Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix improperly bound regex #921

Merged
merged 2 commits into from
Aug 6, 2024
Merged

Fix improperly bound regex #921

merged 2 commits into from
Aug 6, 2024

Conversation

yoannchaudet
Copy link
Contributor

This PR address a code vulnerability issue: https://github.com/github/pages-gem/security/code-scanning/1.

spec/spec_helper.rb Outdated Show resolved Hide resolved
@yoannchaudet yoannchaudet merged commit 0d149e9 into master Aug 6, 2024
7 checks passed
@yoannchaudet yoannchaudet deleted the regex branch August 6, 2024 18:16
TomHennen added a commit to slsa-framework/slsa that referenced this pull request Aug 21, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [github-pages](https://github.com/github/pages-gem) | `231` -> `232`
|
[![age](https://developer.mend.io/api/mc/badges/age/rubygems/github-pages/232?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/rubygems/github-pages/232?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/rubygems/github-pages/231/232?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/rubygems/github-pages/231/232?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>github/pages-gem (github-pages)</summary>

### [`v232`](https://github.com/github/pages-gem/releases/tag/v232)

[Compare
Source](https://github.com/github/pages-gem/compare/v231...v232)

#### What's Changed

- Bump docker/build-push-action from 5 to 6 by
[@&#8203;dependabot](https://github.com/dependabot) in
[github/pages-gem#916
- Fix obscured gemfile issue by
[@&#8203;mrmanc](https://github.com/mrmanc) in
[github/pages-gem#912
- Add webrick as Ruby 3 doesn’t include it by
[@&#8203;mrmanc](https://github.com/mrmanc) in
[github/pages-gem#914
- Update nokogiri CVE-2024-25062 by
[@&#8203;naxhh](https://github.com/naxhh) in
[github/pages-gem#911
- Parkr jekyll3.10 by
[@&#8203;yoannchaudet](https://github.com/yoannchaudet) in
[github/pages-gem#919
- Fix improperly bound regex by
[@&#8203;yoannchaudet](https://github.com/yoannchaudet) in
[github/pages-gem#921
- Prep 232 by [@&#8203;yoannchaudet](https://github.com/yoannchaudet)
in
[github/pages-gem#923

#### New Contributors

- [@&#8203;naxhh](https://github.com/naxhh) made their first
contribution in
[github/pages-gem#911

**Full Changelog**:
github/pages-gem@v231...v232

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "every weekend" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View the
[repository job
log](https://developer.mend.io/github/slsa-framework/slsa).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4yNi4xIiwidXBkYXRlZEluVmVyIjoiMzguMjYuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

---------

Signed-off-by: Mend Renovate <bot@renovateapp.com>
Signed-off-by: Tom Hennen <TomHennen@users.noreply.github.com>
Co-authored-by: Tom Hennen <TomHennen@users.noreply.github.com>
andrewpollock pushed a commit to google/osv-scanner that referenced this pull request Aug 22, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [github-pages](https://github.com/github/pages-gem) | `"~> 231"` ->
`"~> 232"` |
[![age](https://developer.mend.io/api/mc/badges/age/rubygems/github-pages/232?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/rubygems/github-pages/232?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/rubygems/github-pages/231/232?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/rubygems/github-pages/231/232?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>github/pages-gem (github-pages)</summary>

### [`v232`](https://github.com/github/pages-gem/releases/tag/v232)

[Compare
Source](https://github.com/github/pages-gem/compare/v231...v232)

#### What's Changed

- Bump docker/build-push-action from 5 to 6 by
[@&#8203;dependabot](https://github.com/dependabot) in
[github/pages-gem#916
- Fix obscured gemfile issue by
[@&#8203;mrmanc](https://github.com/mrmanc) in
[github/pages-gem#912
- Add webrick as Ruby 3 doesn’t include it by
[@&#8203;mrmanc](https://github.com/mrmanc) in
[github/pages-gem#914
- Update nokogiri CVE-2024-25062 by
[@&#8203;naxhh](https://github.com/naxhh) in
[github/pages-gem#911
- Parkr jekyll3.10 by
[@&#8203;yoannchaudet](https://github.com/yoannchaudet) in
[github/pages-gem#919
- Fix improperly bound regex by
[@&#8203;yoannchaudet](https://github.com/yoannchaudet) in
[github/pages-gem#921
- Prep 232 by [@&#8203;yoannchaudet](https://github.com/yoannchaudet)
in
[github/pages-gem#923

#### New Contributors

- [@&#8203;naxhh](https://github.com/naxhh) made their first
contribution in
[github/pages-gem#911

**Full Changelog**:
github/pages-gem@v231...v232

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 6am on monday" in timezone
Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View the
[repository job
log](https://developer.mend.io/github/google/osv-scanner).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4yNi4xIiwidXBkYXRlZEluVmVyIjoiMzguMjYuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->
lehors added a commit to slsa-framework/slsa that referenced this pull request Aug 27, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [github-pages](https://github.com/github/pages-gem) | `231` -> `232`
|
[![age](https://developer.mend.io/api/mc/badges/age/rubygems/github-pages/232?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/rubygems/github-pages/232?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/rubygems/github-pages/231/232?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/rubygems/github-pages/231/232?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>github/pages-gem (github-pages)</summary>

### [`v232`](https://github.com/github/pages-gem/releases/tag/v232)

[Compare
Source](https://github.com/github/pages-gem/compare/v231...v232)

#### What's Changed

- Bump docker/build-push-action from 5 to 6 by
[@&#8203;dependabot](https://github.com/dependabot) in
[github/pages-gem#916
- Fix obscured gemfile issue by
[@&#8203;mrmanc](https://github.com/mrmanc) in
[github/pages-gem#912
- Add webrick as Ruby 3 doesn’t include it by
[@&#8203;mrmanc](https://github.com/mrmanc) in
[github/pages-gem#914
- Update nokogiri CVE-2024-25062 by
[@&#8203;naxhh](https://github.com/naxhh) in
[github/pages-gem#911
- Parkr jekyll3.10 by
[@&#8203;yoannchaudet](https://github.com/yoannchaudet) in
[github/pages-gem#919
- Fix improperly bound regex by
[@&#8203;yoannchaudet](https://github.com/yoannchaudet) in
[github/pages-gem#921
- Prep 232 by [@&#8203;yoannchaudet](https://github.com/yoannchaudet)
in
[github/pages-gem#923

#### New Contributors

- [@&#8203;naxhh](https://github.com/naxhh) made their first
contribution in
[github/pages-gem#911

**Full Changelog**:
github/pages-gem@v231...v232

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "every weekend" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View the
[repository job
log](https://developer.mend.io/github/slsa-framework/slsa).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4yNi4xIiwidXBkYXRlZEluVmVyIjoiMzguMjYuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

---------

Signed-off-by: Mend Renovate <bot@renovateapp.com>
Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
Co-authored-by: Arnaud J Le Hors <lehors@us.ibm.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants