FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Bump nokogiri from 1.18.8 to 1.18.9 in /docs by dependabot[bot] · Pull Request #701 · ClearFoundry/ClearScript · GitHub

Bump nokogiri from 1.18.8 to 1.18.9 in /docs - #701

Merged
ClearScriptLib merged 1 commit into
masterfrom
dependabot/bundler/docs/nokogiri-1.18.9
Dec 20, 2025
Merged

Bump nokogiri from 1.18.8 to 1.18.9 in /docs#701
ClearScriptLib merged 1 commit into
masterfrom
dependabot/bundler/docs/nokogiri-1.18.9

Conversation

dependabot Bot commented on behalf of github Dec 20, 2025

Copy link
Copy Markdown
Contributor

Bumps nokogiri from 1.18.8 to 1.18.9.

Release notes

Sourced from nokogiri's releases.

v1.18.9 / 2025-07-20

Security

5bcfdf7aa8d1056a7ad5e52e1adffc64ef53d12d0724fbc6f458a3af1a4b9e32  nokogiri-1.18.9-aarch64-linux-gnu.gem
55e9e6ca46c4ad1715e313f407d8481d15be1e3b65d9f8e52ba1c124d01676a7  nokogiri-1.18.9-aarch64-linux-musl.gem
eea3f1f06463ff6309d3ff5b88033c4948d0da1ab3cc0a3a24f63c4d4a763979  nokogiri-1.18.9-arm64-darwin.gem
fe611ae65880e445a9c0f650d52327db239f3488626df4173c05beafd161d46e  nokogiri-1.18.9-arm-linux-gnu.gem
935605e14c0ba17da18d203922440bf6c0676c602659278d855d4622d756a324  nokogiri-1.18.9-arm-linux-musl.gem
ac5a7d93fd0e3cef388800b037407890882413feccca79eb0272a2715a82fa33  nokogiri-1.18.9.gem
1fe5b7aa4a054eda689a969bb4e03999960a6ea806582d327207d687168bceb5  nokogiri-1.18.9-java.gem
6b4fc1523aa0370c78653e38c94cb50e7f3ab786425de66ba7ad24222c1164a3  nokogiri-1.18.9-x64-mingw-ucrt.gem
e0d2deb03d3d7af8016e8c9df5ff4a7d692159cefb135cbb6a4109f265652348  nokogiri-1.18.9-x86_64-darwin.gem
b52f5defedc53d14f71eeaaf990da66b077e1918a2e13088b6a96d0230f44360  nokogiri-1.18.9-x86_64-linux-gnu.gem
e69359d6240c17e64cc9f43970d54f13bfc7b8cc516b819228f687e953425e69  nokogiri-1.18.9-x86_64-linux-musl.gem
Changelog

Sourced from nokogiri's changelog.

v1.18.9 / 2025-07-20

Security

Commits
  • 1dcd8ce version bump to v1.18.9
  • a05d2b4 Apply upstream patches to address multiple vulnerabilities (#3526)
  • 947a55e Apply upstream patches to address multiple vulnerabilities
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.18.8 to 1.18.9.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](sparklemotion/nokogiri@v1.18.8...v1.18.9)

---
updated-dependencies:
- dependency-name: nokogiri
  dependency-version: 1.18.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Dec 20, 2025
ClearScriptLib merged commit 1efe862 into master Dec 20, 2025
dependabot Bot deleted the dependabot/bundler/docs/nokogiri-1.18.9 branch December 20, 2025 22:38
mikhail-dcl added a commit to decentraland/ClearScript that referenced this pull request May 12, 2026
* Create CNAME

* Delete CNAME

* Create CNAME

* Update _config.yml

* Update head-custom.html

* Update _config.yml

* Bump rexml from 3.4.1 to 3.4.2 in /docs (ClearFoundry#675)

Bumps [rexml](https://github.com/ruby/rexml) from 3.4.1 to 3.4.2.
- [Release notes](https://github.com/ruby/rexml/releases)
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md)
- [Commits](ruby/rexml@v3.4.1...v3.4.2)

---
updated-dependencies:
- dependency-name: rexml
  dependency-version: 3.4.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump nokogiri from 1.18.8 to 1.18.9 in /docs (ClearFoundry#701)

Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.18.8 to 1.18.9.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](sparklemotion/nokogiri@v1.18.8...v1.18.9)

---
updated-dependencies:
- dependency-name: nokogiri
  dependency-version: 1.18.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update documentation links to the new ClearFoundry organization (ClearFoundry#703)

* Version 7.5.1-preview: [V8] Added support for JavaScript explicit resource management and script-side host object disposal (GitHub Issue ClearFoundry#533); [V8] added support for JavaScript object disposal from the host; added JavaScriptObjectFlags: Iterable, AsyncIterable, Disposable, AsyncDisposable; added IJavaScriptObject.Update; made HostItemFlags.DirectAccess apply to all fully public classes by default (GitHub Discussion ClearFoundry#626); added HostSettings.DisableInteropAssemblyConstruction (GitHub Issue ClearFoundry#645); added ScriptEngine.MarshalEnumAsUnderlyingType and AcceptEnumAsUnderlyingType (GitHub Discussion ClearFoundry#693); [V8] updated V8FastArgs to use ArrayPool; removed initialization script minimization to ease debugging; updated API documentation. Tested with V8 14.3.127.17.

* Bump faraday from 2.14.0 to 2.14.1 in /docs (ClearFoundry#705)

Bumps [faraday](https://github.com/lostisland/faraday) from 2.14.0 to 2.14.1.
- [Release notes](https://github.com/lostisland/faraday/releases)
- [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md)
- [Commits](lostisland/faraday@v2.14.0...v2.14.1)

---
updated-dependencies:
- dependency-name: faraday
  dependency-version: 2.14.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Fixed blog post images.

* Bump nokogiri from 1.18.10 to 1.19.1 in /docs (ClearFoundry#706)

Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.18.10 to 1.19.1.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](sparklemotion/nokogiri@v1.18.10...v1.19.1)

---
updated-dependencies:
- dependency-name: nokogiri
  dependency-version: 1.19.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump json from 2.18.1 to 2.19.2 in /docs (ClearFoundry#709)

Bumps [json](https://github.com/ruby/json) from 2.18.1 to 2.19.2.
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](ruby/json@v2.18.1...v2.19.2)

---
updated-dependencies:
- dependency-name: json
  dependency-version: 2.19.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump activesupport from 8.1.1 to 8.1.2.1 in /docs (ClearFoundry#710)

Bumps [activesupport](https://github.com/rails/rails) from 8.1.1 to 8.1.2.1.
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.2.1/activesupport/CHANGELOG.md)
- [Commits](rails/rails@v8.1.1...v8.1.2.1)

---
updated-dependencies:
- dependency-name: activesupport
  dependency-version: 8.1.2.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump addressable from 2.8.8 to 2.9.0 in /docs (ClearFoundry#714)

Bumps [addressable](https://github.com/sporkmonger/addressable) from 2.8.8 to 2.9.0.
- [Changelog](https://github.com/sporkmonger/addressable/blob/main/CHANGELOG.md)
- [Commits](sporkmonger/addressable@addressable-2.8.8...addressable-2.9.0)

---
updated-dependencies:
- dependency-name: addressable
  dependency-version: 2.9.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump nokogiri from 1.19.1 to 1.19.3 in /docs (ClearFoundry#717)

Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.19.1 to 1.19.3.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](sparklemotion/nokogiri@v1.19.1...v1.19.3)

---
updated-dependencies:
- dependency-name: nokogiri
  dependency-version: 1.19.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Version 7.5.1: [V8] Added support for JavaScript explicit resource management and script-side host object disposal (GitHub Issue ClearFoundry#533); [V8] added support for JavaScript object disposal from the host; added JavaScriptObjectFlags: Iterable, AsyncIterable, Disposable, AsyncDisposable; added IJavaScriptObject.Update; made HostItemFlags.DirectAccess apply to all fully public classes by default (GitHub Discussion ClearFoundry#626); added HostSettings.DisableInteropAssemblyConstruction (GitHub Issue ClearFoundry#645); added ScriptEngine.MarshalEnumAsUnderlyingType and AcceptEnumAsUnderlyingType (GitHub Discussion ClearFoundry#693); [V8] updated V8FastArgs to use ArrayPool; removed initialization script minimization to ease debugging; updated API documentation. [New] Tested with V8 14.7.173.23.

