build(deps): update dependency tzinfo to ">= 1.2.11", "< 3"

Open renovate[bot] opened this issue 3 years ago • 2 comments

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
tzinfo (source, changelog)	`">= 1", "< 3"` -> `">= 1.2.11", "< 3"`

Release Notes

tzinfo/tzinfo (tzinfo)

`v1.2.11`

Compare Source

Eliminate Object#untaint deprecation warnings on JRuby 9.4.0.0. #145.

`v1.2.10`

Compare Source

Fixed a relative path traversal bug that could cause arbitrary files to be loaded with require when used with RubyDataSource. Please refer to https://github.com/tzinfo/tzinfo/security/advisories/GHSA-5cm2-9h8c-rvfx for details. CVE-2022-31163.
Ignore the SECURITY file from Arch Linux's tzdata package. #134.

`v1.2.9`

Compare Source

Fixed an incorrect InvalidTimezoneIdentifier exception raised when loading a zoneinfo file that includes rules specifying an additional transition to the final defined offset (for example, Africa/Casablanca in version 2018e of the Time Zone Database). #123.

`v1.2.8`

Compare Source

Added support for handling "slim" format zoneinfo files that are produced by default by zic version 2020b and later. The POSIX-style TZ string is now used calculate DST transition times after the final defined transition in the file. The 64-bit section is now always used regardless of whether Time has support for 64-bit times. #120.
Rubinius is no longer supported.

`v1.2.7`

Compare Source

Fixed 'wrong number of arguments' errors when running on JRuby 9.0. #114.
Fixed warnings when running on Ruby 2.8. #112.

`v1.2.6`

Compare Source

Timezone#strftime('%s', time) will now return the correct number of seconds since the epoch. #91.
Removed the unused TZInfo::RubyDataSource::REQUIRE_PATH constant.
Fixed "SecurityError: Insecure operation - require" exceptions when loading data with recent Ruby releases in safe mode.
Fixed warnings when running on Ruby 2.7. #106 and #111.

`v1.2.5`

Compare Source

Support recursively (deep) freezing Country and Timezone instances. #80.
Allow negative daylight savings time offsets to be derived when reading from zoneinfo files. The utc_offset and std_offset are now derived correctly for Europe/Dublin in the 2018a and 2018b releases of the Time Zone Database.

`v1.2.4`

Compare Source

Ignore the leapseconds file that is included in zoneinfo directories installed with version 2017c and later of the Time Zone Database.

`v1.2.3`

Compare Source

Reduce the number of String objects allocated when loading zoneinfo files. #54.
Make Timezone#friendly_identifier compatible with frozen string literals.
Improve the algorithm for deriving the utc_offset from zoneinfo files. This now correctly handles Pacific/Apia switching from one side of the International Date Line to the other whilst observing daylight savings time. #66.
Fix an UnknownTimezone exception when calling transitions_up_to or offsets_up_to on a TimezoneProxy instance obtained from Timezone.get_proxy.
Allow the Factory zone to be obtained from the Zoneinfo data source.
Ignore the /usr/share/zoneinfo/timeconfig symlink included in Slackware distributions. #64.
Fix Timezone#strftime handling of %Z expansion when %Z is prefixed with more than one percent. #31.
Support expansion of %z, %:z, %::z and %:::z to the UTC offset of the time zone in Timezone#strftime. #31 and #67.

`v1.2.2`

Compare Source

Fix an error with duplicates being returned by Timezone#all_country_zones and Timezone#all_country_zone_identifiers when used with tzinfo-data v1.2014.6 or later.
Use the zone1970.tab file for country timezone data if it is found in the zoneinfo directory (and fallback to zone.tab if not). zone1970.tab was added in tzdata 2014f. zone.tab is now deprecated.

`v1.2.1`

Compare Source

Eliminate Object#untaint deprecation warnings on JRuby 9.4.0.0. #145.

`v1.2.0`

Compare Source

Raise the minimum supported Ruby version to 1.8.7.
Support loading system zoneinfo data on FreeBSD, OpenBSD and Solaris. Resolves #15.
Add canonical_identifier and canonical_zone methods to Timezone. Resolves #16.
Add a link to a DataSourceNotFound help page in the TZInfo::DataSourceNotFound exception message.
Load iso3166.tab and zone.tab files as UTF-8.
Fix Timezone#local_to_utc returning local Time instances on systems using UTC as the local time zone. Resolves #13.
Fix == methods raising an exception when passed an instance of a different class by making <=> return nil if passed a non-comparable argument.
Eliminate require 'rational' warnings. Resolves #10.
Eliminate "assigned but unused variable - info" warnings. Resolves #11.
Switch to minitest v5 for unit tests. Resolves #18.

`v1.1.0`

Compare Source

TZInfo is now thread safe. ThreadSafe::Cache is now used instead of Hash to cache Timezone and Country instances returned by Timezone.get and Country.get. The tzinfo gem now depends on thread_safe ~> 0.1.
Added a transitions_up_to method to Timezone that returns a list of the times where the UTC offset of the timezone changes.
Added an offsets_up_to method to Timezone that returns the set of offsets that have been observed in a defined timezone.
Fixed a "can't modify frozen String" error when loading a Timezone from a zoneinfo file using an identifier String that is both tainted and frozen. Resolves #3.
Support TZif3 format zoneinfo files (now produced by zic from tzcode version 2013e onwards).
Support using YARD to generate documentation (added a .yardopts file).
Ignore the +VERSION file included in the zoneinfo directory on Mac OS X.
Added a note to the documentation concerning 32-bit zoneinfo files (as included with Mac OS X).

`v1.0.1`

Compare Source

Fix a test case failure when tests are run from a directory that contains a dot in the path (issue #29751).

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

[ ] If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Jan 28 '23 22:01 renovate[bot]

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Gemfile.lock


Could not find gem 'tzinfo'.

Jan 28 '23 22:01 renovate[bot]