Skip to content

Bump the bundler group with 4 updates - #27

Merged
az0 merged 1 commit into
gh-pagesfrom
dependabot/bundler/bundler-10a8f68d77
Nov 1, 2026
Merged

Bump the bundler group with 4 updates#27
az0 merged 1 commit into
gh-pagesfrom
dependabot/bundler/bundler-10a8f68d77

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the bundler group with 4 updates: jekyll-redirect-from, jekyll-seo-tag, tzinfo-data and html-proofer.

Updates jekyll-redirect-from from 0.16.0 to 0.17.0

Release notes

Sourced from jekyll-redirect-from's releases.

v0.17.0

Security

  • Only allow http(s) and relative redirect_to targets, percent-encode unsafe characters in them, and escape them in the redirect page (GHSA-xfg6-hjrc-hpvx)

styles

  • style: Style/SpecialGlobalVars (#216)

Development Fixes

  • fix Gemfile to correctly install jekyll 3.9 (#224)
  • Refactor specs for RedirectPage (#222)
  • Lock to RuboCop v1.18.x (#242)
  • Clean up gemspec (#243)
  • Bump versions in CI workflow (#273)

Bug Fixes

  • Refactor Redirectable mixin to reduce allocations (#241)
Changelog

Sourced from jekyll-redirect-from's changelog.

0.17.0 / 2026-09-29

Security

  • Only allow http(s) and relative redirect_to targets, percent-encode unsafe characters in them, and escape them in the redirect page (GHSA-xfg6-hjrc-hpvx)

styles

  • style: Style/SpecialGlobalVars (#216)

Development Fixes

  • fix Gemfile to correctly install jekyll 3.9 (#224)
  • Refactor specs for RedirectPage (#222)
  • Lock to RuboCop v1.18.x (#242)
  • Clean up gemspec (#243)
  • Bump versions in CI workflow (#273)

Bug Fixes

  • Refactor Redirectable mixin to reduce allocations (#241)
Commits

Updates jekyll-seo-tag from 2.9.0 to 2.9.1

Release notes

Sourced from jekyll-seo-tag's releases.

v2.9.1

Security

  • Escape all metadata attribute outputs, and make the JSON-LD block safe inside its script tag (GHSA-572m-7cg5-6j5r)
Changelog

Sourced from jekyll-seo-tag's changelog.

2.9.1 / 2026-09-29

Security

  • Escape all metadata attribute outputs, and make the JSON-LD block safe inside its script tag (GHSA-572m-7cg5-6j5r)
Commits

Updates tzinfo-data from 1.2026.4 to 1.2026.5

Release notes

Sourced from tzinfo-data's releases.

v1.2026.5

Based on version 2026e of the IANA Time Zone Database (https://lists.iana.org/hyperkitty/list/tz-announce@iana.org/message/VXIA4AU73OQL3OZ3ZBZHWIASIIVBGUJV/).

Commits

Updates html-proofer from 5.2.2 to 5.2.3

Release notes

Sourced from html-proofer's releases.

v5.2.3

5.2.3 (2026-10-16)

Bug Fixes

  • Add ruby-json 3 support (de14af9)

Miscellaneous Chores

  • reporter: Escape colons in swapped test URLs (#879)
  • reporter: Avoid live external URLs (#879)
  • Prefix Dependabot commits with a Conventional Commits type (#880)
  • Lint PR titles for Conventional Commits (#880)
  • Run release prep on every push to main (#880)
Changelog

Sourced from html-proofer's changelog.

5.2.3 (2026-10-16)

Bug Fixes

  • Add ruby-json 3 support (de14af9)

Miscellaneous Chores

  • reporter: Escape colons in swapped test URLs (#879)
  • reporter: Avoid live external URLs (#879)
  • Prefix Dependabot commits with a Conventional Commits type (#880)
  • Lint PR titles for Conventional Commits (#880)
  • Run release prep on every push to main (#880)
Commits
  • 9357d77 [skip test] Release v5.2.3 (#881)
  • de14af9 fix: Add ruby-json 3 support
  • 78d7424 Merge pull request #879 from tsimonq2/json-3
  • a07dfe6 test(reporter): Escape colons in swapped test URLs
  • a096003 test(reporter): Avoid live external URLs
  • b342424 Merge pull request #880 from gjtorikian/ci/conventional-commit-releases
  • 4454ef2 build: Prefix Dependabot commits with a Conventional Commits type
  • f4198fd ci: Lint PR titles for Conventional Commits
  • 9c1b32b ci: Run release prep on every push to main
  • f850b05 Add ruby-json 3 support
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the bundler group with 4 updates
3b35a84 
Bumps the bundler group with 4 updates: [jekyll-redirect-from](https://github.com/jekyll/jekyll-redirect-from), [jekyll-seo-tag](https://github.com/jekyll/jekyll-seo-tag), [tzinfo-data](https://github.com/tzinfo/tzinfo-data) and [html-proofer](https://github.com/gjtorikian/html-proofer).


Updates `jekyll-redirect-from` from 0.16.0 to 0.17.0
- [Release notes](https://github.com/jekyll/jekyll-redirect-from/releases)
- [Changelog](https://github.com/jekyll/jekyll-redirect-from/blob/master/History.markdown)
- [Commits](jekyll/jekyll-redirect-from@v0.16.0...v0.17.0)

Updates `jekyll-seo-tag` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/jekyll/jekyll-seo-tag/releases)
- [Changelog](https://github.com/jekyll/jekyll-seo-tag/blob/master/History.markdown)
- [Commits](jekyll/jekyll-seo-tag@v2.9.0...v2.9.1)

Updates `tzinfo-data` from 1.2026.4 to 1.2026.5
- [Release notes](https://github.com/tzinfo/tzinfo-data/releases)
- [Commits](tzinfo/tzinfo-data@v1.2026.4...v1.2026.5)

Updates `html-proofer` from 5.2.2 to 5.2.3
- [Release notes](https://github.com/gjtorikian/html-proofer/releases)
- [Changelog](https://github.com/gjtorikian/html-proofer/blob/main/CHANGELOG.md)
- [Commits](gjtorikian/html-proofer@v5.2.2...v5.2.3)

---
updated-dependencies:
- dependency-name: jekyll-redirect-from
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: jekyll-seo-tag
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: tzinfo-data
  dependency-version: 1.2026.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: html-proofer
  dependency-version: 5.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Nov 1, 2026
@az0
az0 merged commit 7f074ab into gh-pages Nov 1, 2026
5 checks passed
@dependabot
dependabot Bot deleted the dependabot/bundler/bundler-10a8f68d77 branch November 1, 2026 16:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@az0