Update dependency nokogiri to v1.16.4
requested to merge gitlab-renovate-forks/version.gitlab.com:renovate/nokogiri-1.x-lockfile into main
This MR contains the following updates:
Package | Update | Change |
---|---|---|
nokogiri (source, changelog) | patch |
1.16.2 -> 1.16.4
|
MR created with the help of gitlab-org/frontend/renovate-gitlab-bot
Release Notes
sparklemotion/nokogiri (nokogiri)
v1.16.4
Dependencies
- [CRuby] Vendored zlib in the precompiled native gems is updated to v1.3.1 from v1.3. Nokogiri is not affected by the minizip CVE patched in this version, but this update may satisfy some security scanners. Related, see this discussion about removing the compression libraries altogether in a future version of Nokogiri.
v1.16.3
Dependencies
- [CRuby] Vendored libxml2 is updated to v2.12.6 from v2.12.5. (@flavorjones)
Changed
- [CRuby]
XML::Reader
sets the@encoding
instance variable during reading if it is not passed into the initializer. Previously, it would remainnil
. The behavior ofReader#encoding
has not changed. This works around changes to how libxml2 reports the encoding used in v2.12.6.
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.