Update dependency yard to ">= 0.9.42"

[dev-mend-for-github-com]

This PR contains the following updates:

Package	Update	Change
yard (source, changelog)	patch	">= 0.9.34" → ">= 0.9.42"

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity	CVSS Score	Vulnerability
Medium	5.3	CVE-2026-41493

---

Release Notes

lsegal/yard (yard)

v0.9.42

Compare Source

• Fix alternating rows when loading a module in default HTML templates with subelements in the nav frame
• Fix reliability of keypresses and copy/paste in search box (#​1174)
• Fix regression in yard server search box styling
• Fix possible path traversal with document_root (--docroot) set in yard server (GHSA-xfhh-rx56-rxcr)

v0.9.41

Compare Source

• Add support for rdoc-image:... syntax in HybridMarkup (#​1676)
• Add support for colon suffix code blocks in HybridMarkup (rdoc compatibility)
• Fix responsiveness and state issues with nav frame links in yard server

v0.9.40

Compare Source

• Add support for Ruby .rbs files (docstrings included) (#​1673)
• Add built-in hybrid RDoc/Markdown renderer (HybridMarkdown) requiring no external gems (#​1674)
• Add support for #- as a comment-block separator. See Getting Started Guide.
• Add support for commonmarker version >= 1.0.
• Remove usage of jQuery in default templates. jQuery library is still packaged in templates for backward compatibility (#​1675)
• Fix false self-referential mixin when bare name matches ancestor namespace (#​1672)
• Fix bracket/brace map corruption from Ruby 3.0+ pattern matching deconstruction (#​1671)
• Fix @!scope class on attributes (#​1582, #​1655, #​1666)
• Fix @!parse directives not including source for block (#​1665)
• Fix inherited methods not appearing in groups (#​1656)

v0.9.39

Compare Source

• Add support for Ruby 4.0 (#​1663)
• Add changelog URI to gemspec metadata (#​1641)
• Fix issues with source ranges (#​1642)
• Fix an issue loading relative links from file list in HTML template (#​1660)
• Various test fixes (#​1650, #​1651)

v0.9.38

Compare Source

• Add support for complex constant assignment (#​1599)
• Add support for Data type structs (#​1600)
• Support multi method duck type syntax in type explainer (#​1631)
• Improve Ruby 3.5 compatibility (#​1616)
• Update documentation for various type annotations (#​1615)
• JavaScript frontend updates (resizer, JS bugs, reduce console verbosity) for default template
• Fix beginless/endless range errors (#​1549, #​1625)
• Fix path structure in Templates.md documentation (#​1588)
• Fix signature handling in overload (#​1590)
• Fix handling of **nil with named block (#​1623)
• Fix directives in empty class bodies (#​1624)
• Fix parsing of array within array syntax (#​1604)
• Fix parsing of visibility keywords in front of class methods (#​1632)

v0.9.37

Compare Source

• Fix JavaScript errors in --one-file template (#​1426)
• Fix heredoc parsing and add support for squiggly heredocs (#​1315, #​1495)
• Accessibility improvements to the default template (#​1501)
• Improved YARD documentation (#​1410, #​1512, #​1516, #​1544)
• Fix error when parsing @option tags (#​1515)
• Fix issue parsing UTF-8 filenames (#​1517)
• Replace OpenStruct with optimized YARD::OpenStruct to avoid ostruct performance warnings (#​1545)
• Add support for private attr_* syntax (#​1541)
• Remove logger dependency (#​1546)

v0.9.36

Compare Source

• Further XSS fixes for generated frameset pages (#​1538)
• Improve tests for Ruby 3.3 compatibility (#​1519, #​1531)
• Documentation improvements (#​1524)

v0.9.35

Compare Source

• Fix possible XSS on generated YARD frameset pages (thanks to @​RedYetiDev for finding and patching) (2069e2b).
• Fix errors when using @option on non-method objects (#​1508)
• Support Ruby 3.3 changes in Ripper parser (#​1510)

---

• If you want to rebase/retry this PR, check this box