New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade rexml from 3.2.5 to 3.2.8 #29

Closed

dependabot wants to merge 1 commit into main from dependabot/bundler/rexml-3.2.8

Contributor

dependabot bot commented on behalf of github May 16, 2024 •

edited

Loading

ruby/rexml@v3.2.5...v3.2.8

Addresses CVE-2024-35176
https://www.ruby-lang.org/en/news/2024/05/16/dos-rexml-cve-2024-35176/


          Bump rexml from 3.2.5 to 3.2.8

65ea0f5

Bumps [rexml](https://github.com/ruby/rexml) from 3.2.5 to 3.2.8.
- [Release notes](https://github.com/ruby/rexml/releases)
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md)
- [Commits](ruby/rexml@v3.2.5...v3.2.8)

---
updated-dependencies:
- dependency-name: rexml
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added the dependencies label

croaky changed the title ~~Bump rexml from 3.2.5 to 3.2.8~~ Upgrade rexml from 3.2.5 to 3.2.8

Contributor Author

dependabot bot commented on behalf of github May 21, 2024

Looks like rexml is up-to-date now, so this is no longer needed.

dependabot bot closed this

dependabot bot deleted the dependabot/bundler/rexml-3.2.8 branch

May 21, 2024 00:15

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels