Bump nokogiri from 1.13.9 to 1.13.10

[dependabot]

Bumps nokogiri from 1.13.9 to 1.13.10.

Release notes

Sourced from nokogiri's releases.

1.13.10 / 2022-12-07

Security

• [CRuby] Address CVE-2022-23476, unchecked return value from xmlTextReaderExpand. See GHSA-qv4q-mr5r-qprj for more information.

Improvements

• [CRuby] XML::Reader#attribute_hash now returns nil on parse errors. This restores the behavior of #attributes from v1.13.7 and earlier. [#2715]

---

sha256 checksums:

777ce2e80f64772e91459b943e531dfef387e768f2255f9bc7a1655f254bbaa1  nokogiri-1.13.10-aarch64-linux.gem
b432ff47c51386e07f7e275374fe031c1349e37eaef2216759063bc5fa5624aa  nokogiri-1.13.10-arm64-darwin.gem
73ac581ddcb680a912e92da928ffdbac7b36afd3368418f2cee861b96e8c830b  nokogiri-1.13.10-java.gem
916aa17e624611dddbf2976ecce1b4a80633c6378f8465cff0efab022ebc2900  nokogiri-1.13.10-x64-mingw-ucrt.gem
0f85a1ad8c2b02c166a6637237133505b71a05f1bb41b91447005449769bced0  nokogiri-1.13.10-x64-mingw32.gem
91fa3a8724a1ce20fccbd718dafd9acbde099258183ac486992a61b00bb17020  nokogiri-1.13.10-x86-linux.gem
d6663f5900ccd8f72d43660d7f082565b7ffcaade0b9a59a74b3ef8791034168  nokogiri-1.13.10-x86-mingw32.gem
81755fc4b8130ef9678c76a2e5af3db7a0a6664b3cba7d9fe8ef75e7d979e91b  nokogiri-1.13.10-x86_64-darwin.gem
51d5246705dedad0a09b374d09cc193e7383a5dd32136a690a3cd56e95adf0a3  nokogiri-1.13.10-x86_64-linux.gem
d3ee00f26c151763da1691c7fc6871ddd03e532f74f85101f5acedc2d099e958  nokogiri-1.13.10.gem

Changelog

Sourced from nokogiri's changelog.

1.13.10 / 2022-12-07

Security

• [CRuby] Address CVE-2022-23476, unchecked return value from xmlTextReaderExpand. See GHSA-qv4q-mr5r-qprj for more information.

Improvements

• [CRuby] XML::Reader#attribute_hash now returns nil on parse errors. This restores the behavior of #attributes from v1.13.7 and earlier. [#2715]

Commits

• 4c80121 version bump to v1.13.10
• 85410e3 Merge pull request #2715 from sparklemotion/flavorjones-fix-reader-error-hand...
• 9fe0761 fix(cruby): XML::Reader#attribute_hash returns nil on error
• 3b9c736 Merge pull request #2717 from sparklemotion/flavorjones-lock-psych-to-fix-bui...
• 2efa87b test: skip large cdata test on system libxml2
• 3187d67 dep(dev): pin psych to v4 until v5 builds in CI
• a16b4bf style(rubocop): disable Minitest/EmptyLineBeforeAssertionMethods
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

[0crat]

There is an unrecoverable failure on my side. Please, submit it here:

PID: 4@a182510c-deb0-445a-943b-773da3334dd7, thread: PQ-CT4L4490E
com.jcabi.xml.StrictXML[124] java.lang.IllegalArgumentException: 2 error(s) in XML document: -1:-1: cvc-pattern-valid: Value 'dependabot[bot]' is not facet-valid with respect to pattern '[a-z0-9\-]{3,}' for type 'login'.;-1:-1: cvc-type.3.1.3: The value 'dependabot[bot]' of element 'login' is not valid.

1.0-SNAPSHOT: CID: 8b8407cc-8438-47fd-ae7f-0639e5a8a209, Type: "Job was added to WBS"

[0crat]

@yegor256/z everybody who has role REV is banned at #183; I won't be able to assign anyone automatically; consider assigning someone manually (as in §19), or invite more people (as in §51), or remove the job from the scope (as in §14)

[0crat]

@yegor256/z everybody who has role REV is banned at #183; I won't be able to assign anyone automatically; consider assigning someone manually (as in §19), or invite more people (as in §51), or remove the job from the scope (as in §14)

[yegor256]

@rultor please, try to merge

[rultor]

@rultor please, try to merge

@yegor256 OK, I'll try to merge now. You can check the progress of the merge here

[rultor]

@rultor please, try to merge

@dependabot[bot] @yegor256 Oops, I failed. You can see the full log here (spent 27min)

D: SELECT login FROM author WHERE id=$1: 0ms / 5400
D: SELECT login FROM author WHERE id=$1: 0ms / 5420
D: SELECT id FROM project WHERE platform=$1 AND coordinates=$2: 0ms / 5360
D: INSERT INTO project (platform, coordinates, author) VALUES ($1, $2, $3) RETURNING id: 1ms / 5380
D: SELECT login FROM author WHERE id=$1: 0ms / 5400
D: SELECT COUNT(*) FROM badge WHERE project=$1 AND text=$2: 0ms / 5420
D: SELECT login FROM author WHERE id=$1: 0ms / 5360
D: SELECT * FROM badge WHERE project=$1: 0ms / 5380
D: DELETE FROM badge WHERE project=$1 AND text SIMILAR TO '(newbie|L[123])': 0ms / 5400
D: INSERT INTO badge (project, author, text) VALUES ($1, $2, $3) ON CONFLICT (project, text) DO UPDATE SET text = $2 RETURNING id: 1ms / 5400
D: DELETE FROM seen WHERE project=$1 AND author=$2: 0ms / 5420
D: SELECT login FROM author WHERE id=$1: 0ms / 5360
D: INSERT INTO author (login) VALUES ($1) ON CONFLICT DO NOTHING: 1ms / 5380
D: SELECT id FROM author WHERE login=$1: 0ms / 5400
D: SELECT login FROM author WHERE id=$1: 0ms / 5420
D: SELECT login FROM author WHERE id=$1: 0ms / 5360
D: SELECT deleter FROM project WHERE id=$1: 0ms / 5380
D: SELECT COUNT(*) FROM review WHERE project=$1 AND hash=$2: 0ms / 5400
D: INSERT INTO review (project, author, text, hash) VALUES ($1, $2, $3, $4) RETURNING id: 1ms / 5420
D: DELETE FROM seen WHERE project=$1 AND author=$2: 0ms / 5360
D: SELECT login FROM author WHERE id=$1: 0ms / 5380
D: SELECT author FROM review WHERE id=$1: 0ms / 5400
D: SELECT login FROM author WHERE id=$1: 0ms / 5420
D: UPDATE review SET deleter=$1 WHERE id=$2: 1ms / 5360
D: DELETE FROM seen WHERE project=$1 AND author=$2: 0ms / 5380
D: SELECT r.*, author.login AS author_login, author.id AS author_id, deleter.id AS deleter_id, deleter.login AS deleter_login, (SELECT COUNT(*) FROM vote AS v WHERE v.review=r.id AND positive=true) AS up, (SELECT COUNT(*) FROM vote AS v WHERE v.review=r.id AND positive=false) AS down FROM review AS r JOIN author ON author.id=r.author LEFT JOIN author AS deleter ON deleter.id=r.deleter WHERE project=$1  AND r.deleter IS NULL ORDER BY r.created DESC LIMIT $2 OFFSET $3: 1ms / 5400
  test_deletes_someones_review                                   \u001b[32m PASS\u001b[0m (0.01s)
D: INSERT INTO author (login) VALUES ($1) ON CONFLICT DO NOTHING: 1ms / 5420
D: SELECT id FROM author WHERE login=$1: 0ms / 5360
D: SELECT login FROM author WHERE id=$1: 0ms / 5380
D: SELECT login FROM author WHERE id=$1: 0ms / 5400
D: SELECT id FROM project WHERE platform=$1 AND coordinates=$2: 0ms / 5420
D: SELECT login FROM author WHERE id=$1: 0ms / 5360
D: SELECT login FROM author WHERE id=$1: 0ms / 5380
D: SELECT deleter FROM project WHERE id=$1: 0ms / 5400
D: SELECT deleter FROM project WHERE id=$1: 0ms / 5420
D: SELECT login FROM author WHERE id=$1: 0ms / 5360
  test_deletes_own_review                                        \u001b[31mERROR\u001b[0m (0.00s)
Minitest::UnexpectedError:         Xia::Urror: The project is already deleted by @-test-, can't review
            /home/r/repo/objects/reviews.rb:64:in `post'
            /home/r/repo/objects/sieve.rb:47:in `method_missing'
            /home/r/repo/test/test_review.rb:45:in `test_deletes_own_review'


