abalone
abalone copied to clipboard
Bump rails from 6.1.4.6 to 7.0.4.2
Bumps rails from 6.1.4.6 to 7.0.4.2.
Release notes
Sourced from rails's releases.
v7.0.4.2
Active Support
- No changes.
Active Model
- No changes.
Active Record
- No changes.
Action View
- No changes.
Action Pack
Fix
domain: :allfor two letter TLDThis fixes a compatibility issue introduced in our previous security release when using
domain: :allwith a two letter but single level top level domain domain (like.ca, rather than.co.uk).Active Job
- No changes.
Action Mailer
- No changes.
Action Cable
... (truncated)
Commits
7c70791Version 7.0.4.21d6de16Merge pull request #47087 from jhawthorn/cookie_domain23e0345Version 7.0.4.1d7aba06Make sanitize_as_sql_comment more strict8d82687Avoid regex backtracking on If-None-Match header2164d4fAvoid regex backtracking in Inflector.underscorecd46b0eUse string#split instead of regex for domain partse50e26dFix sec issue with _url_host_allowed?82bcdc0Added integer width check to PostgreSQL::Quoting8015c2cVersion 7.0.4- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)