Bump regex from 1.4.2 to 1.5.6 in /packages/telescope/native
Created by: dependabot[bot]
Bumps regex from 1.4.2 to 1.5.6.
Changelog
Sourced from regex's changelog.
1.5.6 (2022-05-20)
This release includes a few bug fixes, including a bug that produced incorrect matches when a non-greedy
?
operator was used.
- [BUG #680](rust-lang/regex#680): Fixes a bug where
[[:alnum:][:^ascii:]]
dropped[:alnum:]
from the class.- [BUG #859](rust-lang/regex#859): Fixes a bug where
Hir::is_match_empty
returnedfalse
for\b
.- [BUG #862](rust-lang/regex#862): Fixes a bug where 'ab??' matches 'ab' instead of 'a' in 'ab'.
1.5.5 (2022-03-08)
This releases fixes a security bug in the regex compiler. This bug permits a vector for a denial-of-service attack in cases where the regex being compiled is untrusted. There are no known problems where the regex is itself trusted, including in cases of untrusted haystacks.
- SECURITY #GHSA-m5pq-gvj9-9vr8: Fixes a bug in the regex compiler where empty sub-expressions subverted the existing mitigations in place to enforce a size limit on compiled regexes. The Rust Security Response WG published an advisory about this: https://groups.google.com/g/rustlang-security-announcements/c/NcNNL1Jq7Yw
1.5.4 (2021-05-06)
This release fixes another compilation failure when building regex. This time, the fix is for when the
pattern
feature is enabled, which only works on nightly Rust. CI has been updated to test this case.
- [BUG #772](rust-lang/regex#772): Fix build when
pattern
feature is enabled.1.5.3 (2021-05-01)
This releases fixes a bug when building regex with only the
unicode-perl
feature. It turns out that while CI was building this configuration, it wasn't actually failing the overall build on a failed compilation.
- [BUG #769](rust-lang/regex#769): Fix build in
regex-syntax
when only theunicode-perl
feature is enabled.1.5.2 (2021-05-01)
This release fixes a performance bug when Unicode word boundaries are used.
... (truncated)
Commits
-
9aef5b1
1.5.6 -
2931b07
syntax: bump minimum regex-syntax version to 0.6.26 -
b41bde0
regex-syntax-0.6.26 -
d98da65
changelog: 1.5.6 -
1c19619
syntax: fix literal extraction for 'ab??' -
88a2a62
syntax: fix 'is_match_empty' predicate -
72f09f1
syntax: fix ascii class union bug -
b537286
doc: fix some typos -
258bdf7
changelog: 1.5.5 -
d130381
1.5.5 - Additional commits viewable in compare view
You can trigger a rebase of this PR by commenting @dependabot rebase
.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebase
will rebase this PR -
@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it -
@dependabot merge
will merge this PR after your CI passes on it -
@dependabot squash and merge
will squash and merge this PR after your CI passes on it -
@dependabot cancel merge
will cancel a previously requested merge and block automerging -
@dependabot reopen
will reopen this PR if it is closed -
@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -
@dependabot use these labels
will set the current labels as the default for future PRs for this repo and language -
@dependabot use these reviewers
will set the current reviewers as the default for future PRs for this repo and language -
@dependabot use these assignees
will set the current assignees as the default for future PRs for this repo and language -
@dependabot use this milestone
will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.