[sync] 2022/10/23 #390
Merged
[sync] 2022/10/23 #390
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
The header where the warning is needs to be placed in front of the banner so the banner disappears on scroll. Caused by: dart-lang/site-www@e188064 Before: <img width="739" alt="Banner wrongly in front of warning " src="https://user-images.githubusercontent.com/18372958/196532259-af47eee1-2527-4a4e-81f3-3cb7f4ddf2b9.png"> After: <img width="879" alt="Banner properly behind warning" src="https://user-images.githubusercontent.com/18372958/196532224-28d9c620-f870-45d8-af0b-61c4eee285f0.png">
Updates the example and wording to more clearly specify this is just an example situation of when a runtime exception may occur, and add ambiguity as to the actual value of the casted list to showcase that it may or may not fail. Fixes dart-lang/site-www#4288 Co-authored-by: Marya <[email protected]>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.27 to 2.1.28. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>2.1.28 - 18 Oct 2022</h2> <ul> <li>Update default CodeQL bundle version to 2.11.1. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1294">#1294</a></li> <li>Replace uses of GitHub Actions command <code>set-output</code> because it is now deprecated. See more information in the <a href="https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/">GitHub Changelog</a>. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1301">#1301</a></li> </ul> <h2>2.1.27 - 06 Oct 2022</h2> <ul> <li>We are rolling out a feature of the CodeQL Action in October 2022 that changes the way that Go code is analyzed to be more consistent with other compiled languages like C/C++, C#, and Java. You do not need to alter your code scanning workflows. If you encounter any problems, please <a href="https://github.com/github/codeql-action/issues">file an issue</a> or open a private ticket with GitHub Support and request an escalation to engineering.</li> </ul> <h2>2.1.26 - 29 Sep 2022</h2> <ul> <li>Update default CodeQL bundle version to 2.11.0. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1267">#1267</a></li> </ul> <h2>2.1.25 - 21 Sep 2022</h2> <ul> <li>We will soon be rolling out a feature of the CodeQL Action that stores some information used to make future runs faster in the GitHub Actions cache. Initially, this will only be enabled on JavaScript repositories, but we plan to add more languages to this soon. The new feature can be disabled by passing the <code>trap-caching: false</code> option to your workflow's <code>init</code> step, for example if you are already using the GitHub Actions cache for a different purpose and are near the storage limit for it.</li> <li>Add support for Python automatic dependency installation with Poetry 1.2 <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1258">#1258</a>.</li> </ul> <h2>2.1.24 - 16 Sep 2022</h2> <p>No user facing changes.</p> <h2>2.1.23 - 14 Sep 2022</h2> <ul> <li>Allow CodeQL packs to be downloaded from GitHub Enterprise Server instances, using the new <code>registries</code> input for the <code>init</code> action. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1221">#1221</a></li> <li>Update default CodeQL bundle version to 2.10.5. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1240">#1240</a></li> </ul> <h2>2.1.22 - 01 Sep 2022</h2> <ul> <li>Downloading CodeQL packs has been moved to the <code>init</code> step. Previously, CodeQL packs were downloaded during the <code>analyze</code> step. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1218">#1218</a></li> <li>Update default CodeQL bundle version to 2.10.4. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1224">#1224</a></li> <li>The newly released <a href="https://python-poetry.org/blog/announcing-poetry-1.2.0">Poetry 1.2</a> is not yet supported. In the most common case where the CodeQL Action is automatically installing Python dependencies, it will continue to install and use Poetry 1.1 on its own. However, in certain cases such as with self-hosted runners, you may need to ensure Poetry 1.1 is installed yourself.</li> </ul> <h2>2.1.21 - 25 Aug 2022</h2> <ul> <li>Improve error messages when the code scanning configuration file includes an invalid <code>queries</code> block or an invalid <code>query-filters</code> block. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1208">#1208</a></li> <li>Fix a bug where Go build tracing could fail on Windows. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/1209">#1209</a></li> </ul> <h2>2.1.20 - 22 Aug 2022</h2> <p>No user facing changes.</p> <h2>2.1.19 - 17 Aug 2022</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/cc7986c02bac29104a72998e67239bb5ee2ee110"><code>cc7986c</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/1311">#1311</a> from github/update-v2.1.28-96c8872f</li> <li><a href="https://github.com/github/codeql-action/commit/aecd03235b354c8b15d3c26be8b09cc18c3343af"><code>aecd032</code></a> Update changelog for v2.1.28</li> <li><a href="https://github.com/github/codeql-action/commit/96c8872f06fdc59062b6c904db4c0956cc1f72e2"><code>96c8872</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/1310">#1310</a> from github/henrymercer/v2-mergeback</li> <li><a href="https://github.com/github/codeql-action/commit/b709139433d46cb866848ac5df2e1665a902078f"><code>b709139</code></a> Merge branch 'releases/v2' into henrymercer/v2-mergeback</li> <li><a href="https://github.com/github/codeql-action/commit/5dd73678a42653832b19f22c1fb9493c4d3df7f6"><code>5dd7367</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/1308">#1308</a> from github/aeisenberg/fix-merge</li> <li><a href="https://github.com/github/codeql-action/commit/4c1ccc4a5e98ce02155843e6f5c112ce81c87f53"><code>4c1ccc4</code></a> Fix CHANGELOG</li> <li><a href="https://github.com/github/codeql-action/commit/c2f5185572f4cd6e51184c516fe7a2175bad782a"><code>c2f5185</code></a> Merge commit 'e4cc4a2f' into releases/v2</li> <li><a href="https://github.com/github/codeql-action/commit/297ec80a468c234608046f51ee8c65da128a1e94"><code>297ec80</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/1301">#1301</a> from github/aeisenberg/remove-set-output</li> <li><a href="https://github.com/github/codeql-action/commit/b0f8861cea215112e05fd843270675ae37ee7620"><code>b0f8861</code></a> Update CHANGELOG.md</li> <li><a href="https://github.com/github/codeql-action/commit/2ee8edc7f09588bfb6d136e9f7ee05a1b4ff3063"><code>2ee8edc</code></a> Update changelog</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/807578363a7869ca324a79039e6db9c843e0e100...cc7986c02bac29104a72998e67239bb5ee2ee110">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
The format isn't perfect and we should likely move to some sort of badges for information in the future, but this at least gets the important information out there. **Released example:** <img width="406" alt="Example of generated message for released lint" src="https://user-images.githubusercontent.com/18372958/196589296-bf94f905-88f9-48cd-b651-25867c825eef.png"> **Unreleased example:** <img width="625" alt="Unreleased linter rule example" src="https://user-images.githubusercontent.com/18372958/196589369-3a06b782-366f-4740-bc77-d60b58a356fa.png"> **Staged:** https://dart-dev--pr4292-feature-linter-rule-lvyxbqgl.web.app/tools/linter-rules Fixes dart-lang/site-www#4276
Pedantic has been deprecated and replaced by `package:lints` and `package:flutter_lints` for over a year. We can remove the mention in favor of only documenting the new lints packages.
Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.13.6 to 1.13.9. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sparklemotion/nokogiri/releases">nokogiri's releases</a>.</em></p> <blockquote> <h2>1.13.9 / 2022-10-18</h2> <h3>Security</h3> <ul> <li>[CRuby] Vendored libxml2 is updated to address <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-2309">CVE-2022-2309</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-40304">CVE-2022-40304</a>, and <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-40303">CVE-2022-40303</a>. See <a href="https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-2qc6-mcvw-92cw">GHSA-2qc6-mcvw-92cw</a> for more information.</li> <li>[CRuby] Vendored zlib is updated to address <a href="https://ubuntu.com/security/CVE-2022-37434">CVE-2022-37434</a>. Nokogiri was not affected by this vulnerability, but this version of zlib was being flagged up by some vulnerability scanners, see <a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2626">#2626</a> for more information.</li> </ul> <h3>Dependencies</h3> <ul> <li>[CRuby] Vendored libxml2 is updated to <a href="https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.3">v2.10.3</a> from v2.9.14.</li> <li>[CRuby] Vendored libxslt is updated to <a href="https://gitlab.gnome.org/GNOME/libxslt/-/releases/v1.1.37">v1.1.37</a> from v1.1.35.</li> <li>[CRuby] Vendored zlib is updated from 1.2.12 to 1.2.13. (See <a href="https://github.com/sparklemotion/nokogiri/blob/v1.13.x/LICENSE-DEPENDENCIES.md#platform-releases">LICENSE-DEPENDENCIES.md</a> for details on which packages redistribute this library.)</li> </ul> <h3>Fixed</h3> <ul> <li>[CRuby] <code>Nokogiri::XML::Namespace</code> objects, when compacted, update their internal struct's reference to the Ruby object wrapper. Previously, with GC compaction enabled, a segmentation fault was possible after compaction was triggered. [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2658">#2658</a>] (Thanks, <a href="https://github.com/eightbitraptor"><code>@eightbitraptor</code></a> and <a href="https://github.com/peterzhu2118"><code>@peterzhu2118</code></a>!)</li> <li>[CRuby] <code>Document#remove_namespaces!</code> now defers freeing the underlying <code>xmlNs</code> struct until the <code>Document</code> is GCed. Previously, maintaining a reference to a <code>Namespace</code> object that was removed in this way could lead to a segfault. [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2658">#2658</a>]</li> </ul> <hr /> <p>sha256 checksums:</p> <pre><code>9b69829561d30c4461ea803baeaf3460e8b145cff7a26ce397119577a4083a02 nokogiri-1.13.9-aarch64-linux.gem e76ebb4b7b2e02c72b2d1541289f8b0679fb5984867cf199d89b8ef485764956 nokogiri-1.13.9-arm64-darwin.gem 15bae7d08bddeaa898d8e3f558723300137c26a2dc2632a1f89c8574c4467165 nokogiri-1.13.9-java.gem f6a1dbc7229184357f3129503530af73cc59ceba4932c700a458a561edbe04b9 nokogiri-1.13.9-x64-mingw-ucrt.gem 36d935d799baa4dc488024f71881ff0bc8b172cecdfc54781169c40ec02cbdb3 nokogiri-1.13.9-x64-mingw32.gem ebaf82aa9a11b8fafb67873d19ee48efb565040f04c898cdce8ca0cd53ff1a12 nokogiri-1.13.9-x86-linux.gem 11789a2a11b28bc028ee111f23311461104d8c4468d5b901ab7536b282504154 nokogiri-1.13.9-x86-mingw32.gem 01830e1646803ff91c0fe94bc768ff40082c6de8cfa563dafd01b3f7d5f9d795 nokogiri-1.13.9-x86_64-darwin.gem 8e93b8adec22958013799c8690d81c2cdf8a90b6f6e8150ab22e11895844d781 nokogiri-1.13.9-x86_64-linux.gem 96f37c1baf0234d3ae54c2c89aef7220d4a8a1b03d2675ff7723565b0a095531 nokogiri-1.13.9.gem </code></pre> <h2>1.13.8 / 2022-07-23</h2> <h3>Deprecated</h3> <ul> <li><code>XML::Reader#attribute_nodes</code> is deprecated due to incompatibility between libxml2's <code>xmlReader</code> memory semantics and Ruby's garbage collector. Although this method continues to exist for backwards compatibility, it is unsafe to call and may segfault. This method will be removed in a future version of Nokogiri, and callers should use <code>#attribute_hash</code> instead. [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2598">#2598</a>]</li> </ul> <h3>Improvements</h3> <ul> <li><code>XML::Reader#attribute_hash</code> is a new method to safely retrieve the attributes of a node from <code>XML::Reader</code>. [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2598">#2598</a>, <a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2599">#2599</a>]</li> </ul> <h3>Fixed</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md">nokogiri's changelog</a>.</em></p> <blockquote> <h2>1.13.9 / 2022-10-18</h2> <h3>Security</h3> <ul> <li>[CRuby] Vendored libxml2 is updated to address <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-2309">CVE-2022-2309</a>, <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-40304">CVE-2022-40304</a>, and <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-40303">CVE-2022-40303</a>. See <a href="https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-2qc6-mcvw-92cw">GHSA-2qc6-mcvw-92cw</a> for more information.</li> <li>[CRuby] Vendored zlib is updated to address <a href="https://ubuntu.com/security/CVE-2022-37434">CVE-2022-37434</a>. Nokogiri was not affected by this vulnerability, but this version of zlib was being flagged up by some vulnerability scanners, see <a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2626">#2626</a> for more information.</li> </ul> <h3>Dependencies</h3> <ul> <li>[CRuby] Vendored libxml2 is updated to <a href="https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.3">v2.10.3</a> from v2.9.14.</li> <li>[CRuby] Vendored libxslt is updated to <a href="https://gitlab.gnome.org/GNOME/libxslt/-/releases/v1.1.37">v1.1.37</a> from v1.1.35.</li> <li>[CRuby] Vendored zlib is updated from 1.2.12 to 1.2.13. (See <a href="https://github.com/sparklemotion/nokogiri/blob/v1.13.x/LICENSE-DEPENDENCIES.md#platform-releases">LICENSE-DEPENDENCIES.md</a> for details on which packages redistribute this library.)</li> </ul> <h3>Fixed</h3> <ul> <li>[CRuby] <code>Nokogiri::XML::Namespace</code> objects, when compacted, update their internal struct's reference to the Ruby object wrapper. Previously, with GC compaction enabled, a segmentation fault was possible after compaction was triggered. [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2658">#2658</a>] (Thanks, <a href="https://github.com/eightbitraptor"><code>@eightbitraptor</code></a> and <a href="https://github.com/peterzhu2118"><code>@peterzhu2118</code></a>!)</li> <li>[CRuby] <code>Document#remove_namespaces!