Update dependency rake to v12.3.3 [SECURITY] - autoclosed

renovate[bot] commented 1 year ago

This PR contains the following updates:

Package	Update	Change
rake (changelog)	patch	`'12.3.1'` -> `'12.3.3'`

GitHub Vulnerability Alerts

CVE-2020-8130

There is an OS command injection vulnerability in Ruby Rake before 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |.

Release Notes

ruby/rake (rake)

### [`v12.3.3`](https://togithub.com/ruby/rake/releases/tag/v12.3.3) [Compare Source](https://togithub.com/ruby/rake/compare/v12.3.2...v12.3.3) #### What's Changed - Add ruby 2.6.0 to .travis.yml by [@colby-swandale](https://togithub.com/colby-swandale) in [https://github.com/ruby/rake/pull/300](https://togithub.com/ruby/rake/pull/300) - Fix outstanding rubocop warnings by [@colby-swandale](https://togithub.com/colby-swandale) in [https://github.com/ruby/rake/pull/301](https://togithub.com/ruby/rake/pull/301) - Use the application's name in error message if a task is not found by [@tmatilai](https://togithub.com/tmatilai) in [https://github.com/ruby/rake/pull/303](https://togithub.com/ruby/rake/pull/303) - Use Ruby 2.6.1 by [@aycabta](https://togithub.com/aycabta) in [https://github.com/ruby/rake/pull/305](https://togithub.com/ruby/rake/pull/305) - Set up CI with Azure Pipelines by [@hsbt](https://togithub.com/hsbt) in [https://github.com/ruby/rake/pull/307](https://togithub.com/ruby/rake/pull/307) - Remove deprecated travis ci option by [@RDIL](https://togithub.com/RDIL) in [https://github.com/ruby/rake/pull/309](https://togithub.com/ruby/rake/pull/309) - Removed gitignore from gemspec files. by [@hsbt](https://togithub.com/hsbt) in [https://github.com/ruby/rake/pull/317](https://togithub.com/ruby/rake/pull/317) #### New Contributors - [@tmatilai](https://togithub.com/tmatilai) made their first contribution in [https://github.com/ruby/rake/pull/303](https://togithub.com/ruby/rake/pull/303) - [@RDIL](https://togithub.com/RDIL) made their first contribution in [https://github.com/ruby/rake/pull/309](https://togithub.com/ruby/rake/pull/309) **Full Changelog**: https://github.com/ruby/rake/compare/v12.3.2...v12.3.3 ### [`v12.3.2`](https://togithub.com/ruby/rake/releases/tag/v12.3.2) [Compare Source](https://togithub.com/ruby/rake/compare/v12.3.1...v12.3.2) #### What's Changed - Add alias `prereqs`. by [@take-cheeze](https://togithub.com/take-cheeze) in [https://github.com/ruby/rake/pull/268](https://togithub.com/ruby/rake/pull/268) - Fix JRuby detection on JRuby 9.2 in cpu_counter.rb by [@jeremyevans](https://togithub.com/jeremyevans) in [https://github.com/ruby/rake/pull/265](https://togithub.com/ruby/rake/pull/265) - Fix a typo in lib/rake/application.rb by [@felixonmars](https://togithub.com/felixonmars) in [https://github.com/ruby/rake/pull/276](https://togithub.com/ruby/rake/pull/276) - Remove trailing extension name by [@zhustec](https://togithub.com/zhustec) in [https://github.com/ruby/rake/pull/275](https://togithub.com/ruby/rake/pull/275) - Use Ruby 2.2.10, 2.3.8, 2.4.5, and 2.5.3 by [@aycabta](https://togithub.com/aycabta) in [https://github.com/ruby/rake/pull/278](https://togithub.com/ruby/rake/pull/278) - fix errors in rubocop by [@colby-swandale](https://togithub.com/colby-swandale) in [https://github.com/ruby/rake/pull/282](https://togithub.com/ruby/rake/pull/282) - add binstubs for bundler, rake, rodc and rubocop by [@colby-swandale](https://togithub.com/colby-swandale) in [https://github.com/ruby/rake/pull/280](https://togithub.com/ruby/rake/pull/280) - add rubocop section to CONTRIBUTING.rdoc by [@colby-swandale](https://togithub.com/colby-swandale) in [https://github.com/ruby/rake/pull/285](https://togithub.com/ruby/rake/pull/285) - Rework the error message that tells users to list the tasks with `rake --tasks` by [@colby-swandale](https://togithub.com/colby-swandale) in [https://github.com/ruby/rake/pull/287](https://togithub.com/ruby/rake/pull/287) - update latest jruby version in travis by [@colby-swandale](https://togithub.com/colby-swandale) in [https://github.com/ruby/rake/pull/290](https://togithub.com/ruby/rake/pull/290) - fix links to rake resources not showing on Github by [@colby-swandale](https://togithub.com/colby-swandale) in [https://github.com/ruby/rake/pull/288](https://togithub.com/ruby/rake/pull/288) - Improve multitask performance by [@jsm](https://togithub.com/jsm) in [https://github.com/ruby/rake/pull/273](https://togithub.com/ruby/rake/pull/273) - Update jruby to the latest version in travis by [@colby-swandale](https://togithub.com/colby-swandale) in [https://github.com/ruby/rake/pull/291](https://togithub.com/ruby/rake/pull/291) - run coveralls only when COVERALLS env var is present by [@colby-swandale](https://togithub.com/colby-swandale) in [https://github.com/ruby/rake/pull/289](https://togithub.com/ruby/rake/pull/289) - Improve running test instructions and denote commands with `$` by [@colby-swandale](https://togithub.com/colby-swandale) in [https://github.com/ruby/rake/pull/295](https://togithub.com/ruby/rake/pull/295) - Update public clone URL to use https by [@colby-swandale](https://togithub.com/colby-swandale) in [https://github.com/ruby/rake/pull/294](https://togithub.com/ruby/rake/pull/294) - Rdoc improvements by [@colby-swandale](https://togithub.com/colby-swandale) in [https://github.com/ruby/rake/pull/293](https://togithub.com/ruby/rake/pull/293) - Fixed test fails caused by 2.6 warnings by [@hsbt](https://togithub.com/hsbt) in [https://github.com/ruby/rake/pull/297](https://togithub.com/ruby/rake/pull/297) #### New Contributors - [@felixonmars](https://togithub.com/felixonmars) made their first contribution in [https://github.com/ruby/rake/pull/276](https://togithub.com/ruby/rake/pull/276) - [@zhustec](https://togithub.com/zhustec) made their first contribution in [https://github.com/ruby/rake/pull/275](https://togithub.com/ruby/rake/pull/275) **Full Changelog**: https://github.com/ruby/rake/compare/v12.3.1...v12.3.2

