gvolpe / blog-comments

Principled Software Craftsmanship (source moved permanently to https://github.com/gvolpe/gvolpe.github.io)
https://gvolpe.com/blog/
MIT License
2 stars 1 forks source link

Bump jekyll from 2.5.3 to 3.6.3 #4

Closed dependabot[bot] closed 4 years ago

dependabot[bot] commented 4 years ago

Bumps jekyll from 2.5.3 to 3.6.3.

Release notes

Sourced from jekyll's releases.

v3.6.2

Development Fixes

  • Update Rubocop to 0.51.0 (#6444)
  • Add test for layout as string (#6445)

Bug Fixes

  • Problematic UTF+bom files (#6322)
  • Always treat data.layout as a string (#6442)

v3.6.1

Documentation

  • Doc y_day in docs/permalinks (#6244)
  • Update frontmatter.md (#6371)
  • Elaborate on excluding items from processing (#6136)
  • Style lists in tables (#6379)
  • Remove duplicate "available" (#6380)

Development Fixes

  • Bump rubocop to use v0.50.x (#6368)

v3.6.0

Minor Enhancements

  • Ignore final newline in folded YAML string (#6054)
  • Add URL checks to Doctor (#5760)
  • Fix serving files that clash with directories (#6222) (#6231)
  • Bump supported Ruby version to >= 2.1.0 (#6220)
  • set LiquidError#template_name for errors in included file (#6206)
  • Access custom config array throughout session (#6200)
  • Add support for Rouge 2, in addition to Rouge 1 (#5919)
  • Allow yield to logger methods & bail early on no-op messages (#6315)
  • Update mime-types. (#6336)
  • Use a Schwartzian transform with custom sorting (#6342)
  • Alias Drop#invoke_drop to Drop#[] (#6338)

Bug Fixes

  • Deprecator: fix typo for --serve command (#6229)
  • Reader#read_directories: guard against an entry not being a directory (#6226)
  • kramdown: symbolize keys in-place (#6247)
  • Call to_s on site.url before attempting to concatenate strings (#6253)
  • Enforce Style/FrozenStringLiteralComment (#6265)
  • Update theme-template README to note 'assets' directory (#6257)
  • Memoize the return value of Document#url (#6266)
  • delegate StaticFile#to_json to StaticFile#to_liquid (#6273)
  • Fix Drop#key? so it can handle a nil argument (#6281)
... (truncated)
Changelog

Sourced from jekyll's changelog.

3.6.3 / 2018-09-18

Bug Fixes

  • 3.6.x: security: fix include bypass of EntryFilter#filter symlink check (#7229)

3.6.2 / 2017-10-21

Development Fixes

  • Update Rubocop to 0.51.0 (#6444)
  • Add test for layout as string (#6445)

Bug Fixes

  • Problematic UTF+bom files (#6322)
  • Always treat data.layout as a string (#6442)

3.6.1 / 2017-10-20

Documentation

  • Doc y_day in docs/permalinks (#6244)
  • Update frontmatter.md (#6371)
  • Elaborate on excluding items from processing (#6136)
  • Style lists in tables (#6379)
  • Remove duplicate "available" (#6380)

Development Fixes

  • Bump rubocop to use v0.50.x (#6368)

3.6.0 / 2017-09-21

Minor Enhancements

  • Ignore final newline in folded YAML string (#6054)
  • Add URL checks to Doctor (#5760)
  • Fix serving files that clash with directories (#6222) (#6231)
  • Bump supported Ruby version to >= 2.1.0 (#6220)
  • set LiquidError#template_name for errors in included file (#6206)
  • Access custom config array throughout session (#6200)
  • Add support for Rouge 2, in addition to Rouge 1 (#5919)
  • Allow yield to logger methods & bail early on no-op messages (#6315)
  • Update mime-types. (#6336)
  • Use a Schwartzian transform with custom sorting (#6342)
  • Alias Drop#invoke_drop to Drop#[] (#6338)

Bug Fixes

... (truncated)
Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/gvolpe/blog/network/alerts).
dependabot[bot] commented 4 years ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.