Skip to content

Bump actiontext from 7.1.3.2 to 7.1.4.1 - #18

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/actiontext-7.1.4.1
Open

Bump actiontext from 7.1.3.2 to 7.1.4.1#18
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/actiontext-7.1.4.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 15, 2026

Copy link
Copy Markdown

Bumps actiontext from 7.1.3.2 to 7.1.4.1.

Release notes

Sourced from actiontext's releases.

7.1.4.1

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • No changes.

Action Pack

  • Avoid regex backtracking in HTTP Token authentication

    [CVE-2024-47887]

  • Avoid regex backtracking in query parameter filtering

    [CVE-2024-41128]

Active Job

  • No changes.

Action Mailer

Action Cable

  • No changes.

Active Storage

  • No changes.

... (truncated)

Commits
  • 5b5f0da Preparing for 7.1.4.1 release
  • 76ae935 Update CHANGELOGs
  • de0df7c Avoid backtracing in plain_text_for_blockquote_node
  • 1f56fd6 Merge pull request #52962 from rails/rm-releser
  • 6f57590 Preparing for 7.1.4 release
  • fef23ff Merge pull request #52281 from jagthedrummer/jeremy/action-text-content-trix-fix
  • 2b05f76 Merge pull request #52093 from p8/actiontext/fix-remote-image-preview
  • 1a5896f Fix action-text-attachment HTML escaping regression test
  • 01f27a6 Add missing authors in CHANGELOG
  • eedbe69 Merge branch '7-1-sec' into 7-1-stable
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels May 15, 2026
Bumps [actiontext](https://github.com/rails/rails) from 7.1.3.2 to 7.1.4.1.
- [Release notes](https://github.com/rails/rails/releases)
- [Changelog](https://github.com/rails/rails/blob/v8.1.3/actiontext/CHANGELOG.md)
- [Commits](rails/rails@v7.1.3.2...v7.1.4.1)

---
updated-dependencies:
- dependency-name: actiontext
  dependency-version: 7.1.4.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bundler/actiontext-7.1.4.1 branch from 219794a to 0748abc Compare May 15, 2026 22:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants