Bump commonmarker, jekyll-feed, jekyll and jekyll-seo-tag

[dependabot]

Bumps commonmarker, jekyll-feed, jekyll and jekyll-seo-tag. These dependencies needed to be updated together.
Updates commonmarker from 0.17.13 to 0.23.6

Release notes

Sourced from commonmarker's releases.

v0.23.6

What's Changed

This release includes two updates from the upstream cmark-gfm library, namely:

• DoS vulnerability in autolink extension per GHSA-cgh3-p57x-9q7q
• Added xmpp: and mailto: support to the autolink extension

v0.23.4

No release notes provided.

v0.22.0

• Drop ruby-enum (gjtorikian/commonmarker#140)

v0.21.0

• Add support for tasklist_item_checked=: gjtorikian/commonmarker#116

v0.20.2

• Add command line input for parse and render options: gjtorikian/commonmarker#108

v0.20.1

• Fix erroneous inverted tasklist state: gjtorikian/commonmarker#100

v0.20.0

• Update cmark-gfm 0.29.0.gfm.0: gjtorikian/commonmarker#98

v0.19.0

• Support tasklists: gjtorikian/commonmarker#94
• Indicate the context of a parse/render option error: gjtorikian/commonmarker#97

v0.18.0

• Default to being safe: gjtorikian/commonmarker#81

Changelog

Sourced from commonmarker's changelog.

Changelog

v0.23.4 (2022-03-03)

Full Changelog

Fixed bugs:

• #render_html way slower than #render_doc.to_html #141

Closed issues:

• allow keeping text content of unknown tags #169
• STRIKETHROUGH_DOUBLE_TILDE not working #168
• Allow disabling 4-space code blocks #167
• tables with escaped pipes are not recognized #166

Merged pull requests:

• CI: Drop a duplicate 'bundle install' #173 (olleolleolle)
• CI: Drop duplicate bundle install #172 (olleolleolle)
• Fixup benchmark and speedup a little, fixes #141 #171 (ojab)

v0.23.2 (2021-09-17)

Full Changelog

Merged pull requests:

• Update GFM release to 0.29.0.gfm.2 #148 (phillmv)

v0.23.1 (2021-09-03)

Full Changelog

Closed issues:

• Incorrect processing of list and next block of code #146

Merged pull requests:

• Normalize parse and render options #145 (phillmv)

v0.23.0 (2021-08-30)

Full Changelog

Closed issues:

• Latest version of commonmarker breaks with jekyll build #142

... (truncated)

Commits

• a8f8d76 Merge pull request #190 from anticomputer/main
• ac91634 💎 release 0.23.6
• 777fd30 Update cmark-upstream to github/cmark-gfm@9d57d8a23...
• 7aaeb37 Merge pull request #188 from stevenlaidlaw/update-to-0290gfm5
• 795e628 Update cmark-upstream to github/cmark-gfm@0578e1e4f...
• 39d19d6 Update cmark-upstream to github/cmark-gfm@766f161ef...
• 63b7bf8 Update FUNDING.yml
• 558c727 Bump to 0.23.5
• 41eee72 lint
• 897e8ed Merge pull request #180 from lumaxis/main
• Additional commits viewable in compare view

Updates jekyll-feed from 0.11.0 to 0.15.1

Release notes

Sourced from jekyll-feed's releases.

v0.15.1

Bug Fixes

• MetaTag: when encoding for XML special characters, handle non-string objects (#326)

v0.15.0

Minor Enhancements

• Add support for drafts (#316)

v0.14.0

Minor Enhancements

• add support for categories (#153) (#233)
• add support for tags (#264)
• Make posts limit configurable (#314)
• XML escape the title field of feed_meta (#306)

Bug Fixes

• Fix feed link when post title contains HTML (#305)

Development Fixes

• Use Dir to list source files (#309)
• Require Ruby >=2.4.0 (#307)

v0.13.0

Minor Enhancements

• Excerpt only flag (#287)
• Add media:content tag (#290)

Development Fixes

• test: use categories in post (#249)

v0.12.1

• Release: v0.12.0 (#271)

Bug Fixes

• Re-introduce Ruby 2.3 support and test Jekyll 3.7+ (#272)

v0.12.0

• Allow Jekyll v4 (still alpha)

Development Fixes

• style: fix offenses in specs (#248)

... (truncated)

Changelog

Sourced from jekyll-feed's changelog.

0.15.1 / 2020-10-04

Bug Fixes

• MetaTag: when encoding for XML special characters, handle non-string objects (#326)

0.15.0 / 2020-07-10

Minor Enhancements

• Add support for drafts (#316)

0.14.0 / 2020-06-24

Minor Enhancements

• add support for categories (#153) (#233)
• add support for tags (#264)
• Make posts limit configurable (#314)
• XML escape the title field of feed_meta (#306)

Bug Fixes

• Fix feed link when post title contains HTML (#305)

Development Fixes

• Use Dir to list source files (#309)
• Require Ruby >=2.4.0 (#307)

0.13.0 / 2019-11-13

Minor Enhancements

• Excerpt only flag (#287)
• Add media:content tag (#290)

Development Fixes

• test: use categories in post (#249)

0.12.1 / 2019-03-23

Bug Fixes

• Re-introduce Ruby 2.3 support and test Jekyll 3.7+ (#272)

0.12.0 / 2019-03-21

• Allow Jekyll v4 (still alpha)

... (truncated)

Commits

• 6bc0f83 Release 💎 v0.15.1
• 653999c Update history to reflect merge of #326 [ci skip]
• df10ac8 MetaTag: when encoding for XML special characters, handle non-string objects ...
• c8e7a43 docs: typo
• 2979784 docs: style feed
• c552b8e Conditionally load GFM parser in CI builds
• f6bad6d chore(release): 💎 0.15.0
• 16d6a43 Update history to reflect merge of #316 [ci skip]
• 702dd89 Add support to drafts (#316)
• 9f6becf chore(release): 💎 0.14.0
• Additional commits viewable in compare view

Updates jekyll from 3.7.4 to 3.9.2

Release notes

Sourced from jekyll's releases.

v3.9.2

Bug Fixes

• Lock http_parser.rb gem to v0.6.x on JRuby (#8943)
• Backport #8756 for v3.9.x: Respect collections_dir config within include tag (#8795)
• Backport #8965 for v3.9.x: Fix response header for content served via jekyll serve (#8976)

Development Fixes

• Update and fix CI for 3.9-stable on Ruby 3.x (#8942)
• Fix CI for commits to 3.9-stable branch (#8788)

v3.9.1

Bug Fixes

• Backport #8618 for v3.9.x: Update include tag to be more permissive (#8629)

v3.9.0

Minor Enhancements

• Allow use of kramdown v2 (#8322)
• Add default language for kramdown syntax highlighting (#8325)

v3.8.7

Fixes

• Prevent console warnings with Ruby 2.7 (#7948)

v3.8.6

Bug Fixes

• Update log output for an invalid theme directory (#7734)
• Memoize SiteDrop#documents to reduce allocations (#7722)
• Excerpt handling of custom and intermediate tags (#7467)
• Escape valid special chars in a site's path name (#7573)
• Revert memoizing Site#docs_to_write and refactor #documents (#7689)
• Fix broken include_relative usage in excerpt (#7690)
• Install platform-specific gems as required (3c06609406)

Security Fixes

• Theme gems: ensure directories aren't symlinks (#7424)

v3.8.5

Bug Fixes

• Re-implement handling Liquid blocks in excerpts (#7250)

v3.8.4

... (truncated)

Changelog

Sourced from jekyll's changelog.

3.9.2 / 2022-03-27

Bug Fixes

• Lock http_parser.rb gem to v0.6.x on JRuby (#8943)
• Backport #8756 for v3.9.x: Respect collections_dir config within include tag (#8795)
• Backport #8965 for v3.9.x: Fix response header for content served via jekyll serve (#8976)

Development Fixes

• Update and fix CI for 3.9-stable on Ruby 3.x (#8942)
• Fix CI for commits to 3.9-stable branch (#8788)

3.9.1 / 2021-04-08

Bug Fixes

• Backport #8618 for v3.9.x: Update include tag to be more permissive (#8629)

3.9.0 / 2020-08-05

Minor Enhancements

• Allow use of kramdown v2 (#8322)
• Add default language for kramdown syntax highlighting (#8325)

3.8.7 / 2020-05-08

Bug Fixes

• Prevent console warnings with Ruby 2.7 (#8125)

4.0.0 / 2019-08-19

Major Enhancements

• Drop ruby 2.3 (#7454)
• Drop support for Ruby 2.1 and 2.2 (#6560)
• Drop support for older versions of Rouge (#6978)
• Drop support for pygments as syntax-highlighter (#7118)
• Drop support for Redcarpet (#6987)
• Drop support for rdiscount (#6988)
• Drop support for jekyll-watch-1.4.0 and older (#7287)
• Incorporate relative_url filter in link tag (#6727)
• Upgrade kramdown dependency to v2.x (#7492)
• Upgrade jekyll-sass-converter to v2.x - Sassc + sourcemaps (#7778)
• Upgrade i18n to v1.x (#6931)
• Add Jekyll::Cache class to handle caching on disk (#7169)
• Cache converted markdown (#7159)
• Cache: Do not dump undumpable objects (#7190)

... (truncated)

Commits

• 42150e9 Merge pull request #9012 from jekyll/3-9-2
• 37737b2 3.9.2 release post: fix time and mention adding webrick to gemfile
• 3372a0b Release Jekyll v3.9.2
• 18b0a5e Update history to reflect merge of #8976 [ci skip]
• 7e6769a Merge pull request #8976 from jekyll/3.9-stable-backport-8965
• e7f53e6 Fix response header for content served via jekyll serve (#8965)
• 11b3d1e Bypass corrupted bundle-cache
• 76ef58e Update history to reflect merge of #8942 [ci skip]
• ee1d210 Update and fix CI for 3.9-stable on Ruby 3.x (#8942)
• 01ea247 Update history to reflect merge of #8943 [ci skip]
• Additional commits viewable in compare view

Updates jekyll-seo-tag from 2.5.0 to 2.8.0

Release notes

Sourced from jekyll-seo-tag's releases.

v2.8.0

Minor Enhancements

• Allow to set type for author (#427)
• Allow setting author.url (#453)
• Implement Facebook domain verification (#455)
• Add og:image:alt and twitter:image:alt (#438)
• Sort JSON-LD data by key (#458)

Bug Fixes

• Set the default og:type to 'website' (#391)
• Template: Remove double new line (#454)

Development Fixes

• Fix typo in source code comment (#449)
• Set up Continuous Integration via GH Actions (#450)
• Bump RuboCop to v1.18.x (#452)
• Add workflow to release gem via GH Actions

v2.7.1

Development Fixes

• refactor: mutate site payload instead of duplicating it (#419)

v2.7.0

Minor Enhancements

• Change pagination message with seo_paginator_message option (#324)
• Make Twitter Summary Card without having Twitter account (#284)
• Prefer site.tagline to site.description for page title (#356)
• Render og:locale meta only when defined explicitly (#388)

Bug Fixes

• Ensure a single leading @ for twitter usernames (#367)

Development Fixes

• chore(deps): require Ruby > 2.4.0 EOL
• test: fix locale specs that use the fallback locale (#360)
• refactor: Replace read-only empty hash with private constant (#418)
• refactor: Mutate hash literals instead of duplicating them (#417)
• refactor: Reduce allocations of instance-agnostic objects (#376)
• refactor: Memoize #author_hash in SeoTag::AuthorDrop (#342)
• refactor: simplify conditional in SeoTag::Drop#date_modified (#343)
• chore(ci): profile seo-tag plugin on a third-party repository (#414)

... (truncated)

Changelog

Sourced from jekyll-seo-tag's changelog.

2.8.0 / 2022-02-04

Minor Enhancements

• Allow to set type for author (#427)
• Allow setting author.url (#453)
• Implement Facebook domain verification (#455)
• Add og:image:alt and twitter:image:alt (#438)
• Sort JSON-LD data by key (#458)

Bug Fixes

• Set the default og:type to 'website' (#391)
• Template: Remove double new line (#454)

Development Fixes

• Fix typo in source code comment (#449)
• Set up Continuous Integration via GH Actions (#450)
• Bump RuboCop to v1.18.x (#452)
• Add workflow to release gem via GH Actions

2.7.1 / 2020-10-18

Development Fixes

• refactor: mutate site payload instead of duplicating it (#419)

2.7.0 / 2020-10-18

Minor Enhancements

• Change pagination message with seo_paginator_message option (#324)
• Make Twitter Summary Card without having Twitter account (#284)
• Prefer site.tagline to site.description for page title (#356)
• Render og:locale meta only when defined explicitly (#388)

Bug Fixes

• Ensure a single leading @ for twitter usernames (#367)

Development Fixes

• chore(deps): require Ruby > 2.4.0 EOL
• test: fix locale specs that use the fallback locale (#360)
• refactor: Replace read-only empty hash with private constant (#418)
• refactor: Mutate hash literals instead of duplicating them (#417)
• refactor: Reduce allocations of instance-agnostic objects (#376)
• refactor: Memoize #author_hash in SeoTag::AuthorDrop (#342)
• refactor: simplify conditional in SeoTag::Drop#date_modified (#343)

... (truncated)

Commits

• 792a0fa Release 💎 v2.8.0
• 7209c42 Update history to reflect merge of #458 [ci skip]
• 54d37a8 Sort JSON-LD data by key (#458)
• 8303d31 Add workflow to release gem via GH Actions
• c658a8d Reduce verbosity of workflow job names
• 4037708 Update history to reflect merge of #454 [ci skip]
• e19993b Template: Remove double new line (#454)
• dba6621 Update history to reflect merge of #438 [ci skip]
• 4a590c9 Add og:image:alt and twitter:image:alt (#438)
• 41b2393 Update history to reflect merge of #455 [ci skip]
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

[dependabot]

Superseded by #26.