dependabot[bot] opened a new pull request, #44:
URL: https://github.com/apache/storm-site/pull/44

   Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.13.3 to 
1.15.3.
   <details>
   <summary>Release notes</summary>
   <p><em>Sourced from <a 
href="https://github.com/sparklemotion/nokogiri/releases";>nokogiri's 
releases</a>.</em></p>
   <blockquote>
   <h2>1.15.3 / 2023-07-05</h2>
   <h3>Fixed</h3>
   <ul>
   <li>Passing an object that is not a kind of <code>XML::Node</code> as the 
first parameter to <code>CDATA.new</code> now raises a <code>TypeError</code>. 
Previously this would result in either a segfault (CRuby) or a Java exception 
(JRuby). [<a 
href="https://redirect.github.com/sparklemotion/nokogiri/issues/2920";>#2920</a>]</li>
   <li>Passing an object that is not a kind of <code>XML::Node</code> as the 
first parameter to <code>Schema.from_document</code> now raises a 
<code>TypeError</code>. Previously this would result in either a segfault 
(CRuby) or a Java exception (JRuby). [<a 
href="https://redirect.github.com/sparklemotion/nokogiri/issues/2920";>#2920</a>]</li>
   <li>[CRuby] Passing an object that is not a kind of <code>XML::Node</code> 
as the second parameter to <code>Text.new</code> now raises a 
<code>TypeError</code>. Previously this would result in a segfault. [<a 
href="https://redirect.github.com/sparklemotion/nokogiri/issues/2920";>#2920</a>]</li>
   <li>[CRuby] Replacing a node's children via methods like 
<code>Node#inner_html=</code>, <code>#children=</code>, and 
<code>#replace</code> no longer defensively dups the node's next sibling if it 
is a Text node. This behavior was originally adopted to work around libxml2's 
memory management (see <a 
href="https://redirect.github.com/sparklemotion/nokogiri/issues/283";>#283</a> 
and <a 
href="https://redirect.github.com/sparklemotion/nokogiri/issues/595";>#595</a>) 
but should not have included operations involving <code>xmlAddChild()</code>. 
[<a 
href="https://redirect.github.com/sparklemotion/nokogiri/issues/2916";>#2916</a>]</li>
   <li>[JRuby] Fixed NPE when serializing an unparented HTML node. [<a 
href="https://redirect.github.com/sparklemotion/nokogiri/issues/2559";>#2559</a>,
 <a 
href="https://redirect.github.com/sparklemotion/nokogiri/issues/2895";>#2895</a>]
 (Thanks, <a 
href="https://github.com/cbasguti";><code>@​cbasguti</code></a>!)</li>
   </ul>
   <hr />
   <p>sha256 checksums:</p>
   <pre><code>70dadf636ae026f475f07c16b12c685544d4f8a764777df629abf1f7af0f2fb5  
nokogiri-1.15.3-aarch64-linux.gem
   83871fa3f544dc601e27abbdef87315a77fe1270fe4904986bd3a7df9ca3d56f  
nokogiri-1.15.3-arm-linux.gem
   fa4a027478df9004a2ce91389af7b7b5a4fc790c23492dca43b210a0f8770596  
nokogiri-1.15.3-arm64-darwin.gem
   95d410f995364d9780c4147d8fca6974447a1ccd3a1e1b092f0408836a36cc9c  
nokogiri-1.15.3-java.gem
   599a46b6e4f5a34dd21da06bdbd69611728304af5ef42bb183e4b4ca073fd7a3  
nokogiri-1.15.3-x64-mingw-ucrt.gem
   92ebfb637c9b7ba92a221b49ea3328c7e5ee79a28307d75ef55bfe4b5807face  
nokogiri-1.15.3-x64-mingw32.gem
   ee314666eca832fa71b5bb4c090be46a80aded857aa26121b3b51f3ed658a646  
nokogiri-1.15.3-x86-linux.gem
   44b7f18817894a5b697bab3d757b12bb7857a0218c1b2e0000929456a2178b34  
nokogiri-1.15.3-x86-mingw32.gem
   1f0bc0343f9dd1db8dd42e4c9110dd24fc11a7f923b9fa0f866e7f90739e4e7a  
nokogiri-1.15.3-x86_64-darwin.gem
   ca244ed58568d7265088f83c568d2947102fb00bac14b5bc0e63f678dcd6323d  
nokogiri-1.15.3-x86_64-linux.gem
   876631295a85315dac37e7a71386d62d9eb452a891083cfe7505cca4805088cb  
nokogiri-1.15.3.gem
   </code></pre>
   <h2>1.15.2 / 2023-05-24</h2>
   <h3>Dependencies</h3>
   <ul>
   <li>[JRuby] Vendored org.nokogiri:nekodtd is updated to v0.1.11.noko2. This 
is functionally equivalent to v0.1.11.noko1 but restores support for Java 
8.</li>
   </ul>
   <h3>Fixed</h3>
   <ul>
   <li>[JRuby] Java 8 support is restored, fixing a regression present in 
v1.14.0..v1.14.4 and v1.15.0..v1.15.1. [<a 
href="https://redirect.github.com/sparklemotion/nokogiri/issues/2887";>#2887</a>]</li>
   </ul>
   <hr />
   <p>sha256 checksums:</p>
   <pre><code>497c698f0cc0f283934c9c93064249d113408e97e5f3677b0b5111af24a67c29  
nokogiri-1.15.2-aarch64-linux.gem
   505ad4b80cedd12bc3c53065079cc825e7f3d4094ca7b54176ae6f3734dbe2cc  
nokogiri-1.15.2-arm-linux.gem
   bbedeaf45ce1494f51806e5fab0d31816fc4584f8e2ec757dd516b9b30847ee4  
nokogiri-1.15.2-arm64-darwin.gem
   b15ba3c1aa5b3726d7aceb44f635250653467c5b0d04248fa0f6a6afc6515fb0  
nokogiri-1.15.2-java.gem
   bc3cc9631c9dd7a74a59554215474da657f956ccb126391d082a2a8c45d3ee14  
nokogiri-1.15.2-x64-mingw-ucrt.gem
   1fd27732b161a497275798e502b31e97dfe1ab58aac02c0d6ace9cbe1fd6a38c  
nokogiri-1.15.2-x64-mingw32.gem
   &lt;/tr&gt;&lt;/table&gt; 
   </code></pre>
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Changelog</summary>
   <p><em>Sourced from <a 
href="https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md";>nokogiri's
 changelog</a>.</em></p>
   <blockquote>
   <h2>1.15.3 / 2023-07-05</h2>
   <h3>Fixed</h3>
   <ul>
   <li>Passing an object that is not a kind of <code>XML::Node</code> as the 
first parameter to <code>CDATA.new</code> now raises a <code>TypeError</code>. 
Previously this would result in either a segfault (CRuby) or a Java exception 
(JRuby). [<a 
href="https://redirect.github.com/sparklemotion/nokogiri/issues/2920";>#2920</a>]</li>
   <li>Passing an object that is not a kind of <code>XML::Node</code> as the 
first parameter to <code>Schema.from_document</code> now raises a 
<code>TypeError</code>. Previously this would result in either a segfault 
(CRuby) or a Java exception (JRuby). [<a 
href="https://redirect.github.com/sparklemotion/nokogiri/issues/2920";>#2920</a>]</li>
   <li>[CRuby] Passing an object that is not a kind of <code>XML::Node</code> 
as the second parameter to <code>Text.new</code> now raises a 
<code>TypeError</code>. Previously this would result in a segfault. [<a 
href="https://redirect.github.com/sparklemotion/nokogiri/issues/2920";>#2920</a>]</li>
   <li>[CRuby] Replacing a node's children via methods like 
<code>Node#inner_html=</code>, <code>#children=</code>, and 
<code>#replace</code> no longer defensively dups the node's next sibling if it 
is a Text node. This behavior was originally adopted to work around libxml2's 
memory management (see <a 
href="https://redirect.github.com/sparklemotion/nokogiri/issues/283";>#283</a> 
and <a 
href="https://redirect.github.com/sparklemotion/nokogiri/issues/595";>#595</a>) 
but should not have included operations involving <code>xmlAddChild()</code>. 
[<a 
href="https://redirect.github.com/sparklemotion/nokogiri/issues/2916";>#2916</a>]</li>
   <li>[JRuby] Fixed NPE when serializing an unparented HTML node. [<a 
href="https://redirect.github.com/sparklemotion/nokogiri/issues/2559";>#2559</a>,
 <a 
href="https://redirect.github.com/sparklemotion/nokogiri/issues/2895";>#2895</a>]
 (Thanks, <a 
href="https://github.com/cbasguti";><code>@​cbasguti</code></a>!)</li>
   </ul>
   <h2>1.15.2 / 2023-05-24</h2>
   <h3>Dependencies</h3>
   <ul>
   <li>[JRuby] Vendored org.nokogiri:nekodtd is updated to v0.1.11.noko2. This 
is functionally equivalent to v0.1.11.noko1 but restores support for Java 
8.</li>
   </ul>
   <h3>Fixed</h3>
   <ul>
   <li>[JRuby] Java 8 support is restored, fixing a regression present in 
v1.14.0..v1.14.4 and v1.15.0..v1.15.1. [<a 
href="https://redirect.github.com/sparklemotion/nokogiri/issues/2887";>#2887</a>]</li>
   </ul>
   <h2>1.15.1 / 2023-05-19</h2>
   <h3>Dependencies</h3>
   <ul>
   <li>[CRuby] Vendored libxml2 is updated to v2.11.4 from v2.11.3. For details 
please see <a 
href="https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.11.4";>https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.11.4</a></li>
   </ul>
   <h3>Fixed</h3>
   <ul>
   <li>[CRuby] The libxml2 update fixes an encoding regression when 
push-parsing UTF-8 sequences. [<a 
href="https://redirect.github.com/sparklemotion/nokogiri/issues/2882";>#2882</a>,
 upstream <a 
href="https://gitlab.gnome.org/GNOME/libxml2/-/issues/542";>issue</a> and <a 
href="https://gitlab.gnome.org/GNOME/libxml2/-/commit/e0f3016f71297314502a3620a301d7e064cbb612";>commit</a>]</li>
   </ul>
   <h2>1.15.0 / 2023-05-15</h2>
   <h3>Notes</h3>
   <h4>Ability to opt into system <code>malloc</code> and <code>free</code></h4>
   <p>Since 2009, Nokogiri has configured libxml2 to use 
<code>ruby_xmalloc</code> et al for memory management. This has provided 
benefits for memory management, but comes with a performance penalty.</p>
   <p>Users can now opt into using system <code>malloc</code> for libxml2 
memory management by setting an environment variable:</p>
   <pre lang="sh"><code># &quot;default&quot; here means &quot;libxml2's 
default&quot; which is system malloc
   NOKOGIRI_LIBXML_MEMORY_MANAGEMENT=default
   </code></pre>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/sparklemotion/nokogiri/commit/0d545ac7a127f27ee715b433cb88a8d674d52c2c";><code>0d545ac</code></a>
 version bump to v1.15.3</li>
   <li><a 
href="https://github.com/sparklemotion/nokogiri/commit/ab4cac8c36e5d0b57d7e6ae8673f4274d3de9dcf";><code>ab4cac8</code></a>
 doc: update CHANGELOG</li>
   <li><a 
href="https://github.com/sparklemotion/nokogiri/commit/07924d96bbfab948ac1d6296f617c8a81634a003";><code>07924d9</code></a>
 fix: Schema.from_document parameter type checks</li>
   <li><a 
href="https://github.com/sparklemotion/nokogiri/commit/943500750d9df336ccf96c94699a3375ce733945";><code>9435007</code></a>
 prefactor: clean up Schema.from_document implementations</li>
   <li><a 
href="https://github.com/sparklemotion/nokogiri/commit/bf38d811d7bf3e0743e03f709c553f756acdd8c3";><code>bf38d81</code></a>
 prefactor: clean up XML::Schema tests</li>
   <li><a 
href="https://github.com/sparklemotion/nokogiri/commit/ffa20ef886f6c8f931b627c58a8d75d614aa2784";><code>ffa20ef</code></a>
 fix: CDATA.new parameter type checks</li>
   <li><a 
href="https://github.com/sparklemotion/nokogiri/commit/a84f430ef27c8f4496ca325cd562fd4bee2aefe6";><code>a84f430</code></a>
 prefactor: clean up CDATA.new implementations</li>
   <li><a 
href="https://github.com/sparklemotion/nokogiri/commit/299b73e6131cb874662c376aedf1846d9f1dd295";><code>299b73e</code></a>
 prefactor: clean up XML::CDATA tests</li>
   <li><a 
href="https://github.com/sparklemotion/nokogiri/commit/a3c2d6e5f34d1f5ce70663e4587835ce1fdaf75c";><code>a3c2d6e</code></a>
 fix: Text.new parameter type checks</li>
   <li><a 
href="https://github.com/sparklemotion/nokogiri/commit/e6c7768c231db2ea444075e61be9c9eb3806b3dd";><code>e6c7768</code></a>
 prefactor: clean up Text.new implementations</li>
   <li>Additional commits viewable in <a 
href="https://github.com/sparklemotion/nokogiri/compare/v1.13.3...v1.15.3";>compare
 view</a></li>
   </ul>
   </details>
   <br />
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=nokogiri&package-manager=bundler&previous-version=1.13.3&new-version=1.15.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   You can disable automated security fix PRs for this repo from the [Security 
Alerts page](https://github.com/apache/storm-site/network/alerts).
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@storm.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to