Bumpsnokogiri from 1.14.3 to 1.15.6.
Release notes
Sourced fromnokogiri's releases.
1.15.6 / 2024-03-16
Note
This security release is a backport to the unsupported v1.15.x branch. Current stable is v1.16.x, which addressed the referenced CVE in v1.16.2 on 2024-02-04.
Security
Dependencies
sha256 checksums:
d79f713dffff149d60ab272d206a3ca96db2b891ab6a9f65362bfb78aface37a gems/nokogiri-1.15.6-aarch64-linux.gem62b5b7b387ec6c61c1ea5f889b7bc579eedd37f265f7cc1dc392484938549f1a gems/nokogiri-1.15.6-arm-linux.gemba93c63f5c03047778abf16c80676fe67e7eb7d871ab0aaa7e2c2dfe4ec20027 gems/nokogiri-1.15.6-arm64-darwin.gemd24639a546ba58c86d18da1ed124eaecbd45c5ae4c4dec41751b730a2b732ac3 gems/nokogiri-1.15.6-java.geme36887d89ec1b080e4a01dd2ff52650003db01d2a5edf5e6ab19e4c0bdb1385f gems/nokogiri-1.15.6-x64-mingw-ucrt.gem852c59a398499c8fcb6478d76396dcd50afa8f8902563b76265cd7dc90a731a1 gems/nokogiri-1.15.6-x64-mingw32.gem19e0a5fbfa4393353fbcf6801f8f62350b6e16f43c907680c5884896858a23a2 gems/nokogiri-1.15.6-x86-linux.gem9d464bbbaad6721a5a73181165fda67573f64ef2803c3337f6f733603e9d309a gems/nokogiri-1.15.6-x86-mingw32.gem32d045cdb0ce097e4543a5e7a79efd13ff05d904e32f4328732149dbea3c7f15 gems/nokogiri-1.15.6-x86_64-darwin.gem26a79da0377100d6938ae2f1b115230a8a4a4595e35b89164d8495af32091186 gems/nokogiri-1.15.6-x86_64-linux.gem70ce799b4b3e23b358501f1da3914f70b1c7a113fb12e96a7d53558481146e08 gems/nokogiri-1.15.6.gem
1.15.5 / 2023-11-17
Dependencies
sha256 checksums:
6dfa1d9837ddb233e234d56e244560ab1bc545d3d1744478060e18691f44ded7 nokogiri-1.15.5-aarch64-linux.geme3ac6608c6e1714bc11ff04e29a43fedf4cac2aea1bd88256cc3b927c06f347f nokogiri-1.15.5-arm-linux.gem4d7b15d53c0397d131376a19875aa97dd1c8b404c2c03bd2171f9b77e9592d40 nokogiri-1.15.5-arm64-darwin.gem5f87e71aaeb4f7479b94698737a0aacea77836b4805c7433b655e9565bd56cfe nokogiri-1.15.5-java.gem7612be800909ae51e0a7cfbe1f768757857a9ff0339686814ca67d9bae271ca2 nokogiri-1.15.5-x64-mingw-ucrt.gem</tr></table>
... (truncated)
Changelog
Sourced fromnokogiri's changelog.
1.15.6 / 2024-03-16
Security
Dependencies
1.15.5 / 2023-11-17
Dependencies
1.15.4 / 2023-08-11
Dependencies
Fixed
- Fixed a typo in a HTML5 parser error message.#2927 (
@anishathalye) - [CRuby]
ObjectSpace.memsize_of is now safe to call onDocuments with complex DTDs. In previous versions, this debugging method could result in a segfault. [#2923,#2924]
1.15.3 / 2023-07-05
Fixed
- Passing an object that is not a kind of
XML::Node as the first parameter toCDATA.new now raises aTypeError. Previously this would result in either a segfault (CRuby) or a Java exception (JRuby).#2920 - Passing an object that is not a kind of
XML::Node as the first parameter toSchema.from_document now raises aTypeError. Previously this would result in either a segfault (CRuby) or a Java exception (JRuby).#2920 - [CRuby] Passing an object that is not a kind of
XML::Node as the second parameter toText.new now raises aTypeError. Previously this would result in a segfault.#2920 - [CRuby] Replacing a node's children via methods like
Node#inner_html=,#children=, and#replace no longer defensively dups the node's next sibling if it is a Text node. This behavior was originally adopted to work around libxml2's memory management (see#283 and#595) but should not have included operations involvingxmlAddChild().#2916 - [JRuby] Fixed NPE when serializing an unparented HTML node. [#2559,#2895] (
@cbasguti)
1.15.2 / 2023-05-24
Dependencies
- [JRuby] Vendored org.nokogiri:nekodtd is updated to v0.1.11.noko2. This is functionally equivalent to v0.1.11.noko1 but restores support for Java 8.
... (truncated)
Commits
7ab6310 version bump to v1.15.6f8156b4 dep: update libxml to 2.11.7 (branch 1.15.x) (#3154)9827619 ci: pin to a version of bundler that works across supported rubies83a2571 dep: bump libxml to v2.11.75745d4b version bump to v1.15.5da2d908 ci: add ruby version to vendored libs cache key (backport) (#3029)0f56450 ci: add ruby version to vendored libs cache key (#3028)32b2c35 dep: update libxml to 2.11.5 and libxslt to 1.1.39 (v1.15.x) (#3025)b8f7e16 ci: skip the BSD builds for nowaa3208b dep: update libxml to 2.11.5 and libxslt to 1.1.39- Additional commits viewable incompare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting@dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR@dependabot recreate will recreate this PR, overwriting any edits that have been made to it@dependabot merge will merge this PR after your CI passes on it@dependabot squash and merge will squash and merge this PR after your CI passes on it@dependabot cancel merge will cancel a previously requested merge and block automerging@dependabot reopen will reopen this PR if it is closed@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from theSecurity Alerts page.
Bumpsnokogiri from 1.14.3 to 1.15.6.
Release notes
Sourced fromnokogiri's releases.
... (truncated)
Changelog
Sourced fromnokogiri's changelog.
... (truncated)
Commits
7ab6310version bump to v1.15.6f8156b4dep: update libxml to 2.11.7 (branch 1.15.x) (#3154)9827619ci: pin to a version of bundler that works across supported rubies83a2571dep: bump libxml to v2.11.75745d4bversion bump to v1.15.5da2d908ci: add ruby version to vendored libs cache key (backport) (#3029)0f56450ci: add ruby version to vendored libs cache key (#3028)32b2c35dep: update libxml to 2.11.5 and libxslt to 1.1.39 (v1.15.x) (#3025)b8f7e16ci: skip the BSD builds for nowaa3208bdep: update libxml to 2.11.5 and libxslt to 1.1.39Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from theSecurity Alerts page.