#230 chore(deps): bump addressable from 2.8.7 to 2.9.0 Pull request opened by dependabot[bot] Bumps addressable from 2.8.7 to 2.9.0. Changelog Sourced from addressable's changelog.

Addressable 2.9.0

• fixes ReDoS vulnerability in Addressable::Template#match (fixes incomplete remediation in 2.8.10)

Addressable 2.8.10

• fixes ReDoS vulnerability in Addressable::Template#match

Addressable 2.8.9

• Reduce gem size by excluding test files (#569)

• No need for bundler as development dependency (#571, 5fc1d93)

• idna/pure: stop building the useless

COMPOSITION_TABLE

(removes the

Addressable::IDNA::COMPOSITION_TABLE

constant) (#564)

#569: sporkmonger/addressable#569 #571: sporkmonger/addressable#571 #564: sporkmonger/addressable#564

Addressable 2.8.8

• Replace the

unicode.data

blob by a ruby constant (#561)

• Allow

public_suffix

7 (#558)

#561: sporkmonger/addressable#561 #558: sporkmonger/addressable#558

Commits • `0c3e858` Revving version and changelog • `91915c1` Fixing additional vulnerable paths • `a091e39` Add many more adversarial test cases to ensure we don't have any ReDoS regres... • `463a819` Regenerate gemspec on newer rubygems • `0afcb0b` Improve from O(n^2) to O(n) • `c87f768` Fix a ReDoS vulnerability in URI template matching • `0d7e9b2` Fix links for 2.8.9 in CHANGELOG (#573) • `e209120` Update version, gemspec, and CHANGELOG for 2.8.9 (#572) • `3875874` Reduce gem size by excluding test files (#569) • `3e57cc6` CI: back to

windows-2022

for MRI job • Additional commits viewable in compare view

Note

Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

pact-foundation/pact-standalone