Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 5, 2022

Bumps regex from 1.5.4 to 1.6.0.

Changelog

Sourced from regex's changelog.

1.6.0 (2022-07-05)

This release principally includes an upgrade to Unicode 14.

New features:

Bug fixes:

1.5.6 (2022-05-20)

This release includes a few bug fixes, including a bug that produced incorrect matches when a non-greedy ? operator was used.

1.5.5 (2022-03-08)

This releases fixes a security bug in the regex compiler. This bug permits a vector for a denial-of-service attack in cases where the regex being compiled is untrusted. There are no known problems where the regex is itself trusted, including in cases of untrusted haystacks.

Commits
  • fc9ee6a 1.6.0
  • 8ddc8ec deps: bump regex-syntax to 0.6.27
  • 8c0eccd regex-syntax-0.6.27
  • dee5c25 changelog: 1.6.0
  • 9ca3099 regex: fix clippy lints up to rust 1.41.1
  • de83828 syntax: fix clippy lints up to rust 1.41.1
  • b87cd88 syntax: include only the start of the character class on error
  • 9d1478c doc: fix typos
  • 7d21662 doc: clarify Captures::len includes non-matching captures
  • 5e98788 perf: use is_match_at instead of shortest_match_at
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [regex](https://github.com/rust-lang/regex) from 1.5.4 to 1.6.0.
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.5.4...1.6.0)

---
updated-dependencies:
- dependency-name: regex
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jul 5, 2022
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 7, 2022

Superseded by #43.

@dependabot dependabot bot closed this Nov 7, 2022
@dependabot dependabot bot deleted the dependabot/cargo/rs/regex-1.6.0 branch November 7, 2022 20:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file rust Pull requests that update Rust code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants