Re: [PR] Bump addressable from 2.8.7 to 2.9.0 in /docs [spark]

2026-04-08 Thread via GitHub


dongjoon-hyun closed pull request #55256: Bump addressable from 2.8.7 to 2.9.0 
in /docs
URL: https://github.com/apache/spark/pull/55256


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


-
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]



Re: [PR] Bump addressable from 2.8.7 to 2.9.0 in /docs [spark]

2026-04-08 Thread via GitHub


dependabot[bot] commented on PR #55256:
URL: https://github.com/apache/spark/pull/55256#issuecomment-4207572201

   OK, I won't notify you again about this release, but will get in touch when 
a new version is available. If you'd rather skip all updates until the next 
major or minor version, let me know by commenting `@dependabot ignore this 
major version` or `@dependabot ignore this minor version`.
   
   If you change your mind, just re-open this PR and I'll resolve any conflicts 
on it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


-
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]



[PR] Bump addressable from 2.8.7 to 2.9.0 in /docs [spark]

2026-04-07 Thread via GitHub


dependabot[bot] opened a new pull request, #55256:
URL: https://github.com/apache/spark/pull/55256

   Bumps [addressable](https://github.com/sporkmonger/addressable) from 2.8.7 
to 2.9.0.
   
   Changelog
   Sourced from https://github.com/sporkmonger/addressable/blob/main/CHANGELOG.md";>addressable's
 changelog.
   
   Addressable 2.9.0 
   
   fixes ReDoS vulnerability in Addressable::Template#match (fixes 
incomplete
   remediation in 2.8.10)
   
   Addressable 2.8.10 
   
   fixes ReDoS vulnerability in Addressable::Template#match
   
   Addressable 2.8.9 
   
   Reduce gem size by excluding test files (https://redirect.github.com/sporkmonger/addressable/issues/569";>#569)
   No need for bundler as development dependency (https://redirect.github.com/sporkmonger/addressable/issues/571";>#571, 
https://github.com/sporkmonger/addressable/commit/5fc1d93";>5fc1d93)
   idna/pure: stop building the useless COMPOSITION_TABLE 
(removes the Addressable::IDNA::COMPOSITION_TABLE constant) (https://redirect.github.com/sporkmonger/addressable/issues/564";>#564)
   
   https://redirect.github.com/sporkmonger/addressable/issues/569";>#569: 
https://redirect.github.com/sporkmonger/addressable/pull/569";>sporkmonger/addressable#569
   https://redirect.github.com/sporkmonger/addressable/issues/571";>#571: 
https://redirect.github.com/sporkmonger/addressable/pull/571";>sporkmonger/addressable#571
   https://redirect.github.com/sporkmonger/addressable/issues/564";>#564: 
https://redirect.github.com/sporkmonger/addressable/pull/564";>sporkmonger/addressable#564
   Addressable 2.8.8 
   
   Replace the unicode.data blob by a ruby constant (https://redirect.github.com/sporkmonger/addressable/issues/561";>#561)
   Allow public_suffix 7 (https://redirect.github.com/sporkmonger/addressable/issues/558";>#558)
   
   https://redirect.github.com/sporkmonger/addressable/issues/561";>#561: 
https://redirect.github.com/sporkmonger/addressable/pull/561";>sporkmonger/addressable#561
   https://redirect.github.com/sporkmonger/addressable/issues/558";>#558: 
https://redirect.github.com/sporkmonger/addressable/pull/558";>sporkmonger/addressable#558
   
   
   
   Commits
   
   https://github.com/sporkmonger/addressable/commit/0c3e8589b23d4402903a9b4e1fdeba4e43c52ca4";>0c3e858
 Revving version and changelog
   https://github.com/sporkmonger/addressable/commit/91915c1f7aafa3e2c9f42e2f4e21d948c7a861b8";>91915c1
 Fixing additional vulnerable paths
   https://github.com/sporkmonger/addressable/commit/a091e39ff02fc321b21dea3a0df585bef2ba3744";>a091e39
 Add many more adversarial test cases to ensure we don't have any ReDoS 
regres...
   https://github.com/sporkmonger/addressable/commit/463a819665a3b85ce5ce894c90bd7bfa3b9d2e15";>463a819
 Regenerate gemspec on newer rubygems
   https://github.com/sporkmonger/addressable/commit/0afcb0b9672bee301e5e96ed850fec05b2fcabb0";>0afcb0b
 Improve from O(n^2) to O(n)
   https://github.com/sporkmonger/addressable/commit/c87f768f22ab00376ed2f8cb106f59c9d0652d3a";>c87f768
 Fix a ReDoS vulnerability in URI template matching
   https://github.com/sporkmonger/addressable/commit/0d7e9b259fb0940d1a85064b04f678a7984409a5";>0d7e9b2
 Fix links for 2.8.9 in CHANGELOG (https://redirect.github.com/sporkmonger/addressable/issues/573";>#573)
   https://github.com/sporkmonger/addressable/commit/e2091200b31553f19248eb871f071852409796f8";>e209120
 Update version, gemspec, and CHANGELOG for 2.8.9 (https://redirect.github.com/sporkmonger/addressable/issues/572";>#572)
   https://github.com/sporkmonger/addressable/commit/387587492b6536748ed12a11c3fdb44a48885f28";>3875874
 Reduce gem size by excluding test files (https://redirect.github.com/sporkmonger/addressable/issues/569";>#569)
   https://github.com/sporkmonger/addressable/commit/3e57cc6018f94231aabb47fd341acd1b40f1e71a";>3e57cc6
 CI: back to windows-2022 for MRI job
   Additional commits viewable in https://github.com/sporkmonger/addressable/compare/addressable-2.8.7...addressable-2.9.0";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=addressable&package-manager=bundler&previous-version=2.8.7&new-version=2.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependenc