Closed
Conversation
Author
|
Closed in favor of #53. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
We've upgraded a dependency and here is what you need to know:
Please take a good look at the info here and the test results before merging this pull request.
What changed?
✳️ rubyzip ( → 1.2.2) · Repo · Changelog
Release Notes
1.2.1
Commits
See the full diff on Github. The new version differs by 54 commits:
Merge pull request #376 from jdleesmiller/fix-cve-2018-1000544Bump version to 1.2.2Bump version to 1.3.0Bump version to 2.0.0Expand from root rather than current working directoryDisable symlinks and check for path traversalConsolidate path traversal testsAdd jwilk's path traversal testsTrigger CI againMove jruby to allow failures matrix till crc uint 32 issues are resolvedFix CVE-2018-1000544 symlink path traversalFix CVE-2018-1000544 absolute path traversalFix jruby versionMerge pull request #363 from hainesr/fix-dir-globWhen globbing in ZipFSDir, take CWD into account.Pass glob through from ZipFileNameMapper.Merge pull request #361 from hainesr/quiet-testsMerge pull request #358 from idoru/handle-gpbit-3Turn off all terminal output in all tests.Handle stored files with general purpose bit 3 setMerge pull request #353 from pnomolos/pnomolos/fix_stringioMerge pull request #352 from tricknotes/bump-ruby-versionsMerge pull request #355 from pnomolos/pnomolos/fix-rubocop-breakageFix regression caused by Rubocop cleanupAdded fix for calling 'close' on a StringIO-backed zip file, and specsBump Ruby versions on Travis CIMerge pull request #350 from olleolleolle/patch-1Travis: TypoTravis: Workaround a rbx-3 autoload issueMerge pull request #345 from olleolleolle/patch-1Merge pull request #346 from olleolleolle/patch-2Merge branch 'master' into patch-2Merge pull request #347 from swamp09/ci_againstCI against Ruby 2.2.8, 2.3.5, and 2.4.2Travis: typoTravis: Try using rbx-3Travis: update RubyGemsTravis: drop oraclejdk-7Travis: use JRUBY_OPTS="--debug"Travis: use pre-installed Travis rubiesREADME: Use a blockquote to make text readableMerge pull request #325 from aeroastro/feature/tempfile-directoryMerge pull request #326 from aeroastro/feature/readme-improvementMerge pull request #340 from alsor/force-entry-names-encoding-optionMerge branch 'master' into force-entry-names-encoding-optionadd option to force entry names encodingMake naming on README more consistentMerge pull request #321 from gaurish/patch-1Merge pull request #332 from aeroastro/feature/rubocop-updateApply automatic correction by rubocopDisable Style/MutableConstant because existent code relies on itAdd rubocop dependency and correct settingsSave temporary files to a temporary directoryFile.join() is our friend for joining pathsDepfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with
@depfu rebase.