Skip to content

Update dependency nokogiri to v1.16.4

GitLab Dependency Bot requested to merge gitlab-renovate-forks/version.gitlab.com:renovate/nokogiri-1.x-lockfile into main

This MR contains the following updates:

Package Update Change
nokogiri (source, changelog) patch 1.16.2 -> 1.16.4

MR created with the help of gitlab-org/frontend/renovate-gitlab-bot

Release Notes

sparklemotion/nokogiri (nokogiri)

v1.16.4

Compare Source

Dependencies
  • [CRuby] Vendored zlib in the precompiled native gems is updated to v1.3.1 from v1.3. Nokogiri is not affected by the minizip CVE patched in this version, but this update may satisfy some security scanners. Related, see this discussion about removing the compression libraries altogether in a future version of Nokogiri.

v1.16.3

Compare Source

Dependencies
Changed
  • [CRuby] XML::Reader sets the @encoding instance variable during reading if it is not passed into the initializer. Previously, it would remain nil. The behavior of Reader#encoding has not changed. This works around changes to how libxml2 reports the encoding used in v2.12.6.

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Merge request reports