 ships with JRuby support. The RBS parser is written in plain C without depending on the Ruby C API, so it is compiled to WebAssembly and runs on a Wasm runtime, with the parsed AST serialized in a binary format and decoded into RBS objects. The full test suite runs on JRuby in CI.

The inline RBS syntax gets three new features: singleton method definitions (def self.), the module-self constraint, and instance variable annotations in module declarations. Note that RBS inline is still experimental and may change in future releases.

This release also introduces RBS::Rewriter, an API to edit RBS source text while preserving the surrounding content, which rbs annotate is now built on. Parsing performance is improved by interning type names in a shared trie and reducing allocations per node.

RBS::Prototype::Runtime, the RDoc plugin parser, and the top-level float type alias are deprecated in this release.

Signature updates

Updated classes/modules/methods: ARGF, Array, CSV, Class, Delegator, Digest, ERB, Enumerable, Enumerator, Enumerator::Product, Etc, File, File::Constants, File::Stat, FileUtils, Float, Gem, Hash, IO, IPAddr, Integer, JSON, Kernel, MatchData, Module, Monitor, Numeric, ObjectSpace::WeakKeyMap, OpenSSL, Pathname, RBS::Ops, Ractor, Range, Resolv, RubyVM::InstructionSequence, Set, Shellwords, String, StringIO, StringScanner, Struct, Tempfile, Thread, Timeout, TSort, URI::Generic, Zlib::GzipReader, Zlib::ZStream

• Remove stale Float constants and add a constant drift test (#2994)
• Update RDoc comments with Ruby 4.0.6 (#3035)
• Add a dependency on tempfile. (#3025)
• Support %a{implicitly-returns-nil} on MatchData#[] (#2990)
• Update Array (#2987)
• Allow nil output buffers for reader methods (#3002)
• Add stdlib signature tests for #2967 (#2989)
• Update Integer, phase 1 (#2995)
• Add RBS::Ops (#2934)
• Update Module (#2933)
• Correct core/stdlib signatures to match Ruby 4.0 (#2967)
• Revert Digest::Class method changes (#2980)
• Add stdlib tests for updated StringScanner signatures (#2968)
• Update StringScanner signatures to match strscan 3.1.6 (#2959)
• Remove StringScanner methods absent from the latest Ruby release (#2961)
• Fix Resolv#initialize signature: array of resolvers + use_ipv6: (#2960)
• [Hash] Update Hash's signatures and tests to be correct (#2694)
• update rbs signatures to be more consistent with generics (#2867)
• Use top-level path in fileutils.rbs to suppress deprecation warning (#2949)
• Update File::Constants and File::Stat (#2942)
• Add signature for RubyVM::InstructionSequence.of (#2916)
• fix OpenSSL#session_new_cb signature (#2924)
• [Class] update class.rbs (#2898)
• Deprecate top-level float (#2695)
• [Kernel] Updated querying methods (#2685)

Library changes

• Convert character offset to byte offset in parse_inline_*_annotation (#2945)
• Guard against underflow when sysconf(_SC_PAGESIZE) returns 0 (#3031)
• Report invalid UTF-8 byte in a comment as a parsing error (#2983)
• Fetch Chicory/ASM jars from Maven instead of bundling in gem (#3019)
• Add write barrier protection to RBS Location objects (#3022)
• Rename parameter in rbs_intern_type_name for clarity (#3023)
• Deprecate RDoc plugin parser (#3016)
• Run the test suite on JRuby (JRuby support, step 4) (#3008)

... (truncated)

Commits

• 432d955 Merge pull request #3036 from ruby/version-4.1.0
• d73d078 Version 4.1.0
• 8aeb996 Merge pull request #3034 from ruby/claude/ci-ruby-version-check-4v4bw0
• 10e3c8b Update outdated versions used in CI
• f4ecb8b Merge pull request #3035 from ruby/claude/rdoc-comments-update-be6d28
• 4ca6229 Merge pull request #3029 from infiton/fix/rbi-nested-declarations
• bd24e79 Update RDoc comments with Ruby 4.0.6
• cd82fcf ci: use Ruby 4.0.6 for RBS Comments workflow
• 2674c28 Update rdoc to 8.0.0
• 73eb521 Merge pull request #3033 from ruby/dependabot/bundler/steep/json-2.19.9
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)