Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the patch-and-minor-dependencies group across 1 directory with 6 updates #128

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 1, 2024

Bumps the patch-and-minor-dependencies group with 6 updates in the / directory:

Package From To
rake 13.1.0 13.2.1
roda 3.76.0 3.80.0
htmlbeautifier 1.4.2 1.4.3
rubocop 1.60.2 1.64.1
yard 0.9.34 0.9.36
minitest 5.21.2 5.23.1

Updates rake from 13.1.0 to 13.2.1

Changelog

Sourced from rake's changelog.

=== 13.2.1

  • Suppressed "internal:array:52:in 'Array#each'" from backtrace by @​hsbt in #554
  • Bump actions/configure-pages from 4 to 5 by @​dependabot in #553

=== 13.2.0

Commits
  • d84f6ef Bump up 13.2.1
  • 8b33b36 Merge pull request #553 from ruby/dependabot/github_actions/actions/configure...
  • 99f6823 Merge pull request #554 from ruby/suppress-array-internal
  • 54950e0 Suppressed "<internal:array>:52:in 'Array#each'" from backtrace
  • 675498c Bump up 13.2.0
  • 3dc4277 Bump actions/configure-pages from 4 to 5
  • c68e010 Merge pull request #549 from ruby/dependabot/github_actions/dependabot/fetch-...
  • 2cb46b6 Merge pull request #551 from andrykonchin/ak/restore-truffleruby-on-ci
  • c342e96 Add TruffleRuby on CI
  • d569f0f Merge pull request #550 from ruby/dependabot/github_actions/ruby/setup-ruby-1...
  • Additional commits viewable in compare view

Updates roda from 3.76.0 to 3.80.0

Changelog

Sourced from roda's changelog.

= master

  • Correctly parse Ruby 3.4 backtraces in exception_page plugin (jeremyevans)

  • Support :until and :seconds option in hmac_paths plugin, for paths valid only until a specific time (jeremyevans)

= 3.80.0 (2024-05-10)

  • Support :namespace option in hmac_paths plugin, allowing for easy per-user/per-group HMAC paths (jeremyevans)

= 3.79.0 (2024-04-12)

  • Do not update template mtime when there is an error reloading templates in the render plugin (jeremyevans)

  • Add hmac_paths plugin for preventing path enumeration and supporting access control (jeremyevans)

= 3.78.0 (2024-03-13)

  • Add permissions_policy plugin for setting Permissions-Policy header (jeremyevans)

= 3.77.0 (2024-02-12)

  • Support formaction/formmethod attributes in forms in route_csrf plugin (jeremyevans)

= 3.76.0 (2024-01-12)

  • Support :filter plugin option in error_mail and error_email for filtering parameters, environment variables, and session values (jeremyevans) (#346)

  • Set temporary name on Ruby 3.3 in middleware plugin for middleware class created (janko) (#344)

  • Add break plugin, for using break inside a routing block to return from the block and keep routing (jeremyevans)

= 3.75.0 (2023-12-14)

  • Add cookie_flags plugin, for overriding, warning, or raising for incorrect cookie flags (jeremyevans)

= 3.74.0 (2023-11-13)

  • Add redirect_http_to_https plugin, helping to ensure future requests from the browser are submitted via HTTPS (jeremyevans)

= 3.73.0 (2023-10-13)

  • Support :next_if_not_found option for middleware plugin (jeremyevans) (#334)

  • Remove dependency on base64 library from sessions and route_csrf plugin, as it will not be part of the standard library in Ruby 3.4+ (jeremyevans)

= 3.72.0 (2023-09-12)

  • Add invalid_request_body plugin for custom handling of invalid request bodies (jeremyevans)

... (truncated)

Commits
  • b9a91aa Bump version to 3.80.0
  • e2ef45b Support :namespace option in hmac_paths plugin, allowing for easy per-user/pe...
  • 446633c Bump version to 3.79.0
  • 0a2e9fc Fix hmac_paths documentation
  • cd7caf3 Do not update template mtime when there is an error reloading templates in th...
  • f6cc4d9 Make recheck_precompiled_assets spec temp directory same as assets spec temp ...
  • f55eab3 Add hmac_paths plugin for preventing path enumeration and supporting access c...
  • e4c736b Bump version to 3.78.0
  • f812deb Add link to permissions_policy plugin to documentation page
  • 3a76f9f Update permissions_policy documentation and code examples
  • Additional commits viewable in compare view

Updates htmlbeautifier from 1.4.2 to 1.4.3

Commits
  • 9738604 Version 1.4.3
  • 3d75d9b Make README input and output clearer
  • d438227 Merge pull request #75 from tomclose/master
  • 6055ecb Indent case statements
  • 3a3cf72 Merge branch 'ruby-standard'
  • ed056d0 Apply formatting rules from the Standard project
  • 1a15089 Merge pull request #79 from andyw8/andyw8/fix-rubocop-failures
  • 1c80785 Fix failures on latest RuboCop version
  • See full diff in compare view

Updates rubocop from 1.60.2 to 1.64.1

Release notes

Sourced from rubocop's releases.

RuboCop 1.64.1

Bug fixes

  • #12951: Fix an error for Style/Copyright when AutocorrectNotice is missing. (@​koic)
  • #12932: Fix end position of diagnostic for LSP. (@​ksss)
  • #12926: Fix a false positive for Style/SuperArguments when the methods block argument is reassigned before super. (@​earlopain)
  • #12931: Fix false positives for Style/RedundantLineContinuation when line continuations involve break, next, or yield with a return value. (@​koic)
  • #12924: Fix false positives for Style/SendWithLiteralMethodName when public_send argument is a method name that cannot be autocorrected. (@​koic)

RuboCop 1.64

New features

Bug fixes

  • #7189: Fix a false positive for Style/Copyright when using multiline copyright notice. (@​koic)
  • #12914: Fix a false negative for Layout/EmptyComment when using an empty comment next to code after comment line. (@​koic)
  • #12919: Fix false negatives for Style/ArgumentsForwarding when forward target is super. (@​koic)
  • #12923: Fix false negatives for Style/ArgumentsForwarding when forward target is safe navigation method. (@​koic)
  • #12894: Fix false positives for Style/MapIntoArray when using each without receiver with << to build an array. (@​koic)
  • #12876: Fix an error for the lockfile parser if a gemfile exists but a lockfile doesn't. (@​earlopain)
  • #12888: Fix --no-exclude-limit generating a todo with Max config instead of listing everything out with Exclude. (@​earlopain)
  • #12898: Fix an error for TargetRailsVersion when parsing from the lockfile with prerelease rails. (@​earlopain)

Changes

  • #12908: Add rubocop-rspec back to suggested extensions when rspec-rails is in use. (@​pirj)
  • #12884: Align output from cop.documentation_url with --show-docs-url when passing a config as argument. (@​earlopain)
  • #12905: Support ActiveSupportExtensionsEnabled for Style/SymbolProc. (@​koic)
  • #12897: Respect user's intentions with workspace/executeCommand LSP method. (@​koic)

RuboCop 1.63.5

Bug fixes

... (truncated)

Changelog

Sourced from rubocop's changelog.

1.64.1 (2024-05-31)

Bug fixes

  • #12951: Fix an error for Style/Copyright when AutocorrectNotice is missing. ([@​koic][])
  • #12932: Fix end position of diagnostic for LSP. ([@​ksss][])
  • #12926: Fix a false positive for Style/SuperArguments when the methods block argument is reassigned before super. ([@​earlopain][])
  • #12931: Fix false positives for Style/RedundantLineContinuation when line continuations involve break, next, or yield with a return value. ([@​koic][])
  • #12924: Fix false positives for Style/SendWithLiteralMethodName when public_send argument is a method name that cannot be autocorrected. ([@​koic][])

1.64.0 (2024-05-23)

New features

  • #12904: Add new either_consistent SupportedShorthandSyntax to Style/HashSyntax. ([@​pawelma][])
  • #12842: Add new Style/SendWithLiteralMethodName cop. ([@​koic][])
  • #12309: Add new Style/SuperArguments cop. ([@​earlopain][])
  • #12917: Suggest correct formatter name for --format command line option. ([@​koic][])
  • #12242: Support AllowModifiersOnAttrs option for Style/AccessModifierDeclarations. ([@​krororo][])
  • #11585: Support AllowedMethods for Style/DocumentationMethod. ([@​koic][])

Bug fixes

  • #7189: Fix a false positive for Style/Copyright when using multiline copyright notice. ([@​koic][])
  • #12914: Fix a false negative for Layout/EmptyComment when using an empty comment next to code after comment line. ([@​koic][])
  • #12919: Fix false negatives for Style/ArgumentsForwarding when forward target is super. ([@​koic][])
  • #12923: Fix false negatives for Style/ArgumentsForwarding when forward target is safe navigation method. ([@​koic][])
  • #12894: Fix false positives for Style/MapIntoArray when using each without receiver with << to build an array. ([@​koic][])
  • #12876: Fix an error for the lockfile parser if a gemfile exists but a lockfile doesn't. ([@​earlopain][])
  • #12888: Fix --no-exclude-limit generating a todo with Max config instead of listing everything out with Exclude. ([@​earlopain][])
  • #12898: Fix an error for TargetRailsVersion when parsing from the lockfile with prerelease rails. ([@​earlopain][])

Changes

  • #12908: Add rubocop-rspec back to suggested extensions when rspec-rails is in use. ([@​pirj][])
  • #12884: Align output from cop.documentation_url with --show-docs-url when passing a config as argument. ([@​earlopain][])
  • #12905: Support ActiveSupportExtensionsEnabled for Style/SymbolProc. ([@​koic][])
  • #12897: Respect user's intentions with workspace/executeCommand LSP method. ([@​koic][])

1.63.5 (2024-05-09)

Bug fixes

  • #12877: Fix an infinite loop error for Layout/FirstArgumentIndentation when specifying EnforcedStyle: with_fixed_indentation of Layout/ArrayAlignment. ([@​koic][])
  • #12873: Fix an error for Metrics/BlockLength when the CountAsOne config is invalid. ([@​koic][])
  • #12881: Fix incorrect autocorrect when Style/NumericPredicate is used with negations. ([@​fatkodima][])
  • #12882: Fix Layout/CommentIndentation for comment-only pattern matching. ([@​nekketsuuu][])

1.63.4 (2024-04-28)

... (truncated)

Commits

Updates yard from 0.9.34 to 0.9.36

Release notes

Sourced from yard's releases.

Release v0.9.36

  • Further XSS fixes for generated frameset pages (#1538)
  • Improve tests for Ruby 3.3 compatibility (#1519, #1531)
  • Documentation improvements (#1524)

Release v0.9.35

  • Fix possible XSS on generated YARD frameset pages (thanks to @​RedYetiDev for finding and patching) (2069e2b).
  • Fix errors when using @option on non-method objects (#1508)
  • Support Ruby 3.3 changes in Ripper parser (#1510)
Changelog

Sourced from yard's changelog.

0.9.36 - February 29th, 2024

  • Further XSS fixes for generated frameset pages (#1538)
  • Improve tests for Ruby 3.3 compatibility (#1519, #1531)
  • Documentation improvements (#1524)

0.9.35 - February 28th, 2024

  • Fix possible XSS on generated YARD frameset pages (thanks to @​RedYetiDev for finding and patching) (2069e2b).
  • Fix errors when using @option on non-method objects (#1508)
  • Support Ruby 3.3 changes in Ripper parser (#1510)
Commits

Updates minitest from 5.21.2 to 5.23.1

Changelog

Sourced from minitest's changelog.

=== 5.23.1 / 2024-05-21

  • 1 bug fix:

    • Fully qualify the Queue class to avoid conflicts with other libraries. (rafaelfranca)

=== 5.23.0 / 2024-05-15

  • 3 minor enhancements:

    • Added -Werror to raise on any warning output. (byroot)
    • Added UnexpectedWarning as a failure summary type, added count to output if activated.
    • Added minitest/manual_plugins.rb w/ new Minitest.load method. (tenderlove)
  • 2 bug fixes:

    • Allow empty_run! and reporter to display summary for empty runs. (zzak)
    • Make test task verbose using either rake's -v or -t (was just -t).

=== 5.22.3 / 2024-03-13

  • 1 minor enhancement:

    • MASSIVE improvement of minitest's pride plugin output: Frequencies doubled! Sine waves shifted!! Comments improved!!! Colors rotated!!!! (havenwood)
  • 3 bug fixes:

    • Improved wording on Minitest::Test#parallelize_me! to clarify it goes INSIDE your test class/describe.
    • Minor changes to tests to pass when tests ran with extra flags (eg -p).
    • Support Ruby 3.4's new error message format. (mame)

=== 5.22.2 / 2024-02-07

  • 1 bug fix:

    • Third time's a charm? Remember: 'ensure' is almost always the wrong way to go (for results... it's great for cleaning up).

=== 5.22.1 / 2024-02-06

  • 1 bug fix:

    • Don't exit non-zero if no tests ran and no filter (aka, the test file is empty). (I'm starting to think the exit 1 thing for @​tenderlove was a mistake...)

=== 5.22.0 / 2024-02-05

  • 1 minor enhancement:

    • Added "did you mean" output if your --name filter matches nothing. (tenderlove)

... (truncated)

Commits
  • 7ad0ff0 prepped for release
  • f60c6f2 - Fully qualify the Queue class to avoid conflicts with other libraries. (raf...
  • b04feec Branching minitest to version 5.23.0
  • f0f17b9 + Added -Werror to raise on any warning output. (byroot)
  • 609f1ad Added testW0 rake task.
  • d6f62b9 Fixed specs task for pattern_match expectation mapping.
  • 56f5068 OMG... Rake.verbose returns Object.new if unset. Fixed by ruby/rake#567, but ...
  • 3f14f2a Updated versions/EOL for ruby/rails in readme
  • b2a4b43 + Added minitest/manual_plugins.rb w/ new Minitest.load method. (tenderlove)
  • 6a8f348 - Make test task verbose using either rake's -v or -t (was just -t).
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates

Bumps the patch-and-minor-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [rake](https://github.com/ruby/rake) | `13.1.0` | `13.2.1` |
| [roda](https://github.com/jeremyevans/roda) | `3.76.0` | `3.80.0` |
| [htmlbeautifier](https://github.com/threedaymonk/htmlbeautifier) | `1.4.2` | `1.4.3` |
| [rubocop](https://github.com/rubocop/rubocop) | `1.60.2` | `1.64.1` |
| [yard](https://github.com/lsegal/yard) | `0.9.34` | `0.9.36` |
| [minitest](https://github.com/minitest/minitest) | `5.21.2` | `5.23.1` |



Updates `rake` from 13.1.0 to 13.2.1
- [Release notes](https://github.com/ruby/rake/releases)
- [Changelog](https://github.com/ruby/rake/blob/master/History.rdoc)
- [Commits](ruby/rake@v13.1.0...v13.2.1)

Updates `roda` from 3.76.0 to 3.80.0
- [Changelog](https://github.com/jeremyevans/roda/blob/master/CHANGELOG)
- [Commits](jeremyevans/roda@3.76.0...3.80.0)

Updates `htmlbeautifier` from 1.4.2 to 1.4.3
- [Changelog](https://github.com/threedaymonk/htmlbeautifier/blob/master/History.txt)
- [Commits](threedaymonk/htmlbeautifier@v1.4.2...v1.4.3)

Updates `rubocop` from 1.60.2 to 1.64.1
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.60.2...v1.64.1)

Updates `yard` from 0.9.34 to 0.9.36
- [Release notes](https://github.com/lsegal/yard/releases)
- [Changelog](https://github.com/lsegal/yard/blob/main/CHANGELOG.md)
- [Commits](lsegal/yard@v0.9.34...v0.9.36)

Updates `minitest` from 5.21.2 to 5.23.1
- [Changelog](https://github.com/minitest/minitest/blob/master/History.rdoc)
- [Commits](minitest/minitest@v5.21.2...v5.23.1)

---
updated-dependencies:
- dependency-name: rake
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor-dependencies
- dependency-name: roda
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor-dependencies
- dependency-name: htmlbeautifier
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor-dependencies
- dependency-name: rubocop
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor-dependencies
- dependency-name: yard
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor-dependencies
- dependency-name: minitest
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 1, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 15, 2024

Superseded by #129.

@dependabot dependabot bot closed this Jun 15, 2024
@dependabot dependabot bot deleted the dependabot/bundler/patch-and-minor-dependencies-72109ce403 branch June 15, 2024 09:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant