Update redcarpet to 3.5.1 to fix CVE-2020-26298

alphagov / tech-docs-gem

Gem to distribute the tech docs project

https://tdt-documentation.london.cloudapps.digital/

MIT License

15 stars 38 forks source link

Update redcarpet to 3.5.1 to fix CVE-2020-26298 #226

Closed pritchyspritch closed 3 years ago

pritchyspritch commented 3 years ago

I noticed this outdated dependency on the cyber tech docs and saw that it was a sub-dependency of this gem. For some reason I don't have write access so I couldn't do a direct PR (I am a member Alphagov though).

Update redcarpet to 3.5.1 to fix CVE-2020-26298
I've added a comment to the CHANGELOG, title set to unreleased
Haven't bumped the version yet, in case you need other fixes first

pritchyspritch commented 3 years ago

This looks good to me. Thanks for the PR!

No worries! I haven't changed the release yet and don't have write access so am unable to merge it myself.