chore(deps): update dependency rake to v12 [security] - autoclosed #11

renovate · 2025-01-31T03:25:23Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
rake (changelog)	`"~> 10"` -> `"~> 12", ">= 12.3.3"`

GitHub Vulnerability Alerts

CVE-2020-8130

There is an OS command injection vulnerability in Ruby Rake before 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |.

Release Notes

ruby/rake (rake)

What's Changed

Add alias prereqs. by @take-cheeze in https://github.com/ruby/rake/pull/268
Fix JRuby detection on JRuby 9.2 in cpu_counter.rb by @jeremyevans in https://github.com/ruby/rake/pull/265
Fix a typo in lib/rake/application.rb by @felixonmars in https://github.com/ruby/rake/pull/276
Remove trailing extension name by @zhustec in https://github.com/ruby/rake/pull/275
Use Ruby 2.2.10, 2.3.8, 2.4.5, and 2.5.3 by @aycabta in https://github.com/ruby/rake/pull/278
fix errors in rubocop by @colby-swandale in https://github.com/ruby/rake/pull/282
add binstubs for bundler, rake, rodc and rubocop by @colby-swandale in https://github.com/ruby/rake/pull/280
add rubocop section to CONTRIBUTING.rdoc by @colby-swandale in https://github.com/ruby/rake/pull/285
Rework the error message that tells users to list the tasks with rake --tasks by @colby-swandale in https://github.com/ruby/rake/pull/287
update latest jruby version in travis by @colby-swandale in https://github.com/ruby/rake/pull/290
fix links to rake resources not showing on Github by @colby-swandale in https://github.com/ruby/rake/pull/288
Improve multitask performance by @jsm in https://github.com/ruby/rake/pull/273
Update jruby to the latest version in travis by @colby-swandale in https://github.com/ruby/rake/pull/291
run coveralls only when COVERALLS env var is present by @colby-swandale in https://github.com/ruby/rake/pull/289
Improve running test instructions and denote commands with $ by @colby-swandale in https://github.com/ruby/rake/pull/295
Update public clone URL to use https by @colby-swandale in https://github.com/ruby/rake/pull/294
Rdoc improvements by @colby-swandale in https://github.com/ruby/rake/pull/293
Fixed test fails caused by 2.6 warnings by @hsbt in https://github.com/ruby/rake/pull/297

New Contributors

@felixonmars made their first contribution in https://github.com/ruby/rake/pull/276
@zhustec made their first contribution in https://github.com/ruby/rake/pull/275

Full Changelog: ruby/rake@v12.3.1...v12.3.2

`v12.3.1`

Compare Source

What's Changed

[skip-ci] Fixed typo by @donv in https://github.com/ruby/rake/pull/239
Use JRuby 9.1.15.0 on .travis.yml by @aycabta in https://github.com/ruby/rake/pull/240
Add missing information on FTP publishing to README by @stomar in https://github.com/ruby/rake/pull/242
Force installation Bundler by @aycabta in https://github.com/ruby/rake/pull/245
Use 2.5.0 and more latest Ruby versions by @aycabta in https://github.com/ruby/rake/pull/244
[skip ci] Fix minimal ruby version on README by @esparta in https://github.com/ruby/rake/pull/249
Re-raise a LoadError that didn't come from require in the test loader by @dylanahsmith in https://github.com/ruby/rake/pull/250
Remove date field from rake.gemspec by @radar in https://github.com/ruby/rake/pull/253
To use gem install insteaad of bundle install by @hsbt in https://github.com/ruby/rake/pull/256
Removes duplicated inclusion of Rake::DSL by @grzuy in https://github.com/ruby/rake/pull/254
make AppVeyor test with ruby 2.5 also by @grzuy in https://github.com/ruby/rake/pull/258
Use JRuby 9.1.16.0 by @aycabta in https://github.com/ruby/rake/pull/261
[Fixes #260] Make space trimming consistent for all task arguments by @grzuy in https://github.com/ruby/rake/pull/259
[Fixes #189] [Fixes #190] Don't run task if it depends on already invoked but failed task by @grzuy in https://github.com/ruby/rake/pull/252
support did_you_mean >= v1.2.0 which has a breaking change on formatters by @gfx in https://github.com/ruby/rake/pull/262

