Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[sync] 2023/11/15 #441

Merged
merged 166 commits into from
Nov 16, 2023
Merged

[sync] 2023/11/15 #441

merged 166 commits into from
Nov 16, 2023

Conversation

AmosHuKe
Copy link
Member

@AmosHuKe AmosHuKe commented Nov 14, 2023

parlough and others added 30 commits August 4, 2023 18:38
The Fetch Data tutorial wasn't set up as in this flow. This PR adds it.
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 2.21.2 to 2.21.3.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>2.21.3 - 08 Aug 2023</h2>
<ul>
<li>We are rolling out a feature in August 2023 that will improve
multi-threaded performance on larger runners. <a
href="https://redirect.github.com/github/codeql-action/pull/1817">#1817</a></li>
<li>We are rolling out a feature in August 2023 that adds beta support
for <a href="https://projectlombok.org/">Project Lombok</a> when
analyzing Java. <a
href="https://redirect.github.com/github/codeql-action/pull/1809">#1809</a></li>
<li>Reduce disk space usage when downloading the CodeQL bundle. <a
href="https://redirect.github.com/github/codeql-action/pull/1820">#1820</a></li>
</ul>
<h2>2.21.2 - 28 Jul 2023</h2>
<ul>
<li>Update default CodeQL bundle version to 2.14.1. <a
href="https://redirect.github.com/github/codeql-action/pull/1797">#1797</a></li>
<li>Avoid duplicating the analysis summary within the logs. <a
href="https://redirect.github.com/github/codeql-action/pull/1811">#1811</a></li>
</ul>
<h2>2.21.1 - 26 Jul 2023</h2>
<ul>
<li>Improve the handling of fatal errors from the CodeQL CLI. <a
href="https://redirect.github.com/github/codeql-action/pull/1795">#1795</a></li>
<li>Add the <code>sarif-output</code> output to the analyze action that
contains the path to the directory of the generated SARIF. <a
href="https://redirect.github.com/github/codeql-action/pull/1799">#1799</a></li>
</ul>
<h2>2.21.0 - 19 Jul 2023</h2>
<ul>
<li>CodeQL Action now requires CodeQL CLI 2.9.4 or later. For more
information, see the corresponding changelog entry for CodeQL Action
version 2.20.4. <a
href="https://redirect.github.com/github/codeql-action/pull/1724">#1724</a></li>
</ul>
<h2>2.20.4 - 14 Jul 2023</h2>
<ul>
<li>This is the last release of the Action that supports CodeQL CLI
versions 2.8.5 to 2.9.3. These versions of the CodeQL CLI were
deprecated on June 20, 2023 alongside GitHub Enterprise Server 3.5 and
will not be supported by the next release of the CodeQL Action (2.21.0).
<ul>
<li>If you are using one of these versions, please update to CodeQL CLI
version 2.9.4 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</li>
<li>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.8.5 and 2.9.3, you can replace
'github/codeql-action/<em><a
href="https://github.com/v2"><code>@​v2</code></a>' by
'github/codeql-action/</em><a
href="https://github.com/v2"><code>@​v2</code></a>.20.4' in your code
scanning workflow to ensure you continue using this version of the
CodeQL Action.</li>
</ul>
</li>
<li>We are rolling out a feature in July 2023 that will slightly reduce
the default amount of RAM used for query execution, in proportion to the
runner's total memory. This will help to avoid out-of-memory failures on
larger runners. <a
href="https://redirect.github.com/github/codeql-action/pull/1760">#1760</a></li>
<li>Update default CodeQL bundle version to 2.14.0. <a
href="https://redirect.github.com/github/codeql-action/pull/1762">#1762</a></li>
</ul>
<h2>2.20.3 - 06 Jul 2023</h2>
<ul>
<li>Update default CodeQL bundle version to 2.13.5. <a
href="https://redirect.github.com/github/codeql-action/pull/1743">#1743</a></li>
</ul>
<h2>2.20.2 - 03 Jul 2023</h2>
<p>No user facing changes.</p>
<h2>2.20.1 - 21 Jun 2023</h2>
<ul>
<li>Update default CodeQL bundle version to 2.13.4. <a
href="https://redirect.github.com/github/codeql-action/pull/1721">#1721</a></li>
<li>Experimental: add a new <code>resolve-environment</code> action
which attempts to infer a configuration for the build environment that
is required to build a given project. Do not use this in production as
it is part of an internal experiment and subject to change at any
time.</li>
</ul>
<h2>2.20.0 - 13 Jun 2023</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/5b6282e01c62d02e720b81eb8a51204f527c3624"><code>5b6282e</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1829">#1829</a>
from github/update-v2.21.3-f9a7c6738</li>
<li><a
href="https://github.com/github/codeql-action/commit/f0f7a35b85fdfbe2a22f71f07357d50c3b42a03b"><code>f0f7a35</code></a>
Add changenote for Lombok rollout</li>
<li><a
href="https://github.com/github/codeql-action/commit/dda4ed3db43be29c67d79c0cb9820615c945bef9"><code>dda4ed3</code></a>
Update changelog for v2.21.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/f9a7c6738f28efb36e31d49c53a201a9c5d6a476"><code>f9a7c67</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1827">#1827</a>
from github/dependabot/npm_and_yarn/npm-5103036bd1</li>
<li><a
href="https://github.com/github/codeql-action/commit/31b9dd18d42cacc20225c8e17681df56ecc9b962"><code>31b9dd1</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/7e2f56aae343fe3734d1841385b67742654aa94c"><code>7e2f56a</code></a>
Bump the npm group with 3 updates</li>
<li><a
href="https://github.com/github/codeql-action/commit/878ae4a749eff2fd2a5789cd23ef5c39a4903cd1"><code>878ae4a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1823">#1823</a>
from github/henrymercer/setup-swift-more-consistent</li>
<li><a
href="https://github.com/github/codeql-action/commit/63602c0f72ecd7fac834d5ca1d52ec1500bc8152"><code>63602c0</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1824">#1824</a>
from github/henrymercer/cli-notifications-fix</li>
<li><a
href="https://github.com/github/codeql-action/commit/66dc883276a9bc95275668a69c26e7f55e4013d8"><code>66dc883</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1826">#1826</a>
from github/henrymercer/increase-reserved-scaling-fa...</li>
<li><a
href="https://github.com/github/codeql-action/commit/2203178090782fe408dd0bee3925a959edaedf22"><code>2203178</code></a>
Increase scaling factor for reserved RAM to 5%</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/0ba4244466797eb048eb91a6cd43d5c03ca8bd05...5b6282e01c62d02e720b81eb8a51204f527c3624">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=2.21.2&new-version=2.21.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [activesupport](https://github.com/rails/rails) from 7.0.6 to
7.0.7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/rails/rails/releases">activesupport's
releases</a>.</em></p>
<blockquote>
<h2>7.0.7</h2>
<h2>Active Support</h2>
<ul>
<li>
<p>Fix <code>Cache::NullStore</code> with local caching for repeated
reads.</p>
<p><em>fatkodima</em></p>
</li>
<li>
<p>Fix <code>to_s</code> with no arguments not respecting custom
<code>:default</code> formats</p>
<p><em>Hartley McGuire</em></p>
</li>
<li>
<p>Fix <code>ActiveSupport::Inflector.humanize(nil)</code> raising
<code>NoMethodError: undefined method `end_with?' for
nil:NilClass</code>.</p>
<p><em>James Robinson</em></p>
</li>
<li>
<p>Fix <code>Enumerable#sum</code> for <code>Enumerator#lazy</code>.</p>
<p><em>fatkodima</em>, <em>Matthew Draper</em>, <em>Jonathan
Hefner</em></p>
</li>
<li>
<p>Improve error message when EventedFileUpdateChecker is used without a
compatible version of the Listen gem</p>
<p><em>Hartley McGuire</em></p>
</li>
</ul>
<h2>Active Model</h2>
<ul>
<li>
<p>Error.full_message now strips &quot;:base&quot; from the message.</p>
<p><em>zzak</em></p>
</li>
<li>
<p>Add a load hook for <code>ActiveModel::Model</code> (named
<code>active_model</code>) to match the load hook for
<code>ActiveRecord::Base</code> and allow for overriding aspects of the
<code>ActiveModel::Model</code> class.</p>
</li>
</ul>
<h2>Active Record</h2>
<ul>
<li>
<p>Restores functionality to the missing method when using enums and
fixes.</p>
<p><em>paulreece</em></p>
</li>
<li>
<p>Fix <code>StatementCache::Substitute</code> with serialized type.</p>
<p><em>ywenc</em></p>
</li>
<li>
<p>Fix <code>:db_runtime</code> on notification payload when application
have multiple databases.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/rails/rails/blob/v7.0.7/activesupport/CHANGELOG.md">activesupport's
changelog</a>.</em></p>
<blockquote>
<h2>Rails 7.0.7 (August 09, 2023)</h2>
<ul>
<li>
<p>Fix <code>Cache::NullStore</code> with local caching for repeated
reads.</p>
<p><em>fatkodima</em></p>
</li>
<li>
<p>Fix <code>to_s</code> with no arguments not respecting custom
<code>:default</code> formats</p>
<p><em>Hartley McGuire</em></p>
</li>
<li>
<p>Fix <code>ActiveSupport::Inflector.humanize(nil)</code> raising
<code>NoMethodError: undefined method `end_with?' for
nil:NilClass</code>.</p>
<p><em>James Robinson</em></p>
</li>
<li>
<p>Fix <code>Enumerable#sum</code> for <code>Enumerator#lazy</code>.</p>
<p><em>fatkodima</em>, <em>Matthew Draper</em>, <em>Jonathan
Hefner</em></p>
</li>
<li>
<p>Improve error message when EventedFileUpdateChecker is used without a
compatible version of the Listen gem</p>
<p><em>Hartley McGuire</em></p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/rails/rails/commit/522c86f35ccc80453ed9fb6ca8b394db321f9a69"><code>522c86f</code></a>
Preparing for 7.0.7 release</li>
<li><a
href="https://github.com/rails/rails/commit/5610cbacc5630d775a1a7be78ccb17e561908cba"><code>5610cba</code></a>
Sync CHANGELOG with the changes in the repository</li>
<li><a
href="https://github.com/rails/rails/commit/7e9ffc2e137b649c6fd2ca1c580cdfffc9845b55"><code>7e9ffc2</code></a>
Fix to_s not using :default format with no args</li>
<li><a
href="https://github.com/rails/rails/commit/a8e88e2e4f157e47050d4ba17ea936902f6a2994"><code>a8e88e2</code></a>
Fix <code>Cache::NullStore</code> with local caching for repeated
reads</li>
<li><a
href="https://github.com/rails/rails/commit/b18b9df65eb7d4e5dfa9a6982a8709c0c94b0b97"><code>b18b9df</code></a>
Merge pull request <a
href="https://redirect.github.com/rails/rails/issues/48800">#48800</a>
from robinjam/fix-humanize-nil</li>
<li><a
href="https://github.com/rails/rails/commit/b12fe80d17b2c7a2cc083d0c83ae3ed95765e6bd"><code>b12fe80</code></a>
Fix <code>Enumerable#sum</code> for <code>Enumerator#lazy</code></li>
<li><a
href="https://github.com/rails/rails/commit/e3f80f625945c689b5edc473c5132037c0c14952"><code>e3f80f6</code></a>
Add lower bound to Listen gem requirement</li>
<li><a
href="https://github.com/rails/rails/commit/e3f9ef6f704a3a04884ce49577ffaed8038fa621"><code>e3f9ef6</code></a>
Improve error message for missing listen gem</li>
<li><a
href="https://github.com/rails/rails/commit/597e4bb5038714afcdfce2f8410469f3d95a700f"><code>597e4bb</code></a>
Merge pull request <a
href="https://redirect.github.com/rails/rails/issues/48693">#48693</a>
from zzak/bigdecimal-to_s</li>
<li><a
href="https://github.com/rails/rails/commit/92636dacfedad8a4e5871de6ae71e64f3bb8df78"><code>92636da</code></a>
Warm-up to avoid autoloads interfering with class serial</li>
<li>See full diff in <a
href="https://github.com/rails/rails/compare/v7.0.6...v7.0.7">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=activesupport&package-manager=bundler&previous-version=7.0.6&new-version=7.0.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
These were written and already reviewed in the SDK and linter
repositories.
This will for example, enable https://dart.dev/cl/320141 to redirect to
https://dart-review.googlesource.com/c/sdk/+/320141. This allows for
shorter, more familiar, and more memorable links for sharing with users.

This follows a similar vein as the recent https://dart.dev/bug/53016
redirect functionality.
Fix broken link to JNI. Currently the JNI link links back to the page
itself. It should link to the official JNI page.
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 2.21.3 to 2.21.4.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>2.21.4 - 14 Aug 2023</h2>
<ul>
<li>Update default CodeQL bundle version to 2.14.2. <a
href="https://redirect.github.com/github/codeql-action/pull/1831">#1831</a></li>
<li>Log a warning if the amount of available disk space runs low during
a code scanning run. <a
href="https://redirect.github.com/github/codeql-action/pull/1825">#1825</a></li>
<li>When downloading CodeQL bundle version 2.13.4 and later, cache these
bundles in the Actions tool cache using a simpler version number. <a
href="https://redirect.github.com/github/codeql-action/pull/1832">#1832</a></li>
<li>Fix an issue that first appeared in CodeQL Action v2.21.2 that
prevented CodeQL invocations from being logged. <a
href="https://redirect.github.com/github/codeql-action/pull/1833">#1833</a></li>
<li>We are rolling out a feature in August 2023 that will improve the
quality of file coverage information. <a
href="https://redirect.github.com/github/codeql-action/pull/1835">#1835</a></li>
</ul>
<h2>2.21.3 - 08 Aug 2023</h2>
<ul>
<li>We are rolling out a feature in August 2023 that will improve
multi-threaded performance on larger runners. <a
href="https://redirect.github.com/github/codeql-action/pull/1817">#1817</a></li>
<li>We are rolling out a feature in August 2023 that adds beta support
for <a href="https://projectlombok.org/">Project Lombok</a> when
analyzing Java. <a
href="https://redirect.github.com/github/codeql-action/pull/1809">#1809</a></li>
<li>Reduce disk space usage when downloading the CodeQL bundle. <a
href="https://redirect.github.com/github/codeql-action/pull/1820">#1820</a></li>
</ul>
<h2>2.21.2 - 28 Jul 2023</h2>
<ul>
<li>Update default CodeQL bundle version to 2.14.1. <a
href="https://redirect.github.com/github/codeql-action/pull/1797">#1797</a></li>
<li>Avoid duplicating the analysis summary within the logs. <a
href="https://redirect.github.com/github/codeql-action/pull/1811">#1811</a></li>
</ul>
<h2>2.21.1 - 26 Jul 2023</h2>
<ul>
<li>Improve the handling of fatal errors from the CodeQL CLI. <a
href="https://redirect.github.com/github/codeql-action/pull/1795">#1795</a></li>
<li>Add the <code>sarif-output</code> output to the analyze action that
contains the path to the directory of the generated SARIF. <a
href="https://redirect.github.com/github/codeql-action/pull/1799">#1799</a></li>
</ul>
<h2>2.21.0 - 19 Jul 2023</h2>
<ul>
<li>CodeQL Action now requires CodeQL CLI 2.9.4 or later. For more
information, see the corresponding changelog entry for CodeQL Action
version 2.20.4. <a
href="https://redirect.github.com/github/codeql-action/pull/1724">#1724</a></li>
</ul>
<h2>2.20.4 - 14 Jul 2023</h2>
<ul>
<li>This is the last release of the Action that supports CodeQL CLI
versions 2.8.5 to 2.9.3. These versions of the CodeQL CLI were
deprecated on June 20, 2023 alongside GitHub Enterprise Server 3.5 and
will not be supported by the next release of the CodeQL Action (2.21.0).
<ul>
<li>If you are using one of these versions, please update to CodeQL CLI
version 2.9.4 or later. For instance, if you have specified a custom
version of the CLI using the 'tools' input to the 'init' Action, you can
remove this input to use the default version.</li>
<li>Alternatively, if you want to continue using a version of the CodeQL
CLI between 2.8.5 and 2.9.3, you can replace
'github/codeql-action/<em><a
href="https://github.com/v2"><code>@​v2</code></a>' by
'github/codeql-action/</em><a
href="https://github.com/v2"><code>@​v2</code></a>.20.4' in your code
scanning workflow to ensure you continue using this version of the
CodeQL Action.</li>
</ul>
</li>
<li>We are rolling out a feature in July 2023 that will slightly reduce
the default amount of RAM used for query execution, in proportion to the
runner's total memory. This will help to avoid out-of-memory failures on
larger runners. <a
href="https://redirect.github.com/github/codeql-action/pull/1760">#1760</a></li>
<li>Update default CodeQL bundle version to 2.14.0. <a
href="https://redirect.github.com/github/codeql-action/pull/1762">#1762</a></li>
</ul>
<h2>2.20.3 - 06 Jul 2023</h2>
<ul>
<li>Update default CodeQL bundle version to 2.13.5. <a
href="https://redirect.github.com/github/codeql-action/pull/1743">#1743</a></li>
</ul>
<h2>2.20.2 - 03 Jul 2023</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/a09933a12a80f87b87005513f0abb1494c27a716"><code>a09933a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1838">#1838</a>
from github/update-v2.21.4-492a68c32</li>
<li><a
href="https://github.com/github/codeql-action/commit/37116fb629c389e65c52deac5e2c17af5f1a1973"><code>37116fb</code></a>
Fix positioning of bundle update changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/c6139177669233a468dc4ecabe60d530b414e662"><code>c613917</code></a>
Update changelog for v2.21.4</li>
<li><a
href="https://github.com/github/codeql-action/commit/492a68c323360189d2f9df28532982923c71d897"><code>492a68c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1836">#1836</a>
from github/henrymercer/analysis-summary-v2-ff</li>
<li><a
href="https://github.com/github/codeql-action/commit/ac49314877db8e2011c40d31eca69b48438441bf"><code>ac49314</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1834">#1834</a>
from github/henrymercer/analysis-summary-v2-ff</li>
<li><a
href="https://github.com/github/codeql-action/commit/ac35d7a02dee18d8dc39711483f877e5325b0b9a"><code>ac35d7a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1835">#1835</a>
from github/henrymercer/language-baseline-config</li>
<li><a
href="https://github.com/github/codeql-action/commit/d03c744ad658dbbbdac1d081c6319c667a334e66"><code>d03c744</code></a>
Don't pass <code>--no-</code> flag as it doesn't exist yet</li>
<li><a
href="https://github.com/github/codeql-action/commit/a0407a8c60f1f2c6d417d133cda53b32030e4383"><code>a0407a8</code></a>
Add changelog note for rollout</li>
<li><a
href="https://github.com/github/codeql-action/commit/8a7b2e9c9bde104b1cea8524ef50c449fbaff172"><code>8a7b2e9</code></a>
Enable language specific baselines via feature flag</li>
<li><a
href="https://github.com/github/codeql-action/commit/9a510d9b078a207699baa4ca847d29d8a9243800"><code>9a510d9</code></a>
Rename new analysis summary feature flag</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/5b6282e01c62d02e720b81eb8a51204f527c3624...a09933a12a80f87b87005513f0abb1494c27a716">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=2.21.3&new-version=2.21.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from
3.7.0 to 3.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-node/releases">actions/setup-node's
releases</a>.</em></p>
<blockquote>
<h2>v3.8.0</h2>
<h2>What's Changed</h2>
<h3>Bug fixes:</h3>
<ul>
<li>Add check for existing paths by <a
href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/803">actions/setup-node#803</a></li>
<li>Resolve SymbolicLink by <a
href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/809">actions/setup-node#809</a></li>
<li>Change passing logic for cache input by <a
href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/816">actions/setup-node#816</a></li>
<li>Fix armv7 cache issue by <a
href="https://github.com/louislam"><code>@​louislam</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/794">actions/setup-node#794</a></li>
<li>Update check-dist workflow name by <a
href="https://github.com/sinchang"><code>@​sinchang</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/710">actions/setup-node#710</a></li>
</ul>
<h3>Feature implementations:</h3>
<ul>
<li>feat: handling the case where &quot;node&quot; is used for
tool-versions file. by <a
href="https://github.com/xytis"><code>@​xytis</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/812">actions/setup-node#812</a></li>
</ul>
<h3>Documentation changes:</h3>
<ul>
<li>Refer to semver package name in README.md by <a
href="https://github.com/olleolleolle"><code>@​olleolleolle</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/808">actions/setup-node#808</a></li>
</ul>
<h3>Update dependencies:</h3>
<ul>
<li>Update toolkit cache to fix zstd by <a
href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/804">actions/setup-node#804</a></li>
<li>Bump tough-cookie and <code>@​azure/ms-rest-js</code> by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/802">actions/setup-node#802</a></li>
<li>Bump semver from 6.1.2 to 6.3.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/807">actions/setup-node#807</a></li>
<li>Bump word-wrap from 1.2.3 to 1.2.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/815">actions/setup-node#815</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/olleolleolle"><code>@​olleolleolle</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/808">actions/setup-node#808</a></li>
<li><a href="https://github.com/louislam"><code>@​louislam</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/794">actions/setup-node#794</a></li>
<li><a href="https://github.com/sinchang"><code>@​sinchang</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/710">actions/setup-node#710</a></li>
<li><a href="https://github.com/xytis"><code>@​xytis</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/812">actions/setup-node#812</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v3...v3.8.0">https://github.com/actions/setup-node/compare/v3...v3.8.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-node/commit/bea5baf987ba7aa777a8a0b4ace377a21c45c381"><code>bea5baf</code></a>
change getinput to getstate for cache (<a
href="https://redirect.github.com/actions/setup-node/issues/816">#816</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/d82f92a0eb28e5699f87460c19fc2c674da76d01"><code>d82f92a</code></a>
Bump word-wrap from 1.2.3 to 1.2.4 (<a
href="https://redirect.github.com/actions/setup-node/issues/815">#815</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/ca2d4e0cdd8c63d9ebfedc3d16d450a870caf31c"><code>ca2d4e0</code></a>
feat: handling the case where &quot;node&quot; is used for tool-versions
file. (<a
href="https://redirect.github.com/actions/setup-node/issues/812">#812</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/c7a93deeacd27a63bee8be26a3bf77dc8fb6ce05"><code>c7a93de</code></a>
resolve SymbolicLink (<a
href="https://redirect.github.com/actions/setup-node/issues/809">#809</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/34050076a5a3fa9bd791b9b40860d11d9421c7fa"><code>3405007</code></a>
Add check for existing paths (<a
href="https://redirect.github.com/actions/setup-node/issues/803">#803</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/f8aa08ed8ebcc273d7db4ffb5645cb9eb570a33e"><code>f8aa08e</code></a>
Update check-dist workflow name (<a
href="https://redirect.github.com/actions/setup-node/issues/710">#710</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/e2d34eacc811cc517d25162eb9571557fd52b9b1"><code>e2d34ea</code></a>
Fix armv7 cache issue (<a
href="https://redirect.github.com/actions/setup-node/issues/794">#794</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/ef9c88b169f1fa70052a9259b37bf50c955434e2"><code>ef9c88b</code></a>
Bump semver from 6.1.2 to 6.3.1 (<a
href="https://redirect.github.com/actions/setup-node/issues/807">#807</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/ea800d4ebc5caee4d124da96f624d6c65545cc31"><code>ea800d4</code></a>
Bump tough-cookie and <code>@​azure/ms-rest-js</code> (<a
href="https://redirect.github.com/actions/setup-node/issues/802">#802</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/cb95c398f6b85c15ec9e2d1b3a913b37e72f3878"><code>cb95c39</code></a>
Update toolkit cache to fix zstd (<a
href="https://redirect.github.com/actions/setup-node/issues/804">#804</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/setup-node/compare/e33196f7422957bea03ed53f6fbb155025ffc7b8...bea5baf987ba7aa777a8a0b4ace377a21c45c381">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-node&package-manager=github_actions&previous-version=3.7.0&new-version=3.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
These changes were already reviewed in the SDK. The primary changes are
adding highlighting of diagnostic locations to pubspec diagnostics.
There was some minor copy and link cleanup as well.
Bumps ruby from `2de48b0` to `8551b19`.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ruby&package-manager=docker&previous-version=3.2-slim-bookworm&new-version=3.2-slim-bookworm)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
I forgot to revert setting the `Makefile` to use `beta` and a new beta
release came out since the last update, breaking the build.
Co-authored-by: Parker Lougheed <[email protected]>
I went with a bit of a different style since it was a major release and
we did a major restructuring. It ended up a bit longer because of that,
but I think it should be fine. Needs a good copy edit though
_(thanks!_). I also added videos this time.

Closes dart-lang/site-www#4830

---------

Co-authored-by: Marya <[email protected]>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from
3.8.0 to 3.8.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-node/releases">actions/setup-node's
releases</a>.</em></p>
<blockquote>
<h2>v3.8.1</h2>
<h2>What's Changed</h2>
<p>In scope of this release, the filter was removed within the
cache-save step by <a
href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/831">actions/setup-node#831</a>.
It is filtered and checked in the toolkit/cache library.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v3...v3.8.1">https://github.com/actions/setup-node/compare/v3...v3.8.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-node/commit/5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d"><code>5e21ff4</code></a>
Remove filter for cached paths (<a
href="https://redirect.github.com/actions/setup-node/issues/831">#831</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/setup-node/compare/bea5baf987ba7aa777a8a0b4ace377a21c45c381...5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-node&package-manager=github_actions&previous-version=3.8.0&new-version=3.8.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps ruby from `ed848f4` to `9654f1d`.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ruby&package-manager=docker&previous-version=3.2-slim-bookworm&new-version=3.2-slim-bookworm)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
The PR fixes the small issue in the "js-to-dart" docs: it seems that an
assertion in the "Increment a before b" example is incorrect.
Also fixes previous changelog links throughout the page.

Closes dart-lang/site-www#5076
The Dart community Discord has renamed to dart_community to match Dart's
package/file naming scheme :)
Mostly removes a bunch of unused styles making searching for styles
easier and adds a new analysis package we can use for site tooling. The
changes themselves have already been reviewed in site-shared.
Partial fix to #5127.
We completed some related cleanup work in the past, but there were still
some dartdevc links/mentions left. It's best to avoid linking there as
it's a historical page that just links elsewhere.
MaryaBelanger and others added 10 commits November 6, 2023 08:44
Also updates various colors to more closely align with Dart/Flutter
brand guidelines.

Fixes dart-lang/site-www#5293

---------

Co-authored-by: Anthony Sansone <[email protected]>
We use a TOC generated from a plugin, so we need to do the replacement
manually.

Fixes dart-lang/site-www#5296
Fixes dart-lang/site-www#5302
The `name` field on an input is used for submitting the search, so it's
okay for the IDs to be different, but the names to remain the same.

Fixes dart-lang/site-www#5295
Includes the latest bug fixes, including some critical security fixes.
Bumps [activesupport](https://github.com/rails/rails) from 7.1.1 to
7.1.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/rails/rails/releases">activesupport's
releases</a>.</em></p>
<blockquote>
<h2>7.1.2</h2>
<h2>Active Support</h2>
<ul>
<li>
<p>Fix <code>:expires_in</code> option for
<code>RedisCacheStore#write_multi</code>.</p>
<p><em>fatkodima</em></p>
</li>
<li>
<p>Fix deserialization of non-string &quot;purpose&quot; field in
Message serializer</p>
<p><em>Jacopo Beschi</em></p>
</li>
<li>
<p>Prevent global cache options being overwritten when setting dynamic
options
inside a <code>ActiveSupport::Cache::Store#fetch</code> block.</p>
<p><em>Yasha Krasnou</em></p>
</li>
<li>
<p>Fix missing <code>require</code> resulting in
<code>NoMethodError</code> when running
<code>bin/rails secrets:show</code> or <code>bin/rails
secrets:edit</code>.</p>
<p><em>Stephen Ierodiaconou</em></p>
</li>
<li>
<p>Ensure <code>{down,up}case_first</code> returns non-frozen
string.</p>
<p><em>Jonathan Hefner</em></p>
</li>
<li>
<p>Fix <code>#to_fs(:human_size)</code> to correctly work with negative
numbers.</p>
<p><em>Earlopain</em></p>
</li>
<li>
<p>Fix <code>BroadcastLogger#dup</code> so that it duplicates the
logger's <code>broadcasts</code>.</p>
<p><em>Andrew Novoselac</em></p>
</li>
<li>
<p>Fix issue where <code>bootstrap.rb</code> overwrites the
<code>level</code> of a <code>BroadcastLogger</code>'s
<code>broadcasts</code>.</p>
<p><em>Andrew Novoselac</em></p>
</li>
<li>
<p>Fix <code>ActiveSupport::Cache</code> to handle outdated Marshal
payload from Rails 6.1 format.</p>
<p>Active Support's Cache is supposed to treat a Marshal payload that
can no longer be
deserialized as a cache miss. It fail to do so for compressed payload in
the Rails 6.1
legacy format.</p>
<p><em>Jean Boussier</em></p>
</li>
<li>
<p>Fix <code>OrderedOptions#dig</code> for array indexes.</p>
<p><em>fatkodima</em></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/rails/rails/blob/v7.1.2/activesupport/CHANGELOG.md">activesupport's
changelog</a>.</em></p>
<blockquote>
<h2>Rails 7.1.2 (November 10, 2023)</h2>
<ul>
<li>
<p>Fix <code>:expires_in</code> option for
<code>RedisCacheStore#write_multi</code>.</p>
<p><em>fatkodima</em></p>
</li>
<li>
<p>Fix deserialization of non-string &quot;purpose&quot; field in
Message serializer</p>
<p><em>Jacopo Beschi</em></p>
</li>
<li>
<p>Prevent global cache options being overwritten when setting dynamic
options
inside a <code>ActiveSupport::Cache::Store#fetch</code> block.</p>
<p><em>Yasha Krasnou</em></p>
</li>
<li>
<p>Fix missing <code>require</code> resulting in
<code>NoMethodError</code> when running
<code>bin/rails secrets:show</code> or <code>bin/rails
secrets:edit</code>.</p>
<p><em>Stephen Ierodiaconou</em></p>
</li>
<li>
<p>Ensure <code>{down,up}case_first</code> returns non-frozen
string.</p>
<p><em>Jonathan Hefner</em></p>
</li>
<li>
<p>Fix <code>#to_fs(:human_size)</code> to correctly work with negative
numbers.</p>
<p><em>Earlopain</em></p>
</li>
<li>
<p>Fix <code>BroadcastLogger#dup</code> so that it duplicates the
logger's <code>broadcasts</code>.</p>
<p><em>Andrew Novoselac</em></p>
</li>
<li>
<p>Fix issue where <code>bootstrap.rb</code> overwrites the
<code>level</code> of a <code>BroadcastLogger</code>'s
<code>broadcasts</code>.</p>
<p><em>Andrew Novoselac</em></p>
</li>
<li>
<p>Fix <code>ActiveSupport::Cache</code> to handle outdated Marshal
payload from Rails 6.1 format.</p>
<p>Active Support's Cache is supposed to treat a Marshal payload that
can no longer be
deserialized as a cache miss. It fail to do so for compressed payload in
the Rails 6.1
legacy format.</p>
<p><em>Jean Boussier</em></p>
</li>
<li>
<p>Fix <code>OrderedOptions#dig</code> for array indexes.</p>
<p><em>fatkodima</em></p>
</li>
<li>
<p>Fix time travel helpers to work when nested using with separate
classes.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/rails/rails/commit/6b93fff8af32ef5e91f4ec3cfffb081d0553faf0"><code>6b93fff</code></a>
Preparing for 7.1.2 release</li>
<li><a
href="https://github.com/rails/rails/commit/200749dec7f59a819fbbcd31cbee179d79517ac8"><code>200749d</code></a>
Sync CHANGELOG</li>
<li><a
href="https://github.com/rails/rails/commit/f6987c46572666c439a1ad68b3ab5b41645f2bcf"><code>f6987c4</code></a>
Merge pull request <a
href="https://redirect.github.com/rails/rails/issues/49974">#49974</a>
from fatkodima/fix-redis-write_multi-with-expires_in</li>
<li><a
href="https://github.com/rails/rails/commit/02e3f69fcd334b2a6abbc417dfa6e7a553fcceee"><code>02e3f69</code></a>
Merge pull request <a
href="https://redirect.github.com/rails/rails/issues/49669">#49669</a>
from intrip/fix-message-metadata-non-str</li>
<li><a
href="https://github.com/rails/rails/commit/b13b373d9b4d0b1ba666627d3f40ec13f913fdf4"><code>b13b373</code></a>
Merge pull request <a
href="https://redirect.github.com/rails/rails/issues/49784">#49784</a>
from jhawthorn/notification_exception_groups</li>
<li><a
href="https://github.com/rails/rails/commit/eed1c439b51674663b57776d4f72b32adb0a45e9"><code>eed1c43</code></a>
Merge pull request <a
href="https://redirect.github.com/rails/rails/issues/49837">#49837</a>
from jonathanhefner/string-xcase_first-non-frozen-e...</li>
<li><a
href="https://github.com/rails/rails/commit/a42137ab91188eec1d240630a2b79af4fee37ee0"><code>a42137a</code></a>
Use h2 headings for Module::Concerning [ci-skip]</li>
<li><a
href="https://github.com/rails/rails/commit/4b4615ac91c5daca9a137a2eca35e7a246b965eb"><code>4b4615a</code></a>
Merge pull request <a
href="https://redirect.github.com/rails/rails/issues/49800">#49800</a>
from HolyWalley/fix-cache-options-being-overwriten</li>
<li><a
href="https://github.com/rails/rails/commit/54e21652d411cc1949448813e47f834f821432bb"><code>54e2165</code></a>
Merge pull request <a
href="https://redirect.github.com/rails/rails/issues/49792">#49792</a>
from stevegeek/fix_deprecation_warning_on_secrets_s...</li>
<li><a
href="https://github.com/rails/rails/commit/6d55d50dbfa9f174611637d9375ae72ea4b80fe4"><code>6d55d50</code></a>
Merge pull request <a
href="https://redirect.github.com/rails/rails/issues/49791">#49791</a>
from Earlopain/number-human-size-negative</li>
<li>Additional commits viewable in <a
href="https://github.com/rails/rails/compare/v7.1.1...v7.1.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=activesupport&package-manager=bundler&previous-version=7.1.1&new-version=7.1.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@AmosHuKe AmosHuKe requested a review from a team as a code owner November 14, 2023 18:52
@AmosHuKe AmosHuKe marked this pull request as draft November 14, 2023 18:53
@AlexV525
Copy link
Member

Error processing "/home/runner/work/dart.cn/dart.cn/src/sitemap.xml": PathNotFoundException: Cannot open file, path = '/home/runner/work/dart.cn/dart.cn/src/sitemap.xml' (OS Error: No such file or directory, errno = 2)

@AmosHuKe
Copy link
Member Author

Verified locally
83c8fefb62335024a761ba46d1e04c0c

@AmosHuKe AmosHuKe marked this pull request as ready for review November 15, 2023 18:18
@AmosHuKe
Copy link
Member Author

cc @AlexV525 @chenglu

@chenglu
Copy link
Member

chenglu commented Nov 15, 2023

👍

Copy link
Member

@chenglu chenglu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍 辛苦啦

@AmosHuKe
Copy link
Member Author

AmosHuKe commented Nov 15, 2023

@chenglu 麻烦路哥啦,本地跑起来没问题,还没实际部署测试,不过流程看起来没啥问题。

_config_dev.yml Outdated Show resolved Hide resolved
@AlexV525 AlexV525 merged commit bda5429 into cfug:main Nov 16, 2023
4 checks passed
@AmosHuKe AmosHuKe deleted the sync-20231115 branch November 16, 2023 04:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[PAGE ISSUE]: '创建 package' [PAGE ISSUE]: 'Dart 开发语言概览'