Bump the bundler group across 1 directory with 8 updates #1
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the bundler group with 3 updates in the / directory: [rack-contrib](https://github.com/rack/rack-contrib), [activesupport](https://github.com/rails/rails) and [addressable](https://github.com/sporkmonger/addressable). Updates `rack-contrib` from 1.1.0 to 2.5.0 - [Release notes](https://github.com/rack/rack-contrib/releases) - [Changelog](https://github.com/rack/rack-contrib/blob/main/CHANGELOG.md) - [Commits](rack/rack-contrib@1.1.0...v2.5.0) Updates `activesupport` from 6.0.2.1 to 6.1.7.5 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v8.0.1/activesupport/CHANGELOG.md) - [Commits](rails/rails@v6.0.2.1...v6.1.7.5) Updates `addressable` from 2.7.0 to 2.8.0 - [Changelog](https://github.com/sporkmonger/addressable/blob/main/CHANGELOG.md) - [Commits](sporkmonger/addressable@addressable-2.7.0...addressable-2.8.0) Updates `commonmarker` from 0.17.13 to 0.23.11 - [Release notes](https://github.com/gjtorikian/commonmarker/releases) - [Changelog](https://github.com/gjtorikian/commonmarker/blob/main/CHANGELOG.md) - [Commits](gjtorikian/commonmarker@v0.17.13...v0.23.11) Updates `kramdown` from 1.17.0 to 2.4.0 - [Release notes](https://github.com/gettalong/kramdown/releases) - [Changelog](https://github.com/gettalong/kramdown/blob/master/doc/news.page) - [Commits](https://github.com/gettalong/kramdown/commits) Updates `nokogiri` from 1.10.8 to 1.18.2 - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/v1.18.2/CHANGELOG.md) - [Commits](sparklemotion/nokogiri@v1.10.8...v1.18.2) Updates `rack` from 2.0.8 to 3.1.10 - [Release notes](https://github.com/rack/rack/releases) - [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md) - [Commits](rack/rack@2.0.8...v3.1.10) Updates `tzinfo` from 1.2.5 to 2.0.6 - [Release notes](https://github.com/tzinfo/tzinfo/releases) - [Changelog](https://github.com/tzinfo/tzinfo/blob/master/CHANGES.md) - [Commits](tzinfo/tzinfo@v1.2.5...v2.0.6) --- updated-dependencies: - dependency-name: rack-contrib dependency-type: direct:production dependency-group: bundler - dependency-name: activesupport dependency-type: indirect dependency-group: bundler - dependency-name: addressable dependency-type: indirect dependency-group: bundler - dependency-name: commonmarker dependency-type: indirect dependency-group: bundler - dependency-name: kramdown dependency-type: indirect dependency-group: bundler - dependency-name: nokogiri dependency-type: indirect dependency-group: bundler - dependency-name: rack dependency-type: indirect dependency-group: bundler - dependency-name: tzinfo dependency-type: indirect dependency-group: bundler ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the bundler group with 3 updates in the / directory: rack-contrib, activesupport and addressable.
Updates
rack-contribfrom 1.1.0 to 2.5.0Release notes
Sourced from rack-contrib's releases.
... (truncated)
Commits
d5265bcBump minor version.0eec2a9Specify a maximum number of runs to limit the request params -> DoS. (#191)ddd96e9Allow Rack::Locale to match languages with variants (#190)70930e0Add security reporting contact6afd9adDon't bother testing on Ruby 2.2 as it's failing and way EOL.64735acBump minor version.f3a2799Prefer to use version constant for release management.599f768Rack::JSONBodyParser: rescue all parser exceptions (#184)a9cd089Support Rack 3 (#187)b97c5e7Remove another crazy specUpdates
activesupportfrom 6.0.2.1 to 6.1.7.5Release notes
Sourced from activesupport's releases.
... (truncated)
Commits
3a1b615Preparing for 6.1.7.5 releasec2af578bumping version / changelogc85cc66Use a temporary file for storing unencrypted files while editing7d949d7Preparing for 6.1.7.4 releasef09dc7cPreparing for 6.1.7.3 release7167e53Prepare version 6.1.7.33cf23c3Implement SafeBuffer#bytesplice3e0c1a5Version 6.1.7.2c443466Version 6.1.7.1a7cda7eAvoid regex backtracking in Inflector.underscoreUpdates
addressablefrom 2.7.0 to 2.8.0Changelog
Sourced from addressable's changelog.
Commits
6469a23Updating gemspec again2433638Merge branch 'main' of github.com:sporkmonger/addressable into maine9c76b8Merge pull request #378 from ashmaroli/flat-map56c5cf7Update the gemspecc1fed1cRequire a non-vulnerable rake0d8a312Adding note about ReDoS vulnerability89c7613Merge branch 'template-regexp' into maincf8884fNote about alias fixbb03f71Merge pull request #371 from charleystran/add_missing_encode_component_doc_entry6d1d809Adding note about :compacted normalizationUpdates
commonmarkerfrom 0.17.13 to 0.23.11Release notes
Sourced from commonmarker's releases.
... (truncated)
Changelog
Sourced from commonmarker's changelog.
... (truncated)
Commits
5d9976bMerge pull request #320 from jhawthorn/c-api-stable-memory-leaksb0df48cBump version to 0.23.1136b34b9Fix memory leaksdb8cd37Merge pull request #247 from anticomputer/update-to-0.29.0.gfm.13e1e450c💎 release 0.23.1008b7c4bUpdate cmark-upstream to github/cmark-gfm@587a12bb5...d0e81e2I've used this version of the update_submodules script for several releases, ...42cfc90Merge pull request #236 from anticomputer/update-to-0.29.0.gfm.10d793fbfUpdate cmark-upstream to github/cmark-gfm@1e230827a...4e4588fUpdate Makefile for export header consolidationUpdates
kramdownfrom 1.17.0 to 2.4.0Commits
Updates
nokogirifrom 1.10.8 to 1.18.2Release notes
Sourced from nokogiri's releases.
... (truncated)
Changelog
Sourced from nokogiri's changelog.
... (truncated)
Commits
aa54fa5version bump to v1.18.20fb5541backport: fix(css-selector): default XML namespace should not be applied to w...8ef2e91ci: bump windows test images from "head" to "3.4"c10fd7adev: so tired of psych not building on various things8378749fix(css-selector): default XML namespace is not applied to wildcardb112e18prefactor: restructure css-to-xpath tests3b28b49version bump to v1.18.16344147fix: SAX::ParserContext keeps a reference to the input (backport of #3395 to ...1c9b8f1doc: update CHANGELOG.md682a293fix: SAX::ParserContext keeps a reference to the inputUpdates
rackfrom 2.0.8 to 3.1.10Release notes
Sourced from rack's releases.
... (truncated)
Changelog
Sourced from rack's changelog.
... (truncated)
Commits
0349488Bump patch version.4aa1978Escape non-printable characters when logging.e217a39Bump patch version.3383cf2Update changelog.edb0869fix: malformed charset param (#2263) (#2277)09de82fUpdate test versions.890db46Fix permissions for external tests. (#2244)b2aebc7Fix title level.b441049AddFixedsection.0eabeb7Bump patch version.Updates
tzinfofrom 1.2.5 to 2.0.6Release notes
Sourced from tzinfo's releases.
... (truncated)
Changelog
Sourced from tzinfo's changelog.
... (truncated)
Commits
d5893c9Fix formatting.5561942Preparing v2.0.6.ec27c09Add v1.2.11 from the 1.2 branch.d77da3fUpdate copyright years.eac33dfEliminate Object#untaint deprecation warnings on JRuby 9.4.0.0.19f984cAdd Ruby 3.2 and JRuby 9.4.e9fe818Update the dependency on actions/checkout.f76bc7fFix include issues with tests on Ruby 3.2.8a781cfRevert "Workaround for 'Permission denied - NUL' errors with JRuby on Windows."d9b289ePreparing v2.0.5.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.