🚨 [security] Update dotenv-rails 3.1.7 → 3.1.8 (patch) #1441
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
🚨 Your current dependencies have known security vulnerabilities 🚨
This dependency update fixes known security vulnerabilities. Please see the details below and assess their impact carefully. We recommend to merge and deploy this as soon as possible!
Here is everything you need to know about this update. Please take a good look at what changed and the test results before merging this pull request.
What changed?
✳️ dotenv-rails (3.1.7 → 3.1.8) · Repo · Changelog
Release Notes
3.1.8
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 12 commits:
Prepare for v3.1.8 releaseFix lint errorMerge branch 'Roupiye/main'Add specs for loading a directoryThanks to @kmatthews812 for sponsoring dotenvMerge pull request #524 from mark-young-atg/add_changelog_link_to_gemspecMerge pull request #529 from webrails/readme-f-configuration-filesFix lint errorAdd funding.ymlClarify order of configuration files for flag -ffix crash when .env is a folderProvide a 'Changelog' link on rubygems.org/gems/dotenv-rails✳️ nokogiri (1.18.3 → 1.18.7) · Repo · Changelog
Security Advisories 🚨
🚨 Nokogiri updates packaged libxslt to v1.1.43 to resolve multiple CVEs
Release Notes
1.18.7
1.18.6
1.18.5
1.18.4
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 16 commits:
version bump to v1.18.7dep: bump libxml2 to 2.13.7 (v1.18.x backport) (#3495)dep: bump libxml2 to 2.13.7dep(dev): drop Rubocop from JRuby depsversion bump to v1.18.6fix(jruby): Node#attribute in HTML documents (v1.18.x) (#3492)fix(jruby): Node#attribute in HTML documentsversion bump to v1.18.5Fix MRI Ruby vs. JRuby XML child namespace output differences (backport v1.18x) (#3476)doc: update CHANGELOGFix MRI Ruby vs. JRuby XML child namespace output differences (#3456)version bump to v1.18.4dep: update libxslt to 1.1.43 (v1.18.x branch) (#3467)dep: update libxslt to 1.1.43ci: tired of waiting for gnome mirrorsdoc: update CHANGELOG with GHSARelease Notes
3.1.8
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 12 commits:
Prepare for v3.1.8 releaseFix lint errorMerge branch 'Roupiye/main'Add specs for loading a directoryThanks to @kmatthews812 for sponsoring dotenvMerge pull request #524 from mark-young-atg/add_changelog_link_to_gemspecMerge pull request #529 from webrails/readme-f-configuration-filesFix lint errorAdd funding.ymlClarify order of configuration files for flag -ffix crash when .env is a folderProvide a 'Changelog' link on rubygems.org/gems/dotenv-railsRelease Notes
1.15.2
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 13 commits:
Bump version to 1.15.2 (#1088)Disable truffle-ruby scheduled job on forks (#1087)Document `USE_PAGER` config (#1086)add context.ap_name test (#1052)Disable schedule jobs for forks (#1084)Document the keys for completion (#1082)Ignore to contain directory to Gem::Specification#filesZero winsize bugfix (#1073)bundled gems migration (#1078)Fallback to Reline when `require 'readline'` fails (#1076)Suppress irb_info measures ambiguous_width in command test (#1074)Remove ruby-core workflow (#1075)Use EnvUtil.rubybin instead of "ruby" in copy command test (#1071)Sorry, we couldn't find anything useful about this release.
Release Notes
6.13.1
6.13.0
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 48 commits:
Bump version to v6.13.1 (#1334)Allow customizing path prefix through options (#1330)Remove needless RDoc::Options from XrefTestCase (#1332)Bump ruby/setup-ruby from 1.222.0 to 1.227.0 (#1329)Workaround `build` task issue in Ruby core CI (#1326)Bump version to v6.13.0 (#1324)Refactor markdown parsing of Image and ExplicitLink (#1323)Image alt tag header formatting (#1320)Call` update_extend`s in `ClassModule#complete` (#1317)Remove dead or unnecessary methods/attributes (#1315)Fix test target code of module_function (#1316)Merge pull request #1314 from ruby/fix-code-object-structure-documentFix CodeObject's inheritance tree documentReduce unnecessary external state assignment (`singleton`) (#1312)Make `Options` a required constructor argument of `Store` (#1309)Merge pull request #1311 from ruby/dependabot/github_actions/ruby/setup-ruby-1.222.0Bump ruby/setup-ruby from 1.221.0 to 1.222.0Disable linear perf test on JRuby temporarilyAvoid accessing `RDoc` objects through `Store` (#1308)Remove an unused constantTests for markdown code using multiple backquotesMerge pull request #1299 from nobu/paragraph-excerptShorten the description text to get rid of JRuby exceptionMake retry condition more defensive not to loop infinitelyRelax paragraph patternPrefer `tr` over `gsub` to translate single lettersExtract repeated regexp as a constantMerge pull request #1305 from headius/reenable_jrubyOmit JRuby on WindowsReenable JRuby for testingRemove unused `class_dir` and `file_dir` attributes from generators (#1304)Centralize generator setup (#1302)Remove unused darkfish parts (#1303)Add webrick to development dependencies (#1301)Suppress assigned but unused variable warningExplicitly require helper in test_case (#1297)Refactor darkfish's classes sidebar implementation (#1296)Remove unused attributes (#1292)Removed development group for cloudflare pagesBump ruby/setup-ruby from 1.218.0 to 1.221.0 (#1294)Bump step-security/harden-runner from 2.10.4 to 2.11.0 (#1293)Merge pull request #973 from unasuke/breadcrumbDisplay breadcrumb only nested two or more levelsMerge pull request #1082 from tompng/reline_readline_completion_fixMerge pull request #1289 from ruby/refactor-call-seq-extractionMerge pull request #1290 from ruby/dependabot/github_actions/ruby/setup-ruby-1.218.0Bump ruby/setup-ruby from 1.215.0 to 1.218.0Remove indirection from RDoc's call_seq extractionRelease Notes
0.6.1
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 23 commits:
Bump version to 0.6.1 (#823)Basic setup for Reline's official documentation website (#820)Add gem fiddle to Gemfile (Only used in windows) (#818)Fix typo (#817)Use Relin::ANSI's buffer instead of calling STDIN.ungetc (#815)Merge pull request #813 from ruby/fixup-rbinstallReject directory from Gem::Specification#filesRefactor undo redo (#809)Remove unused constant CAPNAME_KEY_BINDINGS (#808)Remove ruby-core workflow (#812)Add gem readline to Gemfile (#810)Migration for bundled gems (#811)Fix CI for Ruby 2.7 (#807)Fix typo: marco -> macro (#806)Update to Unicode 16.0.0 (#803)Enter newline if cursor position is middle of input (#802)Refactor utf-8 strings and invalid strings in test code (#800)Fix bracketed paste and scrolling bug (#801)Refactor handling key in LineEditor (#799)Support inserting C-c C-z C-\ with quoted_insert (#798)Merge pull request #797 from sorah/test_tty_ambiguous_width-rubybintest_tty_ambiguous_width: Use Reline.test_rubybinFix typos in comment (#796)Release Notes
3.1.6
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 10 commits:
Add 3.1.6 entryUse proper type for checkEncodingAlso setup Java 21 for Windows jruby-head buildFix null StringIO modifiable checkSet up Java 21 for jruby-head buildsRe-get the string encoding after conversionDon't re-raise as RuntimeExceptionFix SEGV at unget to a null device StringIOSuppress a warning for the chilled stringDevelopment of 3.1.6 started.Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with
@depfu rebase.All Depfu comment commands