Skip to content
This repository was archived by the owner on Dec 24, 2019. It is now read-only.

Update web-console: 3.5.1 → 3.7.0 (minor) #81

Open
depfu wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Update web-console: 3.5.1 → 3.7.0 (minor) #81

depfu wants to merge 1 commit into from

Conversation

@depfu
Copy link

@depfu depfu bot commented Sep 2, 2018

We've updated a dependency and here is what you need to know:

name version specification old version new version
web-console >= 3.3.0 3.5.1 3.7.0

Additionally, the update changed a few other dependencies as well:

action name old version new version
updated crass 1.0.3 1.0.4
updated erubi 1.7.0 1.7.1
updated i18n 0.9.1 0.9.5
updated loofah 2.1.1 2.2.2
updated minitest 5.10.3 5.11.3
updated nokogiri 1.8.1 1.8.4
updated rack 2.0.3 2.0.5
updated rack-test 0.7.1 1.1.0
updated rails-html-sanitizer 1.0.3 1.0.4
updated rake 12.3.0 12.3.1
updated tzinfo 1.2.4 1.2.5

You should probably take a good look at the info here and the test results before merging this pull request, of course.

What changed?

✳️ web-console (3.5.1 → 3.7.0) · Repo · Changelog

Release Notes

3.7.0

3.6.1

  • #252 Fix improper injection in Rack bodies like ActionDispatch::Response::RackBody (@gsamokovarov)
Commits

See the full diff on Github. The new version differs by 48 commits:

↗️ crass (indirect, 1.0.3 → 1.0.4) · Repo · Changelog

Release Notes

1.0.4

Commits

See the full diff on Github. The new version differs by 5 commits:

↗️ erubi (indirect, 1.7.0 → 1.7.1) · Repo · Changelog

Commits

See the full diff on Github. The new version differs by 7 commits:

↗️ i18n (indirect, 0.9.1 → 0.9.5) · Repo · Changelog

Release Notes

0.9.5

  • #404 reported a regression in 0.9.3, which wasn't fixed by 0.9.4. #408 fixes this issue.

Thanks @wjordan!

0.9.4

  • Fixed a regression with chained backends introduced in v0.9.3 (#402) - #405 - bug report / #407 - PR to fix
  • Optimize Backend::Simple#available_locales - reports are that this is now 4x faster than previously - #406

0.9.3

(For those wondering where v0.9.2 went: I got busy after I pushed the commit for the release, so there was no gem release that day. I am not busy today, so here is v0.9.3 in its stead. This changelog contains changes from v0.9.1 -> v0.9.3)

  • I18n no longer stores translations for unavailable locales. #391.
  • Added the ability to interpolate with arrays #395.
  • Documentation for lambda has been corrected. #396
  • I18n will use oj -- a faster JSON library -- but only if it is available. #398
  • Fixed an issue with translate and default: [false] as an option. #399
  • Fixed an issue with translate with nil and empty keys. #400
  • Fix issue with disabled subtrees and pluralization for KeyValue backend #402

Thank you to @stereobooster, @fatkodima and @lulalala for the patches that went towards this release. We appreciate your efforts!

Commits

See the full diff on Github. The new version differs by 34 commits:

↗️ loofah (indirect, 2.1.1 → 2.2.2) · Repo · Changelog

Release Notes

2.2.2

2.2.2 / 2018-03-22

Make public Loofah::HTML5::Scrub.force_correct_attribute_escaping!,
which was previously a private method. This is so that downstream gems
(like rails-html-sanitizer) can use this logic directly for their own
attribute scrubbers should they need to address CVE-2018-8048.

Commits

See the full diff on Github. The new version differs by 47 commits:

↗️ minitest (indirect, 5.10.3 → 5.11.3) · Repo · Changelog

↗️ nokogiri (indirect, 1.8.1 → 1.8.4) · Repo · Changelog

Commits

See the full diff on Github. The new version differs by more commits than we can show here.

↗️ rack (indirect, 2.0.3 → 2.0.5) · Repo · Changelog

Commits

See the full diff on Github. The new version differs by 14 commits:

↗️ rack-test (indirect, 0.7.1 → 1.1.0) · Repo · Changelog

Release Notes

1.1.0

1.1.0 / 2018-07-21

  • Breaking changes:

    • None

  • Minor enhancements / new functionality:

    • [GitHub] Added configuration for Stale (Per Lundberg #232)
    • follow_direct: Include rack.session.options (Mark Edmondson #233)
    • [CI] Add simplecov (fatkodima #227)

Bug fixes:

  • Follow relative locations correctly. (Samuel Williams #230)

1.0.0

1.0.0 / 2018-03-27

  • The first release in the 1.0.0 series. 🎉 For the 1.x releases, we will follow Semantic Versioning very strictly; please keep this in mind when submitting fixes/suggesting changes.

  • Breaking changes:

    • Always set CONTENT_TYPE for non-GET requests
      (Per Lundberg #223)

  • Minor enhancements / bug fixes:

    • Create tempfile using the basename without extension
      (Edouard Chin #201)
    • Save session during follow_redirect!
      (Alexander Popov #218)
    • Document how to use URL params with DELETE method
      (Timur Platonov #220)

0.8.3

0.8.3 / 2018-02-27

  • Bug fixes:

    • Do not set Content-Type if params are explicitly set to nil
      (Bartek Bułat #212). Fixes #200.
    • Fix UploadedFile#new regression
      (Per Lundberg #215)

  • Minor enhancements

    • [CI] Test against Ruby 2.5 (Nicolas Leger #217)

0.8.2

0.8.2 / 2017-11-21

  • Bug fixes:
    • Bugfix for UploadedFile.new unintended API breakage.
      (Per Lundberg #210)
Commits

See the full diff on Github. The new version differs by 5 commits:

↗️ rails-html-sanitizer (indirect, 1.0.3 → 1.0.4) · Repo · Changelog

Commits

See the full diff on Github. The new version differs by 16 commits:

↗️ rake (indirect, 12.3.0 → 12.3.1) · Repo · Changelog

Commits

See the full diff on Github. The new version differs by 41 commits:

↗️ tzinfo (indirect, 1.2.4 → 1.2.5) · Repo · Changelog

Release Notes

1.2.5

  • Support recursively (deep) freezing Country and Timezone instances. #80.
  • Allow negative daylight savings time offsets to be derived when reading from zoneinfo files. The utc_offset and std_offset are now derived correctly for Europe/Dublin in the 2018a and 2018b releases of the Time Zone Database.

TZInfo v1.2.5 on RubyGems.org

Commits

See the full diff on Github. The new version differs by 10 commits:

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

Depfu Status

@depfu depfu bot added the depfu label Sep 2, 2018
@depfu depfu bot mentioned this pull request Sep 2, 2018
Closed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

depfu

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant