Bump actionpack, rails, feedzirra, activerecord, activeresource, activesupport, rack, actionmailer, rake, builder, loofah, sax-machine and nokogiri by dependabot[bot] · Pull Request #14 · bloopletech/camping_apps

dependabot · 2022-10-28T19:21:58Z

Bumps actionpack, rails, feedzirra, activerecord, activeresource, activesupport, rack, actionmailer, rake, builder, loofah, sax-machine and nokogiri. These dependencies needed to be updated together.
Updates actionpack from 2.3.8 to 7.0.4

Release notes

Sourced from actionpack's releases.

v7.0.4

Active Support

Redis cache store is now compatible with redis-rb 5.0.

Jean Boussier

Fix NoMethodError on custom ActiveSupport::Deprecation behavior.

ActiveSupport::Deprecation.behavior= was supposed to accept any object that responds to call, but in fact its internal implementation assumed that this object could respond to arity, so it was restricted to only Proc objects.

This change removes this arity restriction of custom behaviors.

Ryo Nakamura

Active Model
Handle name clashes in attribute methods code generation cache.

When two distinct attribute methods would generate similar names, the first implementation would be incorrectly re-used.
class A
  attribute_method_suffix "_changed?"
  define_attribute_methods :x
end
class B
attribute_method_suffix "?"
define_attribute_methods :x_changed
end
Jean Boussier
Active Record

Symbol is allowed by default for YAML columns

Étienne Barrié

Fix ActiveRecord::Store to serialize as a regular Hash

... (truncated)

Changelog

Sourced from actionpack's changelog.

Rails 7.0.4 (September 09, 2022)

Prevent ActionDispatch::ServerTiming from overwriting existing values in Server-Timing.

Previously, if another middleware down the chain set Server-Timing header, it would overwritten by ActionDispatch::ServerTiming.

Jakub Malinowski

Rails 7.0.3.1 (July 12, 2022)

No changes.

Rails 7.0.3 (May 09, 2022)
Allow relative redirects when raise_on_open_redirects is enabled.

Tom Hughes
Fix authenticate_with_http_basic to allow for missing password.

Before Rails 7.0 it was possible to handle basic authentication with only a username.
authenticate_with_http_basic do |token, _|
  ApiClient.authenticate(token)
end
This ability is restored.

Jean Boussier
Fix content_security_policy returning invalid directives.

Directives such as self, unsafe-eval and few others were not single quoted when the directive was the result of calling a lambda returning an array.
content_security_policy do |policy|
  policy.frame_ancestors lambda { [:self, "https://example.com"] }
end
With this fix the policy generated from above will now be valid.

Edouard Chin

... (truncated)

Commits

8015c2c Version 7.0.4
f3c345e Merge pull request #45964 from jhawthorn/server_timing_safety
4d25c64 Merge pull request #45221 from jhawthorn/ac_params_eql_fix
47cff40 Format inline code [ci-skip]
c5a407d Linkify code references [ci-skip]
e874cf5 Fix typos [ci-skip]
290e684 Merge pull request #45615 from jtmalinowski/fix-server-timing-overwrites
3fc03ac Remove unsupported :same_site option value [ci-skip]
a730810 Merge branch '7-0-sec' into 7-0-stable
04972d9 Preparing for 7.0.3.1 release
Additional commits viewable in compare view

Updates rails from 2.3.8 to 7.0.4

Release notes

Sourced from rails's releases.

v7.0.4

Active Support

Redis cache store is now compatible with redis-rb 5.0.

Jean Boussier

Fix NoMethodError on custom ActiveSupport::Deprecation behavior.

ActiveSupport::Deprecation.behavior= was supposed to accept any object that responds to call, but in fact its internal implementation assumed that this object could respond to arity, so it was restricted to only Proc objects.

This change removes this arity restriction of custom behaviors.

Ryo Nakamura

Active Model
Handle name clashes in attribute methods code generation cache.

When two distinct attribute methods would generate similar names, the first implementation would be incorrectly re-used.
class A
  attribute_method_suffix "_changed?"
  define_attribute_methods :x
end
class B
attribute_method_suffix "?"
define_attribute_methods :x_changed
end
Jean Boussier
Active Record

Symbol is allowed by default for YAML columns

Étienne Barrié

Fix ActiveRecord::Store to serialize as a regular Hash

... (truncated)

Commits

8015c2c Version 7.0.4
f3c345e Merge pull request #45964 from jhawthorn/server_timing_safety
ff27758 Revert "Merge pull request #44695 from Edouard-chin/ec-tagger-logger-broadcast"
4d25c64 Merge pull request #45221 from jhawthorn/ac_params_eql_fix
8525e57 Merge pull request #45102 from feliperaul/fix_activestorage_proxy_downloads_f...
b45f5f2 Merge pull request #45907 from eitoball/fix-typo-in-guide-configureing
fae93e0 Merge pull request #45928 from Shopify/rails-error-doc
670ad8d Merge pull request #45891 from Cofense/active-record-validations-guide-intern...
1a81cf1 Merge pull request #45900 from yahonda/lock_que_version
76df62d Merge pull request #45903 from skipkayhil/backport-45851
Additional commits viewable in compare view

Updates feedzirra from 0.0.24 to 0.8.0

Changelog

Sourced from feedzirra's changelog.

Feedjira Changelog

3.2.1

Fix time handling in ruby 3.1

Atom feeds now have an icon field via feedjira/feedjira#452 (@jswanner)

3.2.0

Atom feed_url no longer falls back to url via feedjira/feedjira#451 (@frederfred)

Atom feeds now have an icon field via feedjira/feedjira#452 (@jswanner)

3.1.2

Enhancements

Alias managingEditor as managing_editor #443[] ([@DominikAlberski][])

Add support for the a10 namespace used in RSS 2.0 feeds generated by .NET applications. Currently a10:link, a10:updated, a10:content and a10:name are supported. #440[] ([@knu][])

#440: feedjira/feedjira#440 #443: feedjira/feedjira#443

3.1.1

Enhancements

Fix warnings in Ruby 2.7 #434[] ([@sferik][])

General

Test on Ruby 2.5, 2.6 and 2.7 #435[] ([@HParker][])

#434: feedjira/feedjira#434 #435: feedjira/feedjira#435

3.1.0

Breaking Changes

title of Atom entry classes always return a plain text even in case the entry has a title of the HTML or XML type. #423[] ([@knu][])

Enhancements

raw_title and title_type are added to Atom entry classes. #423[] ([@knu][])

AtomGoogleAlerts is now a supported parser #424[] ([@knu][])

#423: feedjira/feedjira#423 #424: feedjira/feedjira#424

3.0.0

Breaking Changes

Feedjira::Feed.parse has moved to Feedjira.parse

... (truncated)

Commits

5ca1a2c Deprecate Feedzirra, use Feedjira instead
18832a8 Update CHANGELOG for 0.7.1
35baab5 Bump version for 0.7.1
293b49a be a new entry if feed not have entry id and only difference is a url
6e075a8 Update CHANGELOG for 0.7.0
0f863b1 Bump version for 0.7.0
e614278 Bugfix for parsing dates that are ISO 8601 with milliseconds
d552496 On failure callbacks get curl and error as args
260a979 Move call_on_failure to private method
801b978 Fix tests for #194
Additional commits viewable in compare view

Updates activerecord from 2.3.8 to 7.0.4

Release notes

Sourced from activerecord's releases.

v7.0.4

Active Support

Redis cache store is now compatible with redis-rb 5.0.

Jean Boussier

Fix NoMethodError on custom ActiveSupport::Deprecation behavior.

ActiveSupport::Deprecation.behavior= was supposed to accept any object that responds to call, but in fact its internal implementation assumed that this object could respond to arity, so it was restricted to only Proc objects.

This change removes this arity restriction of custom behaviors.

Ryo Nakamura

Active Model
Handle name clashes in attribute methods code generation cache.

When two distinct attribute methods would generate similar names, the first implementation would be incorrectly re-used.
class A
  attribute_method_suffix "_changed?"
  define_attribute_methods :x
end
class B
attribute_method_suffix "?"
define_attribute_methods :x_changed
end
Jean Boussier
Active Record

Symbol is allowed by default for YAML columns

Étienne Barrié

Fix ActiveRecord::Store to serialize as a regular Hash

... (truncated)

Changelog

Sourced from activerecord's changelog.

Rails 7.0.4 (September 09, 2022)
Symbol is allowed by default for YAML columns

Étienne Barrié

Fix ActiveRecord::Store to serialize as a regular Hash

Previously it would serialize as an ActiveSupport::HashWithIndifferentAccess which is wasteful and cause problem with YAML safe_load.

Jean Boussier
Add timestamptz as a time zone aware type for PostgreSQL

This is required for correctly parsing timestamp with time zone values in your database.

If you don't want this, you can opt out by adding this initializer:
ActiveRecord::Base.time_zone_aware_types -= [:timestamptz]
Alex Ghiculescu
Fix supporting timezone awareness for tsrange and tstzrange array columns.
# In database migrations
add_column :shops, :open_hours, :tsrange, array: true
# In app config
ActiveRecord::Base.time_zone_aware_types += [:tsrange]
# In the code times are properly converted to app time zone
Shop.create!(open_hours: [Time.current..8.hour.from_now])
Wojciech Wnętrzak
Resolve issue where a relation cache_version could be left stale.

Previously, when reset was called on a relation object it did not reset the cache_versions ivar. This led to a confusing situation where despite having the correct data the relation still reported a stale cache_version.

Usage:
developers = Developer.all
developers.cache_version

... (truncated)

Commits

8015c2c Version 7.0.4
4d9b4b4 Merge pull request #45872 from the-spectator/correct_hwia_encoding
c5a407d Linkify code references [ci-skip]
e874cf5 Fix typos [ci-skip]
fb09b1b Don't handle this change for legacy_connection_handling
0667ba4 Merge pull request #45773 from eileencodes/only-setup-shared-pools-if-we-have...
d60d058 Merge pull request #45744 from fatkodima/mysql-change-column-collation
73d6fa8 Merge pull request #45555 from bbenno/main
aed8afa Merge pull request #44760 from lxxxvi/fix_rails_issue_db_fixtures_load_raises
852d2b3 Appease rubocop
Additional commits viewable in compare view

Updates activeresource from 2.3.8 to 6.0.0

Release notes

Sourced from activeresource's releases.

6.0.0

Breaking changes

Drop support to Ruby < 2.6 and Rails < 6.0

What's Changed

Create PreconditionFailed (412) exception by @bbraschi in rails/activeresource#302

Adds TooManyRequests (429) exception by @bradleypriest in rails/activeresource#304

Fix active job serializer railtie by @gmcgibbon in rails/activeresource#310

Fix Rails 6.1 compatibility by @casperisfine in rails/activeresource#335

Set frozen_string_literal: true in the generated code by @casperisfine in rails/activeresource#336

Stop using the deprecated URI.parser by @casperisfine in rails/activeresource#338

Fix the missed URI.parser references by @casperisfine in rails/activeresource#339

Fix find_every instantiating records from symbol and string without prefix_options by @ivan05almeida in rails/activeresource#348

Add support to set bearer token connection through Base class by @ivan05almeida in rails/activeresource#345

Fixed multi-threading race condition issue by @marisveide in rails/activeresource#349

Fixed ActiveResource::ConnectionError#to_s to return a message which … by @faultier92 in rails/activeresource#353

Stop requiring the useless and deprecated core_ext/uri by @casperisfine in rails/activeresource#366

Changing headers on base class doesn't change them in subclasses by @adrien-k in rails/activeresource#359

New Contributors

@bbraschi made their first contribution in rails/activeresource#302

@maurcarvalho made their first contribution in rails/activeresource#307

@bradleypriest made their first contribution in rails/activeresource#304

@pilaf made their first contribution in rails/activeresource#315

@eitoball made their first contribution in rails/activeresource#306

@okuramasafumi made their first contribution in rails/activeresource#320

@larouxn made their first contribution in rails/activeresource#321

@maria-kravtsova made their first contribution in rails/activeresource#323

@casperisfine made their first contribution in rails/activeresource#335

@ivan05almeida made their first contribution in rails/activeresource#348

@marisveide made their first contribution in rails/activeresource#349

@faultier92 made their first contribution in rails/activeresource#353

@luk4s made their first contribution in rails/activeresource#356

@jbampton made their first contribution in rails/activeresource#357

@filabreu made their first contribution in rails/activeresource#364

@aclemons made their first contribution in rails/activeresource#367

@obahareth made their first contribution in rails/activeresource#373

@adrien-k made their first contribution in rails/activeresource#359

Full Changelog: rails/activeresource@v5.1.1...v6.0.0

5.1.0

Improve support of Active Resource objects inside fibers.

Add support to Active Model Serializers.

Fix error when trying to parse nil as a JSON response.

... (truncated)

Commits

See full diff in compare view

Updates activesupport from 2.3.8 to 7.0.4

Release notes

Sourced from activesupport's releases.

v7.0.4

Active Support

Redis cache store is now compatible with redis-rb 5.0.

Jean Boussier

Fix NoMethodError on custom ActiveSupport::Deprecation behavior.

ActiveSupport::Deprecation.behavior= was supposed to accept any object that responds to call, but in fact its internal implementation assumed that this object could respond to arity, so it was restricted to only Proc objects.

This change removes this arity restriction of custom behaviors.

Ryo Nakamura

Active Model
Handle name clashes in attribute methods code generation cache.

When two distinct attribute methods would generate similar names, the first implementation would be incorrectly re-used.
class A
  attribute_method_suffix "_changed?"
  define_attribute_methods :x
end
class B
attribute_method_suffix "?"
define_attribute_methods :x_changed
end
Jean Boussier
Active Record

Symbol is allowed by default for YAML columns

Étienne Barrié

Fix ActiveRecord::Store to serialize as a regular Hash

... (truncated)

Changelog

Sourced from activesupport's changelog.

Rails 7.0.4 (September 09, 2022)

Redis cache store is now compatible with redis-rb 5.0.

Jean Boussier

Fix NoMethodError on custom ActiveSupport::Deprecation behavior.

ActiveSupport::Deprecation.behavior= was supposed to accept any object that responds to call, but in fact its internal implementation assumed that this object could respond to arity, so it was restricted to only Proc objects.

This change removes this arity restriction of custom behaviors.

Ryo Nakamura

Rails 7.0.3.1 (July 12, 2022)

No changes.

Rails 7.0.3 (May 09, 2022)

No changes.

Rails 7.0.2.4 (April 26, 2022)

Fix and add protections for XSS in ActionView::Helpers and ERB::Util.

Add the method ERB::Util.xml_name_escape to escape dangerous characters in names of tags and names of attributes, following the specification of XML.

Álvaro Martín Fraguas

Rails 7.0.2.3 (March 08, 2022)

No changes.

Rails 7.0.2.2 (February 11, 2022)

Fix Reloader method signature to work with the new Executor signature

Rails 7.0.2.1 (February 11, 2022)

No changes.

... (truncated)

Commits

8015c2c Version 7.0.4
ff27758 Revert "Merge pull request #44695 from Edouard-chin/ec-tagger-logger-broadcast"
4a1f224 Merge pull request #45882 from rails/short-inspect-on-test-case
a3bd3b5 Backport Redis 5.0 compatibility
67f37ac Fix flaky tests for RedisCacheStore
c520e38 Document AS::Cache::MemCacheStore#write options [ci-skip]
a74b650 Document AS::Cache::Store#initialize options [ci-skip]
f7a82bf Document AS::Cache::Store#read options [ci-skip]
414351f Rewrite AS::Cache::Store#fetch options doc as list [ci-skip]
2661d22 Consolidate AS::Cache::Store#write documentation [ci-skip]
Additional commits viewable in compare view

Updates rack from 1.1.0 to 2.2.4

Changelog

Sourced from rack's changelog.

[2.2.4] - 2022-06-30

Better support for lower case headers in Rack::ETag middleware. (#1919, @ioquatix)

Use custom exception on params too deep error. (#1838, @simi)

[2.2.3.1] - 2022-05-27

[CVE-2022-30123] Fix shell escaping issue in Common Logger

[CVE-2022-30122] Restrict parsing of broken MIME attachments

[2.2.3] - 2020-06-15

Security

[CVE-2020-8184] Do not allow percent-encoded cookie name to override existing cookie names. BREAKING CHANGE: Accessing cookie names that require URL encoding with decoded name no longer works. (@fletchto99)

[2.2.2] - 2020-02-11

Fixed

Fix incorrect Rack::Request#host value. (#1591, [@ioquatix])

Revert Rack::Handler::Thin implementation. (#1583, [@jeremyevans])

Double assignment is still needed to prevent an "unused variable" warning. (#1589, @kamipo)

Fix to handle same_site option for session pool. (#1587, @kamipo)

[2.2.1] - 2020-02-09

Fixed

Rework Rack::Request#ip to handle empty forwarded_for. (#1577, [@ioquatix])

[2.2.0] - 2020-02-08

SPEC Changes

rack.session request environment entry must respond to to_hash and return unfrozen Hash. ([@jeremyevans])

Request environment cannot be frozen. ([@jeremyevans])

CGI values in the request environment with non-ASCII characters must use ASCII-8BIT encoding. ([@jeremyevans])

Improve SPEC/lint relating to SERVER_NAME, SERVER_PORT and HTTP_HOST. (#1561, [@ioquatix])

Added

rackup supports multiple -r options and will require all arguments. ([@jeremyevans])

Server supports an array of paths to require for the :require option. (@khotta)

Files supports multipart range requests. (@fatkodima)

Multipart::UploadedFile supports an IO-like object instead of using the filesystem, using :filename and :io options. ([@jeremyevans])

Multipart::UploadedFile supports keyword arguments :path, :content_type, and :binary in addition to positional arguments. ([@jeremyevans])

Static supports a :cascade option for calling the app if there is no matching file. ([@jeremyevans])

Session::Abstract::SessionHash#dig. ([@jeremyevans])

Response.[] and MockResponse.[] for creating instances using status, headers, and body. ([@ioquatix])

... (truncated)

Commits

abca7d5 fixup changelog
0ae9ff2 bump version
0077900 Better handling of case-insensitive headers for Rack::Etag middleware. (#1919)
d62c290 Add 'custom exception on params too deep error' change to CHANGELOG. (#1914)
e7c5b94 Expect additional optional version segment in version test. (#1913)
f705eac Merge branch '2-2-sec' into 2-2-stable
925a4a6 update changelog
70c0a24 bump version
434413f Escape untrusted text when logging
a872bcc Restrict broken mime parsing
Additional commits viewable in compare view

Updates actionmailer from 2.3.8 to 7.0.4

Release notes

Sourced from actionmailer's releases.

v7.0.4

Active Support

Redis cache store is now compatible with redis-rb 5.0.

Jean Boussier

Fix NoMethodError on custom ActiveSupport::Deprecation behavior.

ActiveSupport::Deprecation.behavior= was supposed to accept any object that responds to call, but in fact its internal implementation assumed that this object could respond to arity, so it was restricted to only Proc objects.

This change removes this arity restriction of custom behaviors.

Ryo Nakamura

Active Model
Handle name clashes in attribute methods code generation cache.

When two distinct attribute methods would generate similar names, the first implementation would be incorrectly re-used.
class A
  attribute_method_suffix "_changed?"
  define_attribute_methods :x
end
class B
attribute_method_suffix "?"
define_attribute_methods :x_changed
end
Jean Boussier
Active Record

Symbol is allowed by default for YAML columns

Étienne Barrié

Fix ActiveRecord::Store to serialize as a regular Hash

... (truncated)

Changelog

Sourced from actionmailer's changelog.

Rails 7.0.4 (September 09, 2022)

No changes.

Rails 7.0.3.1 (July 12, 2022)

No changes.

Rails 7.0.3 (May 09, 2022)

No changes.

Rails 7.0.2.4 (April 26, 2022)

No changes.

Rails 7.0.2.3 (March 08, 2022)

No changes.

Rails 7.0.2.2 (February 11, 2022)

No changes.

Rails 7.0.2.1 (February 11, 2022)

No changes.

Rails 7.0.2 (February 08, 2022)

No changes.

Rails 7.0.1 (January 06, 2022)

Keep configuration of smtp_settings consistent between 6.1 and 7.0.

André Luis Leal Cardoso Junior

Rails 7.0.0 (December 15, 2021)

No changes.

... (truncated)

Commits

8015c2c Version 7.0.4
04972d9 Preparing for 7.0.3.1 release
0c68c1f updating version and changelog
3872bc0 Preparing for 7.0.3 release
ae98f49 Merge pull request #44777 from jean-francois-labbe/main
c204039 Merge branch '7-0-sec' into 7-0-stable
3520cc7 Preparing for 7.0.2.4 release
f2f7900 updating changelog for release
89dd6f5 Merge pull request #44850 from kamipo/preserve_kwargs_flag
c730f80 Merge pull request #44162 from andrehjr/only-configure-smtp-settings-when-pro...
Additional commits viewable in compare view

Updates rake from 0.8.7 to 13.0.6

Changelog

Sourced from rake's changelog.

=== 13.0.6

Additional fix for #389 Pull request #390 by hsbt

=== 13.0.5

Fixed the regression of #388 Pull request #389 by hsbt

=== 13.0.4

Fix rake test loader swallowing useful error information. Pull request #367 by deivid-rodriguez

Add -C/--directory option the same as GNU make. Pull request #376 by nobu

=== 13.0.3

Fix breaking change of execution order on TestTask. Pull request #368 by ysakasin

=== 13.0.2

==== Enhancements

Fix tests to work with current FileUtils Pull Request #358 by jeremyevans

Simplify default rake test loader Pull Request #357 by deivid-rodriguez

Update rdoc Pull Request #366 by bahasalien

Update broken links to rake articles from Avdi in README Pull Request #360 by svl7

=== 13.0.1

==== Bug fixes

Fixed bug: Reenabled task raises previous exception on second invokation Pull Request #271 by thorsteneckel

Fix an incorrectly resolved arg pattern Pull Request #327 by mjbellantoni

=== 13.0.0

==== Enhancements

Follows recent changes on keyword arguments in ruby 2.7. Pull Request #326 by nobu

... (truncated)

Commits

5c60da8 Bump up Rake-13.0.6
73d4099 Merge pull request #390 from ruby/fix-388-again
63aacb6 Added Rake namespace explicitly
29a3949 Bump version to v13.0.5
3a95f4c Merge pull request #389 from ruby/fix-388
85c55b4 Fixed the regression of #388
72ac796 History for rake-13.0.4
b20de78 Bump version to 13.0.4
a07e637 Merge pull request #386 from ruby/cleanup
0acc575 Use require_relative to specify release version
Additional commits viewable in compare view

Updates builder from 2.1.2 to 3.2.4

Changelog

Sourced from builder's changelog.

= Change Log

== Version 3.2.0

Ruby 2.0 compatibility changes.

Allow single quoted attributes.

== Version 3.1.0

Included the to_xs arity patch needed for weird Rails compatibility issue.

Escaping newlines in attributes now.

Allow method caching

== Version 3.0.0

Ruby 1.9 compatiblity issues.

== Version 2.2.0

Applied patch from Thijs van der Vossen to allow UTF-8 encoded output when the encoding is UTF-8 and $KCODE is UTF8.

Commits

See full diff in compare view

Updates loofah from 0.4.7 to 2.19.0

Release notes

Sourced from loofah's releases.

2.19.0 / 2022-09-14

Features

Allow SVG 1.0 color keyword names in CSS attributes. These colors are part of the CSS Color Module Level 3 recommendation released 2022-01-18. [#243]

2.18.0 / 2022-05-11

Features

Allow CSS property aspect-ratio. [#236] (Thanks, @louim!)

2.17.0 / 2022-04-28

Features

Allow ARIA attributes. [#232, #233] (Thanks, @nick-desteffen!)

2.16.0 / 2022-04-01

Features

Allow MathML elements menclose and ms, and MathML attributes dir, href, lquote, mathsize, notation, and rquote. [#231] (Thanks, @nick-desteffen!)

2.15.0 / 2022-03-14

Features

Expand set of allowed protocols to include sms:. [#228] (Thanks, @brendon!)

2.14.0 / 2022-02-11

Features

The #to_text method on Loofah::HTML::{Document,DocumentFragment} replaces <br> line break elements with a newline. [#225]

2.13.0 / 2021-12-10

Bug fixes

Loofah::HTML::DocumentFragment#text no longer serializes top-level comment children. [#221]

2.12.0 / 2021-08-11

... (truncated)

Changelog

Sourced from loofah's changelog.

2.19.0 / 2022-09-14

Features

Allow SVG 1.0 color keyword names in CSS attributes. These colors are part of the CSS Color Module Level 3 recommendation released 2022-01-18. [#243]

2.18.0 / 2022-05-11

Features

Allow CSS property aspect-ratio. [#236] (Thanks, @louim!)

2.17.0 / 2022-04-28

Features

Allow ARIA attributes. [#232, #233] (Thanks, @nick-desteffen!)

2.16.0 / 2022-04-01

Features

Allow MathML elements menclose and ms, and MathML attributes dir, href, lquote, mathsize, notation, and rquote. [#231] (Thanks, @nick-desteffen!)

2.15.0 / 2022-03-14

Features

Expand set of allowed protocols to include sms:. [#228] (Thanks, @brendon!)

2.14.0 / 2022-02-11

Features

The #to_text method on Loofah::HTML::{Document,DocumentFragment} replaces <br> line break elements with a newline. [#225]

2.13.0 / 2021-12-10

Bug fixes

Loofah::HTML::DocumentFragment#text no longer serializes top-level comment children. [#221]

2.12.0 / 2021-08-11

... (truncated)

Commits

0dca600 version bump to v2.19.0
b0832f1 Merge pull request #244 from flavorjones/243-extended-css-colors
4d517ac feat: support SVG 1.0 extended color keywords
d1e7d2e prefactor: separate colors from other safelisted CSS keywords
a0caaf0 version bump to v2.18.0
bd5bc7c Merge pull request #237 from flavorjones/flavorjones-fix-2.5-ci
0c08ea5 ci: do not fail fast
4963914 Merge pull request #236 from louim/patch-1
8a4d85d Add aspect-ratio to the list of css properties
d3e82c1 update README to remove pledgie link
Additional commits viewable in compare view

Updates sax-machine from 0.0.15 to 1.3.2

Changelog

Sourced from sax-machine's changelog.

1.3.2

Compatibility with Oga 0.3

1.3.1

Allow default value to be false [#66]

Support adding class to an attribute [#68]

Adjust Ox handler to skip empty text/cdata values

1.3.0

Improve block modifiers to support all config options

Make block modifiers run in instance context

Make all handlers support IO as a input

1.2.0

Add support for blocks as value modifiers [#61]

1.1.1

Fix Nokogiri autoloading [#60]

1.1.0

Option to use Oga as a SAX handler

1.0.3

Remove missed nokogiri reference [#54]

Add support for Symbol data type conversion [#57]

Add specs for multiple elements with the same alias [#53]

Various code and documentation enhancements

1.0.2

Make sure SAXConfig getters do not modify internal vars. Prevent race conditions

1.0.1

Improve normalize_name performance

1.0.0

Make nokogiri dependency optional

Add :default argument for elements [#51]

0.3.0

... (truncated)

Commits

See full diff in compare view

Updates nokogiri from 1.4.3.1 to 1.13.9

Release notes

Sourced from nokogiri's releases.

1.13.9 / 2022-10-18

Security

[CRuby] Vendored libxml2 is updated to address CVE-2022-2309, CVE-2022-40304, and CVE-2022-40303. See GHSA-2qc6-mcvw-92cw for more information.

[CRuby] Vendored zlib is updated to address CVE-2022-37434. Nokogiri was not affected by this vulnerability, but this version of zlib was being flagged up by some vulnerability scanners, see #2626 for more information.

Dependencies

[CRuby] Vendored libxml2 is updated to v2.10.3 from v2.9.14.

[CRuby] Vendored libxslt is updated to v1.1.37 from v1.1.35.

[CRuby] Vendored zlib is updated from 1.2.12 to 1.2.13. (See LICENSE-DEPENDENCIES.md for details on which packages redistribute this library.)

Fixed

[CRuby] Nokogiri::XML::Namespace objects, when compacted, update their internal struct's refere...
Description has been truncated

…vesupport, rack, actionmailer, rake, builder, loofah, sax-machine and nokogiri Bumps [actionpack](https://github.com/rails/rails), [rails](https://github.com/rails/rails), [feedzirra](https://github.com/pauldix/feedzirra), [activerecord](https://github.com/rails/rails), [activeresource](https://github.com/rails/activeresource), [activesupport](https://github.com/rails/rails), [rack](https://github.com/rack/rack), [actionmailer](https://github.com/rails/rails), [rake](https://github.com/ruby/rake), [builder](https://github.com/jimweirich/builder), [loofah](https://github.com/flavorjones/loofah), [sax-machine](https://github.com/pauldix/sax-machine) and [nokogiri](https://github.com/sparklemotion/nokogiri). These dependencies needed to be updated together. Updates `actionpack` from 2.3.8 to 7.0.4 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.0.4/actionpack/CHANGELOG.md) - [Commits](rails/rails@v2.3.8...v7.0.4) Updates `rails` from 2.3.8 to 7.0.4 - [Release notes](https://github.com/rails/rails/releases) - [Commits](rails/rails@v2.3.8...v7.0.4) Updates `feedzirra` from 0.0.24 to 0.8.0 - [Release notes](https://github.com/pauldix/feedzirra/releases) - [Changelog](https://github.com/feedjira/feedjira/blob/main/CHANGELOG.md) - [Commits](feedjira/feedjira@v0.0.24...v0.8.0) Updates `activerecord` from 2.3.8 to 7.0.4 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.0.4/activerecord/CHANGELOG.md) - [Commits](rails/rails@v2.3.8...v7.0.4) Updates `activeresource` from 2.3.8 to 6.0.0 - [Release notes](https://github.com/rails/activeresource/releases) - [Commits](https://github.com/rails/activeresource/commits/v6.0.0) Updates `activesupport` from 2.3.8 to 7.0.4 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.0.4/activesupport/CHANGELOG.md) - [Commits](rails/rails@v2.3.8...v7.0.4) Updates `rack` from 1.1.0 to 2.2.4 - [Release notes](https://github.com/rack/rack/releases) - [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md) - [Commits](rack/rack@1.1...2.2.4) Updates `actionmailer` from 2.3.8 to 7.0.4 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.0.4/actionmailer/CHANGELOG.md) - [Commits](rails/rails@v2.3.8...v7.0.4) Updates `rake` from 0.8.7 to 13.0.6 - [Release notes](https://github.com/ruby/rake/releases) - [Changelog](https://github.com/ruby/rake/blob/master/History.rdoc) - [Commits](ruby/rake@rake-0.8.7...v13.0.6) Updates `builder` from 2.1.2 to 3.2.4 - [Release notes](https://github.com/jimweirich/builder/releases) - [Changelog](https://github.com/jimweirich/builder/blob/master/CHANGES) - [Commits](https://github.com/jimweirich/builder/commits) Updates `loofah` from 0.4.7 to 2.19.0 - [Release notes](https://github.com/flavorjones/loofah/releases) - [Changelog](https://github.com/flavorjones/loofah/blob/main/CHANGELOG.md) - [Commits](flavorjones/loofah@v0.4.7...v2.19.0) Updates `sax-machine` from 0.0.15 to 1.3.2 - [Release notes](https://github.com/pauldix/sax-machine/releases) - [Changelog](https://github.com/pauldix/sax-machine/blob/master/HISTORY.md) - [Commits](https://github.com/pauldix/sax-machine/commits/v1.3.2) Updates `nokogiri` from 1.4.3.1 to 1.13.9 - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md) - [Commits](sparklemotion/nokogiri@REL_1.4.3.1...v1.13.9) --- updated-dependencies: - dependency-name: actionpack dependency-type: direct:production - dependency-name: rails dependency-type: direct:production - dependency-name: feedzirra dependency-type: direct:production - dependency-name: activerecord dependency-type: direct:production - dependency-name: activeresource dependency-type: direct:production - dependency-name: activesupport dependency-type: direct:production - dependency-name: rack dependency-type: direct:production - dependency-name: actionmailer dependency-type: direct:production - dependency-name: rake dependency-type: direct:production - dependency-name: builder dependency-type: direct:production - dependency-name: loofah dependency-type: direct:production - dependency-name: sax-machine dependency-type: direct:production - dependency-name: nokogiri dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2023-01-18T18:28:12Z

Superseded by #15.

dependabot bot added the dependencies Pull requests that update a dependency file label Oct 28, 2022

dependabot bot mentioned this pull request Oct 28, 2022

Bump activerecord, rails, feedzirra, actionmailer, actionpack, activeresource, activesupport, rack, rake, builder, loofah, sax-machine and nokogiri #12

Closed

dependabot bot closed this Jan 18, 2023

dependabot bot deleted the dependabot/bundler/actionpack-and-rails-and-feedzirra-and-activerecord-and-activeresource-and-activesupport-and-rack-and-actionmailer-and-rake-and-builder-and-loofah-and-sax-machine-and-nokogiri-7.0.4 branch January 18, 2023 18:28

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump actionpack, rails, feedzirra, activerecord, activeresource, activesupport, rack, actionmailer, rake, builder, loofah, sax-machine and nokogiri#14

dependabot bot commented on behalf of github Oct 28, 2022

Uh oh!

dependabot bot commented on behalf of github Jan 18, 2023

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

Conversation

dependabot bot commented on behalf of github Oct 28, 2022

v7.0.4

Active Support

Active Model

Active Record

Rails 7.0.4 (September 09, 2022)

Rails 7.0.3.1 (July 12, 2022)

Rails 7.0.3 (May 09, 2022)

v7.0.4

Active Support

Active Model

Active Record

Feedjira Changelog

3.2.1

3.2.0

3.1.2

3.1.1

3.1.0

3.0.0

v7.0.4

Active Support

Active Model

Active Record

Rails 7.0.4 (September 09, 2022)

6.0.0

Breaking changes

What's Changed

New Contributors

5.1.0

v7.0.4

Active Support

Active Model

Active Record

Rails 7.0.4 (September 09, 2022)

Rails 7.0.3.1 (July 12, 2022)

Rails 7.0.3 (May 09, 2022)

Rails 7.0.2.4 (April 26, 2022)

Rails 7.0.2.3 (March 08, 2022)

Rails 7.0.2.2 (February 11, 2022)

Rails 7.0.2.1 (February 11, 2022)

[2.2.4] - 2022-06-30

[2.2.3.1] - 2022-05-27

[2.2.3] - 2020-06-15

Security

[2.2.2] - 2020-02-11

Fixed

[2.2.1] - 2020-02-09

Fixed

[2.2.0] - 2020-02-08

SPEC Changes

Added

v7.0.4

Active Support

Active Model

Active Record

Rails 7.0.4 (September 09, 2022)

Rails 7.0.3.1 (July 12, 2022)

Rails 7.0.3 (May 09, 2022)

Rails 7.0.2.4 (April 26, 2022)

Rails 7.0.2.3 (March 08, 2022)

Rails 7.0.2.2 (February 11, 2022)

Rails 7.0.2.1 (February 11, 2022)

Rails 7.0.2 (February 08, 2022)

Rails 7.0.1 (January 06, 2022)

Rails 7.0.0 (December 15, 2021)

2.19.0 / 2022-09-14

Features

2.18.0 / 2022-05-11

Features

2.17.0 / 2022-04-28

Features

2.16.0 / 2022-04-01

Features

2.15.0 / 2022-03-14

Features

2.14.0 / 2022-02-11

Features

2.13.0 / 2021-12-10

Bug fixes