Bump the bundler group across 1 directory with 8 updates #411
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the bundler group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [activesupport](https://github.com/rails/rails) | `7.0.3.1` | `7.0.7.1` | | [loofah](https://github.com/flavorjones/loofah) | `2.18.0` | `2.19.1` | | [rack](https://github.com/rack/rack) | `2.2.4` | `2.2.8.1` | | [rails-html-sanitizer](https://github.com/rails/rails-html-sanitizer) | `1.4.3` | `1.4.4` | | [rexml](https://github.com/ruby/rexml) | `3.3.1` | `3.3.3` | Updates `activesupport` from 7.0.3.1 to 7.0.7.1 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.1.3.4/activesupport/CHANGELOG.md) - [Commits](rails/rails@v7.0.3.1...v7.0.7.1) Updates `actionpack` from 7.0.3.1 to 7.0.7.1 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.1.3.4/actionpack/CHANGELOG.md) - [Commits](rails/rails@v7.0.3.1...v7.0.7.1) Updates `actionview` from 7.0.3.1 to 7.0.7.1 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.1.3.4/actionview/CHANGELOG.md) - [Commits](rails/rails@v7.0.3.1...v7.0.7.1) Updates `loofah` from 2.18.0 to 2.19.1 - [Release notes](https://github.com/flavorjones/loofah/releases) - [Changelog](https://github.com/flavorjones/loofah/blob/main/CHANGELOG.md) - [Commits](flavorjones/loofah@v2.18.0...v2.19.1) Updates `nokogiri` from 1.16.4 to 1.16.7 - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md) - [Commits](sparklemotion/nokogiri@v1.16.4...v1.16.7) Updates `rack` from 2.2.4 to 2.2.8.1 - [Release notes](https://github.com/rack/rack/releases) - [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md) - [Commits](rack/rack@2.2.4...v2.2.8.1) Updates `rails-html-sanitizer` from 1.4.3 to 1.4.4 - [Release notes](https://github.com/rails/rails-html-sanitizer/releases) - [Changelog](https://github.com/rails/rails-html-sanitizer/blob/main/CHANGELOG.md) - [Commits](rails/rails-html-sanitizer@v1.4.3...v1.4.4) Updates `rexml` from 3.3.1 to 3.3.3 - [Release notes](https://github.com/ruby/rexml/releases) - [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md) - [Commits](ruby/rexml@v3.3.1...v3.3.3) --- updated-dependencies: - dependency-name: activesupport dependency-type: direct:production dependency-group: bundler - dependency-name: actionpack dependency-type: indirect dependency-group: bundler - dependency-name: actionview dependency-type: indirect dependency-group: bundler - dependency-name: loofah dependency-type: indirect dependency-group: bundler - dependency-name: nokogiri dependency-type: indirect dependency-group: bundler - dependency-name: rack dependency-type: indirect dependency-group: bundler - dependency-name: rails-html-sanitizer dependency-type: indirect dependency-group: bundler - dependency-name: rexml dependency-type: indirect dependency-group: bundler ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
etiennebarrie
approved these changes
Aug 23, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the bundler group with 5 updates in the / directory:
7.0.3.17.0.7.12.18.02.19.12.2.42.2.8.11.4.31.4.43.3.13.3.3Updates
activesupportfrom 7.0.3.1 to 7.0.7.1Release notes
Sourced from activesupport's releases.
... (truncated)
Commits
c92caefPreparing for 7.0.7.1 release936587dupdating version / changeloga21d6edUse a temporary file for storing unencrypted files while editing522c86fPreparing for 7.0.7 release5610cbaSync CHANGELOG with the changes in the repository7e9ffc2Fix to_s not using :default format with no argsa8e88e2FixCache::NullStorewith local caching for repeated readsb18b9dfMerge pull request #48800 from robinjam/fix-humanize-nilb12fe80FixEnumerable#sumforEnumerator#lazye3f80f6Add lower bound to Listen gem requirementUpdates
actionpackfrom 7.0.3.1 to 7.0.7.1Release notes
Sourced from actionpack's releases.
... (truncated)
Commits
c92caefPreparing for 7.0.7.1 release936587dupdating version / changelog522c86fPreparing for 7.0.7 releasec05a88dMerge pull request #45116 from ghiculescu/helper_method_backtrace593893cPreparing for 7.0.6 release0b89567Avoid creating match object when checking for illegal header value9ae3da1Fix rubocop warning8e37f2bMerge branch '7-0-sec' into 7-0-stablecdd14cePreparing for 7.0.5.1 release93b9c74update changelogUpdates
actionviewfrom 7.0.3.1 to 7.0.7.1Release notes
Sourced from actionview's releases.
... (truncated)
Commits
c92caefPreparing for 7.0.7.1 release936587dupdating version / changelog522c86fPreparing for 7.0.7 release64bd0acMerge pull request #48645 from Shopify/action-view-bare-cache-fragmentsd76f2deDon't double-encode nestedfield_idandfield_nameindex593893cPreparing for 7.0.6 release8e37f2bMerge branch '7-0-sec' into 7-0-stablecdd14cePreparing for 7.0.5.1 release25e94f4Fix actionview test to work regardless of capitalization of missing translati...17b3152Merge pull request #48329 from zzak/unlink-rails-lib-readmeUpdates
loofahfrom 2.18.0 to 2.19.1Release notes
Sourced from loofah's releases.
Changelog
Sourced from loofah's changelog.
Commits
3f88063version bump to v2.19.19a8dadbdocs: preserve the context and decision record86f7f63fix: replace recursive approach to cdata with escaping solution415677ffix: do not allow "image/svg+xml" in data URIs84ca20crefactor: extract scrub_uri_attribute for downstream use47a835aci: pin psych to v4 until v5 builds properly on CIa6e0a1afix: replace slow regex attribute check with crass parserea853aaMerge pull request #247 from flavorjones/flavorjones-downstream-test-rhse1f2a4bci: test downstream rails-html-sanitizer79d65a0Merge pull request #245 from flavorjones/flavorjones-fix-ruby-2.5-ciUpdates
nokogirifrom 1.16.4 to 1.16.7Release notes
Sourced from nokogiri's releases.
... (truncated)
Changelog
Sourced from nokogiri's changelog.
Commits
d8d6ba3version bump to v1.16.776199bbdep: update libxml2 to v2.12.9 (branch v1.16.x) (#3297)ca92e48dep: update packaged libxml2 to v2.12.9fb833eaversion bump to v1.16.6bacc8dcdep: update libxml2 to 2.12.8 (backport to v1.16.x) (#3229)cf0579fdoc: update CHANGELOG447fd12dep: update libxml2 to 2.12.8cd70bd3version bump to v1.16.5afc36dedep: update vendored libxml2 to v2.12.7 (#3191)41b4f08ci: add arm64-darwin coverage using macos-14Updates
rackfrom 2.2.4 to 2.2.8.1Release notes
Sourced from rack's releases.
Changelog
Sourced from rack's changelog.
... (truncated)
Commits
e830011bump versiond9c163aAvoid 2nd degree polynomial regexp in MediaType6245768Return an empty array when ranges are too largee4c1177Fixing ReDoS in header parsingf169ff7Bump patch version.0a46487Regenerate SPEC (#2102)cee73b3Fix inefficient assert pattern in Rack::Lint (#2101)1fdcf1fPrefer ubuntu-latest for testing. (#2095)287fe43Update cookie.rb (#2092)e7f4869adds missing 2.2.7 to CHANGELOG.md (#2081)Updates
rails-html-sanitizerfrom 1.4.3 to 1.4.4Release notes
Sourced from rails-html-sanitizer's releases.
Changelog
Sourced from rails-html-sanitizer's changelog.
Commits
fd63deaversion bump to v1.4.448ae90adep: bump dependency on loofah0713caffix: escape CDATA nodes using Loofah's escaping methodse6d52d3revert 45a5c10d1223a2fix: use Loofah's scrub_uri_attribute methodf0e3347fix: replace slow regex attribute check with Loofah methoddf03f2fci: pin system lib test to 20.043e2a0f3Merge pull request #145 from rails/flavorjones-get-14x-green11752a6tests: handle libxml 2.10.0 incorrectly-opened comment parsingUpdates
rexmlfrom 3.3.1 to 3.3.3Release notes
Sourced from rexml's releases.
... (truncated)
Changelog
Sourced from rexml's changelog.
... (truncated)
Commits
e4a067eAdd 3.3.3 entry17ff3e7test: add a performance test for attribute list declarationbe86b3dtest: fix wrong test nameb93d790test: use double quote for string literal0fbe7d5test: don't use abbreviated name1599e87test: add a performance test for PI with many tabse2546e6parse pi: improve invalid case detection73661eftest: fix a typo850488atest: use double quote for string literal46c6397test: add performance tests for entity declarationDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.