search

ctti-clinicaltrials / aact

Improving Public Access to Aggregate Content of ClinicalTrials.gov
http://aact.ctti-clinicaltrials.org
MIT License
124 stars 33 forks source link

Bump activesupport, actionpack and rails #1076

Closed dependabot[bot] closed 10 months ago

dependabot[bot] commented 11 months ago

Bumps activesupport, actionpack and rails. These dependencies needed to be updated together. Updates activesupport from 6.0.0 to 7.0.7.2

Release notes

Sourced from activesupport's releases.

7.0.7.2 release

No changes between this and 7.0.7.2. This release was just to fix file permissions in the previous release.

7.0.7.1

Active Support

  • Use a temporary file for storing unencrypted files while editing

    [CVE-2023-38037]

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • No changes.

Action Pack

  • No changes.

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

... (truncated)

Changelog

Sourced from activesupport's changelog.

Rails 7.0.7.2 (August 22, 2023)

  • No changes.

Rails 7.0.7.1 (August 22, 2023)

  • Use a temporary file for storing unencrypted files while editing

    [CVE-2023-38037]

Rails 7.0.7 (August 09, 2023)

  • Fix Cache::NullStore with local caching for repeated reads.

    fatkodima

  • Fix to_s with no arguments not respecting custom :default formats

    Hartley McGuire

  • Fix ActiveSupport::Inflector.humanize(nil) raising NoMethodError: undefined method `end_with?' for nil:NilClass.

    James Robinson

  • Fix Enumerable#sum for Enumerator#lazy.

    fatkodima, Matthew Draper, Jonathan Hefner

  • Improve error message when EventedFileUpdateChecker is used without a compatible version of the Listen gem

    Hartley McGuire

Rails 7.0.6 (June 29, 2023)

  • Fix EncryptedConfiguration returning incorrect values for some Hash methods

    Hartley McGuire

  • Fix arguments being destructed Enumerable#many? with block.

    Andrew Novoselac

  • Fix humanize for strings ending with id.

    fatkodima

... (truncated)

Commits
  • 3668b4b Preparing for 7.0.7.2 release
  • 2294b8b Bumping version
  • c92caef Preparing for 7.0.7.1 release
  • 936587d updating version / changelog
  • a21d6ed Use a temporary file for storing unencrypted files while editing
  • 522c86f Preparing for 7.0.7 release
  • 5610cba Sync CHANGELOG with the changes in the repository
  • 7e9ffc2 Fix to_s not using :default format with no args
  • a8e88e2 Fix Cache::NullStore with local caching for repeated reads
  • b18b9df Merge pull request #48800 from robinjam/fix-humanize-nil
  • Additional commits viewable in compare view


Updates actionpack from 6.0.0 to 7.0.7.2

Release notes

Sourced from actionpack's releases.

7.0.7.2 release

No changes between this and 7.0.7.2. This release was just to fix file permissions in the previous release.

7.0.7.1

Active Support

  • Use a temporary file for storing unencrypted files while editing

    [CVE-2023-38037]

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • No changes.

Action Pack

  • No changes.

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

... (truncated)

Changelog

Sourced from actionpack's changelog.

Rails 7.0.7.2 (August 22, 2023)

  • No changes.

Rails 7.0.7.1 (August 22, 2023)

  • No changes.

Rails 7.0.7 (August 09, 2023)

  • No changes.

Rails 7.0.6 (June 29, 2023)

  • No changes.

Rails 7.0.5.1 (June 26, 2023)

  • Raise an exception if illegal characters are provide to redirect_to [CVE-2023-28362]

    Zack Deveau

Rails 7.0.5 (May 24, 2023)

  • Do not return CSP headers for 304 Not Modified responses.

    Tobias Kraze

  • Fix EtagWithFlash when there is no Flash middleware available.

    fatkodima

  • Fix content-type header with send_stream.

    Elliot Crosby-McCullough

  • Address Selenium :capabilities deprecation warning.

    Ron Shinall

  • Fix cookie domain for domain: all on two letter single level TLD.

    John Hawthorn

  • Don't double log the controller, action, or namespaced_controller when using ActiveRecord::QueryLog

... (truncated)

Commits
  • 3668b4b Preparing for 7.0.7.2 release
  • 2294b8b Bumping version
  • c92caef Preparing for 7.0.7.1 release
  • 936587d updating version / changelog
  • 522c86f Preparing for 7.0.7 release
  • c05a88d Merge pull request #45116 from ghiculescu/helper_method_backtrace
  • 593893c Preparing for 7.0.6 release
  • 0b89567 Avoid creating match object when checking for illegal header value
  • 9ae3da1 Fix rubocop warning
  • 8e37f2b Merge branch '7-0-sec' into 7-0-stable
  • Additional commits viewable in compare view


Updates rails from 6.0.0 to 7.0.7.2

Release notes

Sourced from rails's releases.

7.0.7.2 release

No changes between this and 7.0.7.2. This release was just to fix file permissions in the previous release.

7.0.7.1

Active Support

  • Use a temporary file for storing unencrypted files while editing

    [CVE-2023-38037]

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • No changes.

Action Pack

  • No changes.

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

... (truncated)

Commits
  • 3668b4b Preparing for 7.0.7.2 release
  • 2294b8b Bumping version
  • c92caef Preparing for 7.0.7.1 release
  • 936587d updating version / changelog
  • a21d6ed Use a temporary file for storing unencrypted files while editing
  • 522c86f Preparing for 7.0.7 release
  • 5610cba Sync CHANGELOG with the changes in the repository
  • eb7e42d Merge pull request #46617 from r7kamura/feature/isolation-level-default
  • 2dccb3f Merge pull request #48891 from rails/rm-devcontainer-right
  • fabd0b5 Merge pull request #48886 from fatkodima/backport-45670
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ctti-clinicaltrials/aact/network/alerts).
dependabot[bot] commented 10 months ago

Superseded by #1086.