New Contributors

@donv made their first contribution in https://github.com/ruby/rake/pull/239
@stomar made their first contribution in https://github.com/ruby/rake/pull/242
@esparta made their first contribution in https://github.com/ruby/rake/pull/249
@dylanahsmith made their first contribution in https://github.com/ruby/rake/pull/250
@radar made their first contribution in https://github.com/ruby/rake/pull/253
@grzuy made their first contribution in https://github.com/ruby/rake/pull/254
@gfx made their first contribution in https://github.com/ruby/rake/pull/262

Full Changelog: ruby/rake@v12.3.0...v12.3.1

`v12.3.0`

Compare Source

What's Changed

update required_ruby_version to 2.0.0 by @rickhull in https://github.com/ruby/rake/pull/236

New Contributors

@rickhull made their first contribution in https://github.com/ruby/rake/pull/236

Full Changelog: ruby/rake@v12.2.1...v12.3.0

`v12.2.1`

Compare Source

Full Changelog: ruby/rake@v12.2.0...v12.2.1

`v12.2.0`

Compare Source

What's Changed

Fix typo by @znz in https://github.com/ruby/rake/pull/223
Make rake easier to use as a library by @drbrain in https://github.com/ruby/rake/pull/211
fixed warnings by @walf443 in https://github.com/ruby/rake/pull/226
Tweak travis by @hsbt in https://github.com/ruby/rake/pull/227
Account for a file that match 2 or more patterns. by @styd in https://github.com/ruby/rake/pull/231
fix quadratic performance in FileTask#out_of_date? by @doudou in https://github.com/ruby/rake/pull/224
Clarify output when printing nested exception traces by @urbanautomaton in https://github.com/ruby/rake/pull/232

New Contributors

@znz made their first contribution in https://github.com/ruby/rake/pull/223
@walf443 made their first contribution in https://github.com/ruby/rake/pull/226
@styd made their first contribution in https://github.com/ruby/rake/pull/231
@doudou made their first contribution in https://github.com/ruby/rake/pull/224
@urbanautomaton made their first contribution in https://github.com/ruby/rake/pull/232

Full Changelog: ruby/rake@v12.1.0...v12.2.0

`v12.1.0`

Compare Source

What's Changed

Fixes documentation typo in rakefile.rdoc by @kurotaky in https://github.com/ruby/rake/pull/180
Travis: add 2.4.0 to matrix, update patch versions by @olleolleolle in https://github.com/ruby/rake/pull/184
Remove an extra assertion by @nobu in https://github.com/ruby/rake/pull/186
Added coveralls gem again by @hsbt in https://github.com/ruby/rake/pull/187
FileTask#out_of_date? calls depended FileTask#out_of_date? for execution by @aycabta in https://github.com/ruby/rake/pull/183
Use Ruby 2.4.1 for Travis CI by @aycabta in https://github.com/ruby/rake/pull/199
Chained extensions by @pjump in https://github.com/ruby/rake/pull/39
Change FileUtils#sh to adopt with hash style option. by @igaiga in https://github.com/ruby/rake/pull/202
Make LoadError from running tests more obvious by @drbrain in https://github.com/ruby/rake/pull/195
Update to latest versions of Ruby 2.2, 2.3 and JRuby 9k by @aycabta in https://github.com/ruby/rake/pull/205
Add ruby_version 24 and 24-x64 to appveyor.yml by @aycabta in https://github.com/ruby/rake/pull/208
Specify frozen string literal is true by @hsbt in https://github.com/ruby/rake/pull/209
When pattern is nil, enhance_with_matching_rule will not fail by @lzap in https://github.com/ruby/rake/pull/182
Travis: jruby-9.1.12.0 by @olleolleolle in https://github.com/ruby/rake/pull/218
gemspec: Exclude various YAML configuration files by @olleolleolle in https://github.com/ruby/rake/pull/217
Fixup rubocop warnings by @hsbt in https://github.com/ruby/rake/pull/219
Travis: jruby-9.1.13.0 by @olleolleolle in https://github.com/ruby/rake/pull/220
Added did you mean to rake by @xtina-starr in https://github.com/ruby/rake/pull/221

