mirror of
https://github.com/facebook/rocksdb.git
synced 2024-12-02 10:15:54 +00:00
6255ac7223
Summary: Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.13.4 to 1.13.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sparklemotion/nokogiri/releases">nokogiri's releases</a>.</em></p> <blockquote> <h2>1.13.6 / 2022-05-08</h2> <h3>Security</h3> <ul> <li>[CRuby] Address <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-29181">CVE-2022-29181</a>, improper handling of unexpected data types, related to untrusted inputs to the SAX parsers. See <a href="https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-xh29-r2w5-wx8m">GHSA-xh29-r2w5-wx8m</a> for more information.</li> </ul> <h3>Improvements</h3> <ul> <li><code>{HTML4,XML}::SAX::{Parser,ParserContext}</code> constructor methods now raise <code>TypeError</code> instead of segfaulting when an incorrect type is passed.</li> </ul> <hr /> <p>sha256:</p> <pre><code>58417c7c10f78cd1c0e1984f81538300d4ea98962cfd3f46f725efee48f9757a nokogiri-1.13.6-aarch64-linux.gem a2b04ec3b1b73ecc6fac619b41e9fdc70808b7a653b96ec97d04b7a23f158dbc nokogiri-1.13.6-arm64-darwin.gem 4437f2d03bc7da8854f4aaae89e24a98cf5c8b0212ae2bc003af7e65c7ee8e27 nokogiri-1.13.6-java.gem 99d3e212bbd5e80aa602a1f52d583e4f6e917ec594e6aa580f6aacc253eff984 nokogiri-1.13.6-x64-mingw-ucrt.gem a04f6154a75b6ed4fe2d0d0ff3ac02f094b54e150b50330448f834fa5726fbba nokogiri-1.13.6-x64-mingw32.gem a13f30c2863ef9e5e11240dd6d69ef114229d471018b44f2ff60bab28327de4d nokogiri-1.13.6-x86-linux.gem 63a2ca2f7a4f6bd9126e1695037f66c8eb72ed1e1740ef162b4480c57cc17dc6 nokogiri-1.13.6-x86-mingw32.gem 2b266e0eb18030763277b30dc3d64337f440191e2bd157027441ac56a59d9dfe nokogiri-1.13.6-x86_64-darwin.gem 3fa37b0c3b5744af45f9da3e4ae9cbd89480b35e12ae36b5e87a0452e0b38335 nokogiri-1.13.6-x86_64-linux.gem b1512fdc0aba446e1ee30de3e0671518eb363e75fab53486e99e8891d44b8587 nokogiri-1.13.6.gem </code></pre> <h2>1.13.5 / 2022-05-04</h2> <h3>Security</h3> <ul> <li>[CRuby] Vendored libxml2 is updated to address <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-29824">CVE-2022-29824</a>. See <a href="https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-cgx6-hpwq-fhv5">GHSA-cgx6-hpwq-fhv5</a> for more information.</li> </ul> <h3>Dependencies</h3> <ul> <li>[CRuby] Vendored libxml2 is updated from v2.9.13 to <a href="https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.9.14">v2.9.14</a>.</li> </ul> <h3>Improvements</h3> <ul> <li>[CRuby] The libxml2 HTML4 parser no longer exhibits quadratic behavior when recovering some broken markup related to start-of-tag and bare <code><</code> characters.</li> </ul> <h3>Changed</h3> <ul> <li>[CRuby] The libxml2 HTML4 parser in v2.9.14 recovers from some broken markup differently. Notably, the XML CDATA escape sequence <code><![CDATA[</code> and incorrectly-opened comments will result in HTML text nodes starting with <code>&lt;!</code> instead of skipping the invalid tag. This behavior is a direct result of the <a href="https://gitlab.gnome.org/GNOME/libxml2/-/commit/798bdf1">quadratic-behavior fix</a> noted above. The behavior of downstream sanitizers relying on this behavior will also change. Some tests describing the changed behavior are in <a href="3ed5bf2b5a/test/html4/test_comments.rb (L187-L204)"><code>test/html4/test_comments.rb</code></a>.</li> </ul> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md">nokogiri's changelog</a>.</em></p> <blockquote> <h2>1.13.6 / 2022-05-08</h2> <h3>Security</h3> <ul> <li>[CRuby] Address <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-29181">CVE-2022-29181</a>, improper handling of unexpected data types, related to untrusted inputs to the SAX parsers. See <a href="https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-xh29-r2w5-wx8m">GHSA-xh29-r2w5-wx8m</a> for more information.</li> </ul> <h3>Improvements</h3> <ul> <li><code>{HTML4,XML}::SAX::{Parser,ParserContext}</code> constructor methods now raise <code>TypeError</code> instead of segfaulting when an incorrect type is passed.</li> </ul> <h2>1.13.5 / 2022-05-04</h2> <h3>Security</h3> <ul> <li>[CRuby] Vendored libxml2 is updated to address <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-29824">CVE-2022-29824</a>. See <a href="https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-cgx6-hpwq-fhv5">GHSA-cgx6-hpwq-fhv5</a> for more information.</li> </ul> <h3>Dependencies</h3> <ul> <li>[CRuby] Vendored libxml2 is updated from v2.9.13 to <a href="https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.9.14">v2.9.14</a>.</li> </ul> <h3>Improvements</h3> <ul> <li>[CRuby] The libxml2 HTML parser no longer exhibits quadratic behavior when recovering some broken markup related to start-of-tag and bare <code><</code> characters.</li> </ul> <h3>Changed</h3> <ul> <li>[CRuby] The libxml2 HTML parser in v2.9.14 recovers from some broken markup differently. Notably, the XML CDATA escape sequence <code><](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `dependabot rebase` will rebase this PR - `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `dependabot merge` will merge this PR after your CI passes on it - `dependabot squash and merge` will squash and merge this PR after your CI passes on it - `dependabot cancel merge` will cancel a previously requested merge and block automerging - `dependabot reopen` will reopen this PR if it is closed - `dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/facebook/rocksdb/network/alerts). </details> Pull Request resolved: https://github.com/facebook/rocksdb/pull/10019 Reviewed By: riversand963 Differential Revision: D36536897 Pulled By: ajkr fbshipit-source-id: 368c24e86d5d39f0a3adc08a397ae074b1b18b1a
286 lines
7.8 KiB
Plaintext
286 lines
7.8 KiB
Plaintext
GEM
|
|
remote: https://rubygems.org/
|
|
specs:
|
|
activesupport (6.0.4.6)
|
|
concurrent-ruby (~> 1.0, >= 1.0.2)
|
|
i18n (>= 0.7, < 2)
|
|
minitest (~> 5.1)
|
|
tzinfo (~> 1.1)
|
|
zeitwerk (~> 2.2, >= 2.2.2)
|
|
addressable (2.8.0)
|
|
public_suffix (>= 2.0.2, < 5.0)
|
|
coffee-script (2.4.1)
|
|
coffee-script-source
|
|
execjs
|
|
coffee-script-source (1.11.1)
|
|
colorator (1.1.0)
|
|
commonmarker (0.23.4)
|
|
concurrent-ruby (1.1.9)
|
|
dnsruby (1.61.9)
|
|
simpleidn (~> 0.1)
|
|
em-websocket (0.5.3)
|
|
eventmachine (>= 0.12.9)
|
|
http_parser.rb (~> 0)
|
|
ethon (0.15.0)
|
|
ffi (>= 1.15.0)
|
|
eventmachine (1.2.7)
|
|
execjs (2.8.1)
|
|
faraday (1.10.0)
|
|
faraday-em_http (~> 1.0)
|
|
faraday-em_synchrony (~> 1.0)
|
|
faraday-excon (~> 1.1)
|
|
faraday-httpclient (~> 1.0)
|
|
faraday-multipart (~> 1.0)
|
|
faraday-net_http (~> 1.0)
|
|
faraday-net_http_persistent (~> 1.0)
|
|
faraday-patron (~> 1.0)
|
|
faraday-rack (~> 1.0)
|
|
faraday-retry (~> 1.0)
|
|
ruby2_keywords (>= 0.0.4)
|
|
faraday-em_http (1.0.0)
|
|
faraday-em_synchrony (1.0.0)
|
|
faraday-excon (1.1.0)
|
|
faraday-httpclient (1.0.1)
|
|
faraday-multipart (1.0.3)
|
|
multipart-post (>= 1.2, < 3)
|
|
faraday-net_http (1.0.1)
|
|
faraday-net_http_persistent (1.2.0)
|
|
faraday-patron (1.0.0)
|
|
faraday-rack (1.0.0)
|
|
faraday-retry (1.0.3)
|
|
ffi (1.15.5)
|
|
forwardable-extended (2.6.0)
|
|
gemoji (3.0.1)
|
|
github-pages (225)
|
|
github-pages-health-check (= 1.17.9)
|
|
jekyll (= 3.9.0)
|
|
jekyll-avatar (= 0.7.0)
|
|
jekyll-coffeescript (= 1.1.1)
|
|
jekyll-commonmark-ghpages (= 0.2.0)
|
|
jekyll-default-layout (= 0.1.4)
|
|
jekyll-feed (= 0.15.1)
|
|
jekyll-gist (= 1.5.0)
|
|
jekyll-github-metadata (= 2.13.0)
|
|
jekyll-include-cache (= 0.2.1)
|
|
jekyll-mentions (= 1.6.0)
|
|
jekyll-optional-front-matter (= 0.3.2)
|
|
jekyll-paginate (= 1.1.0)
|
|
jekyll-readme-index (= 0.3.0)
|
|
jekyll-redirect-from (= 0.16.0)
|
|
jekyll-relative-links (= 0.6.1)
|
|
jekyll-remote-theme (= 0.4.3)
|
|
jekyll-sass-converter (= 1.5.2)
|
|
jekyll-seo-tag (= 2.8.0)
|
|
jekyll-sitemap (= 1.4.0)
|
|
jekyll-swiss (= 1.0.0)
|
|
jekyll-theme-architect (= 0.2.0)
|
|
jekyll-theme-cayman (= 0.2.0)
|
|
jekyll-theme-dinky (= 0.2.0)
|
|
jekyll-theme-hacker (= 0.2.0)
|
|
jekyll-theme-leap-day (= 0.2.0)
|
|
jekyll-theme-merlot (= 0.2.0)
|
|
jekyll-theme-midnight (= 0.2.0)
|
|
jekyll-theme-minimal (= 0.2.0)
|
|
jekyll-theme-modernist (= 0.2.0)
|
|
jekyll-theme-primer (= 0.6.0)
|
|
jekyll-theme-slate (= 0.2.0)
|
|
jekyll-theme-tactile (= 0.2.0)
|
|
jekyll-theme-time-machine (= 0.2.0)
|
|
jekyll-titles-from-headings (= 0.5.3)
|
|
jemoji (= 0.12.0)
|
|
kramdown (= 2.3.1)
|
|
kramdown-parser-gfm (= 1.1.0)
|
|
liquid (= 4.0.3)
|
|
mercenary (~> 0.3)
|
|
minima (= 2.5.1)
|
|
nokogiri (>= 1.12.5, < 2.0)
|
|
rouge (= 3.26.0)
|
|
terminal-table (~> 1.4)
|
|
github-pages-health-check (1.17.9)
|
|
addressable (~> 2.3)
|
|
dnsruby (~> 1.60)
|
|
octokit (~> 4.0)
|
|
public_suffix (>= 3.0, < 5.0)
|
|
typhoeus (~> 1.3)
|
|
html-pipeline (2.14.0)
|
|
activesupport (>= 2)
|
|
nokogiri (>= 1.4)
|
|
http_parser.rb (0.8.0)
|
|
i18n (0.9.5)
|
|
concurrent-ruby (~> 1.0)
|
|
jekyll (3.9.0)
|
|
addressable (~> 2.4)
|
|
colorator (~> 1.0)
|
|
em-websocket (~> 0.5)
|
|
i18n (~> 0.7)
|
|
jekyll-sass-converter (~> 1.0)
|
|
jekyll-watch (~> 2.0)
|
|
kramdown (>= 1.17, < 3)
|
|
liquid (~> 4.0)
|
|
mercenary (~> 0.3.3)
|
|
pathutil (~> 0.9)
|
|
rouge (>= 1.7, < 4)
|
|
safe_yaml (~> 1.0)
|
|
jekyll-avatar (0.7.0)
|
|
jekyll (>= 3.0, < 5.0)
|
|
jekyll-coffeescript (1.1.1)
|
|
coffee-script (~> 2.2)
|
|
coffee-script-source (~> 1.11.1)
|
|
jekyll-commonmark (1.4.0)
|
|
commonmarker (~> 0.22)
|
|
jekyll-commonmark-ghpages (0.2.0)
|
|
commonmarker (~> 0.23.4)
|
|
jekyll (~> 3.9.0)
|
|
jekyll-commonmark (~> 1.4.0)
|
|
rouge (>= 2.0, < 4.0)
|
|
jekyll-default-layout (0.1.4)
|
|
jekyll (~> 3.0)
|
|
jekyll-feed (0.15.1)
|
|
jekyll (>= 3.7, < 5.0)
|
|
jekyll-gist (1.5.0)
|
|
octokit (~> 4.2)
|
|
jekyll-github-metadata (2.13.0)
|
|
jekyll (>= 3.4, < 5.0)
|
|
octokit (~> 4.0, != 4.4.0)
|
|
jekyll-include-cache (0.2.1)
|
|
jekyll (>= 3.7, < 5.0)
|
|
jekyll-mentions (1.6.0)
|
|
html-pipeline (~> 2.3)
|
|
jekyll (>= 3.7, < 5.0)
|
|
jekyll-optional-front-matter (0.3.2)
|
|
jekyll (>= 3.0, < 5.0)
|
|
jekyll-paginate (1.1.0)
|
|
jekyll-readme-index (0.3.0)
|
|
jekyll (>= 3.0, < 5.0)
|
|
jekyll-redirect-from (0.16.0)
|
|
jekyll (>= 3.3, < 5.0)
|
|
jekyll-relative-links (0.6.1)
|
|
jekyll (>= 3.3, < 5.0)
|
|
jekyll-remote-theme (0.4.3)
|
|
addressable (~> 2.0)
|
|
jekyll (>= 3.5, < 5.0)
|
|
jekyll-sass-converter (>= 1.0, <= 3.0.0, != 2.0.0)
|
|
rubyzip (>= 1.3.0, < 3.0)
|
|
jekyll-sass-converter (1.5.2)
|
|
sass (~> 3.4)
|
|
jekyll-seo-tag (2.8.0)
|
|
jekyll (>= 3.8, < 5.0)
|
|
jekyll-sitemap (1.4.0)
|
|
jekyll (>= 3.7, < 5.0)
|
|
jekyll-swiss (1.0.0)
|
|
jekyll-theme-architect (0.2.0)
|
|
jekyll (> 3.5, < 5.0)
|
|
jekyll-seo-tag (~> 2.0)
|
|
jekyll-theme-cayman (0.2.0)
|
|
jekyll (> 3.5, < 5.0)
|
|
jekyll-seo-tag (~> 2.0)
