[CRuby] Vendored libxml2 is updated to v2.12.9, which the upstream release notes state is a security release to address CVE-2024-40896. Nokogiri's maintainers believe this vulnerability does not affect users of Nokogiri, but we advise upgrading at your earliest convenience anyway.
Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.
All Depfu comment commands
@depfu rebase
Rebases against your default branch and redoes this update
@depfu recreate
Recreates this PR, overwriting any edits that you've made to it
@depfu merge
Merges this PR once your tests are passing and conflicts are resolved
@depfu cancel merge
Cancels automatic merging of this PR
@depfu close
Closes this PR and deletes the branch
@depfu reopen
Restores the branch and reopens this PR (if it's closed)
@depfu pause
Ignores all future updates for this dependency and closes this PR
@depfu pause [minor|major]
Ignores all future minor/major updates for this dependency and closes this PR
@depfu resume
Future versions of this dependency will create PRs again (leaves this PR as is)
Here is everything you need to know about this update. Please take a good look at what changed and the test results before merging this pull request.
What changed?
✳️ mechanize (2.11.0 → 2.12.0) · Repo · Changelog
Release Notes
2.12.0
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 7 commits:
version bump to v2.12.0
Merge pull request #650 from weshatheleopard/main
doc: update CHANGELOG and mark brotli support as experimental
brotli is an optional dependency
handle brotli-deflation errors
tidy: small edits to content_encoding_brotli
Handle Brotli compression
↗️ nokogiri (indirect, 1.16.6 → 1.16.7) · Repo · Changelog
Release Notes
1.16.7
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 3 commits:
version bump to v1.16.7
dep: update libxml2 to v2.12.9 (branch v1.16.x) (#3297)
dep: update packaged libxml2 to v2.12.9
↗️ public_suffix (indirect, 6.0.0 → 6.0.1) · Repo · Changelog
Release Notes
6.0.1 (from changelog)
Does any of this look wrong? Please let us know.
Commits
See the full diff on Github. The new version differs by 13 commits:
Release 6.0.1
Updated list from source (#325)
Updated list from source (#324)
Updated list from source (#323)
Updated list from source (#322)
Updated list from source (#321)
Updated list from source (#320)
Updated list from source (#319)
Updated list from source (#318)
Updated list from source (#317)
Updated list from source (#316)
Update mocha requirement from ~> 2.3.0 to ~> 2.4.0 (#313)
Updated list from source (#312)
↗️ racc (indirect, 1.8.0 → 1.8.1) · Repo · Changelog
Commits
See the full diff on Github. The new version differs by 15 commits:
Merge pull request #275 from yui-knk/v1.8.1
Bump up v1.8.1
Merge pull request #273 from ydah/fix-filepath-lineno
Add test code for TestRaccCommand
Fix file path and line number errors when using `+`, `*` and `()`
Merge pull request #274 from ydah/rename-docs-main
Fix RDoc main file to "README.rdoc"
Merge pull request #271 from mark-young-atg/provide_changelog_link_on_rubygems
Provide a 'Changelog' link on rubygems.org/gems/racc
Merge pull request #270 from koic/fix_a_typo
Fix a typo
Added BSDL to gemspec
Update license files same as ruby/ruby
Merge pull request #269 from koic/use_require_relative
Use `require_relative` in the Racc codebase
Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with
@depfu rebase
.All Depfu comment commands