search

polarbeardesign / dds_app

2nd Gen
2 stars 0 forks source link

Bump mail from 2.5.4 to 2.5.5 #16

Closed dependabot[bot] closed 3 years ago

dependabot[bot] commented 4 years ago

Bumps mail from 2.5.4 to 2.5.5.

Changelog

Sourced from mail's changelog.

== Version 2.5.5 - 2017-06-09 Jeremy Daer jeremydaer@gmail.com

Security:

  • #1097 – SMTP security: prevent command injection via To/From addresses. (jeremy)

Bugs:

  • #633 – Cope with message parts that have an empty Content-Type (ThomasKoppensteiner, zeepeeare)
  • #689 - Fix Exim delivery method broken by #477 in 2.5.4. (jethrogb)
Commits
  • 97a8548 2.5.5 release
  • 63fb41b Always use an SSL context. [Fixes #548]
  • f84b84d Specs: fix missing should_receive from f60ccc660434d445b78e8281833c99048a00de20
  • f60ccc6 Fix Mail::Exim, forgotten in 4875bc2b
  • 527067d Gemfile: no rdoc 5 on Ruby 1.9.2
  • 396d39f Clamp down allowed gem versions depending on Ruby version supported
  • b9cee02 Specs: fix expect-style that wasn't backported to old should-style
  • b5a2884 Backport fixes for specs on Ruby 1.9.3+
  • 6110413 Fix tested Ruby versions in README
  • ddc85ed use latest ruby version in CI
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/polarbeardesign/dds_app/network/alerts).
dependabot[bot] commented 3 years ago

Looks like mail is up-to-date now, so this is no longer needed.