Bump the bundler group across 2 directories with 8 updates #6

dependabot · 2024-05-14T01:07:06Z

Bumps the bundler group with 6 updates in the /examples/middleman directory:

Package	From	To
activesupport	`4.2.6`	`4.2.11.3`
ffi	`1.9.10`	`1.16.3`
haml	`4.0.7`	`6.3.0`
kramdown	`1.10.0`	`1.17.0`
nokogiri	`1.6.7.2`	`1.16.5`
rack	`1.6.4`	`1.6.13`

Bumps the bundler group with 6 updates in the /generators/static-site/modules/middleman directory:

Package	From	To
activesupport	`4.2.6`	`4.2.11.3`
ffi	`1.9.10`	`1.16.3`
haml	`4.0.7`	`6.3.0`
kramdown	`1.10.0`	`1.17.0`
nokogiri	`1.6.7.2`	`1.16.5`
rack	`1.6.4`	`1.6.13`

Updates activesupport from 4.2.6 to 4.2.11.3

Release notes

Sourced from activesupport's releases.

4.2.11.3

Action Mailer

No changes.

Action Pack

No changes.

Action View

Backport a missing commit for [CVE-2020-8163]

Active Job

No changes.

Active Model

No changes.

Active Record

No changes.

Active Support

No changes.

Railties

No changes.

4.2.11.2

Action Mailer

... (truncated)

Commits

3231120 prepping for release
1f3db0a Merge pull request #39302 from dustym/add-delegation_reserved_method_names
b9e5577 Preparing for 4.2.11.2 release
9855d05 Bumping version for release
e06a1e0 Prep release
474b739 Preparing for 4.2.11 release
759d41d Backport fix for Dir::Tmpname.create from #32386
7fe69ea Add missing require for remove_possible_method
6b9a1ac Update changelog headers for Rails 4.2.10
b62714d Preparing for 4.2.10 release
Additional commits viewable in compare view

Updates ffi from 1.9.10 to 1.16.3

Changelog

Sourced from ffi's changelog.

1.16.3 / 2023-10-04

Fixed:

Fix gcc error when building on CentOS 7. #1052

Avoid trying to store new DataConverter type in frozen TypeDefs hash. #1057

1.16.2 / 2023-09-25

Fixed:

Handle null pointer crash after fork. #1051

1.16.1 / 2023-09-24

Fixed:

Fix compiling the builtin libffi. #1049

1.16.0 / 2023-09-23

Fixed:

Fix an issue with signed bitmasks when using flags on the most significant bit. #949

Fix FFI::Pointer#initialize using NUM2LL instead of NUM2ULL.

Fix FFI::Type#inspect to properly display the constant name. #1002

Use libffi closure allocations on hppa-Linux. #1017 Previously they would segfault.

Fix class name of Symbol#inspect.

Fix MSVC support of libtest. #1028

Fix attach_function of functions ending in ? or ! #971

Added:

Convert all C-based classes to TypedData and use write barriers. #994, #995, #996, #997, #998, #999, #1000, #1001, #1003, #1004, #1005, #1006, #1007, #1008, #1009, #1010, #1011, #1012 This results in less pressure on the garbage collector, since the objects can be promoted to the old generation, which means they only get marked on major GC.

Implement ObjectSpace.memsize_of() of all C-based classes.

Make FFI Ractor compatible. #1023 Modules extended per extend FFI::Library need to be frozen in order to be used by non-main Ractors. This can be done by calling freeze below of all C interface definitions.

In a Ractor it's possible to:

load DLLs and call its functions, access its global variables

use builtin typedefs

use and modify ractor local typedefs

define callbacks

receive async callbacks from non-ruby threads

use frozen FFI::Library based modules with all attributes (enums, structs, typedefs, functions, callbacks)

invoke frozen functions and callbacks defined in the main Ractor

... (truncated)

Commits

6cef66d Bump VERSION to 1.16.3
87ca653 Update CHANGELOG for ffi-1.16.3
a8f7d97 Update link in README.md [ci skip]
87ff960 Merge branch 'master' of github.com:ffi/ffi
c97b825 Add examples from https://github.com/ffi/ffi/wiki/How-to-use-FFI-in-Ruby-Ractors
c1ed9bc Add link to Ractor docs to README.md
13afd23 Merge pull request #1057 from mvz/avoid-frozen-typemap
6e29dc1 Avoid trying to store new DataConverter type in frozen TypeDefs hash
bf21280 Prepare a CHANGELOG entry for ffi-1.16.3
683e18b Merge pull request #1053 from larskanis/fix-1052
Additional commits viewable in compare view

Updates haml from 4.0.7 to 6.3.0

Release notes

Sourced from haml's releases.

v6.3.0

Remove Haml::RailsTemplate#default_format that was added in v6.1.3 for Turbo #1152, #1154 (discussion)

See the reference for suggested alternatives.

v6.2.5

Deprecate Haml::RailsTemplate#default_format that was added in v6.1.3 for Turbo (discussion)

See the reference for suggested alternatives.

v6.2.4

Support case-in statement #1155

v6.2.3

Resurrect RDFa doctype support #1147

v6.2.2

Allow adding custom attributes to Haml::BOOLEAN_ATTRIBUTES #1148

Consider aria-xxx: false as a boolean attribute

v6.2.1

Fix v6.2.0's bug in rendering dynamic aria attributes #1149

v6.2.0

Drop the C extension #1146

v6.1.4

Let Haml::Util.escape_html use ERB::Escape if available #1145

v6.1.3

Add Haml::RailsTemplate#default_format for Turbo compatibility #1144

v6.1.2

Use the rails template path as filename #1140

v6.1.1

Fix an empty output of Ruby 3.1's Hash shorthand syntax #1083

v6.1.0

Optimize away a to_s call on = scripts

Fix escaping for objects that return an html_safe string on to_s #1117

v6.0.12

Fix a whitespace removal with > and an if-else statement #1114

v6.0.11

Fix a whitespace removal with > and an if statement #1114

v6.0.10

Evaluate :erb filter in the template context like Haml 5

v6.0.9

... (truncated)

Changelog

Sourced from haml's changelog.

6.3.0

Remove Haml::RailsTemplate#default_format that was added in v6.1.3 for Turbo #1152, #1154 (discussion)

See the reference for suggested alternatives.

6.2.5

Deprecate Haml::RailsTemplate#default_format that was added in v6.1.3 for Turbo (discussion)

6.2.4

Support case-in statement #1155

6.2.3

Resurrect RDFa doctype support #1147

6.2.2

Allow adding custom attributes to Haml::BOOLEAN_ATTRIBUTES #1148

Consider aria-xxx: false as a boolean attribute

6.2.1

Fix v6.2.0's bug in rendering dynamic aria attributes #1149

6.2.0

Drop the C extension #1146

6.1.4

Let Haml::Util.escape_html use ERB::Escape if available #1145

6.1.3

Add Haml::RailsTemplate#default_format for Turbo compatibility #1144

6.1.2

Use the rails template path as filename #1140

6.1.1

Fix an empty output of Ruby 3.1's Hash shorthand syntax #1083

6.1.0

Optimize away a to_s call on = scripts

Fix escaping for objects that return an html_safe string on to_s #1117

... (truncated)

Commits

8e68e37 Version 6.3.0
414a4fc Remove Haml::RailsTemplate#default_format
721b381 Version 6.2.5
9357721 Warn the use of #default_format
2269160 Add a documentation about Turbo
7db9665 Version 6.2.4
1098bc1 Fix running tests against Rails 7.1
a55cbf6 Remove advice to run git submodule update --init
616cf38 Add support for case-in statements
88049a6 Version 6.2.3
Additional commits viewable in compare view

Updates json from 1.8.3 to 2.7.2

Release notes

Sourced from json's releases.

v2.7.2

What's Changed

Use rb_sym2str instead of SYM2ID by @jhawthorn in flori/json#561

Fix memory leak when exception is raised during JSON generation by @peterzhu2118 in flori/json#574

Remove references to "19" methods in JRuby by @headius in flori/json#576

Make OpenStruct support as optional by @hsbt in flori/json#565

Autoload JSON::GenericObject to avoid require ostruct warning in Ruby 3.4 by @tompng in flori/json#577

Warn to install ostruct if json couldn't load it by @hsbt in flori/json#578

New Contributors

@mperham made their first contribution in flori/json#571

@peterzhu2118 made their first contribution in flori/json#574

Full Changelog: ruby/json@v2.7.1...v2.7.2

v2.7.1

What's Changed

Improved

[DOC] RDoc for additions by @BurdetteLamar in flori/json#557

Fixed

JSON.dump: handle unenclosed hashes regression by @casperisfine in flori/json#554

Overload kwargs in JSON.dump by @k0kubun in flori/json#556

Fix JSON.dump overload combination by @tompng in flori/json#558

Misc

Remove needless encodings by @hsbt in flori/json#559

Unify versions by @hsbt in flori/json#560

New Contributors

@k0kubun made their first contribution in flori/json#556

@tompng made their first contribution in flori/json#558

Full Changelog: ruby/json@v2.7.0...v2.7.1

v2.7.0

What's Changed

Improved

Perf. improvements to Hash#to_json in pure implementation generator. by @vipulnsward in flori/json#203

Remove unnecessary initialization of create_id in JSON.parse() by @Watson1978 in flori/json#454

Added

Call super in included hook by @paracycle in flori/json#486

Rename escape_slash in script_safe and also escape E+2028 and E+2029 by @casperisfine in flori/json#525

Add a strict option to Generator by @casperisfine in flori/json#519

... (truncated)

Changelog

Sourced from json's changelog.

2024-04-04 (2.7.2)

Use rb_sym2str instead of SYM2ID #561

Fix memory leak when exception is raised during JSON generation #574

Remove references to "19" methods in JRuby #576

Make OpenStruct support as optional by @hsbt in #565

Autoload JSON::GenericObject to avoid require ostruct warning in Ruby 3.4 #577

Warn to install ostruct if json couldn't load it by @hsbt #578

2023-12-05 (2.7.1)

JSON.dump: handle unenclosed hashes regression #554

Overload kwargs in JSON.dump #556

[DOC] RDoc for additions #557

Fix JSON.dump overload combination #558

2023-12-01 (2.7.0)

Add a strict option to Generator #519

escape_slash option was renamed as script_safe and now also escape U+2028 and U+2029. escape_slash is now an alias of script_safe #525

Remove unnecessary initialization of create_id in JSON.parse() #454

Improvements to Hash#to_json in pure implementation generator #203

Use ruby_xfree to free buffers #518

Fix "unexpected token" offset for Infinity #507

Avoid using deprecated BigDecimal.new on JRuby #546

Removed code for Ruby 1.8 #540

Rename JSON::ParseError to JSON:ParserError #530

Call super in included hook #486

JRuby requires a minimum of Java 8 #516

Always indent even if empty #517

2022-11-30 (2.6.3)

bugfix json/pure mixing escaped with literal unicode raises Encoding::CompatibilityError #483

Stop including the parser source LINE in exceptions #470

2022-11-17 (2.6.2)

Remove unknown keyword arg from DateTime.parse #488

Ignore java artifacts by @hsbt #489

Fix parser bug for empty string allocation #496

2021-10-24 (2.6.1)

Restore version.rb with 2.6.1

2021-10-14 (2.6.0)

Use rb_enc_interned_str if available to reduce allocations in freeze: true mode. #451.

Bump required_ruby_version to 2.3.

... (truncated)

Commits

036944a Bump up 2.7.2
5a1659d Merge pull request #578 from flori/warn-bundled-gems
fff2859 Warn to install ostruct if json couldn't load it
cdbcbd0 Merge pull request #577 from tompng/autoload_generic_object
84b7517 Merge pull request #576 from headius/no_19_jruby_methods
b507f9e Autoload GenericObject to avoid require ostruct warning in Ruby 3.4
a480682 Remove references to "19" methods in JRuby
35d435e Merge pull request #575 from flori/refine-ci
817d7b0 Exclude 2.3-2.5 on macos-14 iamge
df33e8e Added JRuby 9.4
Additional commits viewable in compare view

Updates kramdown from 1.10.0 to 1.17.0

Commits

See full diff in compare view

Updates nokogiri from 1.6.7.2 to 1.16.5

Release notes

Sourced from nokogiri's releases.

v1.16.5 / 2024-05-13

Security

[CRuby] Vendored libxml2 is updated to address CVE-2024-34459. See GHSA-r95h-9x8f-r3f7 for more information.

Dependencies

[CRuby] Vendored libxml2 is updated to v2.12.7 from v2.12.6. (@flavorjones)

sha256 checksums:

af0f44fa3e664dfb2aa10de8b551447d720c1e8d1f0aa3f35783dcc43e40a874  nokogiri-1.16.5-aarch64-linux.gem
23dc2357b26409a5c33b7e32a82902f0e9995305420f16d1a03ab3ea1a482fec  nokogiri-1.16.5-arm-linux.gem
950d037530edb49f75ad35de0b8038b970a7dda57e2b6326895b0e49fadf6214  nokogiri-1.16.5-arm64-darwin.gem
b7aefc94370c62476b8528e8d8abb6160203abd84a1f4eceda8f1aa8974d9989  nokogiri-1.16.5-java.gem
ec2167160df8fec3137bf95d574ed80ebc1d002bb3b281546b60b4aa9002466e  nokogiri-1.16.5-x64-mingw-ucrt.gem
6984200491fac69974005ecfa2de129d61843d345eafa5d6f58e8b908d1cf107  nokogiri-1.16.5-x64-mingw32.gem
abdc389ab1ec6604492da16bd9d06ad746fdb6bd6a1bd274c400d61ffcadb3c4  nokogiri-1.16.5-x86-linux.gem
63d24981345856f2baf7f4089870a62d3042fb8d3021b280fb04fc052532e3c4  nokogiri-1.16.5-x86-mingw32.gem
71b5f54e378c433d13df67c3b71acc4716129da62402d8181f310c4216a63279  nokogiri-1.16.5-x86_64-darwin.gem
0ca238da870066bed2f7837af6f35791bb9b76c4c5638999c46aac44818a6a97  nokogiri-1.16.5-x86_64-linux.gem
ec36162c68984fa0a90a5c4ae7ab7759460639e716cc1ce75f34c3cb54158ad2  nokogiri-1.16.5.gem

v1.16.4 / 2024-04-10

Dependencies

[CRuby] Vendored zlib in the precompiled native gems is updated to v1.3.1 from v1.3. Nokogiri is not affected by the minizip CVE patched in this version, but this update may satisfy some security scanners. Related, see this discussion about removing the compression libraries altogether in a future version of Nokogiri.

sha256 checksums:

bdb1dc4378ebcf3ade8f440c7df68f6d76946a1a96c4823a2b4c53c01a320cd5  nokogiri-1.16.4-aarch64-linux.gem
0c994b9996d5576eddcc3201a94ef2bff6fc3627c4ae4d2708b0ec9b9743ec6a  nokogiri-1.16.4-arm-linux.gem
8e86abb64c93c06d3c588042a0e757279e8f1dc88b5210a00be892a9a7a27196  nokogiri-1.16.4-arm64-darwin.gem
bf84fa28be4943692bd64772186e0832fb1061f80714ccb93e111e9d72b1cadc  nokogiri-1.16.4-java.gem
a46808467c1f63a2031e1ca0715cd5336bb4ec759e9c0e2f4c951c1cc30994ae  nokogiri-1.16.4-x64-mingw-ucrt.gem
4cdf64bc5e9443ec3e0b595347ecc8affe21968d9ae934c0825d26630ef96468  nokogiri-1.16.4-x64-mingw32.gem
d86d21bae47dd9f6f5223055e45d33fae08b0b89aad94cbc0ece4f4274fa7af5  nokogiri-1.16.4-x86-linux.gem
d488b872884844686780fda7cf5da44ee884d32faa713a55aeb4736d76718168  nokogiri-1.16.4-x86-mingw32.gem
a896e52a56951ffb0e6a9279afbf485d683e357a053d27f4cfcb2a73b0824628  nokogiri-1.16.4-x86_64-darwin.gem
92ff4f09910255fec84b3bc4c4b182e94cada3ed12b9f7a6ea058e0af186fb31  nokogiri-1.16.4-x86_64-linux.gem
</tr></table>

... (truncated)

Changelog

Sourced from nokogiri's changelog.

v1.16.5

Security

[CRuby] Vendored libxml2 is updated to address CVE-2024-34459. See GHSA-r95h-9x8f-r3f7 for more information.

Dependencies

[CRuby] Vendored libxml2 is updated to v2.12.7 from v2.12.6. (@flavorjones)

v1.16.4 / 2024-04-10

Dependencies

[CRuby] Vendored zlib in the precompiled native gems is updated to v1.3.1 from v1.3. Nokogiri is not affected by the minizip CVE patched in this version, but this update may satisfy some security scanners. Related, see this discussion about removing the compression libraries altogether in a future version of Nokogiri.

v1.16.3 / 2024-03-15

Dependencies

[CRuby] Vendored libxml2 is updated to v2.12.6 from v2.12.5. (@flavorjones)

Changed

[CRuby] XML::Reader sets the @encoding instance variable during reading if it is not passed into the initializer. Previously, it would remain nil. The behavior of Reader#encoding has not changed. This works around changes to how libxml2 reports the encoding used in v2.12.6.

v1.16.2 / 2024-02-04

Security

[CRuby] Vendored libxml2 is updated to address CVE-2024-25062. See GHSA-xc9x-jj77-9p9j for more information.

Dependencies

[CRuby] Vendored libxml2 is updated to v2.12.5 from v2.12.4. (@flavorjones)

v1.16.1 / 2024-02-03

Dependencies

[CRuby] Vendored libxml2 is updated to v2.12.4 from v2.12.3. (@flavorjones)

... (truncated)

Commits

cd70bd3 version bump to v1.16.5
afc36de dep: update vendored libxml2 to v2.12.7 (#3191)
41b4f08 ci: add arm64-darwin coverage using macos-14
67b9e86 dep: update libxml2 to v2.12.7
17c0362 version bump to v1.16.4
1c329e9 dep: update to zlib 1.3.1 (v1.16.x) (#3175)
edeac07 dep: update to zlib 1.3.1
80fb608 version bump to v1.16.3
710bd96 dep: update libxml 2.12.6 (branch v1.16.x) (#3151)
461a96e fix: Reader#read sets @encoding if it is unset
Additional commits viewable in compare view

Updates rack from 1.6.4 to 1.6.13

Commits

47a1fd7 bump version
b8dc520 Handle case where session id key is requested but it is missing
698a060 Merge pull request #1462 from jeremyevans/sessionid-to_s
de902e4 Merge branch '1-6-sec' into 1-6-stable
b7d6546 Bump version
d3e2f88 making diff smaller
99a8a87 fix memcache tests on 1.6
f2cb48e fix tests on 1.6
7ff635c Introduce a new base class to avoid breaking when upgrading
3232f93 Add a version prefix to the private id to make easier to migrate old values
Additional commits viewable in compare view

Updates tzinfo from 1.2.2 to 1.2.11

Release notes

Sourced from tzinfo's releases.

v1.2.11

Eliminate Object#untaint deprecation warnings on JRuby 9.4.0.0. #145.

TZInfo v1.2.11 on RubyGems.org

v1.2.10

Fixed a relative path traversal bug that could cause arbitrary files to be loaded with require when used with RubyDataSource. Please refer to GHSA-5cm2-9h8c-rvfx for details. CVE-2022-31163.

Ignore the SECURITY file from Arch Linux's tzdata package. #134.

TZInfo v1.2.10 on RubyGems.org

v1.2.9

Fixed an incorrect InvalidTimezoneIdentifier exception raised when loading a zoneinfo file that includes rules specifying an additional transition to the final defined offset (for example, Africa/Casablanca in version 2018e of the Time Zone Database). #123.

TZInfo v1.2.9 on RubyGems.org

v1.2.8

Added support for handling "slim" format zoneinfo files that are produced by default by zic version 2020b and later. The POSIX-style TZ string is now used calculate DST transition times after the final defined transition in the file. The 64-bit section is now always used regardless of whether Time has support for 64-bit times. #120.

Rubinius is no longer supported.

TZInfo v1.2.8 on RubyGems.org

v1.2.7

Fixed 'wrong number of arguments' errors when running on JRuby 9.0. #114.

Fixed warnings when running on Ruby 2.8. #112.

TZInfo v1.2.7 on RubyGems.org

v1.2.6

Timezone#strftime('%s', time) will now return the correct number of seconds since the epoch. #91.

Removed the unused TZInfo::RubyDataSource::REQUIRE_PATH constant.

Fixed "SecurityError: Insecure operation - require" exceptions when loading data with recent Ruby releases in safe mode.

Fixed warnings when running on Ruby 2.7. #106 and #111.

TZInfo v1.2.6 on RubyGems.org

v1.2.5

Support recursively (deep) freezing Country and Timezone instances. #80.

Allow negative daylight savings time offsets to be derived when reading from zoneinfo files. The utc_offset and std_offset are now derived correctly for Europe/Dublin in the 2018a and 2018b releases of the Time Zone Database.

TZInfo v1.2.5 on RubyGems.org

v1.2.4

Ignore the leapseconds file that is included in zoneinfo directories installed with version 2017c and later of the Time Zone Database.

TZInfo v1.2.4 on RubyGems.org

v1.2.3

Reduce the number of String objects allocated when loading zoneinfo files. #54.

... (truncated)

Changelog

Sourced from tzinfo's changelog.

Version 1.2.11 - 28-Jan-2023

Eliminate Object#untaint deprecation warnings on JRuby 9.4.0.0. #145.

Version 1.2.10 - 19-Jul-2022

Fixed a relative path traversal bug that could cause arbitrary files to be loaded with require when used with RubyDataSource. Please refer to GHSA-5cm2-9h8c-rvfx for details. CVE-2022-31163.

Ignore the SECURITY file from Arch Linux's tzdata package. #134.

Version 1.2.9 - 16-Dec-2020

Fixed an incorrect InvalidTimezoneIdentifier exception raised when loading a zoneinfo file that includes rules specifying an additional transition to the final defined offset (for example, Africa/Casablanca in version 2018e of the Time Zone Database). #123.

Version 1.2.8 - 8-Nov-2020

Added support for handling "slim" format zoneinfo files that are produced by default by zic version 2020b and later. The POSIX-style TZ string is now used calculate DST transition times after the final defined transition in the file. The 64-bit section is now always used regardless of whether Time has support for 64-bit times. #120.

Rubinius is no longer supported.

Version 1.2.7 - 2-Apr-2020

Fixed 'wrong number of arguments' errors when running on JRuby 9.0. #114.

Fixed warnings when running on Ruby 2.8. #112.

Version 1.2.6 - 24-Dec-2019

Timezone#strftime('%s', time) will now return the correct number of seconds since the epoch. #91.

Removed the unused TZInfo::RubyDataSource::REQUIRE_PATH constant.

Fixed "SecurityError: Insecure operation - require" exceptions when loading data with recent Ruby releases in safe mode.

Fixed warnings when running on Ruby 2.7. #106 and #111.

Version 1.2.5 - 4-Feb-2018

... (truncated)

Commits

2dc46fd Preparing v1.2.11.
c854e6a Update copyright years.
9c092f3 Eliminate Object#untaint deprecation warnings on JRuby 9.4.0.0.
4e5f8b7 Add Ruby 3.1, 3.2 and JRuby 9.4.
2f58c69 Update the dependency on actions/checkout.
e52c056 Revert "Workaround for 'Permission denied - NUL' errors with JRuby on Windows."
0814dcd Fix the release date.
fd05e2a Preparing v1.2.10.
b98c32e Merge branch 'fix-directory-traversal-1.2' into 1.2
ac3ee68 Remove unnecessary escaping of + within regex character classes.
Additional commits viewable in compare view

Updates activesupport from 4.2.6 to 4.2.11.3

Release notes

Sourced from activesupport's releases.

4.2.11.3

Action Mailer

No changes.

Action Pack

No changes.

Action View

Backport a missing commit for [CVE-2020-8163]

Active Job

No changes.

Active Model

No changes.

Active Record

No changes.

Active Support

No changes.

Railties

No changes.

4.2.11.2

Action Mailer

... (truncated)

Commits

3231120 prepping for release
1f3db0a Merge pull request #39302 from dustym/add-delegation_reserved_method_names
b9e5577 Preparing for 4.2.11.2 release
9855d05 Bumping version for release
e06a1e0 Prep release
474b739 Preparing for 4.2.11 release
759d41d Backport fix for Dir::Tmpname.create from #32386
7fe69ea Add missing require for remove_possible_method
6b9a1ac Update changelog headers for Rails 4.2.10
b62714d Preparing for 4.2.10 release
Additional commits viewable in compare view

Updates ffi from 1.9.10 to 1.16.3

Changelog

Sourced from ffi's changelog.

1.16.3 / 2023-10-04

Fixed:

Fix gcc error when building on CentOS 7. #1052

Avoid trying to store new DataConverter type in frozen TypeDefs hash. #1057

1.16.2 / 2023-09-25

Fixed:

Handle null pointer crash after fork. #1051

1.16.1 / 2023-09-24

Fixed:

Fix compiling the builtin libffi. #1049

1.16.0 / 2023-09-23

Fixed:

Fix an issue with signed bitmasks when using flags on the most significant bit. #949

Fix FFI::Pointer#initialize using NUM2LL instead of NUM2ULL.

Fix FFI::Type#inspect to properly display the constant name. #1002

Use libffi closure allocations on hppa-Linux. #1017 Previously they would segfault.

Fix class name of Symbol#inspect.

Fix MSVC support of libtest. #1028

Fix attach_function of functions ending in ? or ! #971

Added:

Convert all C-based classes to TypedData and use write barriers. #994, #995, #996, #997, #998, #999, #1000, #1001, #1003, #1004, #1005, #1006, #1007, #1008, #1009, #1010, #1011, #1012 This results in less pressure on the garbage collector, since the objects can be promoted to the old generation, which means they only get marked on major GC.

Implement ObjectSpace.memsize_of() of all C-based classes.

Make FFI Ractor compatible. #1023 Modules extended per extend FFI::Library need to be frozen in order to be used by non-main Ractors. This can be done by calling freeze below of all C interface definitions.

In a Ractor it's possible to:

load DLLs and call its functions, access its global variables

use builtin typedefs

use and modify ractor local typedefs

define callbacks

receive async callbacks from non-ruby threads

use frozen FFI::Library based modules with all attributes (enums, structs, typedefs, functions, callbacks)

invoke frozen functions and callbacks defined in the main Ractor

... (truncated)

Commits

6cef66d Bump VERSION to 1.16.3
87ca653 Update CHANGELOG for ffi-1.16.3
a8f7d97 Update link in README.md [ci skip]
87ff960 Merge branch 'master' of github.com:ffi/ffi
c97b825 Add examples from https://github.com/ffi/ffi/wiki/How-to-use-FFI-in-Ruby-Ractors
c1ed9bc Add link to Ractor docs to README.md
13afd23 Merge pull request #1057 from mvz/avoid-frozen-typemap
6e29dc1 Avoid trying to store new DataConverter type in frozen TypeDefs hash
bf21280 Prepare a CHANGELOG entry for ffi-1.16.3
683e18b Merge pull request #1053 from larskanis/fix-1052
Additional commits viewable in compare view

Updates haml from 4.0.7 to 6.3.0

Release notes

Sourced from haml's releases.

v6.3.0

Remove Haml::RailsTemplate#default_format that was added in v6.1.3 for Turbo #1152, #1154 (discussion)

See the reference for suggested alternatives.

v6.2.5

Deprecate Haml::RailsTemplate#default_format that was added in v6.1.3 for Turbo (discussion)

See the reference for suggested alternatives.

v6.2.4

Support case-in statement #1155

v6.2.3

Resurrect RDFa doctype support #1147

v6.2.2

Allow adding custom attributes to Haml::BOOLEAN_ATTRIBUTES #1148

Consider aria-xxx: false as a boolean attribute

v6.2.1

Fix v6.2.0's bug in rendering dynamic aria attributes #1149

v6.2.0

Drop the C extension #1146

v6.1.4

Let Haml::Util.escape_html use ERB::Escape if available #1145

v6.1.3

Add Haml::RailsTemplate#default_format for Turbo compatibility #1144

v6.1.2

Use the rails template path as filename #1140

v6.1.1

Fix an empty output of Ruby 3.1's Hash shorthand syntax #1083

v6.1.0

Optimize away a to_s call on = scripts

Fix escaping for objects that return an html_safe string on to_s #1117

v6.0.12

Fix a whitespace removal with > and an if-else statement #1114

v6.0.11

Fix a whitespace removal with > and an if statement #1114

v6.0.10

Evaluate :erb filter in the template context like Haml 5

v6.0.9

... (truncated)

Changelog

Sourced from haml's changelog.

