version bump to v1.16.4

sparklemotion · Apr 10, 2024 · 17c0362 · 17c0362
1 parent 1c329e9
commit 17c0362
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,6 +4,13 @@ Nokogiri follows [Semantic Versioning](https://semver.org/), please see the [REA
 
 ---
 
+## v1.16.4 / 2024-04-10
+
+### Dependencies
+
+* [CRuby] Vendored zlib in the precompiled native gems is updated to [v1.3.1](https://zlib.net/ChangeLog.txt) from v1.3. Nokogiri is not affected by the minizip CVE patched in this version, but this update may satisfy some security scanners. Related, see [this discussion](https://github.com/sparklemotion/nokogiri/discussions/3168) about removing the compression libraries altogether in a future version of Nokogiri.
+
+
 ## v1.16.3 / 2024-03-15
 
 ### Dependencies

diff --git a/lib/nokogiri/version/constant.rb b/lib/nokogiri/version/constant.rb
@@ -2,5 +2,5 @@
 
 module Nokogiri
   # The version of Nokogiri you are using
-  VERSION = "1.16.3"
+  VERSION = "1.16.4"
 end