Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 11, 2022

Bumps @rails/ujs from 6.1.3 to 6.1.5.

Release notes

Sourced from @​rails/ujs's releases.

6.1.5

Active Support

  • Fix ActiveSupport::Duration.build to support negative values.

    The algorithm to collect the parts of the ActiveSupport::Duration ignored the sign of the value and accumulated incorrect part values. This impacted ActiveSupport::Duration#sum (which is dependent on parts) but not ActiveSupport::Duration#eql? (which is dependent on value).

    Caleb Buxton, Braden Staudacher

  • Time#change and methods that call it (eg. Time#advance) will now return a Time with the timezone argument provided, if the caller was initialized with a timezone argument.

    Fixes #42467.

    Alex Ghiculescu

  • Clone to keep extended Logger methods for tagged logger.

    Orhan Toy

  • assert_changes works on including ActiveSupport::Assertions module.

    Pedro Medeiros

Active Model

  • Clear secure password cache if password is set to nil

    Before:

    user.password = 'something' user.password = nil

    user.password # => 'something'

    Now:

    user.password = 'something' user.password = nil

    user.password # => nil

    Markus Doits

... (truncated)

Commits
  • 5341053 Preparing for 6.1.5 release
  • c67e8d8 Merge pull request #44641 from SkipKayhil/fix-rubocop-errors
  • 1afe117 Update CHANGELOG [ci skip]
  • 87528db Revert "Merge pull request #43209 from mpestov/check-basic-auth-credentials"
  • b10c0ff Merge branch '6-1-sec' into 6-1-stable
  • 6607333 Preparing for 6.1.4.7 release
  • 1f66424 bumping version
  • b0b5eaf Added image trasnformation validation via configurable allow-list
  • 13cdd7a Fix typo in net-smtp error check
  • a12ba30 Merge pull request #44600 from rails/rm-handle-mail-in-3.1
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@rails/ujs](https://github.com/rails/rails) from 6.1.3 to 6.1.5.
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](rails/rails@v6.1.3...v6.1.5)

---
updated-dependencies:
- dependency-name: "@rails/ujs"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 11, 2022
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github May 10, 2022

Superseded by #157.

@dependabot dependabot bot closed this May 10, 2022
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/rails/ujs-6.1.5 branch May 10, 2022 11:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant