Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the ruby-production-dependencies group with 7 updates #2366

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 13, 2024

Bumps the ruby-production-dependencies group with 7 updates:

Package From To
aws-partitions 1.1021.0 1.1022.0
aws-sdk-s3 1.176.0 1.176.1
irb 1.14.1 1.14.2
logger 1.6.2 1.6.3
nokogiri 1.17.1 1.17.2
rails-html-sanitizer 1.6.1 1.6.2
sass-embedded 1.82.0 1.83.0

Updates aws-partitions from 1.1021.0 to 1.1022.0

Changelog

Sourced from aws-partitions's changelog.

1.1022.0 (2024-12-12)

  • Feature - Updated the partitions source data the determines the AWS service regions and endpoints.
Commits

Updates aws-sdk-s3 from 1.176.0 to 1.176.1

Changelog

Sourced from aws-sdk-s3's changelog.

1.176.1 (2024-12-12)

  • Issue - Do not normalize object keys when calling presigned_url or presigned_request.
Commits

Updates irb from 1.14.1 to 1.14.2

Release notes

Sourced from irb's releases.

v1.14.2

What's Changed

✨ Enhancements

🐛 Bug Fixes

📚 Documentation

🛠 Other Changes

New Contributors

Full Changelog: ruby/irb@v1.14.1...v1.14.2

Commits

Updates logger from 1.6.2 to 1.6.3

Release notes

Sourced from logger's releases.

v1.6.3

What's Changed

Full Changelog: ruby/logger@v1.6.2...v1.6.3

Commits

Updates nokogiri from 1.17.1 to 1.17.2

Release notes

Sourced from nokogiri's releases.

v1.17.2 / 2024-12-12

Fixed

  • [JRuby] Fixed an issue where Node#dup when called with the new_parent_doc parameter was not decorating the node with the document's Node decorators. #3372 @​flavorjones
585c8cac6380848b7973bacfd0584628d116810e5f209db25e22d0c32313e681  nokogiri-1.17.2-aarch64-linux.gem
0c5eb06ba1c112d33c2bb29973b07e2f21c4ddb66c67c9386fd97ff1c5d84686  nokogiri-1.17.2-arm64-darwin.gem
3d033ad9b09d5b8a203f0f2156053e93a9327a9c7887c0ceb9fa78c71d27280d  nokogiri-1.17.2-arm-linux.gem
75825401f59b1a8746ee8ce5d066c8f11e745642e36a4452e206730b03d1fd8c  nokogiri-1.17.2.gem
ffe1fc1353f831793260b3023f575b4ed2e6144404947c57ad37ad932f9adb94  nokogiri-1.17.2-java.gem
da29e3d6add44bfc0bec8b9d4c7c660b38c7fc16ef505313839e07c3358d1059  nokogiri-1.17.2-x64-mingw32.gem
2bb710109d52f1209ea013c1f9603cd24271a9f22d387c0c45fced62945b4a30  nokogiri-1.17.2-x64-mingw-ucrt.gem
dc5977eb3416e1d501b22b0ed4737bf7604121491405865b887975eacfb3e896  nokogiri-1.17.2-x86_64-darwin.gem
e8614ae8d776bd9adb535ca814375e7ae05d7cfa6aa01909e561484f6d70be0b  nokogiri-1.17.2-x86_64-linux.gem
8c4dd75e35810bdeb7c74943f383ca665baf6aed8fc2b78c1d305094a72794aa  nokogiri-1.17.2-x86-linux.gem
9038e8b59e2eb48feb18f0efb093bd21a19d0eb17eed822a155b2a6860381702  nokogiri-1.17.2-x86-mingw32.gem
Changelog

Sourced from nokogiri's changelog.

v1.17.2 / 2024-12-12

Fixed

  • [JRuby] Fixed an issue where Node#dup when called with the new_parent_doc parameter was not decorating the node with the document's Node decorators. #3372 @​flavorjones
Commits
  • 35ec8c5 version bump to v1.17.2
  • ffaa44c fix(jruby): XML::DocumentFragment.dup to another document (v1.17.x) (#3373)
  • 8bd6c6d fix(jruby): XML::DocumentFragment.dup to another document
  • See full diff in compare view

Updates rails-html-sanitizer from 1.6.1 to 1.6.2

Release notes

Sourced from rails-html-sanitizer's releases.

v1.6.2 / 2024-12-12

  • PermitScrubber fully supports frozen "allowed tags".

    v1.6.1 introduced safety checks that may remove unsafe tags from the allowed list, which introduced a regression for applications passing a frozen array of allowed tags. Tags and attributes are now properly copied when they are passed to the scrubber.

    Fixes #195.

    Mike Dalessio

Changelog

Sourced from rails-html-sanitizer's changelog.

v1.6.2 / 2024-12-12

  • PermitScrubber fully supports frozen "allowed tags".

    v1.6.1 introduced safety checks that may remove unsafe tags from the allowed list, which introduced a regression for applications passing a frozen array of allowed tags. Tags and attributes are now properly copied when they are passed to the scrubber.

    Fixes #195.

    Mike Dalessio

Commits

Updates sass-embedded from 1.82.0 to 1.83.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ruby-production-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [aws-partitions](https://github.com/aws/aws-sdk-ruby) | `1.1021.0` | `1.1022.0` |
| [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) | `1.176.0` | `1.176.1` |
| [irb](https://github.com/ruby/irb) | `1.14.1` | `1.14.2` |
| [logger](https://github.com/ruby/logger) | `1.6.2` | `1.6.3` |
| [nokogiri](https://github.com/sparklemotion/nokogiri) | `1.17.1` | `1.17.2` |
| [rails-html-sanitizer](https://github.com/rails/rails-html-sanitizer) | `1.6.1` | `1.6.2` |
| [sass-embedded](https://github.com/sass-contrib/sass-embedded-host-ruby) | `1.82.0` | `1.83.0` |


Updates `aws-partitions` from 1.1021.0 to 1.1022.0
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-partitions/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `aws-sdk-s3` from 1.176.0 to 1.176.1
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `irb` from 1.14.1 to 1.14.2
- [Release notes](https://github.com/ruby/irb/releases)
- [Commits](ruby/irb@v1.14.1...v1.14.2)

Updates `logger` from 1.6.2 to 1.6.3
- [Release notes](https://github.com/ruby/logger/releases)
- [Commits](ruby/logger@v1.6.2...v1.6.3)

Updates `nokogiri` from 1.17.1 to 1.17.2
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/v1.17.2/CHANGELOG.md)
- [Commits](sparklemotion/nokogiri@v1.17.1...v1.17.2)

Updates `rails-html-sanitizer` from 1.6.1 to 1.6.2
- [Release notes](https://github.com/rails/rails-html-sanitizer/releases)
- [Changelog](https://github.com/rails/rails-html-sanitizer/blob/main/CHANGELOG.md)
- [Commits](rails/rails-html-sanitizer@v1.6.1...v1.6.2)

Updates `sass-embedded` from 1.82.0 to 1.83.0
- [Commits](sass-contrib/sass-embedded-host-ruby@v1.82.0...v1.83.0)

---
updated-dependencies:
- dependency-name: aws-partitions
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: ruby-production-dependencies
- dependency-name: aws-sdk-s3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: ruby-production-dependencies
- dependency-name: irb
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: ruby-production-dependencies
- dependency-name: logger
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: ruby-production-dependencies
- dependency-name: nokogiri
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: ruby-production-dependencies
- dependency-name: rails-html-sanitizer
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: ruby-production-dependencies
- dependency-name: sass-embedded
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: ruby-production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Dec 13, 2024
Copy link

codeclimate bot commented Dec 13, 2024

Code Climate has analyzed commit ca25378 and detected 0 issues on this pull request.

View more on Code Climate.

@texpert texpert merged commit 508a4e3 into main Dec 13, 2024
7 checks passed
@texpert texpert deleted the dependabot/bundler/ruby-production-dependencies-d3333e88de branch December 13, 2024 09:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant