posko
posko copied to clipboard
Bump rubyzip from 1.2.3 to 1.3.0
Bumps rubyzip from 1.2.3 to 1.3.0.
Release notes
Sourced from rubyzip's releases.
v1.3.0
Security
- Add
validate_entry_sizesoption so that callers can trust an entry's reported size when usingextract#403
- This option defaults to
falsefor backward compatibility in this release, but you are strongly encouraged to set it totrue. It will default totruein rubyzip 2.0.New Feature
- Add
add_storedmethod to simplify adding entries without compression #366Tooling / Documentation
- Add more gem metadata links #402
v1.2.4
- Do not rewrite zip files opened with
open_bufferthat have not changed #360Tooling / Documentation
Changelog
Sourced from rubyzip's changelog.
1.3.0 (2019-09-25)
Security
- Add
validate_entry_sizesoption so that callers can trust an entry's reported size when usingextract#403
- This option defaults to
falsefor backward compatibility in this release, but you are strongly encouraged to set it totrue. It will default totruein rubyzip 2.0.New Feature
- Add
add_storedmethod to simplify adding entries without compression #366Tooling / Documentation
- Add more gem metadata links #402
1.2.4 (2019-09-06)
- Do not rewrite zip files opened with
open_bufferthat have not changed #360Tooling / Documentation
Commits
-
e79d9eaMerge pull request #407 from rubyzip/v1-3-0 -
7c65e1eBump version to 1.3.0 -
d65fe7bMerge pull request #403 from rubyzip/check-size -
97cb6aeWarn when an entry size is invalid -
7849f73Default validate_entry_sizes to false for 1.3 release -
4167f0cValidate entry sizes when extracting -
94b7fa2[ci skip] Update changelog -
93505caCheck expected entry size in add_stored test -
6619bf3Merge pull request #366 from hainesr/add-stored -
ecb2776Zip::File.add_stored() to add uncompressed files. - Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot ignore this [patch|minor|major] versionwill close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -
@dependabot use these labelswill set the current labels as the default for future PRs for this repo and language -
@dependabot use these reviewerswill set the current reviewers as the default for future PRs for this repo and language -
@dependabot use these assigneeswill set the current assignees as the default for future PRs for this repo and language -
@dependabot use this milestonewill set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.