Finished in 2.49006s
44 tests, 178 assertions, \u001b[31m0 failures, 2 errors, \u001b[0m\u001b[33m0 skips\u001b[0m
Coverage report generated for Unit Tests to /home/r/repo/coverage. 699 / 773 LOC (90.43%) covered.
rake aborted!
Command failed with status (1): [ruby -I"lib:lib:test" -I"/usr/local/rvm/gems/ruby-2.7.0/gems/rake-12.3.3/lib" "/usr/local/rvm/gems/ruby-2.7.0/gems/rake-12.3.3/lib/rake/rake_test_loader.rb" "test/test__helper.rb" "test/test_author.rb" "test/test_authors.rb" "test/test_badges.rb" "test/test_bots.rb" "test/test_codexia.rb" "test/test_karma.rb" "test/test_meta.rb" "test/test_project.rb" "test/test_projects.rb" "test/test_rank.rb" "test/test_review.rb" "test/test_reviews.rb" "test/test_sieve.rb" "test/test_withdrawals.rb" ]
/usr/local/rvm/gems/ruby-2.7.0/gems/rake-12.3.3/exe/rake:27:in `<top (required)>'
/usr/local/rvm/gems/ruby-2.7.0/bin/ruby_executable_hooks:24:in `eval'
/usr/local/rvm/gems/ruby-2.7.0/bin/ruby_executable_hooks:24:in `<main>'
Tasks: TOP => default => test
(See full trace by running task with --trace)
2022-12-13 17:14:58.909 UTC [10729] LOG:  received smart shutdown request
PostgreSQL killed in PID 10729
2022-12-13 17:14:58.916 UTC [10729] LOG:  background worker "logical replication launcher" (PID 10736) exited with exit code 1
2022-12-13 17:14:58.917 UTC [10731] LOG:  shutting down
container cb52f91773da52e1f79742e7e240809964a35f36544d417b9495926e8bac82b0 is dead
Tue 13 Dec 2022 06:37:42 PM CET

[0crat]

@yegor256/z everybody who has role REV is banned at #183; I won't be able to assign anyone automatically; consider assigning someone manually (as in §19), or invite more people (as in §51), or remove the job from the scope (as in §14)

[0crat]

@yegor256/z everybody who has role REV is banned at #183; I won't be able to assign anyone automatically; consider assigning someone manually (as in §19), or invite more people (as in §51), or remove the job from the scope (as in §14)

[0crat]

@yegor256/z everybody who has role REV is banned at #183; I won't be able to assign anyone automatically; consider assigning someone manually (as in §19), or invite more people (as in §51), or remove the job from the scope (as in §14)

[0crat]

@yegor256/z everybody who has role REV is banned at #183; I won't be able to assign anyone automatically; consider assigning someone manually (as in §19), or invite more people (as in §51), or remove the job from the scope (as in §14)

[0crat]

@yegor256/z everybody who has role REV is banned at #183; I won't be able to assign anyone automatically; consider assigning someone manually (as in §19), or invite more people (as in §51), or remove the job from the scope (as in §14)

[0crat]

@yegor256/z everybody who has role REV is banned at #183; I won't be able to assign anyone automatically; consider assigning someone manually (as in §19), or invite more people (as in §51), or remove the job from the scope (as in §14)