New Contributors

@kurotaky made their first contribution in https://github.com/ruby/rake/pull/180
@pjump made their first contribution in https://github.com/ruby/rake/pull/39
@igaiga made their first contribution in https://github.com/ruby/rake/pull/202
@lzap made their first contribution in https://github.com/ruby/rake/pull/182
@xtina-starr made their first contribution in https://github.com/ruby/rake/pull/221

Full Changelog: ruby/rake@v12.0.0...v12.1.0

`v12.0.0`

Compare Source

What's Changed

Do not run tasks when their prerequisites fail by @ptarjan in https://github.com/ruby/rake/pull/142
Remove mention of environment variables as task argument. by @htanata in https://github.com/ruby/rake/pull/143
Remove trailing slash on a link in README by @astorije in https://github.com/ruby/rake/pull/144
Workaround for rubinius by @hsbt in https://github.com/ruby/rake/pull/145
Convert manual page to use semantic -mdoc macros. by @bentley in https://github.com/ruby/rake/pull/64
Drop to rubinius support by @hsbt in https://github.com/ruby/rake/pull/150
Remove rake/contrib by @hsbt in https://github.com/ruby/rake/pull/149
TestTask when --verbose prompts for TESTOPTS="--verbose" by @MarkDBlackwell in https://github.com/ruby/rake/pull/151
cleaned up the contib stuff by @rudyyazdi in https://github.com/ruby/rake/pull/153
Removed duplicated release_notes by @hsbt in https://github.com/ruby/rake/pull/154
#156 Remove arguments on clear by @jessebs in https://github.com/ruby/rake/pull/157
Fix test fail caused by bundler-1.13.x by @hsbt in https://github.com/ruby/rake/pull/161
No Fixnum by @nobu in https://github.com/ruby/rake/pull/160
show extended output on testtask fail only with verbose or trace by @bretts in https://github.com/ruby/rake/pull/163
skip tests with JRuby 9k. by @hsbt in https://github.com/ruby/rake/pull/166
Respect trace option in cleanup by @bhenderson in https://github.com/ruby/rake/pull/164
remove obsolete OPT_TABLE entries by @chocolateboy in https://github.com/ruby/rake/pull/158
Revert to glob support by @aycabta in https://github.com/ruby/rake/pull/159
fix to_hash bug by @ogawatti in https://github.com/ruby/rake/pull/165
Removed workaround for bundler-1.13.1 by @hsbt in https://github.com/ruby/rake/pull/168
Represent a TaskArgument object such that it's not confused with a hash. by @aquateen in https://github.com/ruby/rake/pull/171
Removed unused pathname extension by @hsbt in https://github.com/ruby/rake/pull/130
Actions adore keyword arguments by @JoshCheek in https://github.com/ruby/rake/pull/174
Rake::TaskArguments#key? alias of #has_key? by @pda in https://github.com/ruby/rake/pull/175

New Contributors

@ptarjan made their first contribution in https://github.com/ruby/rake/pull/142
@htanata made their first contribution in https://github.com/ruby/rake/pull/143
@astorije made their first contribution in https://github.com/ruby/rake/pull/144
@rudyyazdi made their first contribution in https://github.com/ruby/rake/pull/153
@jessebs made their first contribution in https://github.com/ruby/rake/pull/157
@bretts made their first contribution in https://github.com/ruby/rake/pull/163
@bhenderson made their first contribution in https://github.com/ruby/rake/pull/164
@chocolateboy made their first contribution in https://github.com/ruby/rake/pull/158
@ogawatti made their first contribution in https://github.com/ruby/rake/pull/165
@aquateen made their first contribution in https://github.com/ruby/rake/pull/171
@JoshCheek made their first contribution in https://github.com/ruby/rake/pull/174
@pda made their first contribution in https://github.com/ruby/rake/pull/175

Full Changelog: ruby/rake@v11.2.2...v12.0.0

`v11.3.0`

Compare Source

Full Changelog: ruby/rake@v11.2.2...v11.3.0

`v11.2.2`

Compare Source

Full Changelog: ruby/rake@v11.2.1...v11.2.2

`v11.2.0`

Compare Source

What's Changed

Remove old release notes as the maintenance policy has changed. by @satoryu in https://github.com/ruby/rake/pull/124
Support xz compress format for packagetask by @hsbt in https://github.com/ruby/rake/pull/129
Removed needless requires by @hsbt in https://github.com/ruby/rake/pull/131
Use attr_writer instead of method definition by @hsbt in https://github.com/ruby/rake/pull/132
Update comment parsing rules by @leethomas in https://github.com/ruby/rake/pull/134
Spawn options for sh by @drbrain in https://github.com/ruby/rake/pull/138
Don't set if args are blank by @bakunyo in https://github.com/ruby/rake/pull/135

New Contributors

@satoryu made their first contribution in https://github.com/ruby/rake/pull/124
@leethomas made their first contribution in https://github.com/ruby/rake/pull/134
@bakunyo made their first contribution in https://github.com/ruby/rake/pull/135

Full Changelog: ruby/rake@v11.1.2...v11.2.0

`v11.1.2`

Compare Source

What's Changed

Remove -W option on TestTask by @hsbt in https://github.com/ruby/rake/pull/126

Full Changelog: ruby/rake@v11.1.1...v11.1.2

`v11.1.1`

Compare Source

Full Changelog: ruby/rake@v11.1.0...v11.1.1

`v11.1.0`

Compare Source

Full Changelog: ruby/rake@v11.0.1...v11.1.0

`v11.0.1`

Compare Source

Full Changelog: ruby/rake@v11.0.0...v11.0.1

`v10.5.0`

Compare Source

Full Changelog: ruby/rake@v10.4.2...v10.5.0

`v10.4.2`

Compare Source

Full Changelog: ruby/rake@v10.4.1...v10.4.2

`v10.4.1`

Compare Source

Full Changelog: ruby/rake@v10.4.0...v10.4.1

`v10.4.0`

Compare Source

Full Changelog: ruby/rake@v10.3.2...v10.4.0

`v10.3.2`

Compare Source

Full Changelog: ruby/rake@v10.3.1...v10.3.2

`v10.3.1`

Compare Source

Full Changelog: ruby/rake@v10.3.0...v10.3.1

`v10.3.0`

Compare Source

Full Changelog: ruby/rake@v10.2.2...v10.3.0

`v10.2.2`

Compare Source

Full Changelog: ruby/rake@v10.2.1...v10.2.2

`v10.2.1`

Compare Source

Full Changelog: ruby/rake@v10.2.0...v10.2.1

`v10.2.0`

Compare Source

Full Changelog: ruby/rake@rake-10.1.1...v10.2.0

`v10.1.1`

Compare Source

Full Changelog: ruby/rake@rake-10.1.0.beta.3...rake-10.1.1

`v10.1.0`

Compare Source

Full Changelog: ruby/rake@rake-10.0.4...rake-10.1.0

`v10.0.4`

Compare Source

Full Changelog: ruby/rake@rake-10.0.3...rake-10.0.4

`v10.0.3`

Compare Source

Full Changelog: ruby/rake@rake-10.0.2...rake-10.0.3

`v10.0.2`

Compare Source

Full Changelog: ruby/rake@rake-10.0.1...rake-10.0.2

`v10.0.1`

Compare Source

Full Changelog: ruby/rake@rake-10.0.0.beta.2...rake-10.0.1

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update dependency rake to v12 [security]

c8f500c

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate bot force-pushed the renovate/rubygems-rake-vulnerability branch from db9066e to c8f500c Compare February 1, 2025 23:53

renovate bot changed the title ~~chore(deps): update dependency rake to v13 [security]~~ chore(deps): update dependency rake to v12 [security] Feb 1, 2025

renovate bot changed the title ~~chore(deps): update dependency rake to v12 [security]~~ chore(deps): update dependency rake to v12 [security] - autoclosed Feb 12, 2025

renovate bot closed this Feb 12, 2025

renovate bot deleted the renovate/rubygems-rake-vulnerability branch February 12, 2025 08:03

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update dependency rake to v12 [security] - autoclosed #11

chore(deps): update dependency rake to v12 [security] - autoclosed #11

Uh oh!

renovate bot commented Jan 31, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): update dependency rake to v12 [security] - autoclosed #11

chore(deps): update dependency rake to v12 [security] - autoclosed #11

Uh oh!

Conversation

renovate bot commented Jan 31, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

GitHub Vulnerability Alerts

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Jan 31, 2025 •

edited

Loading