vuejs-rails-starterkit
vuejs-rails-starterkit copied to clipboard
Bump addressable from 2.7.0 to 2.8.1
Bumps addressable from 2.7.0 to 2.8.1.
Changelog
Sourced from addressable's changelog.
Addressable 2.8.1
- refactor
Addressable::URI.normalize_pathto address linter offenses (#430)- remove redundant colon in
Addressable::URI::CharacterClasses::AUTHORITYregex (#438)- update gemspec to reflect supported Ruby versions (#466, #464, #463)
- compatibility w/ public_suffix 5.x (#466, #465, #460)
- fixes "invalid byte sequence in UTF-8" exception when unencoding URLs containing non UTF-8 characters (#459)
Ractorcompatibility (#449)- use the whole string instead of a single line for template match (#431)
- force UTF-8 encoding only if needed (#341)
#460: sporkmonger/addressable#460 #463: sporkmonger/addressable#463 #464: sporkmonger/addressable#464 #465: sporkmonger/addressable#465 #466: sporkmonger/addressable#466
Addressable 2.8.0
- fixes ReDoS vulnerability in Addressable::Template#match
- no longer replaces
+with spaces in queries for non-http(s) schemes- fixed encoding ipv6 literals
- the
:compactedflag fornormalized_querynow dedupes parameters- fix broken
escape_componentalias- dropping support for Ruby 2.0 and 2.1
- adding Ruby 3.0 compatibility for development tasks
- drop support for
rack-mountand remove Addressable::Template#generate- performance improvements
- switch CI/CD to GitHub Actions
Commits
8657465Update version, gemspec, and CHANGELOG for 2.8.1 (#474)4fc5bb6CI: remove Ubuntu 18.04 job (#473)860fedeForce UTF-8 encoding only if needed (#341)99810afMerge pull request #431 from ojab/ct-_do_not_parse_multiline_strings7ce0f48Merge branch 'main' into ct-_do_not_parse_multiline_strings7ecf751Merge pull request #449 from okeeblow/freeze_concatenated_strings41f12ddMerge branch 'main' into freeze_concatenated_strings068f673Merge pull request #459 from jarthod/iso-encoding-problemb4c9882Merge branch 'main' into iso-encoding-problem08d27e8Merge pull request #471 from sporkmonger/sporkmonger-enable-codeql- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)