search

redhat-openstack / website

RDO Project Website
http://www.rdoproject.org
Other
46 stars 177 forks source link

Bump haml from 4.0.7 to 5.0.0 #1312

Closed dependabot[bot] closed 4 years ago

dependabot[bot] commented 5 years ago

Bumps haml from 4.0.7 to 5.0.0.

Changelog *Sourced from [haml's changelog](https://github.com/haml/haml/blob/master/CHANGELOG.md).* > ## 5.0.0 > > Released on April 26, 2017 > ([diff](https://github.com/haml/haml/compare/4.0.7...v5.0.0)). > > Breaking Changes > > * Haml now requires Ruby 2.0.0 or above. > * Rails 3 is no longer supported, matching the official > [Maintenance Policy for Ruby on Rails](http://weblog.rubyonrails.org/2013/2/24/maintenance-policy-for-ruby-on-rails/). > Use Haml 4 if you want to use Rails 3. > (Tee Parham) > * Remove `:ugly` option ([#894](https://github-redirect.dependabot.com/haml/haml/pull/894)) > * The `haml` command's debug option (`-d`) no longer executes the Haml code, but > rather checks the generated Ruby syntax for errors. > * Drop parser/compiler accessor from `Haml::Engine`. Modify `Haml::Engine#initialize` options > or `Haml::Template.options` instead. (Takashi Kokubun) > * Drop dynamic quotes support and always escape `'` for `escape_html`/`escape_attrs` instead. > Also, escaped results are slightly changed and always unified to the same characters. (Takashi Kokubun) > * Don't preserve newlines in attributes. (Takashi Kokubun) > * HTML escape interpolated code in filters. > [#770](https://github-redirect.dependabot.com/haml/haml/pull/770) > (Matt Wildig) > > :javascript > #{JSON.generate(foo: "bar")} > Haml 4 output: {"foo":"bar"} > Haml 5 output: {"foo":"bar"} > > Added > > * Add a tracing option. When enabled, Haml will output a data-trace attribute on each tag showing the path > to the source Haml file from which it was generated. Thanks [Alex Babkin](https://github.com/ababkin). > * Add `haml_tag_if` to render a block, conditionally wrapped in another element (Matt Wildig) > * Support Rails 5.1 Erubi template handler. > * Support Sprockets 3. Thanks [Sam Davies](https://github.com/samphilipd) and [Jeremy Venezia](https://github.com/jvenezia). > * General performance and memory usage improvements. (Akira Matsuda) > * Analyze attribute values by Ripper and render static attributes beforehand. (Takashi Kokubun) > * Optimize attribute rendering about 3x faster. (Takashi Kokubun) > * Add temple gem as dependency and create `Haml::TempleEngine` class. > Some methods in `Haml::Compiler` are migrated to `Haml::TempleEngine`. (Takashi Kokubun) > > Fixed > > * Fix for attribute merging. When an attribute method (or literal nested hash) > was used in an old style attribute hash and there is also a (non-static) new > style hash there is an error. The fix can result in different behavior in > some circumstances. See the [commit message](https://github.com/haml/haml/tree/e475b015d3171fb4c4f140db304f7970c787d6e3) > for detailed info. (Matt Wildig) > * Make escape_once respect hexadecimal references. (Matt Wildig) > ... (truncated)
Commits - [`78e2a09`](https://github.com/haml/haml/commit/78e2a09d3b8c6f7cdb3bb87ff84dce8fad5598ac) Version 5.0.0 - [`e5d6409`](https://github.com/haml/haml/commit/e5d6409bad6da77c697efc924c36ad2c5405b680) Note about [#770](https://github-redirect.dependabot.com/haml/haml/issues/770) in Haml 5 changes - [`1bac6f9`](https://github.com/haml/haml/commit/1bac6f902fe7683317b46ddcf0fdbbab6ffcd0da) Remove JRuby from allow_failures - [`d45c2d4`](https://github.com/haml/haml/commit/d45c2d44b6b993ae7d54634948d69c2951d6dda3) Add backslash for @ to support JRuby - [`8f20707`](https://github.com/haml/haml/commit/8f207073c2e0e2bc296f18424b3fec3dfe659674) Enable frozen_string_literal pragma if possible - [`a6bb255`](https://github.com/haml/haml/commit/a6bb25529a5df92b355f8e4b2a712c2aa3ff1b26) Oops, this was not intentional... - [`aa4c397`](https://github.com/haml/haml/commit/aa4c397410312ab3c3ee6191110f5e595e5eea00) Fix spec in [#867](https://github-redirect.dependabot.com/haml/haml/issues/867) for pretty mode removal - [`11af795`](https://github.com/haml/haml/commit/11af7954f3e9ba5e21924c11c49773cacc18eeb2) Fallback to default value of preserve option - [`bbbeb7e`](https://github.com/haml/haml/commit/bbbeb7ea8ade64fec20de4e0254040a229bdda0e) Update CHANGELOG to include [#867](https://github-redirect.dependabot.com/haml/haml/issues/867) - [`ed7f24f`](https://github.com/haml/haml/commit/ed7f24f1dc63c38f3d143289262266cbf59a9f1f) Merge pull request [#867](https://github-redirect.dependabot.com/haml/haml/issues/867) from redoPop/atful-css - Additional commits viewable in [compare view](https://github.com/haml/haml/compare/4.0.7...v5.0.0)


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/redhat-openstack/website/network/alerts).
duck-rh commented 4 years ago

@rainleander there is no real security issue with a statically built site, as there are no user input, so we do not need to upgrade. Also upgrading blindly will just break things, and ,as you the CI confirms, you cannot make this Middleman version and HAML 5 working together.

To keep it short: just ignore, or disable, these notifications (for this specific project only).

dependabot[bot] commented 4 years ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.