Repository navigation
Releases: github/pages-gem
Releases · github/pages-gem
Release list
v233
Security updates
This release updates four bundled plugins to versions that fix published security advisories.
| Gem | Old | New | Fix |
|---|---|---|---|
| jekyll-redirect-from | 0.16.0 | 0.17.0 | GHSA-xfg6-hjrc-hpvx: script injection through redirect_to |
| jekyll-seo-tag | 2.8.0 | 2.9.1 | GHSA-572m-7cg5-6j5r: HTML/script injection through metadata and JSON-LD |
| jekyll-feed | 0.17.0 | 0.18.0 | GHSA-3gx8-pqcm-38hw: unescaped post.lang and CDATA breakout |
| jekyll-remote-theme | 0.4.3 | 0.6.2 | Allows rubyzip 3.x for the CVE-2026-85396 fix (#966); fixes GHSA-3343-386p-v26g |
Possible output changes
- jekyll-remote-theme 0.6.x requires Ruby 3.0 or later and adds a runtime dependency on
openssl(>= 3.1.2). - jekyll-seo-tag 2.9.x changes some
<head>output: it addstwitter:description, shortens descriptions to 100 words and supportscanonical: false. - jekyll-redirect-from 0.17.0 skips
redirect_totargets that aren't http(s) or relative, with a build warning. It also percent-encodes characters such as quotes,<and>.
What's Changed
- Fix security issues in various workflows by @yoannchaudet in #929
- Bump jekyll-seo-tag, jekyll-feed, jekyll-redirect-from, and jekyll-remote-theme for security fixes by @benbalter in #965
- Update integration test assertion by @tsusdere in #968
Full Changelog: v232...v233
v232
What's Changed
- Bump docker/build-push-action from 5 to 6 by @dependabot in #916
- Fix obscured gemfile issue by @mrmanc in #912
- Add webrick as Ruby 3 doesn’t include it by @mrmanc in #914
- Update nokogiri CVE-2024-25062 by @naxhh in #911
- Parkr jekyll3.10 by @yoannchaudet in #919
- Fix improperly bound regex by @yoannchaudet in #921
- Prep 232 by @yoannchaudet in #923
New Contributors
Full Changelog: v231...v232
v231
What's Changed
- Revert jekyll-relative-links to 0.6.1 and add a test by @yoannchaudet in #910
Full Changelog: v230...v231
v230
What's Changed
- Bump docker/login-action from 2 to 3 by @dependabot in #907
- Bump docker/build-push-action from 4 to 5 by @dependabot in #905
- Bump docker/setup-buildx-action from 2 to 3 by @dependabot in #906
- Bump Jekyll to 3.9.5 by @yoannchaudet in #908
Full Changelog: v229...v230
v229
What's Changed
- Bump docker/metadata-action from 4 to 5 by @dependabot in #889
- Bump actions/checkout from 3 to 4 by @dependabot in #888
- Fixes
$github-pages health-checkNoMethodError by @edward in #878 - Support Ruby 3.2+, fixes #879 by @fulldecent in #880
- Create publish-gem.yml by @tsusdere in #898
- Bump actions/checkout from 3 to 4 by @dependabot in #900
- Enable multi arch docker image build by @rngtng in #884
- Bring back proper support for Ruby 3.x by @yoannchaudet in #901
- Bump dependencies (patch and minor only) by @yoannchaudet in #902
- Fix release script by @yoannchaudet in #903
- Another publish script fix by @yoannchaudet in #904
New Contributors
- @edward made their first contribution in #878
- @fulldecent made their first contribution in #880
- @tsusdere made their first contribution in #898
- @rngtng made their first contribution in #884
Full Changelog: v228...v229
v228: Merge pull request #867 from agnostic-apollo/jekyll-3.9.3
Automated release for v228
v227
v226
v225
Automated release for v225
What's Changed
- Pass the UNSAFE option to commonmark by @yoannchaudet in #821
Full Changelog: v224...v225
v224
Automated release for v224
What's Changed
- Update automation by @felipesu19 in #812
- Update tag/release script by @felipesu19 in #814
- Bump jekyll-commonmark-ghpages by @yoannchaudet in #820
- Bump jekyll-seo-tag to v2.8.0 by @hubot in #817
New Contributors
- @felipesu19 made their first contribution in #812
Full Changelog: v223...v224