6.3.0

Remove Haml::RailsTemplate#default_format that was added in v6.1.3 for Turbo #1152, #1154 (discussion)

See the reference for suggested alternatives.

6.2.5

Deprecate Haml::RailsTemplate#default_format that was added in v6.1.3 for Turbo (discussion)

6.2.4

Support case-in statement #1155

6.2.3

Resurrect RDFa doctype support #1147

6.2.2

Allow adding custom attributes to Haml::BOOLEAN_ATTRIBUTES #1148

Consider aria-xxx: false as a boolean attribute

6.2.1

Fix v6.2.0's bug in rendering dynamic aria attributes #1149

6.2.0

Drop the C extension #1146

6.1.4

Let Haml::Util.escape_html use ERB::Escape if available #1145

6.1.3

Add Haml::RailsTemplate#default_format for Turbo compatibility #1144

6.1.2

Use the rails template path as filename #1140

6.1.1

Fix an empty output of Ruby 3.1's Hash shorthand syntax #1083

6.1.0

Optimize away a to_s call on = scripts

Fix escaping for objects that return an html_safe string on to_s #1117

... (truncated)

Commits

8e68e37 Version 6.3.0
414a4fc Remove Haml::RailsTemplate#default_format
721b381 Version 6.2.5
9357721 Warn the use of #default_format
2269160 Add a documentation about Turbo
7db9665 Version 6.2.4
1098bc1 Fix running tests against Rails 7.1
a55cbf6 Remove advice to run Description has been truncated

Bumps the bundler group with 6 updates in the /examples/middleman directory: | Package | From | To | | --- | --- | --- | | [activesupport](https://github.com/rails/rails) | `4.2.6` | `4.2.11.3` | | [ffi](https://github.com/ffi/ffi) | `1.9.10` | `1.16.3` | | [haml](https://github.com/haml/haml) | `4.0.7` | `6.3.0` | | [kramdown](https://github.com/gettalong/kramdown) | `1.10.0` | `1.17.0` | | [nokogiri](https://github.com/sparklemotion/nokogiri) | `1.6.7.2` | `1.16.5` | | [rack](https://github.com/rack/rack) | `1.6.4` | `1.6.13` | Bumps the bundler group with 6 updates in the /generators/static-site/modules/middleman directory: | Package | From | To | | --- | --- | --- | | [activesupport](https://github.com/rails/rails) | `4.2.6` | `4.2.11.3` | | [ffi](https://github.com/ffi/ffi) | `1.9.10` | `1.16.3` | | [haml](https://github.com/haml/haml) | `4.0.7` | `6.3.0` | | [kramdown](https://github.com/gettalong/kramdown) | `1.10.0` | `1.17.0` | | [nokogiri](https://github.com/sparklemotion/nokogiri) | `1.6.7.2` | `1.16.5` | | [rack](https://github.com/rack/rack) | `1.6.4` | `1.6.13` | Updates `activesupport` from 4.2.6 to 4.2.11.3 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.1.3.2/activesupport/CHANGELOG.md) - [Commits](rails/rails@v4.2.6...v4.2.11.3) Updates `ffi` from 1.9.10 to 1.16.3 - [Changelog](https://github.com/ffi/ffi/blob/master/CHANGELOG.md) - [Commits](ffi/ffi@1.9.10...v1.16.3) Updates `haml` from 4.0.7 to 6.3.0 - [Release notes](https://github.com/haml/haml/releases) - [Changelog](https://github.com/haml/haml/blob/main/CHANGELOG.md) - [Commits](haml/haml@4.0.7...v6.3.0) Updates `json` from 1.8.3 to 2.7.2 - [Release notes](https://github.com/flori/json/releases) - [Changelog](https://github.com/flori/json/blob/master/CHANGES.md) - [Commits](ruby/json@v1.8.3...v2.7.2) Updates `kramdown` from 1.10.0 to 1.17.0 - [Release notes](https://github.com/gettalong/kramdown/releases) - [Changelog](https://github.com/gettalong/kramdown/blob/master/doc/news.page) - [Commits](https://github.com/gettalong/kramdown/commits) Updates `nokogiri` from 1.6.7.2 to 1.16.5 - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md) - [Commits](sparklemotion/nokogiri@v1.6.7.2...v1.16.5) Updates `rack` from 1.6.4 to 1.6.13 - [Release notes](https://github.com/rack/rack/releases) - [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md) - [Commits](rack/rack@1.6.4...1.6.13) Updates `tzinfo` from 1.2.2 to 1.2.11 - [Release notes](https://github.com/tzinfo/tzinfo/releases) - [Changelog](https://github.com/tzinfo/tzinfo/blob/master/CHANGES.md) - [Commits](tzinfo/tzinfo@v1.2.2...v1.2.11) Updates `activesupport` from 4.2.6 to 4.2.11.3 - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.1.3.2/activesupport/CHANGELOG.md) - [Commits](rails/rails@v4.2.6...v4.2.11.3) Updates `ffi` from 1.9.10 to 1.16.3 - [Changelog](https://github.com/ffi/ffi/blob/master/CHANGELOG.md) - [Commits](ffi/ffi@1.9.10...v1.16.3) Updates `haml` from 4.0.7 to 6.3.0 - [Release notes](https://github.com/haml/haml/releases) - [Changelog](https://github.com/haml/haml/blob/main/CHANGELOG.md) - [Commits](haml/haml@4.0.7...v6.3.0) Updates `json` from 1.8.3 to 2.7.2 - [Release notes](https://github.com/flori/json/releases) - [Changelog](https://github.com/flori/json/blob/master/CHANGES.md) - [Commits](ruby/json@v1.8.3...v2.7.2) Updates `kramdown` from 1.10.0 to 1.17.0 - [Release notes](https://github.com/gettalong/kramdown/releases) - [Changelog](https://github.com/gettalong/kramdown/blob/master/doc/news.page) - [Commits](https://github.com/gettalong/kramdown/commits) Updates `nokogiri` from 1.6.7.2 to 1.16.5 - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md) - [Commits](sparklemotion/nokogiri@v1.6.7.2...v1.16.5) Updates `rack` from 1.6.4 to 1.6.13 - [Release notes](https://github.com/rack/rack/releases) - [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md) - [Commits](rack/rack@1.6.4...1.6.13) Updates `tzinfo` from 1.2.2 to 1.2.11 - [Release notes](https://github.com/tzinfo/tzinfo/releases) - [Changelog](https://github.com/tzinfo/tzinfo/blob/master/CHANGES.md) - [Commits](tzinfo/tzinfo@v1.2.2...v1.2.11) --- updated-dependencies: - dependency-name: activesupport dependency-type: indirect dependency-group: bundler - dependency-name: ffi dependency-type: indirect dependency-group: bundler - dependency-name: haml dependency-type: indirect dependency-group: bundler - dependency-name: json dependency-type: indirect dependency-group: bundler - dependency-name: kramdown dependency-type: indirect dependency-group: bundler - dependency-name: nokogiri dependency-type: indirect dependency-group: bundler - dependency-name: rack dependency-type: indirect dependency-group: bundler - dependency-name: tzinfo dependency-type: indirect dependency-group: bundler - dependency-name: activesupport dependency-type: indirect dependency-group: bundler - dependency-name: ffi dependency-type: indirect dependency-group: bundler - dependency-name: haml dependency-type: indirect dependency-group: bundler - dependency-name: json dependency-type: indirect dependency-group: bundler - dependency-name: kramdown dependency-type: indirect dependency-group: bundler - dependency-name: nokogiri dependency-type: indirect dependency-group: bundler - dependency-name: rack dependency-type: indirect dependency-group: bundler - dependency-name: tzinfo dependency-type: indirect dependency-group: bundler ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels May 14, 2024

This was referenced May 14, 2024

Bump nokogiri from 1.6.7.2 to 1.16.2 in /generators/static-site/modules/middleman #1

Closed

Bump rack from 1.6.4 to 1.6.13 in /generators/static-site/modules/middleman #2

Closed

Bump the bundler group across 2 directories with 3 updates #3

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the bundler group across 2 directories with 8 updates #6

Bump the bundler group across 2 directories with 8 updates #6

dependabot bot commented on behalf of github May 14, 2024

Bump the bundler group across 2 directories with 8 updates #6

Are you sure you want to change the base?

Bump the bundler group across 2 directories with 8 updates #6

Conversation

dependabot bot commented on behalf of github May 14, 2024

4.2.11.3

Action Mailer

Action Pack

Action View

Active Job

Active Model

Active Record

Active Support

Railties

4.2.11.2

Action Mailer

1.16.3 / 2023-10-04

1.16.2 / 2023-09-25

1.16.1 / 2023-09-24

1.16.0 / 2023-09-23

v6.3.0

v6.2.5

v6.2.4

v6.2.3

v6.2.2

v6.2.1

v6.2.0

v6.1.4

v6.1.3

v6.1.2

v6.1.1

v6.1.0

v6.0.12

v6.0.11

v6.0.10

v6.0.9

6.3.0

6.2.5

6.2.4

6.2.3

6.2.2

6.2.1

6.2.0

6.1.4

6.1.3

6.1.2

6.1.1

6.1.0

v2.7.2

What's Changed

New Contributors

v2.7.1

What's Changed

Improved

Fixed

Misc

New Contributors

v2.7.0

What's Changed

Improved

Added

2024-04-04 (2.7.2)

2023-12-05 (2.7.1)

2023-12-01 (2.7.0)

2022-11-30 (2.6.3)

2022-11-17 (2.6.2)

2021-10-24 (2.6.1)

2021-10-14 (2.6.0)

v1.16.5 / 2024-05-13

Security

Dependencies

v1.16.4 / 2024-04-10

Dependencies

v1.16.5

Security

Dependencies

v1.16.4 / 2024-04-10

Dependencies

v1.16.3 / 2024-03-15

Dependencies