Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update module github.com/microcosm-cc/bluemonday to v1.0.22 #275

Merged
merged 2 commits into from
Feb 24, 2023

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jan 28, 2023

Mend Renovate

This PR contains the following updates:

Package Type Update Change
github.com/microcosm-cc/bluemonday require patch v1.0.21 -> v1.0.22

Release Notes

microcosm-cc/bluemonday

v1.0.22: Add picture to list of elements allowed without attributes

Compare Source

This is not a security update!

This is a usability update as some HTML elements are valid without attributes however the default behaviour is to strip these out of an abundance of caution. The picture element https://developer.mozilla.org/en-US/docs/Web/HTML/Element/picture is one such element where it merely changes the browser rendering such that one of the child elements will be rendered.

The picture element was not present in the allowlist when it should have been, and so this release fixes that as per #​161 .


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot requested a review from a team as a code owner January 28, 2023 14:47
@renovate renovate bot added the dependencies Indicates a change to dependencies label Jan 28, 2023
@codecov
Copy link

codecov bot commented Jan 28, 2023

Codecov Report

Merging #275 (d65abbd) into main (1c8a34f) will increase coverage by 0.00%.
The diff coverage is n/a.

❗ Current head d65abbd differs from pull request most recent head d94852e. Consider uploading reports for the commit d94852e to get more accurate results

Impacted file tree graph

@@           Coverage Diff           @@
##             main     #275   +/-   ##
=======================================
  Coverage   96.93%   96.93%           
=======================================
  Files          57       57           
  Lines        6303     6306    +3     
=======================================
+ Hits         6110     6113    +3     
  Misses        143      143           
  Partials       50       50           
Impacted Files Coverage Δ
library/token.go
library/login.go 100.00% <0.00%> (ø)
database/user.go 88.07% <0.00%> (+0.24%) ⬆️

@renovate
Copy link
Contributor Author

renovate bot commented Feb 24, 2023

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

Warning: custom changes will be lost.

@wass3r wass3r merged commit 80c7558 into main Feb 24, 2023
@wass3r wass3r deleted the renovate/deps-(patch) branch February 24, 2023 21:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Indicates a change to dependencies
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants