chore(deps): bump nokogiri from 1.7.2 to 1.10.3

Bumps nokogiri from 1.7.2 to 1.10.3.

Release notes

*Sourced from [nokogiri's releases](https://github.com/sparklemotion/nokogiri/releases).* > ## 1.10.3 / 2019-04-22 > > ### Security Notes > > [MRI] Pulled in upstream patch from libxslt that addresses CVE-2019-11068. Full details are available in [#1892](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1892). Note that this patch is not yet (as of 2019-04-22) in an upstream release of libxslt. > > ## 1.10.2 / 2019-03-24 > > ### Security > > * [MRI] Remove support from vendored libxml2 for future script macros. [#1871](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1871) > * [MRI] Remove support from vendored libxml2 for server-side includes within attributes. [#1877](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1877) > > > ### Bug fixes > > * [JRuby] Fix node ownership in duplicated documents. [#1060](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1060) > * [JRuby] Rethrow exceptions caught by Java SAX handler. [#1847, [#1872](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1872)] (Thanks, [@adjam](https://github.com/adjam)!) > > > > ## 1.10.1 / 2019-01-13 > > ### Features > > * [MRI] During installation, handle Xcode 10's new library pathOS. [#1801, [#1851](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1851)] (Thanks, [@mlj](https://github.com/mlj) and [@deepj](https://github.com/deepj)!) > * Avoid unnecessary creation of `Proc`s in many methods. [#1776](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1776) (Thanks, [@chopraanmol1](https://github.com/chopraanmol1)!) > > > ### Bug fixes > > * CSS selector `:has()` now correctly matches against any descendant. Previously this selector matched against only direct children). [#350](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/350) (Thanks, [@Phrogz](https://github.com/Phrogz)!) > * `NodeSet#attr` now returns `nil` if it's empty. Previously this raised a NoMethodError. > * [MRI] XPath errors are no longer suppressed during `XSLT::Stylesheet#transform`. Previously these errors were suppressed which led to silent failures and a subsequent segfault. [#1802](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1802) > > > > ## 1.10.0 / 2019-01-04 > > ### Features > > * [MRI] Cross-built Windows gems now support Ruby 2.6 [#1842, [#1850](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1850)] > > > ### Backwards incompatibilities > > This release ends support for: > > * Ruby 2.2, for which [official support ended on 2018-03-31](https://www.ruby-lang.org/en/news/2018/06/20/support-of-ruby-2-2-has-ended/) [#1841](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1841) > * JRuby 1.7, for which [official support ended on 2017-11-21](https://github-redirect.dependabot.com/jruby/jruby/issues/4112) [#1741](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1741) > ... (truncated)

Changelog

*Sourced from [nokogiri's changelog](https://github.com/sparklemotion/nokogiri/blob/master/CHANGELOG.md).* > ## 1.10.3 / 2019-04-22 > > ### Security Notes > > [MRI] Pulled in upstream patch from libxslt that addresses CVE-2019-11068. Full details are available in [#1892](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1892). Note that this patch is not yet (as of 2019-04-22) in an upstream release of libxslt. > > > ## 1.10.2 / 2019-03-24 > > ### Security > > * [MRI] Remove support from vendored libxml2 for future script macros. [#1871](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1871) > * [MRI] Remove support from vendored libxml2 for server-side includes within attributes. [#1877](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1877) > > > ### Bug fixes > > * [JRuby] Fix node ownership in duplicated documents. [#1060](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1060) > * [JRuby] Rethrow exceptions caught by Java SAX handler. [#1847, [#1872](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1872)] (Thanks, [@adjam](https://github.com/adjam)!) > > > ## 1.10.1 / 2019-01-13 > > ### Features > > * [MRI] During installation, handle Xcode 10's new library path. [#1801, [#1851](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1851)] (Thanks, [@mlj](https://github.com/mlj) and [@deepj](https://github.com/deepj)!) > * Avoid unnecessary creation of `Proc`s in many methods. [#1776](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1776) (Thanks, [@chopraanmol1](https://github.com/chopraanmol1)!) > > > ### Bug fixes > > * CSS selector `:has()` now correctly matches against any descendant. Previously this selector matched against only direct children). [#350](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/350) (Thanks, [@Phrogz](https://github.com/Phrogz)!) > * `NodeSet#attr` now returns `nil` if it's empty. Previously this raised a NoMethodError. > * [MRI] XPath errors are no longer suppressed during `XSLT::Stylesheet#transform`. Previously these errors were suppressed which led to silent failures and a subsequent segfault. [#1802](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1802) > > > ## 1.10.0 / 2019-01-04 > > ### Features > > * [MRI] Cross-built Windows gems now support Ruby 2.6 [#1842, [#1850](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1850)] > > > ### Backwards incompatibilities > > This release ends support for: > > * Ruby 2.2, for which [official support ended on 2018-03-31](https://www.ruby-lang.org/en/news/2018/06/20/support-of-ruby-2-2-has-ended/) [#1841](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1841) > * JRuby 1.7, for which [official support ended on 2017-11-21](https://github-redirect.dependabot.com/jruby/jruby/issues/4112) [#1741](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1741) > > ... (truncated)

Commits

- [`8e24af5`](https://github.com/sparklemotion/nokogiri/commit/8e24af59af22c0bf61376d8c9ae6a85e5b2ba3bd) version bump to v1.10.3 - [`d31f742`](https://github.com/sparklemotion/nokogiri/commit/d31f74291b9c8484d32b66b3b174ca84bdff58ec) Merge pull request [#1898](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1898) from sparklemotion/1892-libxslt-patch-for-usn-3947 - [`fe034ae`](https://github.com/sparklemotion/nokogiri/commit/fe034aedcc59b566740567d621843731686676b9) Backport libxslt patch for CVE-2019-11068 - [`6dfce6b`](https://github.com/sparklemotion/nokogiri/commit/6dfce6ba2befad06cd8a8b2d173fbcb15e412058) Merge branch 'concourse-icons' - [`349edaf`](https://github.com/sparklemotion/nokogiri/commit/349edaf3bfc667bdfc4ddc210daae97522bea9ef) ci: add icons to concourse resources - [`93d1a80`](https://github.com/sparklemotion/nokogiri/commit/93d1a80a154f33a925f2b7d3a127add194cc763c) version bump to v1.10.2 - [`00d4023`](https://github.com/sparklemotion/nokogiri/commit/00d4023c6451023c5abae1e28ef5e9f288892638) ci: ensure gem-test will work for java - [`9224158`](https://github.com/sparklemotion/nokogiri/commit/92241586357e11518a2cde9e045da92b78c73792) refining valgrind suppressions for ruby 2.6 - [`2340bd7`](https://github.com/sparklemotion/nokogiri/commit/2340bd77fe2f45e1acd3d4dae4a58416d34af41d) Merge pull request [#1880](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1880) from larskanis/adjust-test-class-name - [`528f076`](https://github.com/sparklemotion/nokogiri/commit/528f076f4fc8aeaeb651bdd43feed358d8333b5a) update README with Appveyor badge - Additional commits viewable in [compare view](https://github.com/sparklemotion/nokogiri/compare/v1.7.2...v1.10.3)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/c3js/c3/network/alerts).

c3js / c3

chore(deps): bump nokogiri from 1.7.2 to 1.10.3 #2667

Codecov Report