This repository was archived by the owner on Dec 24, 2019. It is now read-only.
Update jquery-rails: 4.3.1 → 4.3.3 (patch) #72
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
We've updated a dependency and here is what you need to know:
Additionally, the update changed a few other dependencies as well:
You should probably take a good look at the info here and the test results before merging this pull request, of course.
What changed?
✳️ jquery-rails (4.3.1 → 4.3.3) · Repo · Changelog
Commits
See the full diff on Github. The new version differs by 17 commits:
Prepare to 4.3.3Upgrade jQuery 3 to 3.3.1Prepare for 4.3.2 releaseUpgrade jQuery 3 to 3.3.0Merge pull request #251 from andrewhaines/rails-ujs-doc-updateAdded rails-ujs disambiguation for Rails 5.1 and upMerge pull request #250 from nicolasleger/patch-1[CI] Test agains Ruby 2.5Merge pull request #245 from hartator/patch-1Add small explanation about how to install for Rails 5.1 and upMerge pull request #243 from juank-pa/support_even_more_css_selectorsMerge branch 'master' into support_even_more_css_selectorsMerge pull request #242 from juank-pa/add_support_for_multiple_matchesMerge pull request #241 from juank-pa/fix_bug_with_single_quoted_escaped_htmlAdd support for multiple matchesSupport even more css selectorsFix bug with single quoted escaped htmlRelease Notes
From the Github release:
Commits
See the full diff on Github. The new version differs by 5 commits:
chore: Release 1.0.4chore: Enable warnings when running testsAddress `warning: mismatched indentations at 'when' with 'case'`Merge pull request #6 from nicolasleger/patch-1[CI] Test against Ruby 2.5Commits
See the full diff on Github. The new version differs by 7 commits:
Bump version to 1.7.1Remove one difference from READMEMinor tweak to READMEBump copyright yearMake whitespace handling for <%# %> tags more compatible with Erubis (Fixes #14)Test on ruby 2.5 on Travisremove unnecessary ternary operationRelease Notes
From the Github release:
Thanks @wjordan!
Commits
See the full diff on Github. The new version differs by 34 commits:
Bump to 0.9.5Lock Rake to 12.2.x versionsMerge pull request #408 from wjordan/enforce_available_locales_false_fixstore translations for unavailable locales if enforce_available_locales is falseBump to 0.9.4Merge pull request #407 from fatkodima/fix-key-value-subtreesMerge pull request #406 from jhawthorn/optimize_available_localesFix Chained backend with KeyValueOptimize Backend::Simple#available_localesBump to 0.9.3Merge pull request #395 from stereobooster/interpolate-for-arraysMerge pull request #402 from fatkodima/subtrees-bugMerge pull request #403 from fatkodima/ci-ruby2.5.0CI against ruby 2.5.0Fix issue with disabled subtrees and pluralization for KeyValue backendBump to 0.9.2Merge pull request #400 from fatkodima/fix-t-empty-keysMerge pull request #399 from fatkodima/fix-t-with-falseFix translate with nil and empty keysFix translate with default: [false]Merge pull request #396 from lulalala/fix-lambda-docMerge pull request #398 from stereobooster/ojUse oj if available instead ActiveSupport::JSONDocument about lambda return value also being interpolatedFix lambda document exampleRemove redundant test for lookupFix specs for array interpolationAdd comments exaplining new array behaviour for #interpolateRefactor interpolation methodUpdate interpolation.rbInterpolate now works for arrayMerge pull request #391 from stereobooster/dont-store-tr-for-locales-not-set-as-availableFix CR notesDon't store translations for locales not set as availableRelease Notes
From the Github release:
2.2.2 / 2018-03-22
Make public
Loofah::HTML5::Scrub.force_correct_attribute_escaping!,which was previously a private method. This is so that downstream gems
(like rails-html-sanitizer) can use this logic directly for their own
attribute scrubbers should they need to address CVE-2018-8048.
Commits
See the full diff on Github. The new version differs by 47 commits:
version bump to 2.2.2Make public `force_correct_attribute_escaping!`use VersionInfo.instanceversion bump to 2.2.1update Manifest.txt and CHANGELOG.mdMerge branch 'flavorjones-remediate-attribute-escaping'tests and fix for CVE-2018-8048SECURITY.md to publish vuln reporting processbump the fake gemspecfix remaining rdoc format in READMEfix Hoe config to use README.mdversion bump to v2.2.0finishes previous logical commitconvert README from rdoc to markdownremove travis configupdate CHANGELOGMerge pull request #142 from eventfuel/added_list_type_style_to_css_propswhitelist CSS function `rgb`Added list-type-style as a safe CSS property to whitelist by default (replacement for PR #137)Merge branch 'pr136-block-level'update CHANGELOGtidy elements.rb, cover html5 block elementsupdate CHANGELOGMerge pull request #123 from eventfuel/enable_whitelisting_css_functionsMerge pull request #141 from david-a-wheeler/doc-xxeMerge pull request #138 from rmacklin/fix-inaccurate-example-in-readmeconcourse: fix rubinius buildsDocument doesn't use dangerous Nokogiri configFix inaccurate example in READMEadd html5 block-level elementsfrozen-string-literal support in testsupdate CHANGELOGMerge branch '127-nested-script-tags'handle nested script tagsupdate CHANGELOGMerge pull request #131 from baopham/add-symbolupdate CHANGELOGMerge pull request #134 from MothOnMars/whitelist_mainwhitelist HTML5 <main> elementconcourse: remove serialness of PR buildsconcourse: run PRs on all MRIsnest non-spec tests to avoid duplicate test runsAdd symbol to list of SVG_ELEMENTSMerge pull request #126 from aried3r/patch-1Update CHANGELOG.mdconcourse: add windows testsjruby shouldn't be a blocker to PR success for nowCommits
See the full diff on Github. The new version differs by 29 commits:
version bump to 1.8.2update CHANGELOGupdate CHANGELOGMerge pull request #1713 from sparklemotion/flavorjones-1238-segfault-reparented-entitiesensure EntityReferences ignore malformed childrenupdate CHANGELOGremove hacks to discover the path to `racc`Merge pull request #1704 from larskanis/win-ruby-2.5Appveyor: Add ruby-2.4 and ruby-head to build matrixWindows: Add cross build for ruby-2.5Merge branch '1688-upgrade-libxml-to-2.9.7'update CHANGELOGupdate libxslt from 1.1.30 to 1.1.32update libxml2 from 2.9.5 to 2.9.7update changelogMerge pull request #1674 from larskanis/serialize-default-utf8update changelogMerge pull request #1685 from jeremyevans/openbsdFix a couple of issues on OpenBSDMerge pull request #1676 from andrew-aladev/character-stack-vs-string-bufferreplaced StringBuffer with StringBuilder, because we don't need synchronization in handlerreplaced %i with regular array of symbols to fit ruby-1.9.3concourse: more coverage for PRsadded tests for html and xml sax parsers that will verify the order of parsed text itemsadded helper document that can test a strict order of items produced by parsersreplaced character stack with string buffer, fixed characters population mechanismconcourse: windows 2.4 buildconcourse: libxmlruby jobs repositioned ...Use UTF-8 as default encoding for Node#serializeCommits
See the full diff on Github. The new version differs by 9 commits:
Bumping versionwebrick: remove concurrent-ruby dev dependencyMerge pull request #1190 from hugoabonizio/masterMerge pull request #1193 from tompng/multipart_less_memoryMerge pull request #1192 from jkowens/masterMerge pull request #1179 from tompng/masterMerge pull request #1151 from cremno/simplify-some-string-creationsMerge pull request #1189 from lugray/fix_rack_lockRequire the right file for the digest we're usingRelease Notes
From the Github release:
1.0.0 / 2018-03-27
The first release in the 1.0.0 series. 🎉 For the 1.x releases, we will follow Semantic Versioning very strictly; please keep this in mind when submitting fixes/suggesting changes.
Breaking changes:
(Per Lundberg #223)
Minor enhancements / bug fixes:
(Edouard Chin #201)
sessionduringfollow_redirect!(Alexander Popov #218)
(Timur Platonov #220)
Commits
See the full diff on Github. The new version differs by more commits than we can show here.
Release Notes
From the Github release:
Commits
See the full diff on Github. The new version differs by 16 commits:
Prepare to 1.0.4 releaseMake sure we address CVE-2018-8048Remove rbx since it doesn't seem to install.Merge pull request #66 from fschwahn/improve-testsFix deprecation warning from MinitestMake tests pass again with recent nokogiri versionsRename test to better reflect what is actually testedtyposWe're still testing against ruby 1.9 and 2.0 that aren't supported by nokogiri 1.7activesupport 5 doesn't support ruby < 2.2.2 that are still tested in this repobundle with the newest released bundlerTest against newer released rubies[ci skip] Remove faulty overrides in scrubber example.[ci skip] Change override method in PermitScrubber.Merge pull request #47 from pvalena/patch-1Correct license filenameCommits
See the full diff on Github. The new version differs by 41 commits:
bump version to 12.3.1Fixed rdoc stylerubocop -aMerge pull request #262 from gfx/did_you_mean-v1.2.0support did_you_mean >= v1.2.0 which has a breaking change on formattersMerge pull request #252 from grzuy/fix_multitask_failuresPrefer #refute over negated #assertMerge pull request #259 from grzuy/fix_leading_whitespacesKeep original test case testing spaces in some argumentsMerge pull request #261 from aycabta/use-jruby-9.1.16.0Use JRuby 9.1.16.0Make space trimming consistent for all task arguments. Fixes #260Merge pull request #258 from grzuy/ruby_2_5_ciMerge pull request #254 from grzuy/remove_dup_inclusionmake AppVeyor test with ruby 2.5 alsoRemoves duplicated inclusion of Rake::DSLMerge pull request #256 from ruby/avoid-install-needless-depsTo use gem install insteaad of bundle installMerge pull request #253 from radar/patch-1Remove date field from rake.gemspecDon't run tasks if it depends on already invoked but failed task. Fixes #189rubocop -aMerge pull request #250 from dylanahsmith/re-raise-load-error-without-pathRe-raise a LoadError that didn't come from require in the test loaderMerge pull request #249 from esparta/fix_readme_minimal_ruby_version[skip ci] Fix minimal ruby version on READMErubocop -aMerge remote-tracking branch 'origin/v11'prefer to use %x literal instead of back-tickSupport non-bundler environmentMerge pull request #244 from aycabta/2.5.0Merge pull request #245 from aycabta/force-installation-bundlerForce installation BundlerUse 2.5.0 and more latest Ruby versionsMerge pull request #242 from stomar/ftp-publishingAdd missing information on FTP publishing to READMEMerge pull request #240 from aycabta/jruby-9.1.15.0Use JRuby 9.1.15.0 on .travis.ymlMerge pull request #239 from donv/patch-1[skip-ci] Fixed typobump release dateRelease Notes
From the Github release:
TZInfo v1.2.5 on RubyGems.org
Commits
See the full diff on Github. The new version differs by 10 commits:
Preparing v1.2.5.Update copyright years.Use Ruby 1.8 compatible syntax.Document that utc_offset and std_offset may be inaccurate with zoneinfo.Allow zoneinfo offset derivation to pick a negative std_offset.Don't store lazily-evaluated results if the object has been frozen.Remove unnecessary calls to Country.get in tests.Restore $SAFE after running a safe mode test (if possible).Disable Minitest's use of external diff tools during safe mode tests.Add Ruby 2.5.0 and update to the latest Ruby, JRuby and Rbx releases.Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with
@depfu rebase.