Skip to content

build(deps): bump action_text-trix from 2.1.16 to 2.1.18 - #16

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/action_text-trix-2.1.18
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/action_text-trix-2.1.18

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 29, 2026 •

Copy link
Copy Markdown

Bumps action_text-trix from 2.1.16 to 2.1.18.

Release notes

Sourced from action_text-trix's releases.

v2.1.18

Security

Infrastructure/CI

Full Changelog: basecamp/trix@v2.1.17...v2.1.18

v2.1.17

Security

Bug fixes

Infrastructure/CI

Chores

New Contributors

Full Changelog: basecamp/trix@v2.1.16...v2.1.17

Commits
  • da88699 v2.1.18
  • 9c0a993 Fix XSS via javascript: URI in JSON drag-drop deserialization (#1293)
  • e62fcc3 ci: harden GitHub Actions workflows (#1284)
  • 2e46d51 v2.1.17
  • 53197ab Merge pull request #1282 from basecamp/h1-3581911-serialized-attr
  • 3229c29 Fix stored XSS via data-trix-serialized-attributes sanitizer bypass (H1 #3581...
  • 7069343 Merge pull request #1239 from Cromian/patch-1
  • d9dbf0a Merge pull request #1280 from basecamp/fix-bullets-merging-with-prior-element
  • bef13e2 Fix bullets merging with prior elements when the first node is removed
  • 194a36c Merge pull request #1275 from basecamp/flavorjones/wtr-failure-messages
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Mar 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot/bundler/action_text-trix-2.1.18 branch from ad6530c to dee8802 Compare March 31, 2026 11:00
@sonarqubecloud

Copy link
Copy Markdown

@JoshTheWanderer

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/bundler/action_text-trix-2.1.18 branch from dee8802 to 3b150e0 Compare July 28, 2026 11:41
@sonarqubecloud

Copy link
Copy Markdown

@JoshTheWanderer

Copy link
Copy Markdown
Member

@dependabot rebase

mergify[bot]
mergify Bot previously approved these changes Oct 8, 2026

@mergify mergify Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approving dependabot

Bumps [action_text-trix](https://github.com/basecamp/trix) from 2.1.16 to 2.1.18.
- [Release notes](https://github.com/basecamp/trix/releases)
- [Commits](basecamp/trix@v2.1.16...v2.1.18)

---
updated-dependencies:
- dependency-name: action_text-trix
  dependency-version: 2.1.18
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bundler/action_text-trix-2.1.18 branch from 3b150e0 to f344d63 Compare October 8, 2026 15:56

@mergify mergify Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approving dependabot

@sonarqubecloud

sonarqubecloud Bot commented Oct 8, 2026

Copy link
Copy Markdown

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Development

Successfully merging this pull request may close these issues.

1 participant