</code> now defers freeing the underlying <code>xmlNs</code> struct until the <code>Document</code> is GCed. Previously, maintaining a reference to a <code>Namespace</code> object that was removed in this way could lead to a segfault. [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2658">#2658</a>]</li> </ul> <h2>1.13.8 / 2022-07-23</h2> <h3>Deprecated</h3> <ul> <li><code>XML::Reader#attribute_nodes</code> is deprecated due to incompatibility between libxml2's <code>xmlReader</code> memory semantics and Ruby's garbage collector. Although this method continues to exist for backwards compatibility, it is unsafe to call and may segfault. This method will be removed in a future version of Nokogiri, and callers should use <code>#attribute_hash</code> instead. [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2598">#2598</a>]</li> </ul> <h3>Improvements</h3> <ul> <li><code>XML::Reader#attribute_hash</code> is a new method to safely retrieve the attributes of a node from <code>XML::Reader</code>. [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2598">#2598</a>, <a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2599">#2599</a>]</li> </ul> <h3>Fixed</h3> <ul> <li>[CRuby] Calling <code>XML::Reader#attributes</code> is now safe to call. In Nokogiri <= 1.13.7 this method may segfault. [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2598">#2598</a>, <a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2599">#2599</a>]</li> </ul> <h2>1.13.7 / 2022-07-12</h2> <h3>Fixed</h3> <p><code>XML::Node</code> objects, when compacted, update their internal struct's reference to the Ruby object wrapper. Previously, with GC compaction enabled, a segmentation fault was possible after compaction was triggered. [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2578">#2578</a>] (Thanks, <a href="https://github.com/eightbitraptor"><code>@eightbitraptor</code></a>!)</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sparklemotion/nokogiri/commit/897759cc25b57ebf2754897e910c86931dec7d39"><code>897759c</code></a> version bump to v1.13.9</li> <li><a href="https://github.com/sparklemotion/nokogiri/commit/aeb1ac32830a34369a46625613f21ee17e3e445e"><code>aeb1ac3</code></a> doc: update CHANGELOG</li> <li><a href="https://github.com/sparklemotion/nokogiri/commit/c663e4905a35edd23f7cc05a80126b4e446e4fd2"><code>c663e49</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2671">#2671</a> from sparklemotion/flavorjones-update-zlib-1.2.13_v1...</li> <li><a href="https://github.com/sparklemotion/nokogiri/commit/212e07da28096db7d2cbda697bc2a38d71f6dc3a"><code>212e07d</code></a> ext: hack to cross-compile zlib v1.2.13 on darwin</li> <li><a href="https://github.com/sparklemotion/nokogiri/commit/76dbc8c5bef99467f3403297e29da4297fbddeb7"><code>76dbc8c</code></a> dep: update zlib to v1.2.13</li> <li><a href="https://github.com/sparklemotion/nokogiri/commit/24e3a9c41428195c66745fef8ce697101167bd08"><code>24e3a9c</code></a> doc: update CHANGELOG</li> <li><a href="https://github.com/sparklemotion/nokogiri/commit/4db3b4daa9ca8d1c1996cc9741c76ba2b8d1673b"><code>4db3b4d</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2668">#2668</a> from sparklemotion/flavorjones-namespace-scopes-comp...</li> <li><a href="https://github.com/sparklemotion/nokogiri/commit/73d73d6e433f17f39e188f5c03ec176b60719416"><code>73d73d6</code></a> fix: Document#remove_namespaces! use-after-free bug</li> <li><a href="https://github.com/sparklemotion/nokogiri/commit/5f58b34724a6e48c7c478cfda5fc9c4cac581e08"><code>5f58b34</code></a> fix: namespace nodes behave properly when compacted</li> <li><a href="https://github.com/sparklemotion/nokogiri/commit/b08a8586c7c34831be0f13f9147b84016d17d94b"><code>b08a858</code></a> test: repro namespace_scopes compaction issue</li> <li>Additional commits viewable in <a href="https://github.com/sparklemotion/nokogiri/compare/v1.13.6...v1.13.9">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/dart-lang/site-www/network/alerts). </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
The site is unmaintained, outdated, and doesn't have much translated currently. We can always add it back in the future if the site or another equivalent is maintained again. Co-authored-by: Marya <[email protected]>
We don't use any of these resulting error messages, so we don't need to exclude them from analysis in any specific channels. The warnings and errors are ignored in these locations are there to exemplify specific situations and are not relevant. Fixes dart-lang/site-www#3710
I wasn't 100% sure the best format for this, particularly the Linux entry, so I'm open to suggestions! Fixes #4281
This is especially important as we show the example in DartPad which warns about the triggered lint. Also expands on the example by offering a second use case beyond forEach. Fixes #3667
Bumps [jekyll](https://github.com/jekyll/jekyll) from 4.2.2 to 4.3.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jekyll/jekyll/releases">jekyll's releases</a>.</em></p> <blockquote> <h2>v4.3.0</h2> <h3>Minor Enhancements</h3> <ul> <li>Add webrick as a dependency (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8524">#8524</a>)</li> <li>Regenerate supported mime types (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8542">#8542</a>)</li> <li>Update include tag to be more permissive (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8618">#8618</a>)</li> <li>Optimize <code>Jekyll::Utils.parse_date</code> (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8425">#8425</a>)</li> <li>Update rubocop from 1.12 to 1.18 and min ruby from 2.4 to 2.5 (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8741">#8741</a>)</li> <li>Always hide cache-dir contents from Git (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8798">#8798</a>)</li> <li>Remove the warning about auto-regeneration on Windows (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8821">#8821</a>)</li> <li>Propagate _data folder from theme (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8815">#8815</a>)</li> <li>Support both tzinfo v1 and v2 alongwith non-half hour offsets. (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8880">#8880</a>)</li> <li>Run vendor-mimes to update mime.types (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8940">#8940</a>)</li> <li>Expose collection static files via <code>site.static_files</code> (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8961">#8961</a>)</li> <li>Expose <code>basename</code> from <code>document.rb</code> as <code>name</code> to Liquid templates (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8761">#8761</a>)</li> <li>Allow Configurable Converters on CSV (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8858">#8858</a>)</li> <li>Introduce <code>theme</code> drop to expose theme-gem details (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/9129">#9129</a>)</li> <li>Relax version constraint to allow Rouge 4.x (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/9134">#9134</a>)</li> <li>Incrementally rebuild when a data file is changed (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8771">#8771</a>)</li> <li>Support jekyll-sass-converter 3.x (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/9132">#9132</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li>fix: pin rubocop to 1.12 due to error with ruby 2.4 (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8651">#8651</a>)</li> <li>Load Jekyll plugins from BUNDLE_GEMFILE location (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8585">#8585</a>)</li> <li>fix(security): CVE-2021-28834 (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8680">#8680</a>)</li> <li>Inject livereload script using <code>location.protocol</code> instead of <code>http:</code> (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8718">#8718</a>)</li> <li>Respect collections_dir config within include tag (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8756">#8756</a>)</li> <li>Fix regression in Convertible module from v4.2.0 (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8786">#8786</a>)</li> <li>Revert <a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/7253">#7253</a>: &<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/34">#34</a>;Don&<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/39">#39</a>;t reset site.url to localhost:4000 by default&<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/34">#34</a>; (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8620">#8620</a>)</li> <li>Improve readability of CI logs (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8877">#8877</a>)</li> <li>Fix deprecation message for missing doc method (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8960">#8960</a>)</li> <li>Fix response header for content served via <code>jekyll serve</code> (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8965">#8965</a>)</li> <li>Trigger livereload in sites without pages (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8337">#8337</a>)</li> <li>Only enable BOM encoding option on UTF encodings (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8363">#8363</a>)</li> <li>Ensure theme config is a <code>Jekyll::Configuration</code> object (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8988">#8988</a>)</li> <li>Remove misleading totals row from <code>--profile</code> table (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/9039">#9039</a>)</li> <li>Unlock Psych dependency (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/9135">#9135</a>)</li> <li>Fix false positive conflicts for static files in a collection (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/9141">#9141</a>)</li> </ul> <h3>Development Fixes</h3> <ul> <li>style: enable new cops (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8538">#8538</a>)</li> <li>Allow dependabot to keep github actions up-to-date (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8540">#8540</a>)</li> <li>Update actions/cache requirement to v2.1.3 (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8543">#8543</a>)</li> <li>Pin rubocop version (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8564">#8564</a>)</li> <li>style: add rubocop 1.9 cops (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8567">#8567</a>)</li> <li>Cross Version Testing Locally and Faster CI (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8610">#8610</a>)</li> <li>Use official Ruby setup GH action (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8614">#8614</a>)</li> <li>Spell check action for markdown documentation (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8675">#8675</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jekyll/jekyll/blob/master/History.markdown">jekyll's changelog</a>.</em></p> <blockquote> <h2>4.3.0 / 2022-10-20</h2> <h3>Minor Enhancements</h3> <ul> <li>Add webrick as a dependency (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8524">#8524</a>)</li> <li>Regenerate supported mime types (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8542">#8542</a>)</li> <li>Update include tag to be more permissive (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8618">#8618</a>)</li> <li>Optimize <code>Jekyll::Utils.parse_date</code> (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8425">#8425</a>)</li> <li>Update rubocop from 1.12 to 1.18 and min ruby from 2.4 to 2.5 (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8741">#8741</a>)</li> <li>Always hide cache-dir contents from Git (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8798">#8798</a>)</li> <li>Remove the warning about auto-regeneration on Windows (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8821">#8821</a>)</li> <li>Propagate _data folder from theme (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8815">#8815</a>)</li> <li>Support both tzinfo v1 and v2 along with non-half hour offsets. (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8880">#8880</a>)</li> <li>Run vendor-mimes to update mime.types (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8940">#8940</a>)</li> <li>Expose collection static files via <code>site.static_files</code> (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8961">#8961</a>)</li> <li>Expose <code>basename</code> from <code>document.rb</code> as <code>name</code> to Liquid templates (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8761">#8761</a>)</li> <li>Allow Configurable Converters on CSV (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8858">#8858</a>)</li> <li>Introduce <code>theme</code> drop to expose theme-gem details (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/9129">#9129</a>)</li> <li>Relax version constraint to allow Rouge 4.x (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/9134">#9134</a>)</li> <li>Incrementally rebuild when a data file is changed (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8771">#8771</a>)</li> <li>Support jekyll-sass-converter 3.x (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/9132">#9132</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li>fix: pin rubocop to 1.12 due to error with ruby 2.4 (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8651">#8651</a>)</li> <li>Load Jekyll plugins from BUNDLE_GEMFILE location (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8585">#8585</a>)</li> <li>fix(security): CVE-2021-28834 (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8680">#8680</a>)</li> <li>Inject livereload script using <code>location.protocol</code> instead of <code>http:</code> (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8718">#8718</a>)</li> <li>Respect collections_dir config within include tag (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8756">#8756</a>)</li> <li>Fix regression in Convertible module from v4.2.0 (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8786">#8786</a>)</li> <li>Revert <a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/7253">#7253</a>: &<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/34">#34</a>;Don&<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/39">#39</a>;t reset site.url to localhost:4000 by default&<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/34">#34</a>; (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8620">#8620</a>)</li> <li>Improve readability of CI logs (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8877">#8877</a>)</li> <li>Fix deprecation message for missing doc method (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8960">#8960</a>)</li> <li>Fix response header for content served via <code>jekyll serve</code> (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8965">#8965</a>)</li> <li>Trigger livereload in sites without pages (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8337">#8337</a>)</li> <li>Only enable BOM encoding option on UTF encodings (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8363">#8363</a>)</li> <li>Ensure theme config is a <code>Jekyll::Configuration</code> object (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8988">#8988</a>)</li> <li>Remove misleading totals row from <code>--profile</code> table (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/9039">#9039</a>)</li> <li>Unlock Psych dependency (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/9135">#9135</a>)</li> <li>Fix false positive conflicts for static files in a collection (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/9141">#9141</a>)</li> </ul> <h3>Development Fixes</h3> <ul> <li>style: enable new cops (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8538">#8538</a>)</li> <li>Allow dependabot to keep github actions up-to-date (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8540">#8540</a>)</li> <li>Update actions/cache requirement to v2.1.3 (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8543">#8543</a>)</li> <li>Pin rubocop version (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8564">#8564</a>)</li> <li>style: add rubocop 1.9 cops (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8567">#8567</a>)</li> <li>Cross Version Testing Locally and Faster CI (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8610">#8610</a>)</li> <li>Use official Ruby setup GH action (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/8614">#8614</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jekyll/jekyll/commit/9c2c01bb7a6e6c2e6711dcdb14f968dee4aaac2a"><code>9c2c01b</code></a> Release 💎 v4.3.0</li> <li><a href="https://github.com/jekyll/jekyll/commit/a81cd4276825ddb1b37442c273e16296c0409b50"><code>a81cd42</code></a> Update history to reflect merge of <a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/9157">#9157</a> [ci skip]</li> <li><a href="https://github.com/jekyll/jekyll/commit/b32293cf67e194374faf2fa5f1aa16d3ec573e92"><code>b32293c</code></a> Release post for v4.3.0 (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/9157">#9157</a>)</li> <li><a href="https://github.com/jekyll/jekyll/commit/e27605e380a3ca431d0723a0914c709bb8175bba"><code>e27605e</code></a> Clean up HEAD section in History document</li> <li><a href="https://github.com/jekyll/jekyll/commit/520326406c46f11c209db451deedb92a1c7eebe0"><code>5203264</code></a> Document xz dependency on macOS (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/9098">#9098</a>)</li> <li><a href="https://github.com/jekyll/jekyll/commit/f030e55f706358ca45e121244d412c347265866b"><code>f030e55</code></a> Fix URL to Liquid documentation (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/9158">#9158</a>)</li> <li><a href="https://github.com/jekyll/jekyll/commit/6d3dc74c7d70944e97397b8056f691df81eb41e3"><code>6d3dc74</code></a> Bump RuboCop to <code>v1.37.x</code></li> <li><a href="https://github.com/jekyll/jekyll/commit/35e08eb9dbe5dcbd2f62871ce607f664ab31755c"><code>35e08eb</code></a> Update history to reflect merge of <a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/9132">#9132</a> [ci skip]</li> <li><a href="https://github.com/jekyll/jekyll/commit/03f7ddc80120a5ee91c3623cf337ab82b5cf8d47"><code>03f7ddc</code></a> Support jekyll-sass-converter 3.x (<a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/9132">#9132</a>)</li> <li><a href="https://github.com/jekyll/jekyll/commit/3554b73b7fcbafc21afe0e1771b0635d50d5f365"><code>3554b73</code></a> Update history to reflect merge of <a href="https://github-redirect.dependabot.com/jekyll/jekyll/issues/9141">#9141</a> [ci skip]</li> <li>Additional commits viewable in <a href="https://github.com/jekyll/jekyll/compare/v4.2.2...v4.3.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
ref #123
小更新～