Bump action_text-trix from 2.1.16 to 2.1.17#1966
Conversation
Bumps [action_text-trix](https://github.com/basecamp/trix) from 2.1.16 to 2.1.17. - [Release notes](https://github.com/basecamp/trix/releases) - [Commits](basecamp/trix@v2.1.16...v2.1.17) --- updated-dependencies: - dependency-name: action_text-trix dependency-version: 2.1.17 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
|
|
🎉 A review copy of this PR has been deployed! It is made of up two components Important Not all of the functionality of forms-runner is present in review apps. You should use the full dev environment to test the functionality which is disabled here. It may take 5 minutes or so for the application to be fully deployed and working. If it still isn't ready For the sign in details and more information, see the review apps wiki page. |



Bumps action_text-trix from 2.1.16 to 2.1.17.
Release notes
Sourced from action_text-trix's releases.
Commits
2e46d51v2.1.1753197abMerge pull request #1282 from basecamp/h1-3581911-serialized-attr3229c29Fix stored XSS via data-trix-serialized-attributes sanitizer bypass (H1 #3581...7069343Merge pull request #1239 from Cromian/patch-1d9dbf0aMerge pull request #1280 from basecamp/fix-bullets-merging-with-prior-elementbef13e2Fix bullets merging with prior elements when the first node is removed194a36cMerge pull request #1275 from basecamp/flavorjones/wtr-failure-messagesc94abe6Use source-map to get better test failure messages6f6ab9aTest runner reporter emits failure details1d2d1a3Merge pull request #1276 from basecamp/flavorjones/ci-green-20260109Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.