TampaDevs / jobsyn

Syndication for posts on https://jobs.tampa.dev/
3 stars 0 forks source link

Bump sqlite3 from 1.6.3 to 1.6.7 #23

Closed dependabot[bot] closed 10 months ago

dependabot[bot] commented 11 months ago

Bumps sqlite3 from 1.6.3 to 1.6.7.

Release notes

Sourced from sqlite3's releases.

1.6.7 / 2023-10-10

Dependencies

Vendored sqlite is updated to v3.43.2.

Upstream release notes:

  • Fix a couple of obscure UAF errors and an obscure memory leak.
  • Omit the use of the sprintf() function from the standard library in the CLI, as this now generates warnings on some platforms.
  • Avoid conversion of a double into unsigned long long integer, as some platforms do not do such conversions correctly.

Added

  • Compile packaged sqlite3 with additional flags to explicitly enable FTS5, and set synchronous mode to normal when in WAL mode. #408 (@​flavorjones)

sha256 checksums:

c0a2523a982176f1f24201af2ac7a3b576598c9fc4eb4eff37cd6eccb5442601  sqlite3-1.6.7-aarch64-linux.gem
2d7487ae8260a23a58a7140252d63c6e2b93738ef4cd8e69f8d737663ca98845  sqlite3-1.6.7-arm-linux.gem
ccc3418105e1365f7ad0f6a253c54945c7b39c9823325be0dfd6b7648b2593a6  sqlite3-1.6.7-arm64-darwin.gem
d9ff6f69cb1b7d2d408098086957bf0af109c821ea65359c1070af4aa828b55b  sqlite3-1.6.7-x64-mingw-ucrt.gem
2672cc318063fc0c9bcdb0bf9fe914a550a9545fa18ec4c3a1246a9c8d2f7e3a  sqlite3-1.6.7-x64-mingw32.gem
adf7adb774c687c6f2881659c2d5ce9d30466fbfcbb0652c5e90f6722482b263  sqlite3-1.6.7-x86-linux.gem
ac386077bc043c2a0ef7334195e826b20fbc7382632da27637ad3f0620dc48d6  sqlite3-1.6.7-x86_64-darwin.gem
de24904b0679f043736d8e18931f1690ff2d20ea1a0cb491edc454f75718e8a2  sqlite3-1.6.7-x86_64-linux.gem
5c2b22210999a4f58b50f637cdd650d0aa9e333430f9bcd3e90c0a0aed7799bb  sqlite3-1.6.7.gem

1.6.6 / 2023-09-12

Dependencies

Vendored sqlite is updated to v3.43.1.

Upstream release notes:

  • Fix a regression in the way that the sum(), avg(), and total() aggregate functions handle infinities.
  • Fix a bug in the json_array_length() function that occurs when the argument comes directly from json_remove().
  • Fix the omit-unused-subquery-columns optimization (introduced in in version 3.42.0) so that it works correctly if the subquery is a compound where one arm is DISTINCT and the other is not.
  • Other minor fixes.

sha256 checksums:

... (truncated)

Changelog

Sourced from sqlite3's changelog.

1.6.7 / 2023-10-10

Dependencies

Vendored sqlite is updated to v3.43.2.

Upstream release notes:

  • Fix a couple of obscure UAF errors and an obscure memory leak.
  • Omit the use of the sprintf() function from the standard library in the CLI, as this now generates warnings on some platforms.
  • Avoid conversion of a double into unsigned long long integer, as some platforms do not do such conversions correctly.

Added

  • Compile packaged sqlite3 with additional flags to explicitly enable FTS5, and set synchronous mode to normal when in WAL mode. #408 (@​flavorjones)

1.6.6 / 2023-09-12

Dependencies

Vendored sqlite is updated to v3.43.1.

Upstream release notes:

  • Fix a regression in the way that the sum(), avg(), and total() aggregate functions handle infinities.
  • Fix a bug in the json_array_length() function that occurs when the argument comes directly from json_remove().
  • Fix the omit-unused-subquery-columns optimization (introduced in in version 3.42.0) so that it works correctly if the subquery is a compound where one arm is DISTINCT and the other is not.
  • Other minor fixes.

1.6.5 / 2023-09-08

Packaging

  • Allow setting compiler flags for the sqlite library via a --with-sqlite-cflags argument to extconf.rb. See INSTALLATION.md for more information. [#401, #402] (@​flavorjones)

1.6.4 / 2023-08-26

Dependencies

Vendored sqlite is updated to v3.43.0.

Upstream release notes:

SQLite Release 3.43.0 On 2023-08-24

  • Add support for Contentless-Delete FTS5 Indexes. This is a variety of FTS5 full-text search index that omits storing the content that is being indexed while also allowing records to be deleted.
  • Enhancements to the date and time functions:

... (truncated)

Commits
  • 2611034 version bump to v1.6.7
  • eb15000 Merge pull request #412 from sparklemotion/flavorjones-dep-sqlite3-3.43.2
  • 27422e1 dep: update packaged sqlite3 to 3.43.2
  • 2eb3bba Merge pull request #409 from sparklemotion/dependabot/bundler/ruby_memcheck-2...
  • 3c2fe2b build(deps): update ruby_memcheck requirement from 2.1.2 to 2.2.0
  • 7b196ab Merge pull request #408 from sparklemotion/flavorjones-sqlite-compiletime-opt...
  • fc607a8 ext: compile sqlite with WAL_SYNCHRONOUS=1 and --enable-fts5
  • 72e609e Revert "ext: compile sqlite with WAL_SYNCHRONOUS=1 and --enable-fts5"
  • 2a161ad ext: compile sqlite with WAL_SYNCHRONOUS=1 and --enable-fts5
  • 21acdca Merge pull request #407 from sparklemotion/flavorjones-update-sqlite-checksums
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 10 months ago

Superseded by #24.