vs-branch-4#32
Conversation
|
Caution Review failedThe pull request is closed. 📝 WalkthroughSummary by CodeRabbit
WalkthroughThis pull request updates two markdown files. In Changes
Poem
📜 Recent review detailsConfiguration used: CodeRabbit UI 📒 Files selected for processing (2)
🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
addressable >= 2.3.0 and < 2.9.0 has a ReDoS via URI templates that use the * (explode) modifier or multi-variable + / # operators. Both patterns are fully remediated in 2.9.0. The Gemfile constraint stays at addressable (~> 2.4) (jekyll's), and the new addressable runtime broadens public_suffix to < 8.0 — our already-locked public_suffix 6.0.1 satisfies both bounds, so only addressable's two lines change in Gemfile.lock. Refs: GHSA on this repo (#32), https://rubygems.org/gems/addressable
Description
Type of Change
Changes Made
Testing Done
bundle exec jekyll serveScreenshots
Related Issues
Closes #
Checklist
Additional Notes