bluemonday from 1.0.26 to 1.0.27 #229

New issue

Closed

opened 2026-09-29 13:00:33 +00:00 by slurdge · 0 comments

slurdge commented

2026-09-29 13:00:33 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/slurdge/goeland/pull/220
Author: @dependabot[bot]
Created: 4/7/2025
Status: ✅ Merged
Merged: 4/10/2025
Merged by: @slurdge

Base: master ← Head: dependabot/go_modules/github.com/microcosm-cc/bluemonday-1.0.27

📝 Commits (1)

725fb86 chore(deps): bump github.com/microcosm-cc/bluemonday

📊 Changes

2 files changed (+6 additions, -5 deletions)

View changed files

📝 go.mod (+2 -2)
📝 go.sum (+4 -3)

📄 Description

Bumps github.com/microcosm-cc/bluemonday from 1.0.26 to 1.0.27.

Commits

10b8ac6 Remove SPDX header from LICENSE to enable GitHub auto-detection
30fb5d7 Don't duplicate attrs if multiple global policies allow them
e244202 Update CONTRIBUTING.md (fixup of 109c9cf)
206ce8a Update the security policy
109c9cf Clean up developer instructions to a vanilla Go project
e602a4a Fix RequireCrossOriginAnonymous when crossorigin attr is allowed
37251d9 Consistently raise minimum Go version and update CI
135e7bb all: upgrade dependencies
5703ea6 Merge pull request #207 from silverwind/4hex
af654ef Merge pull request #202 from caarlos0/tidy
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/slurdge/goeland/pull/220 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 4/7/2025 **Status:** ✅ Merged **Merged:** 4/10/2025 **Merged by:** [@slurdge](https://github.com/slurdge) **Base:** `master` ← **Head:** `dependabot/go_modules/github.com/microcosm-cc/bluemonday-1.0.27` --- ### 📝 Commits (1) - [`725fb86`](https://github.com/slurdge/goeland/commit/725fb866c4c6c7fc7f65f21af43017a778412360) chore(deps): bump github.com/microcosm-cc/bluemonday ### 📊 Changes **2 files changed** (+6 additions, -5 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+2 -2) 📝 `go.sum` (+4 -3) </details> ### 📄 Description Bumps [github.com/microcosm-cc/bluemonday](https://github.com/microcosm-cc/bluemonday) from 1.0.26 to 1.0.27. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microcosm-cc/bluemonday/commit/10b8ac69db438c65c6d5469bb3c345aaa81f18d9"><code>10b8ac6</code></a> Remove SPDX header from LICENSE to enable GitHub auto-detection</li> <li><a href="https://github.com/microcosm-cc/bluemonday/commit/30fb5d770f18c6fdaf08de8a69d653bd9c8cdd04"><code>30fb5d7</code></a> Don't duplicate attrs if multiple global policies allow them</li> <li><a href="https://github.com/microcosm-cc/bluemonday/commit/e2442025bc0ec6a12e9067a239eff0ed07992720"><code>e244202</code></a> Update CONTRIBUTING.md (fixup of 109c9cf)</li> <li><a href="https://github.com/microcosm-cc/bluemonday/commit/206ce8a024efb597dc2ec26f891046861a88e3b8"><code>206ce8a</code></a> Update the security policy</li> <li><a href="https://github.com/microcosm-cc/bluemonday/commit/109c9cf7afbd8c18dbf173a49aee097732abb519"><code>109c9cf</code></a> Clean up developer instructions to a vanilla Go project</li> <li><a href="https://github.com/microcosm-cc/bluemonday/commit/e602a4a6fe37663ebe14c23c421d3c9792508e54"><code>e602a4a</code></a> Fix RequireCrossOriginAnonymous when crossorigin attr is allowed</li> <li><a href="https://github.com/microcosm-cc/bluemonday/commit/37251d938175452d2e44ecdfddfda1bab0e215b6"><code>37251d9</code></a> Consistently raise minimum Go version and update CI</li> <li><a href="https://github.com/microcosm-cc/bluemonday/commit/135e7bb4db46c461b695fff528558422b38d3454"><code>135e7bb</code></a> all: upgrade dependencies</li> <li><a href="https://github.com/microcosm-cc/bluemonday/commit/5703ea623cf20edfa3b559ec06a30beed52d70f0"><code>5703ea6</code></a> Merge pull request <a href="https://redirect.github.com/microcosm-cc/bluemonday/issues/207">#207</a> from silverwind/4hex</li> <li><a href="https://github.com/microcosm-cc/bluemonday/commit/af654ef6ea1775b2930468f400d09af5a539dab9"><code>af654ef</code></a> Merge pull request <a href="https://redirect.github.com/microcosm-cc/bluemonday/issues/202">#202</a> from caarlos0/tidy</li> <li>Additional commits viewable in <a href="https://github.com/microcosm-cc/bluemonday/compare/v1.0.26...v1.0.27">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/microcosm-cc/bluemonday&package-manager=go_modules&previous-version=1.0.26&new-version=1.0.27)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>