shipyard
shipyard copied to clipboard
A lightweight, CSS framework for Rails & Jekyll applications
Bumps [activesupport](https://github.com/rails/rails) from 6.0.3.2 to 6.1.7.6. Release notes Sourced from activesupport's releases. v6.1.7.6 No changes between this and 6.1.7.5. This release was just to fix file permissions in the previous...
Bumps [actionview](https://github.com/rails/rails) from 6.0.3.2 to 6.1.7.3. Release notes Sourced from actionview's releases. v6.1.7.3 Active Support Implement SafeBuffer#bytesplice [CVE-2023-28120] Active Model No changes. Active Record No changes. Action View Ignore certain...
Bumps [loofah](https://github.com/flavorjones/loofah) from 2.6.0 to 2.20.0. Release notes Sourced from loofah's releases. 2.20.0 / 2023-04-01 Features Allow SVG attributes color-profile, cursor, filter, marker, and mask. [#246] Allow SVG elements altGlyph,...
Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.10.10 to 1.14.3. Release notes Sourced from nokogiri's releases. 1.14.3 / 2023-04-11 Security [CRuby] Vendored libxml2 is updated to address CVE-2023-29469, CVE-2023-28484, and one other security-related issue....
Bumps [rack](https://github.com/rack/rack) from 2.2.3 to 2.2.6.4. Changelog Sourced from rack's changelog. Changelog All notable changes to this project will be documented in this file. For info on how to format...
Bumps [rails-html-sanitizer](https://github.com/rails/rails-html-sanitizer) from 1.3.0 to 1.4.4. Release notes Sourced from rails-html-sanitizer's releases. 1.4.4 / 2022-12-13 Address inefficient regular expression complexity with certain configurations of Rails::Html::Sanitizer. Fixes CVE-2022-23517. See GHSA-5x79-w82f-gw8w for...
Bumps [addressable](https://github.com/sporkmonger/addressable) from 2.7.0 to 2.8.1. Changelog Sourced from addressable's changelog. Addressable 2.8.1 refactor Addressable::URI.normalize_path to address linter offenses (#430) remove redundant colon in Addressable::URI::CharacterClasses::AUTHORITY regex (#438) update gemspec to...
Bumps [tzinfo](https://github.com/tzinfo/tzinfo) from 1.2.7 to 2.0.5. Release notes Sourced from tzinfo's releases. v2.0.5 Changed DateTime results to always use the proleptic Gregorian calendar. This affects DateTime results prior to 1582-10-15...
Bumps [rexml](https://github.com/ruby/rexml) from 3.2.4 to 3.2.5. Changelog Sourced from rexml's changelog. 3.2.5 - 2021-04-05 {#version-3-2-5} Improvements Add more validations to XPath parser. require "rexml/document" by default. [GitHub#36][Patch by Koichi ITO]...
Bumps [kramdown](https://github.com/gettalong/kramdown) from 2.3.0 to 2.3.1. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...