search

caciviclab / disclosure-backend-static

Campaign finance data powering Open Disclosure California
https://caciviclab.org/odca-jekyll/
15 stars 13 forks source link

Bump rack from 2.2.6.4 to 2.2.8.1 #347

Closed dependabot[bot] closed 2 weeks ago

dependabot[bot] commented 6 months ago

Bumps rack from 2.2.6.4 to 2.2.8.1.

Release notes

Sourced from rack's releases.

v2.2.8.1

What's Changed

  • Fixed ReDoS in Accept header parsing [CVE-2024-26146]
  • Fixed ReDoS in Content Type header parsing [CVE-2024-25126]
  • Reject Range headers which are too large [CVE-2024-26141]

Full Changelog: https://github.com/rack/rack/compare/v2.2.8...v2.2.8.1

v2.2.8

What's Changed

New Contributors

Full Changelog: https://github.com/rack/rack/compare/v2.2.7...v2.2.8

v2.2.7

What's Changed

New Contributors

Full Changelog: https://github.com/rack/rack/compare/v2.2.6.4...v2.2.7

Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/caciviclab/disclosure-backend-static/network/alerts).
mikeubell commented 6 months ago
Build diff from Commit d7dd871f0252285ec741eb5fd54a204108ad8b23: ```diff diff --git a/build/_data/elections/oakland/2018-06-05.json b/build/_data/elections/oakland/2018-06-05.json index b39b338..140316d 100644 --- a/build/_data/elections/oakland/2018-06-05.json +++ b/build/_data/elections/oakland/2018-06-05.json @@ -57,7 +57,7 @@ "total_contributions": 15000.0 }, { - "name": "Service Employees International Union Local 1021 Issues PAC", + "name": "Oakland Athletics Baseball Company", "type": "Measure", "election_name": "oakland-june-2018", "total_contributions": 10000.0 diff --git a/build/_data/elections/oakland/2022-11-08.json b/build/_data/elections/oakland/2022-11-08.json index d92ab84..46186aa 100644 --- a/build/_data/elections/oakland/2022-11-08.json +++ b/build/_data/elections/oakland/2022-11-08.json @@ -2,7 +2,7 @@ "total_contributions": 5976299.66, "total_contributions_by_source": { "Out of State": 529589.5900000001, - "Within Oakland": 2667876.8500000006, + "Within Oakland": 2667876.8499999996, "Within California": 3048897.3400000003 }, "contributions_by_type": { diff --git a/build/_data/elections/oakland/2023-11-07.json b/build/_data/elections/oakland/2023-11-07.json index 0457776..53d9049 100644 --- a/build/_data/elections/oakland/2023-11-07.json +++ b/build/_data/elections/oakland/2023-11-07.json @@ -73,13 +73,13 @@ ], "top_contributors_for_offices": [ { - "name": "UA Local 342", + "name": "Service Employees International Union Local 1021 Candidate PAC", "type": "Office", "election_name": "oakland-2023", "total_contributions": 1200.0 }, { - "name": "Service Employees International Union Local 1021 Candidate PAC", + "name": "Oakland Education Association PAC", "type": "Office", "election_name": "oakland-2023", "total_contributions": 1200.0 diff --git a/build/_data/elections/oakland/2024-03-05.json b/build/_data/elections/oakland/2024-03-05.json index 2022513..bcbcd60 100644 --- a/build/_data/elections/oakland/2024-03-05.json +++ b/build/_data/elections/oakland/2024-03-05.json @@ -48,13 +48,13 @@ ], "top_contributors_for_offices": [ { - "name": "Steven Von Stade", + "name": "Monique C Houston", "type": "Office", "election_name": "oakland-march-2024", "total_contributions": 600.0 }, { - "name": "Monique C Houston", + "name": "Steven Von Stade", "type": "Office", "election_name": "oakland-march-2024", "total_contributions": 600.0 diff --git a/build/_data/elections/oakland/2024-11-05.json b/build/_data/elections/oakland/2024-11-05.json index ff4af95..b478ae8 100644 --- a/build/_data/elections/oakland/2024-11-05.json +++ b/build/_data/elections/oakland/2024-11-05.json @@ -79,13 +79,13 @@ ], "top_contributors_for_offices": [ { - "name": "International Federation of Professional and Technical Engineers-Local 21 TJ Anthony PAC Fund", + "name": "International Association of Firefighters Local 55", "type": "Office", "election_name": "oakland-2024", "total_contributions": 2400.0 }, { - "name": "International Association of Firefighters Local 55", + "name": "International Federation of Professional and Technical Engineers-Local 21 TJ Anthony PAC Fund", "type": "Office", "election_name": "oakland-2024", "total_contributions": 2400.0 diff --git a/build/_data/stats.json b/build/_data/stats.json index 47e8956..d3e4a0d 100644 --- a/build/_data/stats.json +++ b/build/_data/stats.json @@ -1,3 +1,3 @@ { - "date_processed": "2024-02-27 00:36:25 -0800" + "date_processed": "2024-02-28 00:38:31 -0800" } diff --git a/build/_data/totals.json b/build/_data/totals.json index 2621776..7f3956d 100644 --- a/build/_data/totals.json +++ b/build/_data/totals.json @@ -782,7 +782,7 @@ "total_contributions": 5976299.66, "total_contributions_by_source": { "Out of State": 529589.5900000001, - "Within Oakland": 2667876.8500000006, + "Within Oakland": 2667876.8499999996, "Within California": 3048897.3400000003 }, "contributions_by_type": { @@ -1032,7 +1032,7 @@ "total_contributions": 15000.0 }, { - "name": "Service Employees International Union Local 1021 Issues PAC", + "name": "Oakland Athletics Baseball Company", "type": "Measure", "election_name": "oakland-june-2018", "total_contributions": 10000.0 @@ -1385,13 +1385,13 @@ ], "top_contributors_for_offices": [ { - "name": "UA Local 342", + "name": "Service Employees International Union Local 1021 Candidate PAC", "type": "Office", "election_name": "oakland-2023", "total_contributions": 1200.0 }, { - "name": "Service Employees International Union Local 1021 Candidate PAC", + "name": "Oakland Education Association PAC", "type": "Office", "election_name": "oakland-2023", "total_contributions": 1200.0 @@ -1500,13 +1500,13 @@ ], "top_contributors_for_offices": [ { - "name": "Steven Von Stade", + "name": "Monique C Houston", "type": "Office", "election_name": "oakland-march-2024", "total_contributions": 600.0 }, { - "name": "Monique C Houston", + "name": "Steven Von Stade", "type": "Office", "election_name": "oakland-march-2024", "total_contributions": 600.0 @@ -1646,13 +1646,13 @@ ], "top_contributors_for_offices": [ { - "name": "International Federation of Professional and Technical Engineers-Local 21 TJ Anthony PAC Fund", + "name": "International Association of Firefighters Local 55", "type": "Office", "election_name": "oakland-2024", "total_contributions": 2400.0 }, { - "name": "International Association of Firefighters Local 55", + "name": "International Federation of Professional and Technical Engineers-Local 21 TJ Anthony PAC Fund", "type": "Office", "election_name": "oakland-2024", "total_contributions": 2400.0 ```
dependabot[bot] commented 2 weeks ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.