Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): bump the dependencies group across 1 directory with 6 updates #1852

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

chore(deps): bump the dependencies group across 1 directory with 6 updates #1852

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 5, 2024 •
edited
Loading

Bumps the dependencies group with 6 updates in the / directory:

Package From To
org-ruby 0.9.9 0.9.12
creole 0.3.8 0.5.0
rexml 3.3.2 3.3.4
minitest 5.23.1 5.24.1
sanitize 6.1.1 6.1.2
nokogiri 1.16.6 1.16.7

Updates org-ruby from 0.9.9 to 0.9.12

Changelog

Sourced from org-ruby's changelog.

-- mode: org; mode: auto-fill; --

# title: Changelog # startup: showeverything

  • 0.9.10 / 2014-12-09
  • Add option to disable Rubypants
Commits

Updates creole from 0.3.8 to 0.5.0

Changelog

Sourced from creole's changelog.

0.5.0

  • Remove methods make_*_anchor
  • Add method make_headline
  • Parse tags inside link text
Commits

Updates rexml from 3.3.2 to 3.3.4

Release notes

Sourced from rexml's releases.

REXML 3.3.4 - 2024-08-01

Fixes

  • Fixed a bug that REXML::Security isn't defined when REXML::Parsers::StreamParser is used and rexml/parsers/streamparser is only required.
    • GH-189
    • Patch by takuya kodama.

Thanks

  • takuya kodama

REXML 3.3.3 - 2024-08-01

Improvements

  • Added support for detecting invalid XML that has unsupported content before root element

  • Added support for REXML::Security.entity_expansion_limit= and REXML::Security.entity_expansion_text_limit= in SAX2 and pull parsers

  • Added more tests for invalid XMLs.

  • Added more performance tests.

    • Patch by Watson.

  • Improved parse performance.

    • GH-186
    • Patch by tomoya ishida.

Thanks

  • NAITOH Jun

  • Watson

  • tomoya ishida

Changelog

Sourced from rexml's changelog.

3.3.4 - 2024-08-01 {#version-3-3-4}

Fixes

  • Fixed a bug that REXML::Security isn't defined when REXML::Parsers::StreamParser is used and rexml/parsers/streamparser is only required.
    • GH-189
    • Patch by takuya kodama.

Thanks

  • takuya kodama

3.3.3 - 2024-08-01 {#version-3-3-3}

Improvements

  • Added support for detecting invalid XML that has unsupported content before root element

  • Added support for REXML::Security.entity_expansion_limit= and REXML::Security.entity_expansion_text_limit= in SAX2 and pull parsers

  • Added more tests for invalid XMLs.

  • Added more performance tests.

    • Patch by Watson.

  • Improved parse performance.

    • GH-186
    • Patch by tomoya ishida.

Thanks

  • NAITOH Jun

  • Watson

  • tomoya ishida

Commits
  • 911dca4 Add 3.3.4 entry
  • cb21378 Add missing rexml/security require in rexml/parsers/baseparser.rb (#189)
  • d65e27c Bump version
  • e4a067e Add 3.3.3 entry
  • 17ff3e7 test: add a performance test for attribute list declaration
  • be86b3d test: fix wrong test name
  • b93d790 test: use double quote for string literal
  • 0fbe7d5 test: don't use abbreviated name
  • 1599e87 test: add a performance test for PI with many tabs
  • e2546e6 parse pi: improve invalid case detection
  • Additional commits viewable in compare view

Updates minitest from 5.23.1 to 5.24.1

Changelog

Sourced from minitest's changelog.

=== 5.24.1 / 2024-06-29

  • 1 bug fix:

    • Fix the error message when an extension is invalid value. (y-yagi)

=== 5.24.0 / 2024-06-18

  • 2 minor enhancements:

    • Added Minitest.register_plugin.
    • Extended plugin system to work with modules/classes for opt-out plugins.

  • 1 bug fix:

    • Removed anacronism, but allow load_plugins to exit gracefully if --disable=gems.
Commits
  • 15c7418 Branching minitest to version 5.24.1
  • 8dc42bf - Fix the error message when an extension is invalid value. (y-yagi)
  • 0719fdb prepped for release
  • 2c5f1b7 Added Minitest.register_plugin.
  • 0a1289f Remove more anacronisms. Allow tests to pass w/o rubygems loaded.
  • 8712996 - Removed anacronism, but allow load_plugins to exit gracefully if --disable=...
  • 09fe9a0 Fix one failing tests when string literals are frozen.
  • 08280ac Moved some methods around to follow actual call structure a bit better.
  • See full diff in compare view

Updates sanitize from 6.1.1 to 6.1.2

Release notes

Sourced from sanitize's releases.

v6.1.2

Bug Fixes

Changelog

Sourced from sanitize's changelog.

6.1.2 (2024-07-27)

Bug Fixes

Commits

Updates nokogiri from 1.16.6 to 1.16.7

Release notes

Sourced from nokogiri's releases.

v1.16.7 / 2024-07-27

Dependencies

  • [CRuby] Vendored libxml2 is updated to v2.12.9, which the upstream release notes state is a security release to address CVE-2024-40896. Nokogiri's maintainers believe this vulnerability does not affect users of Nokogiri, but we advise upgrading at your earliest convenience anyway.

sha256 checksums:

78778d35f165b59513be31c0fe232c63a82cf97626ffba695b5f822e5da1d74b  nokogiri-1.16.7-aarch64-linux.gem
c84cdb9e3aa44c35bbb981b20175838c4b2066c26c5cb118f31f177168a42fc3  nokogiri-1.16.7-arm-linux.gem
276dcea1b988a5b22b5acc1ba901d24b8e908c40b71dccd5d54a2ae279480dad  nokogiri-1.16.7-arm64-darwin.gem
044c45ca46abc2b6135a85ab39a546ff2f0434d43142bc59b83e5b1068876a42  nokogiri-1.16.7-java.gem
01ed785392f9cbdfd45e0e5ef6ad6d2c80a6128672589448f18952168bd68e56  nokogiri-1.16.7-x64-mingw-ucrt.gem
d8fd5c675743b85354c9098117bfa9e703c7cacab8c33e5190104ea8218ad1ec  nokogiri-1.16.7-x64-mingw32.gem
dddbf1c1ef99ce9fab98302b14f8bacb703e6f16e89b99f05ecee8a1fca23664  nokogiri-1.16.7-x86-linux.gem
b6517d995b024739cbb81251a26866d40e1ccb151936b5bb0977e7487f4e617c  nokogiri-1.16.7-x86-mingw32.gem
630732b80fc572690eab50c73a1f18988f3ac401ed0b67ca9956ba2b1e2c3faa  nokogiri-1.16.7-x86_64-darwin.gem
9e1e428641d8632af877c60b418c71163560e9feb4a5c4015f3230a8b86a40f6  nokogiri-1.16.7-x86_64-linux.gem
f819cbfdfb0a7b19c9c52c6f2ca63df0e58a6125f4f139707b586b9511d7fe95  nokogiri-1.16.7.gem
Changelog

Sourced from nokogiri's changelog.

v1.16.7 / 2024-07-27

Dependencies

  • [CRuby] Vendored libxml2 is updated to v2.12.9, which the upstream release notes state is a security release to address CVE-2024-40896. Nokogiri's maintainers believe this vulnerability does not affect users of Nokogiri, but we advise upgrading at your earliest convenience anyway.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added ospo-dependency-license-alert Issue created by dependency license check ruby Pull requests that update Ruby code labels Aug 5, 2024
@dependabot
chore(deps): bump the dependencies group across 1 directory with 6 up…
c1778cb 
…dates

Bumps the dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org-ruby](https://github.com/wallyqs/org-ruby) | `0.9.9` | `0.9.12` |
| [creole](https://github.com/minad/creole) | `0.3.8` | `0.5.0` |
| [rexml](https://github.com/ruby/rexml) | `3.3.2` | `3.3.4` |
| [minitest](https://github.com/minitest/minitest) | `5.23.1` | `5.24.1` |
| [sanitize](https://github.com/rgrove/sanitize) | `6.1.1` | `6.1.2` |
| [nokogiri](https://github.com/sparklemotion/nokogiri) | `1.16.6` | `1.16.7` |



Updates `org-ruby` from 0.9.9 to 0.9.12
- [Changelog](https://github.com/wallyqs/org-ruby/blob/master/History.org)
- [Commits](wallyqs/org-ruby@version-0.9.9...version-0.9.12)

Updates `creole` from 0.3.8 to 0.5.0
- [Changelog](https://github.com/minad/creole/blob/master/CHANGES)
- [Commits](minad/creole@0.3.8...v0.5.0)

Updates `rexml` from 3.3.2 to 3.3.4
- [Release notes](https://github.com/ruby/rexml/releases)
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md)
- [Commits](ruby/rexml@v3.3.2...v3.3.4)

Updates `minitest` from 5.23.1 to 5.24.1
- [Changelog](https://github.com/minitest/minitest/blob/master/History.rdoc)
- [Commits](minitest/minitest@v5.23.1...v5.24.1)

Updates `sanitize` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/rgrove/sanitize/releases)
- [Changelog](https://github.com/rgrove/sanitize/blob/main/HISTORY.md)
- [Commits](rgrove/sanitize@v6.1.1...v6.1.2)

Updates `nokogiri` from 1.16.6 to 1.16.7
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](sparklemotion/nokogiri@v1.16.6...v1.16.7)

---
updated-dependencies:
- dependency-name: org-ruby
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: creole
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: rexml
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: minitest
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: sanitize
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: nokogiri
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/bundler/dependencies-45b02ffd80 branch from d919c2d to c1778cb Compare August 6, 2024 20:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
ospo-dependency-license-alert Issue created by dependency license check ruby Pull requests that update Ruby code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
0 participants