|
|
jekyll-theme-dinky (0.2.0)
|
|
jekyll (> 3.5, < 5.0)
|
|
jekyll-seo-tag (~> 2.0)
|
|
jekyll-theme-hacker (0.2.0)
|
|
jekyll (> 3.5, < 5.0)
|
|
jekyll-seo-tag (~> 2.0)
|
|
jekyll-theme-leap-day (0.2.0)
|
|
jekyll (> 3.5, < 5.0)
|
|
jekyll-seo-tag (~> 2.0)
|
|
jekyll-theme-merlot (0.2.0)
|
|
jekyll (> 3.5, < 5.0)
|
|
jekyll-seo-tag (~> 2.0)
|
|
jekyll-theme-midnight (0.2.0)
|
|
jekyll (> 3.5, < 5.0)
|
|
jekyll-seo-tag (~> 2.0)
|
|
jekyll-theme-minimal (0.2.0)
|
|
jekyll (> 3.5, < 5.0)
|
|
jekyll-seo-tag (~> 2.0)
|
|
jekyll-theme-modernist (0.2.0)
|
|
jekyll (> 3.5, < 5.0)
|
|
jekyll-seo-tag (~> 2.0)
|
|
jekyll-theme-primer (0.6.0)
|
|
jekyll (> 3.5, < 5.0)
|
|
jekyll-github-metadata (~> 2.9)
|
|
jekyll-seo-tag (~> 2.0)
|
|
jekyll-theme-slate (0.2.0)
|
|
jekyll (> 3.5, < 5.0)
|
|
jekyll-seo-tag (~> 2.0)
|
|
jekyll-theme-tactile (0.2.0)
|
|
jekyll (> 3.5, < 5.0)
|
|
jekyll-seo-tag (~> 2.0)
|
|
jekyll-theme-time-machine (0.2.0)
|
|
jekyll (> 3.5, < 5.0)
|
|
jekyll-seo-tag (~> 2.0)
|
|
jekyll-titles-from-headings (0.5.3)
|
|
jekyll (>= 3.3, < 5.0)
|
|
jekyll-watch (2.2.1)
|
|
listen (~> 3.0)
|
|
jemoji (0.12.0)
|
|
gemoji (~> 3.0)
|
|
html-pipeline (~> 2.2)
|
|
jekyll (>= 3.0, < 5.0)
|
|
kramdown (2.3.1)
|
|
rexml
|
|
kramdown-parser-gfm (1.1.0)
|
|
kramdown (~> 2.0)
|
|
liquid (4.0.3)
|
|
listen (3.7.1)
|
|
rb-fsevent (~> 0.10, >= 0.10.3)
|
|
rb-inotify (~> 0.9, >= 0.9.10)
|
|
mercenary (0.3.6)
|
|
mini_portile2 (2.8.0)
|
|
minima (2.5.1)
|
|
jekyll (>= 3.5, < 5.0)
|
|
jekyll-feed (~> 0.9)
|
|
jekyll-seo-tag (~> 2.1)
|
|
minitest (5.15.0)
|
|
multipart-post (2.1.1)
|
|
nokogiri (1.13.6)
|
|
mini_portile2 (~> 2.8.0)
|
|
racc (~> 1.4)
|
|
octokit (4.22.0)
|
|
faraday (>= 0.9)
|
|
sawyer (~> 0.8.0, >= 0.5.3)
|
|
pathutil (0.16.2)
|
|
forwardable-extended (~> 2.6)
|
|
public_suffix (4.0.6)
|
|
racc (1.6.0)
|
|
rb-fsevent (0.11.1)
|
|
rb-inotify (0.10.1)
|
|
ffi (~> 1.0)
|
|
rexml (3.2.5)
|
|
rouge (3.26.0)
|
|
ruby2_keywords (0.0.5)
|
|
rubyzip (2.3.2)
|
|
safe_yaml (1.0.5)
|
|
sass (3.7.4)
|
|
sass-listen (~> 4.0.0)
|
|
sass-listen (4.0.0)
|
|
rb-fsevent (~> 0.9, >= 0.9.4)
|
|
rb-inotify (~> 0.9, >= 0.9.7)
|
|
sawyer (0.8.2)
|
|
addressable (>= 2.3.5)
|
|
faraday (> 0.8, < 2.0)
|
|
simpleidn (0.2.1)
|
|
unf (~> 0.1.4)
|
|
terminal-table (1.8.0)
|
|
unicode-display_width (~> 1.1, >= 1.1.1)
|
|
thread_safe (0.3.6)
|
|
typhoeus (1.4.0)
|
|
ethon (>= 0.9.0)
|
|
tzinfo (1.2.9)
|
|
thread_safe (~> 0.1)
|
|
unf (0.1.4)
|
|
unf_ext
|
|
unf_ext (0.0.8)
|
|
unicode-display_width (1.8.0)
|
|
webrick (1.7.0)
|
|
zeitwerk (2.5.4)
|
|
|
|
PLATFORMS
|
|
ruby
|
|
|
|
DEPENDENCIES
|
|
github-pages (~> 225)
|
|
webrick (~> 1.7)
|
|
|
|
BUNDLED WITH
|
|
2.2.3
|