* Dump V8 build logs in Linux and macOS CI jobs

The Windows job already dumps V8/build/v8/*.log on always(), but Linux
and macOS swallow them. When V8Update.sh fails inside gn or ninja, the
runner output stops at "Building V8 ..." with no diagnostic.

* Add workflow to build a single platform without the Unity package

build.yaml builds all three platforms and aggregates the Unity package;
this workflow exposes a workflow_dispatch input (windows/linux/macos)
that runs only the matching job, for fast iteration on per-platform
binary issues.

* Fix V8 build log paths in CI dump steps

V8Update.sh starts in Unix/ but immediately cd's to ../V8/, so the
build directory is V8/build/, not Unix/build/. The Windows job already
dumps from V8\build\v8\; the Linux and macOS dump steps were looking
at the wrong path and printing nothing.

* Add Unix/build-local.sh to reproduce the Linux CI build on WSL

Mirrors what the Linux CI job does (apt-get install of the arm64
toolchain on demand, then make -f Unix/Makefile [CPU=arm64]) and
dumps V8/build/v8/*.log on failure so the V8 gn/ninja errors are
visible without scrolling. CPU defaults to x64 for fast iteration;
pass arm64 or all to widen the build.

* Install all build prerequisites in Unix/build-local.sh

The script previously only installed the arm64 cross-build toolchain
on demand and assumed the rest was already present. Now it also
installs git, build-essential (make + g++), clang, pkgconf, python3,
curl, and dotnet-sdk-8.0 when missing, so a fresh WSL/Ubuntu 22.04
environment can run it from scratch. Detection is by command-v lookup
to keep repeat invocations fast.

* Fix build-local.sh

* Guard V8 polyfill with C++20 feature-test macros

include/ClearScript/polyfill.h (added to V8 source by V8Patch.txt)
unconditionally defined std::make_unique_for_overwrite and std::format
under #ifdef __linux__. Upstream's release binaries are built against
an Ubuntu 20.04 sysroot with libstdc++ 10 where these aren't yet in the
standard library, so the unguarded polyfill compiles. Modern sysroots
(libstdc++ 12+) provide make_unique_for_overwrite natively, making the
polyfill ambiguous with the standard declaration and breaking the V8
build.

Wrap each block in its standard feature-test macro so the polyfill
only fills in what the active standard library is actually missing.

* Suppress -Wdeprecated-declarations in V8 cflags

libstdc++ 12's std::stable_sort instantiates _Temporary_buffer, which
internally calls std::get_temporary_buffer — a function deprecated in
C++17 and "removed" in C++20 but still present (with a deprecation
attribute) in libstdc++ 12. V8 builds with -std=c++20 -Werror, so the
deprecation became a hard build error in src/heap/factory.cc and
similar translation units that pull in <algorithm>.

This was a libstdc++ 12 bug, fixed in libstdc++ 13. Upstream's release
binaries dodge it by building against an Ubuntu 20.04 sysroot
(libstdc++ 10). For our Ubuntu 22.04 build path, add the warning
suppression to V8's BUILD.gn cflags via the existing patch.

* Tighten Unix/build-local.sh for WSL iteration

- Target Unix/ClearScriptV8/Makefile directly so the local build only
  produces the native .so. The C# sample/test/benchmark projects (now
  on net9.0) are skipped — they need a .NET 9 SDK that isn't in
  jammy's default repos. CI is unaffected because the ubuntu-22.04
  runner image ships .NET 9 preinstalled and continues to use the
  top-level Unix/Makefile.
- Switch to set -Eeuo pipefail so the dump_logs ERR trap is inherited
  into shell functions and actually fires when build_one fails.
- Soft-check for Ubuntu 22.04, set DEBIAN_FRONTEND=noninteractive +
  NEEDRESTART_MODE=a to keep apt from blocking on Ubuntu 22.04's
  needrestart TUI during prereq install.
- Drop the dead ensure_dotnet8 helper.

* Unity Package https://github.com/decentraland/ClearScript/actions/runs/25673525805

* Add the missing meta

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: ClearScript Library <ClearScript@microsoft.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Goomba <84668888+GoombaProgrammer@users.noreply.github.com>
Co-authored-by: ClearScript <clearscript@clearfoundry.net>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant


Back | FazBrowse Home | New Git URL