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

[ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

yegor256 commented 1 year ago

@rultor please, try to merge

rultor commented 1 year ago

@rultor please, try to merge

@yegor256 OK, I'll try to merge now. You can check the progress of the merge here

rultor commented 1 year ago

@rultor please, try to merge

@renovate[bot] @yegor256 Oops, I failed. You can see the full log here (spent 17min)

Preparing to unpack .../imagemagick-6.q16_8%3a6.8.9.9-7ubuntu5.16_amd64.deb ...
Unpacking imagemagick-6.q16 (8:6.8.9.9-7ubuntu5.16) ...
Selecting previously unselected package imagemagick.
Preparing to unpack .../imagemagick_8%3a6.8.9.9-7ubuntu5.16_amd64.deb ...
Unpacking imagemagick (8:6.8.9.9-7ubuntu5.16) ...
Selecting previously unselected package libdjvulibre-text.
Preparing to unpack .../libdjvulibre-text_3.5.27.1-5ubuntu0.1_all.deb ...
Unpacking libdjvulibre-text (3.5.27.1-5ubuntu0.1) ...
Selecting previously unselected package libdjvulibre21:amd64.
Preparing to unpack .../libdjvulibre21_3.5.27.1-5ubuntu0.1_amd64.deb ...
Unpacking libdjvulibre21:amd64 (3.5.27.1-5ubuntu0.1) ...
Selecting previously unselected package libilmbase12:amd64.
Preparing to unpack .../libilmbase12_2.2.0-11ubuntu2_amd64.deb ...
Unpacking libilmbase12:amd64 (2.2.0-11ubuntu2) ...
Selecting previously unselected package libopenexr22:amd64.
Preparing to unpack .../libopenexr22_2.2.0-10ubuntu2.6_amd64.deb ...
Unpacking libopenexr22:amd64 (2.2.0-10ubuntu2.6) ...
Selecting previously unselected package libwmf0.2-7:amd64.
Preparing to unpack .../libwmf0.2-7_0.2.8.4-10.5ubuntu1_amd64.deb ...
Unpacking libwmf0.2-7:amd64 (0.2.8.4-10.5ubuntu1) ...
Selecting previously unselected package libmagickcore-6.q16-2-extra:amd64.
Preparing to unpack .../libmagickcore-6.q16-2-extra_8%3a6.8.9.9-7ubuntu5.16_amd64.deb ...
Unpacking libmagickcore-6.q16-2-extra:amd64 (8:6.8.9.9-7ubuntu5.16) ...
Selecting previously unselected package libnetpbm10.
Preparing to unpack .../libnetpbm10_2%3a10.0-15.3_amd64.deb ...
Unpacking libnetpbm10 (2:10.0-15.3) ...
Selecting previously unselected package netpbm.
Preparing to unpack .../netpbm_2%3a10.0-15.3_amd64.deb ...
Unpacking netpbm (2:10.0-15.3) ...
Processing triggers for hicolor-icon-theme (0.15-0ubuntu1) ...
Processing triggers for mime-support (3.59ubuntu1) ...
Processing triggers for libc-bin (2.23-0ubuntu10) ...
Setting up imagemagick-6.q16 (8:6.8.9.9-7ubuntu5.16) ...
Setting up imagemagick (8:6.8.9.9-7ubuntu5.16) ...
update-alternatives: using /usr/bin/compare-im6 to provide /usr/bin/compare (compare) in auto mode
update-alternatives: using /usr/bin/animate-im6 to provide /usr/bin/animate (animate) in auto mode
update-alternatives: using /usr/bin/convert-im6 to provide /usr/bin/convert (convert) in auto mode
update-alternatives: using /usr/bin/composite-im6 to provide /usr/bin/composite (composite) in auto mode
