build(deps): bump ruby/setup-ruby from 1.310.0 to 1.314.0

[dependabot]

Bumps ruby/setup-ruby from 1.310.0 to 1.314.0.

Release notes

Sourced from ruby/setup-ruby's releases.

v1.314.0

What's Changed

• Add support for ubuntu-26.04 and ubuntu-26.04-arm by @​eregon in ruby/setup-ruby#923

Full Changelog: ruby/setup-ruby@v1.313.0...v1.314.0

v1.313.0

What's Changed

• Add jruby-10.0.6.0 by @​ruby-builder-bot in ruby/setup-ruby#921

Full Changelog: ruby/setup-ruby@v1.312.0...v1.313.0

v1.312.0

What's Changed

• Use BUNDLE_LOCKFILE when detecting the lockfile by @​Thomascountz in ruby/setup-ruby#919

New Contributors

• @​Thomascountz made their first contribution in ruby/setup-ruby#919

Full Changelog: ruby/setup-ruby@v1.311.0...v1.312.0

v1.311.0

What's Changed

• Add jruby-9.4.15.0 by @​ruby-builder-bot in ruby/setup-ruby#920

Full Changelog: ruby/setup-ruby@v1.310.0...v1.311.0

Commits

• 9eb537c Add support for ubuntu-26.04 and ubuntu-26.04-arm
• e1a3b10 Improve versions-strings-for-builder.rb
• 0df5288 Remove gem install sassc on Windows JRuby
• 89f9052 Add jruby-10.0.6.0
• 12fd324 Use BUNDLE_LOCKFILE when detecting the lockfile
• a99ac84 Add jruby-9.4.15.0
• See full diff in compare view

[masutaka]

@dependabot rebase

[masutaka]

Overview

• Package: ruby/setup-ruby 1.310.0 → 1.314.0
• Dependency type: Development dependency (CI action in the GitHub Actions workflow .github/workflows/test.yml)
• Version change: Minor

Key Findings

• Breaking Changes: None. The diff spans four releases (v1.311.0–v1.314.0), covering new Ruby implementations (jruby-9.4.15.0 / jruby-10.0.6.0), ubuntu-26.04 / ubuntu-26.04-arm support, lockfile detection via BUNDLE_LOCKFILE (ruby/setup-ruby#919), and removal of gem install sassc on Windows JRuby. All are additive features and improvements that do not affect the current usage (ruby-version + bundler-cache: true).
• Security: None. No open Dependabot alert in this repository matches this package, so this PR is a regular version bump (not a security fix).
• Supported versions: No change. No impact on the Ruby versions used in this repository's CI (3.0–4.0).
• CI status: pass. rspec (3.0–4.0), actionlint, codeql, and dependency_review all succeeded. pushover / CodeQL / add-assignee are skipping (as expected).
• Cascading updates: None. The diff is a single line (+1 / -1): the SHA and version comment of ruby/setup-ruby in .github/workflows/test.yml.

Scope of Impact

The change only touches the action reference in .github/workflows/test.yml; there is no impact on application code (lib/, bin/, etc.) or on Gemfile / Gemfile.lock. The SHA pinning is preserved (@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314.0), and the SHA was confirmed to match the upstream v1.314.0 tag exactly.

The upstream compare (afeafc3...9eb537c, 6 commits) was also reviewed. The changed files are bundler.js, common.js, dist/index.js, generate-test-matrix.rb, ruby-builder-versions.json, and others, all corresponding to the release notes above. The authors are known maintainers (eregon / ruby-builder-bot) and first-time contributor Thomascountz (one BUNDLE_LOCKFILE change); there are no signs of added postinstall, suspicious URLs, or unnaturally large diffs.

Conclusion

No issues.

All CI passes, there are no breaking changes and no related security alerts, and the change is a single-line minor update of a SHA-pinned CI action. The SHA also matches the upstream v1.314.0 tag, so it is safe to merge.