Changelog
*Sourced from [jquery-rails's changelog](https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md).*
> ## 4.0.4
>
> - Fix CSP bypass vulnerability. CVE-2015-1840
>
> ## 4.0.1
>
> - Fix RubyGems permission problem.
>
> ## 4.0.0
>
> - Minimum dependency set to Rails 4.2
> - Updated to jquery-ujs 1.0.2
> - Support jQuery 1.x and 2.x
>
> ## 3.1.3 (16 June 2015)
>
> - Fix CSP bypass vulnerability. CVE-2015-1840
>
> ## 3.1.2 (1 September 2014)
>
> - Updated to jquery-ujs 1.0.1
>
> ## 3.1.1 (23 June 2014)
>
> - Updated to jQuery 1.11.1
> - Updated to jquery-ujs 1.0.0
>
> ## 3.1.0 (29 January 2014)
>
> - Updated to jQuery 1.11.0
> - Updated to latest jquery-ujs
> - Added development rake task for updating jQuery
>
> ## 3.0.4 (10 July 2013)
>
> - Fixed jQuery source map
>
> ## 3.0.3 (10 July 2013)
>
> - Updated to jQuery 1.10.2
>
> ## 3.0.2 (04 July 2013)
>
> - Updated to latest jquery-ujs
>
> ## 3.0.1 (07 June 2013)
>
> - Updated to jQuery 1.10.1
> - Removed jQuery UI from generator
>
> ... (truncated)
Commits
- [`b265b46`](https://github.com/rails/jquery-rails/commit/b265b4669dc1d59c489eda8f25a3a55cd94d11b8) Release 4.0.4
- [`11ad7bc`](https://github.com/rails/jquery-rails/commit/11ad7bc5211b02aad131ae9d009ced2164f4b975) Upgrade jquery-ujs to do proper checks for cross domain requests
- See full diff in [compare view](https://github.com/rails/jquery-rails/compare/v4.0.3...v4.0.4)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/mquan/lavish/network/alerts).
Bumps jquery-rails from 4.0.3 to 4.0.4.
Changelog
*Sourced from [jquery-rails's changelog](https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md).* > ## 4.0.4 > > - Fix CSP bypass vulnerability. CVE-2015-1840 > > ## 4.0.1 > > - Fix RubyGems permission problem. > > ## 4.0.0 > > - Minimum dependency set to Rails 4.2 > - Updated to jquery-ujs 1.0.2 > - Support jQuery 1.x and 2.x > > ## 3.1.3 (16 June 2015) > > - Fix CSP bypass vulnerability. CVE-2015-1840 > > ## 3.1.2 (1 September 2014) > > - Updated to jquery-ujs 1.0.1 > > ## 3.1.1 (23 June 2014) > > - Updated to jQuery 1.11.1 > - Updated to jquery-ujs 1.0.0 > > ## 3.1.0 (29 January 2014) > > - Updated to jQuery 1.11.0 > - Updated to latest jquery-ujs > - Added development rake task for updating jQuery > > ## 3.0.4 (10 July 2013) > > - Fixed jQuery source map > > ## 3.0.3 (10 July 2013) > > - Updated to jQuery 1.10.2 > > ## 3.0.2 (04 July 2013) > > - Updated to latest jquery-ujs > > ## 3.0.1 (07 June 2013) > > - Updated to jQuery 1.10.1 > - Removed jQuery UI from generator > > ... (truncated)Commits
- [`b265b46`](https://github.com/rails/jquery-rails/commit/b265b4669dc1d59c489eda8f25a3a55cd94d11b8) Release 4.0.4 - [`11ad7bc`](https://github.com/rails/jquery-rails/commit/11ad7bc5211b02aad131ae9d009ced2164f4b975) Upgrade jquery-ujs to do proper checks for cross domain requests - See full diff in [compare view](https://github.com/rails/jquery-rails/compare/v4.0.3...v4.0.4)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/mquan/lavish/network/alerts).