[ruby] Update loofah: 2.9.1 → 2.10.0 (minor)

[depfu[bot]]

Here is everything you need to know about this update. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ loofah (2.9.1 → 2.10.0) · Repo · Changelog

Release Notes

2.10.0

2.10.0 / 2021-06-06

Features

• Allow CSS properties overflow-x and overflow-y. [#206] (Thanks, @sampokuokkanen!)

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 10 commits:

• version bump to v2.10.0, and update CHANGELOG
• Merge pull request #206 from sampokuokkanen/patch-1
• Update safelist.rb to include overflow-x and y
• Merge pull request #208 from flavorjones/flavorjones-move-to-github-actions
• ci: create github actions pipeline
• Merge pull request #207 from flavorjones/flavorjones-update-tests-to-pass-with-libxml-2_9_11
• test: libxml 2.9.11 handles namespaces in HTML docs differently
• test: unicode every character in the unicode test, for completeness
• Merge pull request #205 from flavorjones/flavorjones-test-unicode-encoded-exploit
• test: actually test against a working unicode-encoded exploit

↗️ mini_portile2 (indirect, 2.5.1 → 2.5.3) · Repo · Changelog

Release Notes

2.5.3

2.5.3 / 2021-05-31

Make net-ftp an optional dependency, since requiring it as a hard dependency in v2.5.2 caused warnings to be emitted by Ruby 2.7 and earlier. A warning message is emitted if FTP functionality is called and net-ftp isn't available; this should only happen in Ruby 3.1 and later.

2.5.2

2.5.2 / 2021-05-28

Dependencies

Add net-ftp as an explicit dependency to accommodate the upcoming Ruby 3.1 changes that move this and other gems out of the "default" gem set and into the "bundled" gem set. See https://bugs.ruby-lang.org/issues/17873 [#101]

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 10 commits:

• version bump to v2.5.3
• Merge pull request #106 from flavorjones/105-address-net-ftp-warnings
• dep: make net-ftp an optional dependency
• chore: remove ruby warning about unused variable
• version bump to v2.5.2
• Merge pull request #103 from flavorjones/flavorjones-ci-add-2.3-and-2.4-to-the-matrix
• ci: add 2.3 and 2.4 to the matrix
• Merge pull request #102 from flavorjones/101-add-ruby-head-to-ci
• fix: make net-ftp dependency explicit, for Ruby 3.1 compatibility
• ci: add ruby-head to the test matrix

↗️ nokogiri (indirect, 1.11.5 → 1.11.7) · Repo · Changelog

Release Notes

1.11.7

1.11.7 / 2021-06-02

• [CRuby] Backporting an upstream fix to XPath recursion depth limits which impacted some users of complex XPath queries. This issue is present in libxml 2.9.11 and 2.9.12. [#2257]

Checksums

SHA256:

4976a9c9e796527d51dc6c311b9bd93a0233f6a7962a0f569aa5c782461836ef  nokogiri-1.11.7.gem
9d69f57f6c024d86e358a8aef7a273f574721e48a6b2e1426cca007827325413  nokogiri-1.11.7-java.gem
6017dee25feb80292b04554cc1bf8a0a2ede3b6c3daeac811902157bbc6a3bdc  nokogiri-1.11.7-x64-mingw32.gem
38892350c1e695eab9bd77483300d681c32a22714d0e2d04d10a4c343b424bdd  nokogiri-1.11.7-x86-mingw32.gem
1d15603cd878fa2b710a3ba3028a99d9dd0c14b75711faebf9fb6ff40bac3880  nokogiri-1.11.7-x86-linux.gem
7ad9741e7a2fee1ffb4a4b2e20b00e87992c9efd969f557ca3b83fb2653b9bfc  nokogiri-1.11.7-x86_64-linux.gem
c93d66d9413ea7c37d30f95e2c54606fec638e556d454e08124d9a33b7fa82c8  nokogiri-1.11.7-arm64-darwin.gem
8761d9c7baacb26546869ed56dbc78d3eb3cabf49b85d91b1cd827cd6e94fb25  nokogiri-1.11.7-x86_64-darwin.gem

1.11.6

1.11.6 / 2021-05-26

Fixed

• [CRuby] DocumentFragment#path now does proper error-checking to handle behavior introduced in libxml > 2.9.10. In v1.11.4 and v1.11.5, calling DocumentFragment#path could result in a segfault.

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 8 commits:

• version bump to v1.11.7
• test: add coverage for xpath recursion depth fix
• Merge pull request #2258 from sparklemotion/2257-libxml2-xpath-recursion-limit-bug-v1_11_x
• fix: upstream libxml2 bug in calculating xpath query recursion depth
• version bump to v1.11.6
• Merge pull request #2252 from sparklemotion/2250-doc-frag-path-v1_11_x
• update CHANGELOG
• fix: DocumentFragment#path checks for error case in libxml 2.9.11+

---

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands

@​depfu rebase

Rebases against your default branch and redoes this update

@​depfu recreate

Recreates this PR, overwriting any edits that you've made to it

@​depfu merge

Merges this PR once your tests are passing and conflicts are resolved

@​depfu close

Closes this PR and deletes the branch

@​depfu reopen

Restores the branch and reopens this PR (if it's closed)

@​depfu pause

Ignores all future updates for this dependency and closes this PR

@​depfu pause [minor|major]

Ignores all future minor/major updates for this dependency and closes this PR

@​depfu resume

Future versions of this dependency will create PRs again (leaves this PR as is)

[codecov[bot]]

Codecov Report

Merging #493 (784e398) into main (56df18f) will not change coverage. The diff coverage is n/a.

:exclamation: Current head 784e398 differs from pull request most recent head e75efd9. Consider uploading reports for the commit e75efd9 to get more accurate results

@@           Coverage Diff           @@
##             main     #493   +/-   ##
=======================================
  Coverage   88.38%   88.38%           
=======================================
  Files          35       35           
  Lines         637      637           
=======================================
  Hits          563      563           
  Misses         74       74           

---

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update 56df18f...e75efd9. Read the comment docs.