update-alternatives: using /usr/bin/conjure-im6 to provide /usr/bin/conjure (conjure) in auto mode
update-alternatives: using /usr/bin/import-im6 to provide /usr/bin/import (import) in auto mode
update-alternatives: using /usr/bin/identify-im6 to provide /usr/bin/identify (identify) in auto mode
update-alternatives: using /usr/bin/stream-im6 to provide /usr/bin/stream (stream) in auto mode
update-alternatives: using /usr/bin/display-im6 to provide /usr/bin/display (display) in auto mode
update-alternatives: using /usr/bin/montage-im6 to provide /usr/bin/montage (montage) in auto mode
update-alternatives: using /usr/bin/mogrify-im6 to provide /usr/bin/mogrify (mogrify) in auto mode
Setting up libdjvulibre-text (3.5.27.1-5ubuntu0.1) ...
Setting up libdjvulibre21:amd64 (3.5.27.1-5ubuntu0.1) ...
Setting up libilmbase12:amd64 (2.2.0-11ubuntu2) ...
Setting up libopenexr22:amd64 (2.2.0-10ubuntu2.6) ...
Setting up libwmf0.2-7:amd64 (0.2.8.4-10.5ubuntu1) ...
Setting up libmagickcore-6.q16-2-extra:amd64 (8:6.8.9.9-7ubuntu5.16) ...
Setting up libnetpbm10 (2:10.0-15.3) ...
Setting up netpbm (2:10.0-15.3) ...
Processing triggers for libc-bin (2.23-0ubuntu10) ...
+ sudo -i gem install bundler
Fetching: bundler-2.4.14.gem
Fetching: bundler-2.4.14.gem (  4%)
Fetching: bundler-2.4.14.gem (  8%)
Fetching: bundler-2.4.14.gem ( 12%)
Fetching: bundler-2.4.14.gem ( 16%)
Fetching: bundler-2.4.14.gem ( 20%)
Fetching: bundler-2.4.14.gem ( 24%)
Fetching: bundler-2.4.14.gem ( 28%)
Fetching: bundler-2.4.14.gem ( 32%)
Fetching: bundler-2.4.14.gem ( 36%)
Fetching: bundler-2.4.14.gem ( 40%)
Fetching: bundler-2.4.14.gem ( 44%)
Fetching: bundler-2.4.14.gem ( 48%)
Fetching: bundler-2.4.14.gem ( 52%)
Fetching: bundler-2.4.14.gem ( 56%)
Fetching: bundler-2.4.14.gem ( 60%)
Fetching: bundler-2.4.14.gem ( 64%)
Fetching: bundler-2.4.14.gem ( 68%)
Fetching: bundler-2.4.14.gem ( 72%)
Fetching: bundler-2.4.14.gem ( 76%)
Fetching: bundler-2.4.14.gem ( 80%)
Fetching: bundler-2.4.14.gem ( 84%)
Fetching: bundler-2.4.14.gem ( 88%)
Fetching: bundler-2.4.14.gem ( 92%)
Fetching: bundler-2.4.14.gem ( 96%)
Fetching: bundler-2.4.14.gem (100%)
Fetching: bundler-2.4.14.gem (100%)
ERROR:  Error installing bundler:
    bundler requires Ruby version >= 2.6.0.
container c55d41c8a9d34b53419a7ccebeea1f177a3e6566361c4386558cccc6beb9f2cc is dead
Mon 26 Jun 2023 07:48:08 AM CEST

0crat commented 1 year ago

Job gh:zold-io/papers#87 is not assigned, can't get performer

0crat commented 1 year ago

There is an unrecoverable failure on my side. Please, submit it here:

PID: 2@0cd36506-b0b1-4f21-9135-fadd6569c098, thread: PQ-CB08FTCNQ
com.zerocracy.farm.strict.StrictProject[122] java.lang.IllegalArgumentException: File "blanks/renovate[bot].xml" is not accessible in "PMO"

1.0-SNAPSHOT: CID: 4730d730-4d0d-43dc-9f48-0697be8700b3, Type: "Close job"

zold-io / papers