search

joatuapp / joatu-v2

The JoatU application, version 2. Written in Ruby on Rails.
https://alpha.joatu.org
GNU General Public License v3.0
27 stars 5 forks source link

Bump bcrypt from 3.1.12 to 3.1.13 #230

Closed dependabot-preview[bot] closed 4 years ago

dependabot-preview[bot] commented 5 years ago

Bumps bcrypt from 3.1.12 to 3.1.13.

Changelog *Sourced from [bcrypt's changelog](https://github.com/codahale/bcrypt-ruby/blob/master/CHANGELOG).* > 1.0.0 Feb 27 2007 > - Initial release. > > 2.0.0 Mar 07 2007 > - Removed BCrypt::Password#exactly_equals -- use BCrypt::Password#eql? instead. > - Added BCrypt::Password#is_password?. > - Refactored out BCrypt::Internals into more useful BCrypt::Engine. > - Added validation of secrets -- nil is not healthy. > > 2.0.1 Mar 09 2007 > - Fixed load path issues > - Fixed crashes when hashing weird values (e.g., false, etc.) > > 2.0.2 Jun 06 2007 > - Fixed example code in the README [Winson] > - Fixed Solaris compatibility [Jeremy LaTrasse, Twitter crew] > > 2.0.3 May 07 2008 > - Made exception classes descend from StandardError, not Exception [Dan42] > - Changed BCrypt::Engine.hash to BCrypt::Engine.hash_secret to avoid Merb > sorting issues. [Lee Pope] > > 2.0.4 Mar 09 2009 > - Added Ruby 1.9 compatibility. [Genki Takiuchi] > - Fixed segfaults on some different types of empty strings. [Mike Pomraning] > > 2.0.5 Mar 11 2009 > - Fixed Ruby 1.8.5 compatibility. [Mike Pomraning] > > 2.1.0 Aug 12 2009 > - Improved code coverage, unit tests, and build chain. [Hongli Lai] > - Ruby 1.9 compatibility fixes. [Hongli Lai] > - JRuby support, using Damien Miller's jBCrypt. [Hongli Lai] > - Ruby 1.9 GIL releasing for high-cost hashes. [Hongli Lai] > > 2.1.1 Aug 14 2009 > - JVM 1.4/1.5 compatibility [Hongli Lai] > > 2.1.2 Sep 16 2009 > - Fixed support for Solaris, OpenSolaris. > > 3.0.0 Aug 24 2011 > - Bcrypt C implementation replaced with a public domain implementation. > - License changed to MIT > > 3.0.1 Sep 12 2011 > - create raises an exception if the cost is higher than 31. GH [#27](https://github-redirect.dependabot.com/codahale/bcrypt-ruby/issues/27) > > 3.1.0 May 07 2013 > - Add BCrypt::Password.valid_hash?(str) to check if a string is a valid bcrypt password hash > ... (truncated)
Commits - [`011b67b`](https://github.com/codahale/bcrypt-ruby/commit/011b67ba550457dab5d6084128888f08476f278a) Merge pull request [#198](https://github-redirect.dependabot.com/codahale/bcrypt-ruby/issues/198) from codahale/update-deps - [`7a56f3b`](https://github.com/codahale/bcrypt-ruby/commit/7a56f3bded648beaa0eb4dfa3f16ee83f9c96639) Merge pull request [#195](https://github-redirect.dependabot.com/codahale/bcrypt-ruby/issues/195) from olleolleolle/appveyor-build-with-bundler-1 - [`ada5f12`](https://github.com/codahale/bcrypt-ruby/commit/ada5f127b7d386c5d8aefdf3108b54fd96b0936c) Removing the dev dep on RDoc - [`c78dde9`](https://github.com/codahale/bcrypt-ruby/commit/c78dde9a5a9d80ae730eb1f1f92d285a6e598df5) bumping version - [`bd77e38`](https://github.com/codahale/bcrypt-ruby/commit/bd77e3827b9a2b51d51e2a8d8936972f4fe9c537) use Bundler < 2 in Appveyor builds - [`7644e36`](https://github.com/codahale/bcrypt-ruby/commit/7644e3684d96fb49f5aa20cb5f547cb1b56b3f38) Merge pull request [#189](https://github-redirect.dependabot.com/codahale/bcrypt-ruby/issues/189) from adam12/skip-gnu-crypt-functions - [`84c8d7b`](https://github.com/codahale/bcrypt-ruby/commit/84c8d7b6b5492920631078594d0788f3ca205ecb) Merge pull request [#190](https://github-redirect.dependabot.com/codahale/bcrypt-ruby/issues/190) from fliiiix/patch-1 - [`b6d7abf`](https://github.com/codahale/bcrypt-ruby/commit/b6d7abf2f4f8c1275804a3af0f41d357dd01b77b) Use https for links - [`818dbb5`](https://github.com/codahale/bcrypt-ruby/commit/818dbb5a340f910d6b26ebade31d79a2deda9041) Update Website link in readme - [`613daca`](https://github.com/codahale/bcrypt-ruby/commit/613daca044ce0bf2685bbf8350376e24a9f6ca18) Define SKIP_GNU token when building extension - Additional commits viewable in [compare view](https://github.com/codahale/bcrypt-ruby/compare/v3.1.12...v3.1.13)


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it). To ignore the version in this PR you can just close it - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired) Finally, you can contact us by mentioning @dependabot.