search

fsr-de / myHPI

Django/Wagtail page serving myhpi.de
https://myhpi.de
11 stars 11 forks source link

build(deps): bump wagtail from 6.1 to 6.1.2 #561

Closed dependabot[bot] closed 2 weeks ago

dependabot[bot] commented 2 weeks ago

Bumps wagtail from 6.1 to 6.1.2.

Release notes

Sourced from wagtail's releases.

6.1.2

  • Fix: Fix client-side handling of select inputs within ChoiceBlock (Matt Westcott)
  • Fix: Support SVG icon id attributes with single quotes in the styleguide (Sage Abdullah)
  • Fix: CVE-2024-35228: Improper handling of insufficient permissions in wagtail.contrib.settings (Victor Miti, Matt Westcott, Jake Howard)

6.1.1

  • Fix: Fix form action URL in user edit and delete views for custom user models (Sage Abdullah)
  • Fix: Fix snippet copy view not prefilling form data (Sage Abdullah)
  • Fix: Address layout issues in the title cell of universal listings (Sage Abdullah)
  • Fix: Fix incorrect rich text to HTML conversion when multiple link / embed types are present (Andy Chosak, Matt Westcott)
  • Fix: Restore ability for custom widgets in StreamField blocks to have multiple top-level nodes (Sage Abdullah, Matt Westcott)
Changelog

Sourced from wagtail's changelog.

6.1.2 (30.05.2024)


 * Fix: Fix client-side handling of select inputs within `ChoiceBlock` (Matt Westcott)
 * Fix: Support SVG icon id attributes with single quotes in the styleguide (Sage Abdullah)
 * Fix: CVE-2024-35228: Improper handling of insufficient permissions in `wagtail.contrib.settings` (Victor Miti, Matt Westcott, Jake Howard)

6.1.1 (21.05.2024)

  • Fix: Fix form action URL in user edit and delete views for custom user models (Sage Abdullah)
  • Fix: Fix snippet copy view not prefilling form data (Sage Abdullah)
  • Fix: Address layout issues in the title cell of universal listings (Sage Abdullah)
  • Fix: Fix incorrect rich text to HTML conversion when multiple link / embed types are present (Andy Chosak, Matt Westcott)
  • Fix: Restore ability for custom widgets in StreamField blocks to have multiple top-level nodes (Sage Abdullah, Matt Westcott)
Commits
  • 0702af9 Fill in release date for 6.1.2
  • ce1930e Fill in release date for 6.0.5
  • 693945f Version bump to 6.1.2
  • 72cfe9a Release note for CVE-2024-35228 in 6.1.2
  • 857b6f9 Release note for CVE-2024-35228 in 6.0.5
  • 9e376d2 Restore permission check on settings EditView
  • 7122e24 Fetch new translations from Transifex
  • a233fd3 Support SVG icon id attributes with single quotes in the styleguide (#11903)
  • a004760 Release note for #11992
  • 91d4a8c Update RadioSelect adapter to handle CheckboxMultipleSelect widgets
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @jeriox.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
jeriox commented 2 weeks ago

@dependabot merge