manageiq-ui-service Bump jquery from 3.4.1 to 3.6.4

Bumps jquery from 3.4.1 to 3.6.4.

Release notes

jQuery 3.6.4 Released: Selector Forgiveness

https://blog.jquery.com/2023/03/08/jquery-3-6-4-released-selector-forgiveness/

jQuery supports CSS.supports in jQuery 3.6.3

https://blog.jquery.com/2022/12/20/jquery-3-6-3-released-a-quick-selector-fix/

jQuery 3.6.2 :has arrived!

https://blog.jquery.com/2022/12/13/jquery-3-6-2-released/

jQuery 3.6.1 Maintenance Release

https://blog.jquery.com/2022/08/26/jquery-3-6-1-maintenance-release/

jQuery 3.6.0 Released!

https://blog.jquery.com/2021/03/02/jquery-3-6-0-released/

jQuery 3.5.0 Released!

See the blog post: https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ and the upgrade guide: https://jquery.com/upgrade-guide/3.5/

NOTE: Despite being a minor release, this update includes a breaking change that we had to make to fix a security issue ( CVE-2020-11022). Please follow the blog post & the upgrade guide for more details.

Commits

2f0ac82 3.6.4
25ee194 Release: add support for md5 sums in windows
dbe09e3 Build: Update Sizzle from 2.3.9 to 2.3.10
a0d68b8 Build: Updating the 3.6-stable version to 3.6.4-pre.
81d5bd1 Build: remove stale Insight package from custom builds
8989500 Selector: Update Sizzle from 2.3.8 to 2.3.9
2c5b47c Build: Updating the 3.x-stable version to 3.6.3-pre.
2215119 Release: update authors
0d9fae4 Build: Limit permissions for GitHub workflows
f4809f9 Build: Test on Node.js 18 & 19, stop testing on Node 12
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.

May 16 '24 20:05 dependabot[bot]

Checked commit https://github.com/ManageIQ/manageiq-ui-service/commit/65b6d091cdf8259d7fbf5d9853ae7299270ca78a with ruby 2.7.8, rubocop 1.56.3, haml-lint 0.51.0, and yamllint 0 files checked, 0 offenses detected Everything looks fine. :cake:

May 16 '24 20:05 miq-bot

Superseded by #1905.

May 24 '24 16:05 dependabot[bot]

This pull request is not mergeable. Please rebase and repush.

May 24 '24 16:05 miq-bot