shiyimin / 12306

我要回家过年
6 stars 4 forks source link

Bump nokogiri from 1.5.0 to 1.5.11 in /cookbooks/java #5

Open dependabot[bot] opened 1 year ago

dependabot[bot] commented 1 year ago

Bumps nokogiri from 1.5.0 to 1.5.11.

Changelog

Sourced from nokogiri's changelog.

1.5.11 / 2013-12-14

Fixed

  • (JRuby) Fix out of memory bug when certain invalid documents are parsed.
  • (JRuby) Fix regression of billion-laughs vulnerability. #586

1.5.10 / 2013-06-07

Fixed

  • (JRuby) Fix "null document" error when parsing an empty IO in jruby 1.7.3. #883
  • (JRuby) Fix schema validation when XSD has DOCTYPE set to DTD. #912 (Thanks, Patrick Cheng!)
  • (MRI) Fix segfault when there is no default subelement for an HTML node. #917

Notes

  • Use rb_ary_entry instead of RARRAY_PTR (you know, for Rubinius). #877 (Thanks, Dirkjan Bussink!)
  • Fix TypeError when running tests. #900 (Thanks, Cédric Boutillier!)

1.5.9 / 2013-03-21

Fixed

  • Ensure that prefixed attributes are properly namespaced when reparented. #869
  • Fix for inconsistent namespaced attribute access for SVG nested in HTML. #861
  • (MRI) Fixed a memory leak in fragment parsing if nodes are not all subsequently reparented. #856

1.5.8 / 2013-03-19

Fixed

  • (JRuby) Fix EmptyStackException thrown by elements with xlink:href attributes and no base_uri #534, #805. (Thanks, Patrick Quinn and Brian Hoffman!)
  • Fixes duplicate attributes issue introduced in 1.5.7. #865
  • Allow use of a prefixed namespace on a root node using Nokogiri::XML::Builder #868

1.5.7 / 2013-03-18

Added

  • Windows support for Ruby 2.0.

Fixed

... (truncated)

Commits
  • 58a94e1 Version bump to 1.5.11.
  • 3e118a9 CHANGELOG updates for 1.5.11 security release.
  • be0cabf [JRuby] Fix entity expansion bug.
  • fd939d0 Ugh, bundler. Updating to hoe 3.7.
  • 9488e49 Get loaded_parser_version to parse a version string with a suffix correctly.
  • f8cd1dc Add MIT license to gemspec (closes #938)
  • 0253846 Add missing translation for these as well.
  • c384769 Add missing translation for the changes in 1.5.1.
  • 0f9268e Fix some grammos and remove trailing spaces.
  • 439028d Cherry-pick 6b1e4edc. (Japanese translation)
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/shiyimin/12306/network/alerts).