Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump actionview from 6.0.3.2 to 6.1.3 #15

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 12, 2021

Bumps actionview from 6.0.3.2 to 6.1.3.

Release notes

Sourced from actionview's releases.

6.1.3

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • Fix the MySQL adapter to always set the right collation and charset to the connection session.

    Rafael Mendonça França

  • Fix MySQL adapter handling of time objects when prepared statements are enabled.

    Rafael Mendonça França

  • Fix scoping in enum fields using conditions that would generate an IN clause.

    Ryuta Kamizono

  • Skip optimised #exist? query when #include? is called on a relation with a having clause

    Relations that have aliased select values AND a having clause that references an aliased select value would generate an error when #include? was called, due to an optimisation that would generate call #exists? on the relation instead, which effectively alters the select values of the query (and thus removes the aliased select values), but leaves the having clause intact. Because the having clause is then referencing an aliased column that is no longer present in the simplified query, an ActiveRecord::InvalidStatement error was raised.

    An sample query affected by this problem:

    Author.select('COUNT(*) as total_posts', 'authors.*')
          .joins(:posts)
          .group(:id)

... (truncated)

Changelog

Sourced from actionview's changelog.

Rails 6.1.3 (February 17, 2021)

  • No changes.

Rails 6.1.2.1 (February 10, 2021)

  • No changes.

Rails 6.1.2 (February 09, 2021)

  • No changes.

Rails 6.1.1 (January 07, 2021)

  • Fix lazy translation in partial with block.

    Marek Kasztelnik

  • Avoid extra SELECT COUNT queries when rendering Active Record collections.

    aar0nr

  • Link preloading keep integrity hashes in the header.

    Étienne Barrié

  • Add config.action_view.preload_links_header to allow disabling of the Link header being added by default when using stylesheet_link_tag and javascript_include_tag.

    Andrew White

  • The translate helper now resolves default values when a nil key is specified, instead of always returning nil.

    Jonathan Hefner

Rails 6.1.0 (December 09, 2020)

  • SanitizeHelper.sanitized_allowed_attributes and SanitizeHelper.sanitized_allowed_tags call safe_list_sanitizer's class method

    Fixes #39586

    Taufiq Muhammadi

... (truncated)

Commits
  • 5aaaa16 Preparing for 6.1.3 release
  • eddb809 Merge pull request #41441 from jonathanhefner/apidocs-inline-code-markup
  • bc9c1fe Merge pull request #41416 from tjschuck/fix_highlight_docs
  • 130c128 Preparing for 6.1.2.1 release
  • bf8c59c Preparing for 6.1.2 release
  • ab23ee6 Merge pull request #41206 from intrip/41198-fix-current-page-kwargs
  • 9386cb0 Rename master to main in all code references
  • 5f3ff60 Preparing for 6.1.1 release
  • 6a0b88e Merge pull request #40981 from mkasztelnik/40900-fix-lazy-translation-in-part...
  • 4453888 Merge pull request #40897 from rails/backport-preload-links-header-config
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [actionview](https://github.com/rails/rails) from 6.0.3.2 to 6.1.3.
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v6.1.3/actionview/CHANGELOG.md)
- [Commits](rails/rails@v6.0.3.2...v6.1.3)

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 12, 2021
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 27, 2022

Superseded by #25.

@dependabot dependabot bot closed this Apr 27, 2022
@dependabot dependabot bot deleted the dependabot/bundler/actionview-6.1.3 branch April 27, 2022 23:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

ActionView::Base.sanitized_allowed_tags stop working
0 participants