zebraf1 / Kassa

Private inventory system
GNU General Public License v2.0
0 stars 0 forks source link

Bump propel/propel1 from 1.7.1 to 1.7.2 #130

Open dependabot[bot] opened 1 month ago

dependabot[bot] commented 1 month ago

Bumps propel/propel1 from 1.7.1 to 1.7.2.

Release notes

Sourced from propel/propel1's releases.

1.7.2 (2019-11-05)

Propel 1.7.2 is released!

mostly fixing bugs and a security related fix

The release is available on GitHub under the 1.7.2 tag and through Composer: propel/propel1:

{
    "propel/propel1": "1.7.2"
}

Here is the detailed CHANGELOG:

  • SQL injection fix: Coerce offset and limit values to integers
  • fix support for php 5.3
  • Applying fix for migrate connection error
  • Honour value of 'disable_updated_at timestampable behaviour parameter
  • Fixed diff generator when several identical columns were renamed
  • Support column descriptions in reverse task
Changelog

Sourced from propel/propel1's changelog.

2019-11-05: Version 1.7.2

SQL injection fix: Coerce offset and limit values to integers fix support for php 5.3 Applying fix for migrate connection error Honour value of 'disable_updated_at timestampable behaviour parameter Fixed diff generator when several identical columns were renamed Support column descriptions in reverse task

Commits
  • d46b050 prepare 1.7.2 release (#1074)
  • 5f8f2d6 pin ci dist (#1073)
  • b720932 SQL injection fix: Coerce offset and limit values to integers (#1054)
  • 3f7a284 Merge pull request #864 from Gamesh/patch-3
  • c021369 Ternary operator supported only in php5.3+
  • e914de6 Merge pull request #854 from stevleibelt/master
  • 475e666 Fixed bug introduced by fix [0] and discussed [1].
  • 10180f9 Merge pull request #851 from exptom/1.7.1-fix
  • 06aa3ec Applying fix for migrate connection error
  • 25620fc Merge pull request #847 from acim/843-single-inheritance-keys-bugfix-squashed
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/zebraf1/Kassa/network/alerts).