Bumps the bundler group with 3 updates: activesupport, nokogiri and rexml.
Updates activesupport from 7.0.4.3 to 7.1.3.3
Release notes
Sourced from activesupport's releases.
7.1.3.3
Active Support
Active Model
Active Record
Action View
Action Pack
Active Job
Action Mailer
Action Cable
... (truncated)
Changelog
Sourced from activesupport's changelog.
Rails 7.1.3.3 (May 16, 2024)
Rails 7.1.3.2 (February 21, 2024)
Rails 7.1.3.1 (February 21, 2024)
Rails 7.1.3 (January 16, 2024)
-
Handle nil backtrace_locations in ActiveSupport::SyntaxErrorProxy.
Eugene Kenny
-
Fix ActiveSupport::JSON.encode to prevent duplicate keys.
If the same key exist in both String and Symbol form it could
lead to the same key being emitted twice.
Manish Sharma
-
Fix ActiveSupport::Cache::Store#read_multi when using a cache namespace
and local cache strategy.
Mark Oleson
-
Fix Time.now/DateTime.now/Date.today to return results in a system timezone after #travel_to.
There is a bug in the current implementation of #travel_to:
it remembers a timezone of its argument, and all stubbed methods start
returning results in that remembered timezone. However, the expected
behaviour is to return results in a system timezone.
Aleksei Chernenkov
-
Fix :unless_exist option for MemoryStore#write (et al) when using a
cache namespace.
S. Brent Faulkner
-
Fix ActiveSupport::Deprecation to handle blaming generated code.
Jean Boussier, fatkodima
... (truncated)
Commits
Updates nokogiri from 1.14.3 to 1.15.6
Release notes
Sourced from nokogiri's releases.
1.15.6 / 2024年03月16日
Note
This security release is a backport to the unsupported v1.15.x branch. Current stable is v1.16.x, which addressed the referenced CVE in v1.16.2 on 2024年02月04日.
Security
Dependencies
sha256 checksums:
d79f713dffff149d60ab272d206a3ca96db2b891ab6a9f65362bfb78aface37a gems/nokogiri-1.15.6-aarch64-linux.gem
62b5b7b387ec6c61c1ea5f889b7bc579eedd37f265f7cc1dc392484938549f1a gems/nokogiri-1.15.6-arm-linux.gem
ba93c63f5c03047778abf16c80676fe67e7eb7d871ab0aaa7e2c2dfe4ec20027 gems/nokogiri-1.15.6-arm64-darwin.gem
d24639a546ba58c86d18da1ed124eaecbd45c5ae4c4dec41751b730a2b732ac3 gems/nokogiri-1.15.6-java.gem
e36887d89ec1b080e4a01dd2ff52650003db01d2a5edf5e6ab19e4c0bdb1385f gems/nokogiri-1.15.6-x64-mingw-ucrt.gem
852c59a398499c8fcb6478d76396dcd50afa8f8902563b76265cd7dc90a731a1 gems/nokogiri-1.15.6-x64-mingw32.gem
19e0a5fbfa4393353fbcf6801f8f62350b6e16f43c907680c5884896858a23a2 gems/nokogiri-1.15.6-x86-linux.gem
9d464bbbaad6721a5a73181165fda67573f64ef2803c3337f6f733603e9d309a gems/nokogiri-1.15.6-x86-mingw32.gem
32d045cdb0ce097e4543a5e7a79efd13ff05d904e32f4328732149dbea3c7f15 gems/nokogiri-1.15.6-x86_64-darwin.gem
26a79da0377100d6938ae2f1b115230a8a4a4595e35b89164d8495af32091186 gems/nokogiri-1.15.6-x86_64-linux.gem
70ce799b4b3e23b358501f1da3914f70b1c7a113fb12e96a7d53558481146e08 gems/nokogiri-1.15.6.gem
1.15.5 / 2023年11月17日
Dependencies
sha256 checksums:
6dfa1d9837ddb233e234d56e244560ab1bc545d3d1744478060e18691f44ded7 nokogiri-1.15.5-aarch64-linux.gem
e3ac6608c6e1714bc11ff04e29a43fedf4cac2aea1bd88256cc3b927c06f347f nokogiri-1.15.5-arm-linux.gem
4d7b15d53c0397d131376a19875aa97dd1c8b404c2c03bd2171f9b77e9592d40 nokogiri-1.15.5-arm64-darwin.gem
5f87e71aaeb4f7479b94698737a0aacea77836b4805c7433b655e9565bd56cfe nokogiri-1.15.5-java.gem
7612be800909ae51e0a7cfbe1f768757857a9ff0339686814ca67d9bae271ca2 nokogiri-1.15.5-x64-mingw-ucrt.gem
</tr></table>
... (truncated)
Changelog
Sourced from nokogiri's changelog.
1.15.6 / 2024年03月16日
Security
Dependencies
1.15.5 / 2023年11月17日
Dependencies
1.15.4 / 2023年08月11日
Dependencies
Fixed
- Fixed a typo in a HTML5 parser error message. #2927 (
@anishathalye)
- [CRuby]
ObjectSpace.memsize_of is now safe to call on Documents with complex DTDs. In previous versions, this debugging method could result in a segfault. [#2923, #2924]
1.15.3 / 2023年07月05日
Fixed
- Passing an object that is not a kind of
XML::Node as the first parameter to CDATA.new now raises a TypeError. Previously this would result in either a segfault (CRuby) or a Java exception (JRuby). #2920
- Passing an object that is not a kind of
XML::Node as the first parameter to Schema.from_document now raises a TypeError. Previously this would result in either a segfault (CRuby) or a Java exception (JRuby). #2920
- [CRuby] Passing an object that is not a kind of
XML::Node as the second parameter to Text.new now raises a TypeError. Previously this would result in a segfault. #2920
- [CRuby] Replacing a node's children via methods like
Node#inner_html=, #children=, and #replace no longer defensively dups the node's next sibling if it is a Text node. This behavior was originally adopted to work around libxml2's memory management (see #283 and #595) but should not have included operations involving xmlAddChild(). #2916
- [JRuby] Fixed NPE when serializing an unparented HTML node. [#2559, #2895] (
@cbasguti)
1.15.2 / 2023年05月24日
Dependencies
- [JRuby] Vendored org.nokogiri:nekodtd is updated to v0.1.11.noko2. This is functionally equivalent to v0.1.11.noko1 but restores support for Java 8.
... (truncated)
Commits
7ab6310 version bump to v1.15.6f8156b4 dep: update libxml to 2.11.7 (branch 1.15.x) (#3154)9827619 ci: pin to a version of bundler that works across supported rubies83a2571 dep: bump libxml to v2.11.75745d4b version bump to v1.15.5da2d908 ci: add ruby version to vendored libs cache key (backport) (#3029)0f56450 ci: add ruby version to vendored libs cache key (#3028)32b2c35 dep: update libxml to 2.11.5 and libxslt to 1.1.39 (v1.15.x) (#3025)b8f7e16 ci: skip the BSD builds for nowaa3208b dep: update libxml to 2.11.5 and libxslt to 1.1.39- Additional commits viewable in compare view
Updates rexml from 3.2.5 to 3.2.8
Release notes
Sourced from rexml's releases.
REXML 3.2.8 - 2024年05月16日
Fixes
REXML 3.2.7 - 2024年05月16日
Improvements
Fixes
-
XPath: Fixed a bug of normalize_space(array).
-
XPath: Fixed a bug that wrong position is used with nested path.
-
Fixed a bug that an exception message can't be generated for
invalid encoding XML.
... (truncated)
Changelog
Sourced from rexml's changelog.
3.2.8 - 2024年05月16日 {#version-3-2-8}
Fixes
3.2.7 - 2024年05月16日 {#version-3-2-7}
Improvements
Fixes
-
XPath: Fixed a bug of normalize_space(array).
-
XPath: Fixed a bug that wrong position is used with nested path.
-
Fixed a bug that an exception message can't be generated for
... (truncated)
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR@dependabot recreate will recreate this PR, overwriting any edits that have been made to it@dependabot merge will merge this PR after your CI passes on it@dependabot squash and merge will squash and merge this PR after your CI passes on it@dependabot cancel merge will cancel a previously requested merge and block automerging@dependabot reopen will reopen this PR if it is closed@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.
Bumps the bundler group with 3 updates: activesupport, nokogiri and rexml.
Updates
activesupportfrom 7.0.4.3 to 7.1.3.3Release notes
Sourced from activesupport's releases.
... (truncated)
Changelog
Sourced from activesupport's changelog.
... (truncated)
Commits
747a03bPreparing for 7.1.3.3 release6f0d1adPreparing for 7.1.3.2 releasec25f0fcRespect raise_on_missing_ in controllerd73ed95Preparing for 7.1.3.1 release43037d8update changelog36c1591Preparing for 7.1.3 releasea84622fSync changelog894f933Merge pull request #50764 from eugeneius/syntax_error_proxy_nil_backtrace_loc...b02f6c9Merge pull request #48957 from cmaruz/4832681c8023Sync changelogUpdates
nokogirifrom 1.14.3 to 1.15.6Release notes
Sourced from nokogiri's releases.
... (truncated)
Changelog
Sourced from nokogiri's changelog.
... (truncated)
Commits
7ab6310version bump to v1.15.6f8156b4dep: update libxml to 2.11.7 (branch 1.15.x) (#3154)9827619ci: pin to a version of bundler that works across supported rubies83a2571dep: bump libxml to v2.11.75745d4bversion bump to v1.15.5da2d908ci: add ruby version to vendored libs cache key (backport) (#3029)0f56450ci: add ruby version to vendored libs cache key (#3028)32b2c35dep: update libxml to 2.11.5 and libxslt to 1.1.39 (v1.15.x) (#3025)b8f7e16ci: skip the BSD builds for nowaa3208bdep: update libxml to 2.11.5 and libxslt to 1.1.39Updates
rexmlfrom 3.2.5 to 3.2.8Release notes
Sourced from rexml's releases.
... (truncated)
Changelog
Sourced from rexml's changelog.
... (truncated)
Commits
1cf37baAdd 3.2.8 entryb67081cRemove an unused variable (#128)94e180eSuppress a warningd574ba5ci: install only gems required for running tests (#129)4670f8fAdd missing Thanks section9ba35f9Bump version085def0Add 3.2.7 entry4325835Read quoted attributes in chunks (#126)e77365eExclude older than 2.6 on macos-14bf2c8edMove development dependencies to Gemfile (#124)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.