Bump erb from 6.0.2 to 6.0.4 in /docs
Merged
DE
4mo ago+1-1
Bumps erb from 6.0.2 to 6.0.4.
Release notes
Sourced from erb's releases.
v6.0.4
Full Changelog: https://github.com/ruby/erb/compare/v6.0.3...v6.0.4
v6.0.3
What's Changed
- Exclude dependabot updates from release note by
@hsbtin ruby/erb#101- Fix typo: rename BDSL to BSDL by
@djkazunokoin ruby/erb#103- Freeze src in initialize by
@jhawthornin ruby/erb#105- Use tag instead of branch with lewagon/wait-on-check-action by
@hsbtin ruby/erb#107- fix: exclude some files from published gem by
@G-Rathin ruby/erb#108New Contributors
@djkazunokomade their first contribution in ruby/erb#103@G-Rathmade their first contribution in ruby/erb#108Full Changelog: https://github.com/ruby/erb/compare/v6.0.1...v6.0.3
Changelog
Sourced from erb's changelog.
6.0.4
- Prohibit
def_methodon marshal-loaded ERB instances6.0.3
- Exclude some files from published gem ruby/erb#108
Commits
4d2b45eVersion 6.0.49d017beProhibit def_method on marshal-loaded ERB instances9c8fa8aVersion 6.0.30ebc6aeBump rubygems/release-gem from 1.1.2 to 1.2.025a729aBump step-security/harden-runner from 2.15.0 to 2.16.19820802Bump actions/create-github-app-token from 2 to 32611366Bump lewagon/wait-on-check-action from 1.5.0 to 1.6.0890d87fUse github.token instead of missing MATZBOT_DEPENDABOT_MERGE_TOKEN secretafc32b6Fix dependabot auto-merge by using GH_TOKEN env var2fd0a6bfix: exclude some files from published gem (#108)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.
Summary by cubic
Update erb in docs from 6.0.2 to 6.0.4 to pick up bug fixes and security hardening (prohibits def_method on marshal-loaded ERB instances). No code changes; only docs/Gemfile.lock updated.