🚨 [security] Update rails-mermaid_erd 0.5.0 → 0.6.0 (major) #1409
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![depfu[bot]](https://avatars.githubusercontent.com/in/715?s=60&v=4){kind=small}
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
🚨 Your current dependencies have known security vulnerabilities 🚨
This dependency update fixes known security vulnerabilities. Please see the details below and assess their impact carefully. We recommend to merge and deploy this as soon as possible!
Here is everything you need to know about this update. Please take a good look at what changed and the test results before merging this pull request.
What changed?
✳️ rails-mermaid_erd (0.5.0 → 0.6.0) · Repo · Changelog
Release Notes
0.6.0
0.5.1
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 50 commits:
v0.6.0Merge pull request #135 from koedame/dependabot/bundler/rails-8.0.1Bump rails from 7.1.4.1 to 8.0.1Merge pull request #134 from koedame/dependabot/bundler/standard-1.43.0Bump standard from 1.42.1 to 1.43.0Merge pull request #130 from koedame/dependabot/bundler/pg-1.5.9Merge pull request #137 from koedame/dependabot/bundler/actionpack-7.1.5.1Bump actionpack from 7.1.4.1 to 7.1.5.1Merge pull request #133 from koedame/dependabot/bundler/rails-html-sanitizer-1.6.1Merge pull request #138 from koedame/feature/improve-erd-viewer-operationAdd control hintsAdd zoom and drag mouse controlsBump rails-html-sanitizer from 1.6.0 to 1.6.1Bump pg from 1.5.8 to 1.5.9Merge pull request #136 from koedame/feature/modernize-docker-composedocs: add language convention to development documentationFix coding styleUpdate nio4r to version 2.7.0Remove .devcontainerAdd development documentationUpdate GitHub Actions workflows for Docker Compose V2Rename compose files for Docker Compose V2Merge pull request #127 from koedame/release/v0.5.1Support Apple Silicon (ARM64)update RELEASE.mdv0.5.1Support Apple Silicon (ARM64)Merge pull request #126 from koedame/dependabot/bundler/rspec-rails-7.1.0Bump rspec-rails from 6.0.3 to 7.1.0Merge pull request #114 from koedame/dependabot/bundler/pg-1.5.8Merge pull request #112 from r7kamura/readme-require-falseMerge pull request #125 from koedame/dependabot/bundler/standard-1.42.1Bump standard from 1.39.0 to 1.42.1Merge pull request #100 from koedame/dependabot/bundler/rake-13.2.1Merge pull request #103 from koedame/dependabot/github_actions/actions/cache-4Merge pull request #120 from koedame/dependabot/bundler/actionmailer-7.1.4.1Merge pull request #122 from koedame/dependabot/bundler/webrick-1.8.2Merge pull request #119 from koedame/dependabot/bundler/rexml-3.3.9Merge pull request #115 from koedame/dependabot/bundler/tzinfo-data-1.2024.2Bump tzinfo-data from 1.2023.3 to 1.2024.2Bump webrick from 1.8.1 to 1.8.2Bump actionmailer from 7.1.3.4 to 7.1.4.1Bump rexml from 3.3.0 to 3.3.9Merge pull request #102 from koedame/dependabot/github_actions/github/codeql-action-3Bump github/codeql-action from 2 to 3Bump pg from 1.5.4 to 1.5.8Avoid unnecessary loading on Rails bootBump actions/cache from 3 to 4Bump rake from 13.0.6 to 13.2.1Merge pull request #96 from koedame/release/v0.5.0✳️ net-imap (0.5.1 → 0.5.4) · Repo
Release Notes
0.5.4
0.5.3
0.5.2
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 43 commits:
🔖 Bump version to 0.5.4🔀 Merge pull request #367 from ruby/RFC9394-PARTIAL📚 Document support for the `PARTIAL` extension✨ Add `partial` fetch modifier to uid_fetch✨ Add support for `PARTIAL` esearch result📚 Update `#search` rdoc (again!)🐛 Fix partial-range encoding of exclusive ranges📚 Fix documentation for `#fetch`🔖 Bump version to 0.5.3🔀 Merge pull request #329 from nevans/vanished✨ Support VANISHED response to #expunge✨ Add support for VANISHED responses🔀 Merge pull request #365 from ruby/fix-rdoc-issues📚 Fix rdoc-ref link syntax in `#search`📚 Fix rdoc method source styles🔖 Bump version to 0.5.2🔀 Merge pull request #333 from nevans/basic-esearch-support🥅 Workaround https://bugs.ruby-lang.org/issues/20956✨ Convert symbols & ranges in search return opts✨ Add keyword param for search `return` options✨ Gather ESEARCH response to #search/#uid_search✨ Parsing ESEARCH, with examples from RFC9051✅ Copy `assert_pattern` from minitest✨ Add keyword argument for search charset🔀 Merge pull request #363 from ruby/search-charset-conflict-raise-argument_error🥅 Raise ArgumentError on multiple search charset args♻️ Extract search_args from search_internal✅ Add some test coverage for search charset✨ Return empty SearchResult for no search result♻️ Extract superclass for (internal) command data📚 Consistent heading levels inside method rdoc✨ Add Data polyfill for ruby 3.1📚 Update IMAP#search docs again🔀 Merge pull request #359 from ruby/enable-windows-testSkip test_starttls_unknown_ca with WindowsEnabled windows-latest on GHA⬆️ Bump step-security/harden-runner from 2.10.1 to 2.10.2 (#357)📚💄 Fix rdoc 6.8 CSS styles📦 Add release.yml🔀 Merge pull request #354 from ruby/fix-README-example📚 Update README example to use MOVE extension📚 Fix broken example in README.md🔥 Drop YAML.unsafe_load_file refinement (tests only)✳️ rails (7.0.8.6 → 7.0.8.7) · Repo
Release Notes
7.0.8.7
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 3 commits:
Preparing for 7.0.8.7 releaseUpdate vendored trix version to 1.3.4Add CSP directive validationRelease Notes
7.0.8.7 (from changelog)
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 3 commits:
Preparing for 7.0.8.7 releaseUpdate vendored trix version to 1.3.4Add CSP directive validationRelease Notes
7.0.8.7 (from changelog)
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 3 commits:
Preparing for 7.0.8.7 releaseUpdate vendored trix version to 1.3.4Add CSP directive validationSecurity Advisories 🚨
🚨 Possible Content Security Policy bypass in Action Dispatch
Release Notes
7.0.8.7 (from changelog)
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 3 commits:
Preparing for 7.0.8.7 releaseUpdate vendored trix version to 1.3.4Add CSP directive validationRelease Notes
7.0.8.7 (from changelog)
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 3 commits:
Preparing for 7.0.8.7 releaseUpdate vendored trix version to 1.3.4Add CSP directive validationRelease Notes
7.0.8.7 (from changelog)
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 3 commits:
Preparing for 7.0.8.7 releaseUpdate vendored trix version to 1.3.4Add CSP directive validationRelease Notes
7.0.8.7 (from changelog)
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 3 commits:
Preparing for 7.0.8.7 releaseUpdate vendored trix version to 1.3.4Add CSP directive validationRelease Notes
7.0.8.7 (from changelog)
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 3 commits:
Preparing for 7.0.8.7 releaseUpdate vendored trix version to 1.3.4Add CSP directive validationRelease Notes
7.0.8.7 (from changelog)
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 3 commits:
Preparing for 7.0.8.7 releaseUpdate vendored trix version to 1.3.4Add CSP directive validationRelease Notes
7.0.8.7 (from changelog)
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 3 commits:
Preparing for 7.0.8.7 releaseUpdate vendored trix version to 1.3.4Add CSP directive validationRelease Notes
7.0.8.7 (from changelog)
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 3 commits:
Preparing for 7.0.8.7 releaseUpdate vendored trix version to 1.3.4Add CSP directive validationRelease Notes
1.13.1 (from changelog)
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 3 commits:
Bump version to 1.13.1Use -W:strict_unused_block when running tests on Ruby 3.4+Avoid spurious frozen string literal warnings on Ruby 3.4.0-preview2Release Notes
1.18.0
1.17.2
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by more commits than we can show here.
Release Notes
2.2.0 (from changelog)
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 15 commits:
Bump version to 2.2.0Update History for missed commitRemove unnecessary check for starting period in domain inside #valid?Use -W:strict_unused_block when running tests on Ruby 3.4+Fix spurious warnings in tests when using Rack 3.1Update History.mdfix: cookie-av allows arbitrary casingFix a couple spec failures on Ruby 3.4.0-preview2Fix array of cookies in response containing a blank cookieAdd Ruby 3.3 to CI and bump actions/checkout to v4Remove use of finalizer in Rack::Test::UploadedFile (Fixes #338)Prefer Dir.glob with blockStop testing Ruby 2.2 in CI as it no longer works with ubuntu-latestMove to actions/checkout@v3Add README.md to docRelease Notes
1.6.2
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 2 commits:
version bump to v1.6.2fix: PermitScrubber accepts frozen tagsRelease Notes
7.0.8.7 (from changelog)
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 3 commits:
Preparing for 7.0.8.7 releaseUpdate vendored trix version to 1.3.4Add CSP directive validationRelease Notes
0.4.3
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 9 commits:
Bump up v0.4.3Merge pull request #51 from Cosmicoppai/co/timeoutFixed version number of rubygems/release-gemMerge pull request #55 from ruby/dependabot/github_actions/step-security/harden-runner-2.10.2Merge pull request #54 from ruby/dependabot/github_actions/rubygems/release-gem-9e85cb11501bebc2ae661c1500176316d3987059Bump step-security/harden-runner from 2.10.1 to 2.10.2Bump rubygems/release-gemremoved the non numeric checkupdated doc stringDepfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with
@depfu rebase.All Depfu comment commands