Releases: rojopolis/spellcheck-github-actions
0.33.1
0.33.1, 2023-07-13, bug fix release, update not required
-
An update is recommended if you are using the
output_file
parameter, since the output file handling was shielding the propagation of the status of the actual spellcheck.The issue was observed in #166 reported by @nlhomme, where the action was reporting success, even though the spellcheck was failing.
The bug information was lifted into a new issue #167 and was addressed in PR #168 by @jonasbn
0.33.0
What's Changed
Full Changelog: 0.32.0...0.33.0
0.32.0
0.32.0, 2023-05-18, security patch release, update recommended
-
@dependabot raised an alert for the used dependency: pymdown-extensions. The vulnerability is labelled as CVE-2023-32309. The issue has been present in pymdown-extensions since version 1.5.0 and is patched in version 10.0.
-
Snyk has provided a patch via PR #158, which has been tested and no regressions has been observed, even with a version leap for pymdown-extensions. from version 8.2 to 10.0. The GitHub Action has been updated to use the patched version, even though there are no direct use of the vulnerable code in the action, but we do not want to be the source of a vulnerability.
-
pymdown-extensions was increased to version 10.0.1, since a bug fix was released to follow up on the security patch.
0.31.0
0.31.0, 2023-05-16, maintenance release, update not required
- Docker image updated to Python 3.11.3 slim via PR #152 from @dependabot. Release notes for Python 3.11.3
0.30.0
0.30.0, 2023-02-20, maintenance release, update not required
-
PySpelling updated from version 2.8.1 to 2.8.2, including several fixes
- FIX: Ensure that Aspell actually uses the encoding passed to it for dictionaries.
- FIX: Use a disallow list for problematic or unsupported arguments to the underlying spell checker instead of using a more restrictive allow list.
- FIX: Fix logic bug in JavaScript filter.
-
Lifted from the release notes for PySpelling
-
Docker image updated to Python 3.11.2 slim via PR #142 from @dependabot. Release notes for Python 3.11.2
0.29.0
0.29.0, 2022-12-29, maintenance release, update not required
-
Docker image updated to Python 3.11.1 slim via PR #139 from @dependabot. Release notes for Python 3.11.1
-
lxml bumped to version 4.9.1 from 4.9.1 to get the build to work, without jumping through too many hoops. We prefer relying on wheel instead of building from source, since
lxml
can become quite a time sink
0.28.0
0.28.0, 2022-11-16, maintenance release, update not required
- Docker image updated to Python 3.10.8 slim via PR #129 from @snyk-bot. Release notes for Python 3.10.8
0.27.0
0.27.0, 2022-09-09, feature release, update not required
-
Support for default PySpelling configuration files via PR #116 from @proffalken
-
Docker image updated to Python 3.10.6 slim via PR #117 from @dependabot. Release notes for Python 3.10.6
0.26.0
0.26.0, 2022-08-04, maintenance release, update recommended
- The core component PySpelling has been updated from version 2.7.3 to version 2.8.1, see the release history for PySpelling
0.25.0
0.25.0, 2022-07-08, maintenance release, update recommended
-
lxml
requirement bumped from version 4.6.5 to 4.9.1 addressing a security issue SNYK-PYTHON-LXML-2940874 / CVE-2022-2309 / CWE-476 via PR #104 from @snyk-bot -
Docker image updated to Python 3.10.5 slim from 3.10.4 slim via PR #102 from @dependabot