Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 21, 2025

Bumps nokogiri from 1.18.8 to 1.18.9.

Release notes

Sourced from nokogiri's releases.

v1.18.9 / 2025-07-20

Security

5bcfdf7aa8d1056a7ad5e52e1adffc64ef53d12d0724fbc6f458a3af1a4b9e32  nokogiri-1.18.9-aarch64-linux-gnu.gem
55e9e6ca46c4ad1715e313f407d8481d15be1e3b65d9f8e52ba1c124d01676a7  nokogiri-1.18.9-aarch64-linux-musl.gem
eea3f1f06463ff6309d3ff5b88033c4948d0da1ab3cc0a3a24f63c4d4a763979  nokogiri-1.18.9-arm64-darwin.gem
fe611ae65880e445a9c0f650d52327db239f3488626df4173c05beafd161d46e  nokogiri-1.18.9-arm-linux-gnu.gem
935605e14c0ba17da18d203922440bf6c0676c602659278d855d4622d756a324  nokogiri-1.18.9-arm-linux-musl.gem
ac5a7d93fd0e3cef388800b037407890882413feccca79eb0272a2715a82fa33  nokogiri-1.18.9.gem
1fe5b7aa4a054eda689a969bb4e03999960a6ea806582d327207d687168bceb5  nokogiri-1.18.9-java.gem
6b4fc1523aa0370c78653e38c94cb50e7f3ab786425de66ba7ad24222c1164a3  nokogiri-1.18.9-x64-mingw-ucrt.gem
e0d2deb03d3d7af8016e8c9df5ff4a7d692159cefb135cbb6a4109f265652348  nokogiri-1.18.9-x86_64-darwin.gem
b52f5defedc53d14f71eeaaf990da66b077e1918a2e13088b6a96d0230f44360  nokogiri-1.18.9-x86_64-linux-gnu.gem
e69359d6240c17e64cc9f43970d54f13bfc7b8cc516b819228f687e953425e69  nokogiri-1.18.9-x86_64-linux-musl.gem
Changelog

Sourced from nokogiri's changelog.

v1.18.9 / 2025-07-20

Security

Commits
  • 1dcd8ce version bump to v1.18.9
  • a05d2b4 Apply upstream patches to address multiple vulnerabilities (#3526)
  • 947a55e Apply upstream patches to address multiple vulnerabilities
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.18.8 to 1.18.9.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](sparklemotion/nokogiri@v1.18.8...v1.18.9)

---
updated-dependencies:
- dependency-name: nokogiri
  dependency-version: 1.18.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jul 21, 2025
@moleske moleske merged commit a41065b into main Jul 23, 2025
12 checks passed
@dependabot dependabot bot deleted the dependabot/bundler/nokogiri-1.18.9 branch July 23, 2025 02:10
ari-wg-gitbot added a commit to cloudfoundry/capi-release that referenced this pull request Jul 23, 2025
Changes in cloud_controller_ng:

- Remove vip usage
    PR: cloudfoundry/cloud_controller_ng#3761
    Author: M. Oleske <[email protected]>

Dependency updates in cloud_controller_ng:

- build(deps-dev): bump mock_redis from 0.50.0 to 0.51.0
    PR: cloudfoundry/cloud_controller_ng#4464
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

- build(deps): bump nokogiri from 1.18.8 to 1.18.9
    PR: cloudfoundry/cloud_controller_ng#4462
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
ari-wg-gitbot added a commit to cloudfoundry/capi-release that referenced this pull request Jul 23, 2025
Changes in cloud_controller_ng:

- Remove vip usage
    PR: cloudfoundry/cloud_controller_ng#3761
    Author: M. Oleske <[email protected]>

Dependency updates in cloud_controller_ng:

- build(deps): bump thor from 1.3.2 to 1.4.0
    PR: cloudfoundry/cloud_controller_ng#4466
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

- build(deps-dev): bump mock_redis from 0.50.0 to 0.51.0
    PR: cloudfoundry/cloud_controller_ng#4464
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

- build(deps): bump nokogiri from 1.18.8 to 1.18.9
    PR: cloudfoundry/cloud_controller_ng#4462
    Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant