Repository: djc/askama
Pull request #690 (2022-06-07 04:12:07)

Update comrak requirement from 0.12 to 0.13
Updates the requirements on [comrak](https://github.com/kivikakk/comrak) to permit the latest version.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/kivikakk/comrak/releases">comrak's releases</a>.</em></p>
<blockquote>
<h2>0.13.0</h2>
<p>Changes since last release (<a href="https://github.com/kivikakk/comrak/compare/0.12.1...0.13.0">https://github.com/kivikakk/comrak/compare/0.12.1...0.13.0</a>)</p>
<ul>
<li>SECURITY: Bump regex to 1.5.5. (<a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/221">#221</a>, Dependabot)</li>
<li>Drop unneeded YAML dependency from Syntect. (<a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/199">#199</a>, Chris Wong)</li>
<li>Match newline handling in code inlines to upstream, and improve test failure reporting. (<a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/210">#210</a>, Michael Anderson)</li>
<li>Make all node value fields public. (<a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/216">#216</a>, Evan Schwartz)</li>
<li>Line break handling adjustments. (<a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/214">#214</a>, Michael Anderson)</li>
<li>Disable control characters in link definitions. (<a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/219">#219</a>, Michael Anderson)</li>
</ul>
<p>On crates.io: <a href="https://crates.io/crates/comrak/0.13.0">https://crates.io/crates/comrak/0.13.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/kivikakk/comrak/blob/main/changelog.txt">comrak's changelog</a>.</em></p>
<blockquote>
<h3>0.13.0</h3>
<ul>
<li>SECURITY: Bump regex to 1.5.5. (<a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/221">#221</a>, Dependabot)</li>
<li>Drop unneeded YAML dependency from Syntect. (<a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/199">#199</a>, Chris Wong)</li>
<li>Match newline handling in code inlines to upstream, and improve test failure
reporting. (<a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/210">#210</a>, Michael Anderson)</li>
<li>Make all node value fields public. (<a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/216">#216</a>, Evan Schwartz)</li>
<li>Line break handling adjustments. (<a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/214">#214</a>, Michael Anderson)</li>
<li>Disable control characters in link definitions. (<a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/219">#219</a>, Michael Anderson)</li>
</ul>
<h3>0.12.1</h3>
<ul>
<li>Only load syntax and theme sets once, on Syntect plugin instantiation. (<a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/197">#197</a>)</li>
<li>Match syntax highlighting language names more loosely. (<a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/198">#198</a>)</li>
</ul>
<h3>0.12.0</h3>
<ul>
<li>Add pluggable syntax highlighting, and default implementation with syntect.
(Daniel Simon, <a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/194">#194</a>)</li>
</ul>
<h3>0.11.0</h3>
<ul>
<li>Allow short URLs even with non-empty path. (<a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/191">#191</a>, Bernard Teo)</li>
<li>Expose NodeCode struct in AST. (<a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/192">#192</a>, Vojtech Kral)</li>
</ul>
<h3>0.10.1</h3>
<ul>
<li>SECURITY: it was possible to smuggle unsafe URLs --- like <code>javascript:</code> ones
--- even without using the &quot;unsafe&quot; mode of operation.  Thanks to Sam Sanoop
(snoopysecurity) for reporting.</li>
<li>Recognise tables without a preceding newline. (<a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/183">#183</a>)</li>
</ul>
<h3>0.10.0</h3>
<ul>
<li>0.9.1 was a semver-breaking change.</li>
<li>Add -o/--output CLI option. (<a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/177">#177</a>)</li>
</ul>
<h3>0.9.1</h3>
<ul>
<li>SECURITY: we were matching unsafe URL prefixes, such as <code>data:</code> or
<code>javascript:</code>, in a case-sensitive manner.  This meant prefixes like <code>Data:</code>
were untouched.  Please upgrade as soon as possible.  (Kouhei Morita)</li>
<li>Add support for ignoring front matter. (<a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/170">#170</a>, Eitan Mosenkis.)</li>
</ul>
<h3>0.9.0</h3>
<ul>
<li>0.8.2 was a semver-breaking change, so we're now bumping to 0.9.0.  Some
tests have been added to catch this in future.</li>
<li>Allow image/ prefix on data URIs. (<a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/169">#169</a>, Daniel Sorichetti)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/kivikakk/comrak/commit/76f4b65d183f52c5373d59b09fecc537d1dd9057"><code>76f4b65</code></a> 0.13.0</li>
<li><a href="https://github.com/kivikakk/comrak/commit/2ced2e6422554a9e5d05d180242b16141593ddd9"><code>2ced2e6</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/221">#221</a> from kivikakk/dependabot/cargo/regex-1.5.5</li>
<li><a href="https://github.com/kivikakk/comrak/commit/95a1408697e86292280d04589407bbbccafd4f2d"><code>95a1408</code></a> Bump regex from 1.5.4 to 1.5.5</li>
<li><a href="https://github.com/kivikakk/comrak/commit/e355177776c1a49b8d08c881ac14b9fa9edcf0a9"><code>e355177</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/219">#219</a> from mikeando/disable_control_characters_in_link_defi...</li>
<li><a href="https://github.com/kivikakk/comrak/commit/87c64837dd4af4dc2aac46cb5cd3fe44a4ce7325"><code>87c6483</code></a> disable control characters in link definitions</li>
<li><a href="https://github.com/kivikakk/comrak/commit/0deecf6daf35c5d2bbaf38fcbe6b926da6a6938e"><code>0deecf6</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/214">#214</a> from mikeando/remove_leading_spaces_after_linebreak</li>
<li><a href="https://github.com/kivikakk/comrak/commit/abbe664350b6de752ae8819a2dddd23303e421bb"><code>abbe664</code></a> remove leading spaces after a hard line break</li>
<li><a href="https://github.com/kivikakk/comrak/commit/cbae4da33f4311f8e176e7027c881b1d81f746ed"><code>cbae4da</code></a> change rendering of hard-line break from double-space to esacped-space</li>
<li><a href="https://github.com/kivikakk/comrak/commit/37e5e32b66ff578215a6ea09df39ec20ccc7e863"><code>37e5e32</code></a> minor refactor to Subject::parse_inline</li>
<li><a href="https://github.com/kivikakk/comrak/commit/dc2d4b525d2885d00200875d2177287ba484601c"><code>dc2d4b5</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/kivikakk/comrak/issues/216">#216</a> from emschwartz/main</li>
<li>Additional commits viewable in <a href="https://github.com/kivikakk/comrak/compare/0.12.0...0.13.0">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>


Patch:
diff --git a/askama_shared/Cargo.toml b/askama_shared/Cargo.toml
index 8affe58..0a2cb21 100644
--- a/askama_shared/Cargo.toml
+++ b/askama_shared/Cargo.toml
@@ -26,7 +26,7 @@ warp = []
 
 [dependencies]
 askama_escape = { version = "0.10.3", path = "../askama_escape" }
-comrak = { version = "0.12", optional = true, default-features = false }
+comrak = { version = "0.13", optional = true, default-features = false }
 humansize = { version = "1.1.0", optional = true }
 mime = "0.3"
 mime_guess = "2"


Test patch:
diff --git a/testing/Cargo.toml b/testing/Cargo.toml
index bd7bbc9..77ab25e 100644
--- a/testing/Cargo.toml
+++ b/testing/Cargo.toml
@@ -13,7 +13,7 @@ markdown = ["comrak", "askama/markdown"]
 
 [dependencies]
 askama = { path = "../askama", version = "0.11.0-beta.1" }
-comrak = { version = "0.12", default-features = false, optional = true }
+comrak = { version = "0.13", default-features = false, optional = true }
 serde_json = { version = "1.0", optional = true }
 
 [dev-dependencies]