Skip to content

Commit 4299244

Browse files
rsmithlalrsmithlal
authored
Build(deps): Bump actionpack from 7.1.4.1 to 7.1.5.1 (#718)
Bumps [actionpack](https://github.com/rails/rails) from 7.1.4.1 to 7.1.5.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/rails/rails/releases">actionpack's releases</a>.</em></p> <blockquote> <h2>7.1.5.1</h2> <h2>Active Support</h2> <ul> <li>No changes.</li> </ul> <h2>Active Model</h2> <ul> <li>No changes.</li> </ul> <h2>Active Record</h2> <ul> <li>No changes.</li> </ul> <h2>Action View</h2> <ul> <li>No changes.</li> </ul> <h2>Action Pack</h2> <ul> <li> <p>Add validation to content security policies to disallow spaces and semicolons. Developers should use multiple arguments, and different directive methods instead.</p> <p>[CVE-2024-54133]</p> <p><em>Gannon McGibbon</em></p> </li> </ul> <h2>Active Job</h2> <ul> <li>No changes.</li> </ul> <h2>Action Mailer</h2> <ul> <li>No changes.</li> </ul> <h2>Action Cable</h2> <ul> <li>No changes.</li> </ul> <h2>Active Storage</h2> <ul> <li>No changes.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rails/rails/commit/14c115b120ed089331ff3dc13f36bd9129ced33d"><code>14c115b</code></a> Preparing for 7.1.5.1 release</li> <li><a href="https://github.com/rails/rails/commit/5558e72f22fc69c1c407b31ac5fb3b4ce087b542"><code>5558e72</code></a> Add CSP directive validation</li> <li><a href="https://github.com/rails/rails/commit/625ec92428e2c2575d5f6345d6f7bdec3865a617"><code>625ec92</code></a> Preparing for 7.1.5 release</li> <li><a href="https://github.com/rails/rails/commit/3ddbd08123d48f58cf50f579d50b33a9ad23a505"><code>3ddbd08</code></a> Merge remote-tracking branch 'origin/7-1-sec' into 7-1-stable</li> <li><a href="https://github.com/rails/rails/commit/e52d670dba4861a081576e5ccc5db7015af3003c"><code>e52d670</code></a> Preparing for 7.1.4.2 release</li> <li><a href="https://github.com/rails/rails/commit/7021f2167b87d1c5c964e3d9a3fdc802dfe5beb8"><code>7021f21</code></a> [ci skip] Fix CHANGELOG lint errors</li> <li><a href="https://github.com/rails/rails/commit/d3ceb6cdabf0835c7a02fcdf9421f279e7abcef5"><code>d3ceb6c</code></a> Merge remote-tracking branch 'origin/7-1-sec' into 7-1-stable</li> <li><a href="https://github.com/rails/rails/commit/7379f7cd4b57f97b1768fb008cfd4a9348598895"><code>7379f7c</code></a> Backport Ruby 3.4 compatibility fixes for actionpack</li> <li><a href="https://github.com/rails/rails/commit/cce9ecbd0b19f4e834f3ad41549240356a775dc0"><code>cce9ecb</code></a> Merge pull request <a href="https://redirect.github.com/rails/rails/issues/53202">#53202</a> from byroot/ruby-3.4-hash-inspect</li> <li><a href="https://github.com/rails/rails/commit/471eb5690052f6532d7e9133c42e6c21c7c15e7d"><code>471eb56</code></a> [7.1] Fix URI::DEFAULT_PARSER warnings</li> <li>Additional commits viewable in <a href="https://github.com/rails/rails/compare/v7.1.4.1...v7.1.5.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actionpack&package-manager=bundler&previous-version=7.1.4.1&new-version=7.1.5.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/better-together-org/community-engine-rails/network/alerts). </details>
2 parents 27f3e7d + 999c314 commit 4299244

File tree

1 file changed

+60
-55
lines changed

1 file changed

+60
-55
lines changed

‎Gemfile.lock‎

Lines changed: 60 additions & 55 deletions
Original file line numberDiff line numberDiff line change
@@ -56,51 +56,51 @@ PATH
5656
GEM
5757
remote: https://rubygems.org/
5858
specs:
59-
actioncable (7.1.4.1)
60-
actionpack (= 7.1.4.1)
61-
activesupport (= 7.1.4.1)
59+
actioncable (7.1.5.1)
60+
actionpack (= 7.1.5.1)
61+
activesupport (= 7.1.5.1)
6262
nio4r (~> 2.0)
6363
websocket-driver (>= 0.6.1)
6464
zeitwerk (~> 2.6)
65-
actionmailbox (7.1.4.1)
66-
actionpack (= 7.1.4.1)
67-
activejob (= 7.1.4.1)
68-
activerecord (= 7.1.4.1)
69-
activestorage (= 7.1.4.1)
70-
activesupport (= 7.1.4.1)
65+
actionmailbox (7.1.5.1)
66+
actionpack (= 7.1.5.1)
67+
activejob (= 7.1.5.1)
68+
activerecord (= 7.1.5.1)
69+
activestorage (= 7.1.5.1)
70+
activesupport (= 7.1.5.1)
7171
mail (>= 2.7.1)
7272
net-imap
7373
net-pop
7474
net-smtp
75-
actionmailer (7.1.4.1)
76-
actionpack (= 7.1.4.1)
77-
actionview (= 7.1.4.1)
78-
activejob (= 7.1.4.1)
79-
activesupport (= 7.1.4.1)
75+
actionmailer (7.1.5.1)
76+
actionpack (= 7.1.5.1)
77+
actionview (= 7.1.5.1)
78+
activejob (= 7.1.5.1)
79+
activesupport (= 7.1.5.1)
8080
mail (~> 2.5, >= 2.5.4)
8181
net-imap
8282
net-pop
8383
net-smtp
8484
rails-dom-testing (~> 2.2)
85-
actionpack (7.1.4.1)
86-
actionview (= 7.1.4.1)
87-
activesupport (= 7.1.4.1)
85+
actionpack (7.1.5.1)
86+
actionview (= 7.1.5.1)
87+
activesupport (= 7.1.5.1)
8888
nokogiri (>= 1.8.5)
8989
racc
9090
rack (>= 2.2.4)
9191
rack-session (>= 1.0.1)
9292
rack-test (>= 0.6.3)
9393
rails-dom-testing (~> 2.2)
9494
rails-html-sanitizer (~> 1.6)
95-
actiontext (7.1.4.1)
96-
actionpack (= 7.1.4.1)
97-
activerecord (= 7.1.4.1)
98-
activestorage (= 7.1.4.1)
99-
activesupport (= 7.1.4.1)
95+
actiontext (7.1.5.1)
96+
actionpack (= 7.1.5.1)
97+
activerecord (= 7.1.5.1)
98+
activestorage (= 7.1.5.1)
99+
activesupport (= 7.1.5.1)
100100
globalid (>= 0.6.0)
101101
nokogiri (>= 1.8.5)
102-
actionview (7.1.4.1)
103-
activesupport (= 7.1.4.1)
102+
actionview (7.1.5.1)
103+
activesupport (= 7.1.5.1)
104104
builder (~> 3.1)
105105
erubi (~> 1.11)
106106
rails-dom-testing (~> 2.2)
@@ -111,35 +111,38 @@ GEM
111111
activestorage (>= 6.1.4)
112112
activesupport (>= 6.1.4)
113113
marcel (>= 1.0.3)
114-
activejob (7.1.4.1)
115-
activesupport (= 7.1.4.1)
114+
activejob (7.1.5.1)
115+
activesupport (= 7.1.5.1)
116116
globalid (>= 0.3.6)
117-
activemodel (7.1.4.1)
118-
activesupport (= 7.1.4.1)
119-
activerecord (7.1.4.1)
120-
activemodel (= 7.1.4.1)
121-
activesupport (= 7.1.4.1)
117+
activemodel (7.1.5.1)
118+
activesupport (= 7.1.5.1)
119+
activerecord (7.1.5.1)
120+
activemodel (= 7.1.5.1)
121+
activesupport (= 7.1.5.1)
122122
timeout (>= 0.4.0)
123123
activerecord-import (1.8.1)
124124
activerecord (>= 4.2)
125125
activerecord-postgis-adapter (9.0.2)
126126
activerecord (~> 7.1.0)
127127
rgeo-activerecord (~> 7.0.0)
128-
activestorage (7.1.4.1)
129-
actionpack (= 7.1.4.1)
130-
activejob (= 7.1.4.1)
131-
activerecord (= 7.1.4.1)
132-
activesupport (= 7.1.4.1)
128+
activestorage (7.1.5.1)
129+
actionpack (= 7.1.5.1)
130+
activejob (= 7.1.5.1)
131+
activerecord (= 7.1.5.1)
132+
activesupport (= 7.1.5.1)
133133
marcel (~> 1.0)
134-
activesupport (7.1.4.1)
134+
activesupport (7.1.5.1)
135135
base64
136+
benchmark (>= 0.3)
136137
bigdecimal
137138
concurrent-ruby (~> 1.0, >= 1.0.2)
138139
connection_pool (>= 2.2.5)
139140
drb
140141
i18n (>= 1.6, < 2)
142+
logger (>= 1.4.2)
141143
minitest (>= 5.1)
142144
mutex_m
145+
securerandom (>= 0.3)
143146
tzinfo (~> 2.0)
144147
addressable (2.8.7)
145148
public_suffix (>= 2.0.2, < 7.0)
@@ -173,6 +176,7 @@ GEM
173176
thread_safe (~> 0.3, >= 0.3.1)
174177
base64 (0.2.0)
175178
bcrypt (3.1.20)
179+
benchmark (0.4.0)
176180
better_errors (2.10.1)
177181
erubi (>= 1.0.0)
178182
rack (>= 0.9.0)
@@ -408,7 +412,7 @@ GEM
408412
net-smtp (0.5.0)
409413
net-protocol
410414
nio4r (2.7.4)
411-
nokogiri (1.17.1-x86_64-linux)
415+
nokogiri (1.17.2-x86_64-linux)
412416
racc (~> 1.4)
413417
noticed (2.4.3)
414418
rails (>= 6.1.0)
@@ -455,33 +459,33 @@ GEM
455459
rack (>= 1.3)
456460
rackup (2.2.1)
457461
rack (>= 3)
458-
rails (7.1.4.1)
459-
actioncable (= 7.1.4.1)
460-
actionmailbox (= 7.1.4.1)
461-
actionmailer (= 7.1.4.1)
462-
actionpack (= 7.1.4.1)
463-
actiontext (= 7.1.4.1)
464-
actionview (= 7.1.4.1)
465-
activejob (= 7.1.4.1)
466-
activemodel (= 7.1.4.1)
467-
activerecord (= 7.1.4.1)
468-
activestorage (= 7.1.4.1)
469-
activesupport (= 7.1.4.1)
462+
rails (7.1.5.1)
463+
actioncable (= 7.1.5.1)
464+
actionmailbox (= 7.1.5.1)
465+
actionmailer (= 7.1.5.1)
466+
actionpack (= 7.1.5.1)
467+
actiontext (= 7.1.5.1)
468+
actionview (= 7.1.5.1)
469+
activejob (= 7.1.5.1)
470+
activemodel (= 7.1.5.1)
471+
activerecord (= 7.1.5.1)
472+
activestorage (= 7.1.5.1)
473+
activesupport (= 7.1.5.1)
470474
bundler (>= 1.15.0)
471-
railties (= 7.1.4.1)
475+
railties (= 7.1.5.1)
472476
rails-dom-testing (2.2.0)
473477
activesupport (>= 5.0.0)
474478
minitest
475479
nokogiri (>= 1.6)
476-
rails-html-sanitizer (1.6.1)
480+
rails-html-sanitizer (1.6.2)
477481
loofah (~> 2.21)
478482
nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0)
479483
rails-i18n (7.0.9)
480484
i18n (>= 0.7, < 2)
481485
railties (>= 6.0.0, < 8)
482-
railties (7.1.4.1)
483-
actionpack (= 7.1.4.1)
484-
activesupport (= 7.1.4.1)
486+
railties (7.1.5.1)
487+
actionpack (= 7.1.5.1)
488+
activesupport (= 7.1.5.1)
485489
irb
486490
rackup (>= 1.0.0)
487491
rake (>= 12.2)
@@ -589,6 +593,7 @@ GEM
589593
ffi (~> 1.9)
590594
sassc-embedded (1.78.0)
591595
sass-embedded (~> 1.78)
596+
securerandom (0.4.0)
592597
selenium-webdriver (4.27.0)
593598
base64 (~> 0.2)
594599
logger (~> 1.4)

0 commit comments

Comments
 (0)