IGListKit/Gemfile.lock
dependabot[bot] 158eb4b04c Bump json from 2.2.0 to 2.3.1 (#1448)
Summary:
Bumps [json](https://github.com/flori/json) from 2.2.0 to 2.3.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/flori/json/blob/master/CHANGES.md">json's changelog</a>.</em></p>
<blockquote>
<h2>2020-06-30 (2.3.1)</h2>
<ul>
<li>Spelling and grammar fixes for comments. Pull request <a href="https://github-redirect.dependabot.com/flori/json/issues/191">https://github.com/Instagram/IGListKit/issues/191</a> by Josh
Kline.</li>
<li>Enhance generic JSON and #generate docs. Pull request <a href="https://github-redirect.dependabot.com/flori/json/issues/347">https://github.com/Instagram/IGListKit/issues/347</a> by Victor
Shepelev.</li>
<li>Add :nodoc: for GeneratorMethods. Pull request <a href="https://github-redirect.dependabot.com/flori/json/issues/349">https://github.com/Instagram/IGListKit/issues/349</a> by Victor Shepelev.</li>
<li>Baseline changes to help (JRuby) development. Pull request <a href="https://github-redirect.dependabot.com/flori/json/issues/371">https://github.com/Instagram/IGListKit/issues/371</a> by Karol
Bucek.</li>
<li>Add metadata for rubygems.org. Pull request <a href="https://github-redirect.dependabot.com/flori/json/issues/379">https://github.com/Instagram/IGListKit/issues/379</a> by Alexandre ZANNI.</li>
<li>Remove invalid JSON.generate description from JSON module rdoc. Pull
request <a href="https://github-redirect.dependabot.com/flori/json/issues/384">https://github.com/Instagram/IGListKit/issues/384</a> by Jeremy Evans.</li>
<li>Test with TruffleRuby in CI. Pull request <a href="https://github-redirect.dependabot.com/flori/json/issues/402">https://github.com/Instagram/IGListKit/issues/402</a> by Benoit Daloze.</li>
<li>Rdoc enhancements. Pull request <a href="https://github-redirect.dependabot.com/flori/json/issues/413">https://github.com/Instagram/IGListKit/issues/413</a> by Burdette Lamar.</li>
<li>Fixtures/ are not being tested... Pull request <a href="https://github-redirect.dependabot.com/flori/json/issues/416">https://github.com/Instagram/IGListKit/issues/416</a> by Marc-André
Lafortune.</li>
<li>Use frozen string for hash key. Pull request <a href="https://github-redirect.dependabot.com/flori/json/issues/420">https://github.com/Instagram/IGListKit/issues/420</a> by Marc-André
Lafortune.</li>
<li>Added :call-seq: to RDoc for some methods. Pull request <a href="https://github-redirect.dependabot.com/flori/json/issues/422">https://github.com/Instagram/IGListKit/issues/422</a> by Burdette
Lamar.</li>
<li>Small typo fix. Pull request <a href="https://github-redirect.dependabot.com/flori/json/issues/423">https://github.com/Instagram/IGListKit/issues/423</a> by Marc-André Lafortune.</li>
</ul>
<h2>2019-12-11 (2.3.0)</h2>
<ul>
<li>Fix default of <code>create_additions</code> to always be <code>false</code> for <code>JSON(user_input)</code>
and <code>JSON.parse(user_input, nil)</code>.
Note that <code>JSON.load</code> remains with default <code>true</code> and is meant for internal
serialization of trusted data. [CVE-2020-10663]</li>
<li>Fix passing args all #to_json in json/add/*.</li>
<li>Fix encoding issues</li>
<li>Fix issues of keyword vs positional parameter</li>
<li>Fix JSON::Parser against bigdecimal updates</li>
<li>Bug fixes to JRuby port</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="0951d7719c"><code>0951d77</code></a> Bump version to 2.3.1</li>
<li><a href="ddc29e20c1"><code>ddc29e2</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/flori/json/issues/429">https://github.com/Instagram/IGListKit/issues/429</a> from flori/remove-generate-task-for-gemspec</li>
<li><a href="cee8020dc8"><code>cee8020</code></a> Removed gemspec task from default task on Rakefile</li>
<li><a href="9fd637107f"><code>9fd6371</code></a> Use VERSION file instead of hard-coded value</li>
<li><a href="dc90bcf240"><code>dc90bcf</code></a> Removed explicitly date field in gemspec, it will assign by rubygems.org</li>
<li><a href="4c11a40c1f"><code>4c11a40</code></a> Removed task for json_pure.gemspec</li>
<li><a href="e794ec9591"><code>e794ec9</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/flori/json/issues/426">https://github.com/Instagram/IGListKit/issues/426</a> from marcandre/indent</li>
<li><a href="7cc9301aca"><code>7cc9301</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/flori/json/issues/428">https://github.com/Instagram/IGListKit/issues/428</a> from marcandre/change_fix</li>
<li><a href="9e2a1fb7d8"><code>9e2a1fb</code></a> Make changes more precise <a href="https://github-redirect.dependabot.com/flori/json/issues/424">https://github.com/Instagram/IGListKit/issues/424</a></li>
<li><a href="f8fa987de5"><code>f8fa987</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/flori/json/issues/424">https://github.com/Instagram/IGListKit/issues/424</a> from marcandre/update_changes</li>
<li>Additional commits viewable in <a href="https://github.com/flori/json/compare/v2.2.0...v2.3.1">compare view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=json&package-manager=bundler&previous-version=2.2.0&new-version=2.3.1)](https://help.github.com/articles/configuring-automated-security-fixes)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

 ---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `dependabot rebase` will rebase this PR
- `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `dependabot merge` will merge this PR after your CI passes on it
- `dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `dependabot cancel merge` will cancel a previously requested merge and block automerging
- `dependabot reopen` will reopen this PR if it is closed
- `dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Instagram/IGListKit/network/alerts).

</details>

Pull Request resolved: https://github.com/Instagram/IGListKit/pull/1448

Reviewed By: bdotdub

Differential Revision: D22786910

Pulled By: lorixx

fbshipit-source-id: ddab3099562da768afde67fd62e4a176d2de6191
2020-07-28 11:17:17 -07:00

144 lines
3.5 KiB
Text

GEM
remote: https://rubygems.org/
specs:
CFPropertyList (3.0.1)
activesupport (4.2.11.1)
i18n (~> 0.7)
minitest (~> 5.1)
thread_safe (~> 0.3, >= 0.3.4)
tzinfo (~> 1.1)
addressable (2.7.0)
public_suffix (>= 2.0.2, < 5.0)
algoliasearch (1.27.1)
httpclient (~> 2.8, >= 2.8.3)
json (>= 1.5.1)
atomos (0.1.3)
claide (1.0.3)
claide-plugins (0.9.2)
cork
nap
open4 (~> 1.3)
clamp (1.3.1)
cocoapods (1.8.4)
activesupport (>= 4.0.2, < 5)
claide (>= 1.0.2, < 2.0)
cocoapods-core (= 1.8.4)
cocoapods-deintegrate (>= 1.0.3, < 2.0)
cocoapods-downloader (>= 1.2.2, < 2.0)
cocoapods-plugins (>= 1.0.0, < 2.0)
cocoapods-search (>= 1.0.0, < 2.0)
cocoapods-stats (>= 1.0.0, < 2.0)
cocoapods-trunk (>= 1.4.0, < 2.0)
cocoapods-try (>= 1.1.0, < 2.0)
colored2 (~> 3.1)
escape (~> 0.0.4)
fourflusher (>= 2.3.0, < 3.0)
gh_inspector (~> 1.0)
molinillo (~> 0.6.6)
nap (~> 1.0)
ruby-macho (~> 1.4)
xcodeproj (>= 1.11.1, < 2.0)
cocoapods-core (1.8.4)
activesupport (>= 4.0.2, < 6)
algoliasearch (~> 1.0)
concurrent-ruby (~> 1.1)
fuzzy_match (~> 2.0.4)
nap (~> 1.0)
cocoapods-deintegrate (1.0.4)
cocoapods-downloader (1.3.0)
cocoapods-plugins (1.0.0)
nap
cocoapods-search (1.0.0)
cocoapods-stats (1.1.0)
cocoapods-trunk (1.4.1)
nap (>= 0.8, < 2.0)
netrc (~> 0.11)
cocoapods-try (1.1.0)
colored2 (3.1.2)
concurrent-ruby (1.1.5)
cork (0.3.0)
colored2 (~> 3.1)
danger (5.16.1)
claide (~> 1.0)
claide-plugins (>= 0.9.2)
colored2 (~> 3.1)
cork (~> 0.1)
faraday (~> 0.9)
faraday-http-cache (~> 1.0)
git (~> 1.5)
kramdown (~> 1.5)
no_proxy_fix
octokit (~> 4.7)
terminal-table (~> 1)
danger-swiftlint (0.12.1)
danger
rake (> 10)
thor (~> 0.19)
escape (0.0.4)
faraday (0.17.0)
multipart-post (>= 1.2, < 3)
faraday-http-cache (1.3.1)
faraday (~> 0.8)
fourflusher (2.3.1)
fuzzy_match (2.0.4)
gh_inspector (1.1.3)
git (1.5.0)
httpclient (2.8.3)
i18n (0.9.5)
concurrent-ruby (~> 1.0)
json (2.3.1)
kramdown (1.17.0)
mini_portile2 (2.4.0)
minitest (5.13.0)
molinillo (0.6.6)
multipart-post (2.1.1)
nanaimo (0.2.6)
nap (1.1.0)
netrc (0.11.0)
no_proxy_fix (0.1.2)
nokogiri (1.10.8)
mini_portile2 (~> 2.4.0)
octokit (4.14.0)
sawyer (~> 0.8.0, >= 0.5.3)
open4 (1.3.4)
public_suffix (4.0.1)
rake (13.0.1)
rouge (2.0.7)
ruby-macho (1.4.0)
sawyer (0.8.2)
addressable (>= 2.3.5)
faraday (> 0.8, < 2.0)
slather (2.4.7)
CFPropertyList (>= 2.2, < 4)
activesupport (>= 4.0.2, < 5)
clamp (~> 1.3)
nokogiri (~> 1.8)
xcodeproj (~> 1.7)
terminal-table (1.8.0)
unicode-display_width (~> 1.1, >= 1.1.1)
thor (0.20.3)
thread_safe (0.3.6)
tzinfo (1.2.5)
thread_safe (~> 0.1)
unicode-display_width (1.6.0)
xcodeproj (1.13.0)
CFPropertyList (>= 2.3.3, < 4.0)
atomos (~> 0.1.3)
claide (>= 1.0.2, < 2.0)
colored2 (~> 3.1)
nanaimo (~> 0.2.6)
xcpretty (0.2.8)
rouge (~> 2.0.7)
PLATFORMS
ruby
DEPENDENCIES
cocoapods (~> 1.8.0)
danger (~> 5.0)
danger-swiftlint (~> 0.12.1)
slather (~> 2.4.0)
xcpretty (~> 0.2.8)
BUNDLED WITH
2.0.2