apexdata
apexdata copied to clipboard
Bump inline_svg from 1.5.2 to 1.7.2
Bumps inline_svg from 1.5.2 to 1.7.2.
Release notes
Sourced from inline_svg's releases.
v1.7.2
See the CHANGELOG entry for this release.
v1.7.1
Fixed
- Static Asset Finder uses pathname for compatibility with Sprockets 4+. #106. Thanks
@subdigitalv1.7.0
Added
- WebpackAssetFinder serves files from dev server if one is running. #111. Thanks,
@connorsheaFixed
- Using Webpacker and Asset Pipeline in a single App could result in SVGs not being found because the wrong
AssetFinderwas used. #114. Thanks,@kylefox- Prevent "EOFError error" when using webpack dev server over HTTPS #113. Thanks,
@kylefoxv1.6.0
Added
Changelog
Sourced from inline_svg's changelog.
[1.7.2] - 2020-12-07
Fixed
- Improve performance of
CachedAssetFile. #118. Thanks@stevendaniels- Avoid XSS by preventing malicious input of filenames. #117. Thanks
@pbyrne.[1.7.1] - 2020-03-17
Fixed
- Static Asset Finder uses pathname for compatibility with Sprockets 4+. #106. Thanks
@subdigital[1.7.0] - 2020-02-13
Added
- WebpackAssetFinder serves files from dev server if one is running. #111. Thanks,
@connorsheaFixed
- Using Webpacker and Asset Pipeline in a single App could result in SVGs not being found because the wrong
AssetFinderwas used. #114. Thanks,@kylefox- Prevent "EOFError error" when using webpack dev server over HTTPS #113. Thanks,
@kylefox[1.6.0] - 2019-11-13
Added
Commits
17ae73aMerge pull request #123 from jamesmartin/1729bed179Know what's changed in 1.7.2325a456Bump version for 1.7.223dcb64Merge branch 'main' of https://github.com/jamesmartin/inline_svg into maindbf4fd1Point to new default branch0c2a016Merge pull request #121 from bartosjiri/mastera566265Add fallback optioned19d7cOnly call html_escape_once when it exists.44b77d9Know what's unreleased.7c303a0Merge pull request #117 from pbyrne/xss- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -
@dependabot use these labelswill set the current labels as the default for future PRs for this repo and language -
@dependabot use these reviewerswill set the current reviewers as the default for future PRs for this repo and language -
@dependabot use these assigneeswill set the current assignees as the default for future PRs for this repo and language -
@dependabot use this milestonewill set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.