Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Bump nokogiri from 1.16.6 to 1.16.7 (#4129)
Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.16.6 to 1.16.7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sparklemotion/nokogiri/releases">nokogiri's releases</a>.</em></p> <blockquote> <h2>v1.16.7 / 2024-07-27</h2> <h2>Dependencies</h2> <ul> <li>[CRuby] Vendored libxml2 is updated to <a href="https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.9">v2.12.9</a>, which the upstream release notes state is a security release to address CVE-2024-40896. Nokogiri's maintainers believe this vulnerability does not affect users of Nokogiri, but we advise upgrading at your earliest convenience anyway.</li> </ul> <hr /> <p>sha256 checksums:</p> <pre><code>78778d35f165b59513be31c0fe232c63a82cf97626ffba695b5f822e5da1d74b nokogiri-1.16.7-aarch64-linux.gem c84cdb9e3aa44c35bbb981b20175838c4b2066c26c5cb118f31f177168a42fc3 nokogiri-1.16.7-arm-linux.gem 276dcea1b988a5b22b5acc1ba901d24b8e908c40b71dccd5d54a2ae279480dad nokogiri-1.16.7-arm64-darwin.gem 044c45ca46abc2b6135a85ab39a546ff2f0434d43142bc59b83e5b1068876a42 nokogiri-1.16.7-java.gem 01ed785392f9cbdfd45e0e5ef6ad6d2c80a6128672589448f18952168bd68e56 nokogiri-1.16.7-x64-mingw-ucrt.gem d8fd5c675743b85354c9098117bfa9e703c7cacab8c33e5190104ea8218ad1ec nokogiri-1.16.7-x64-mingw32.gem dddbf1c1ef99ce9fab98302b14f8bacb703e6f16e89b99f05ecee8a1fca23664 nokogiri-1.16.7-x86-linux.gem b6517d995b024739cbb81251a26866d40e1ccb151936b5bb0977e7487f4e617c nokogiri-1.16.7-x86-mingw32.gem 630732b80fc572690eab50c73a1f18988f3ac401ed0b67ca9956ba2b1e2c3faa nokogiri-1.16.7-x86_64-darwin.gem 9e1e428641d5942af877c60b418c71163560e9feb4a5c4015f3230a8b86a40f6 nokogiri-1.16.7-x86_64-linux.gem f819cbfdfb0a7b19c9c52c6f2ca63df0e58a6125f4f139707b586b9511d7fe95 nokogiri-1.16.7.gem </code></pre> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md">nokogiri's changelog</a>.</em></p> <blockquote> <h2>v1.16.7 / 2024-07-27</h2> <h2>Dependencies</h2> <ul> <li>[CRuby] Vendored libxml2 is updated to <a href="https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.9">v2.12.9</a>, which the upstream release notes state is a security release to address CVE-2024-40896. Nokogiri's maintainers believe this vulnerability does not affect users of Nokogiri, but we advise upgrading at your earliest convenience anyway.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sparklemotion/nokogiri/commit/d8d6ba30aaa0a0b3b0baa499ed79811814f789a2"><code>d8d6ba3</code></a> version bump to v1.16.7</li> <li><a href="https://github.com/sparklemotion/nokogiri/commit/76199bb5b00f246a3de24a416e98050321374a95"><code>76199bb</code></a> dep: update libxml2 to v2.12.9 (branch v1.16.x) (<a href="https://redirect.github.com/sparklemotion/nokogiri/issues/3297">#3297</a>)</li> <li><a href="https://github.com/sparklemotion/nokogiri/commit/ca92e48b0c7c85bed1cbc42845cae8ccad57fce1"><code>ca92e48</code></a> dep: update packaged libxml2 to v2.12.9</li> <li>See full diff in <a href="https://github.com/sparklemotion/nokogiri/compare/v1.16.6...v1.16.7">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=nokogiri&package-manager=bundler&previous-version=1.16.6&new-version=1.16.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- Loading branch information