Skip to content

Bump github-pages from 232 to 233 - #654

Merged
jwheare merged 1 commit into
masterfrom
dependabot/bundler/github-pages-233
Nov 9, 2026
Merged

jwheare merged 1 commit into
masterfrom
dependabot/bundler/github-pages-233

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps github-pages from 232 to 233.

Release notes

Sourced from github-pages's releases.

v233

Security updates

This release updates four bundled plugins to versions that fix published security advisories.

Gem Old New Fix
jekyll-redirect-from 0.16.0 0.17.0 GHSA-xfg6-hjrc-hpvx: script injection through redirect_to
jekyll-seo-tag 2.8.0 2.9.1 GHSA-572m-7cg5-6j5r: HTML/script injection through metadata and JSON-LD
jekyll-feed 0.17.0 0.18.0 GHSA-3gx8-pqcm-38hw: unescaped post.lang and CDATA breakout
jekyll-remote-theme 0.4.3 0.6.2 Allows rubyzip 3.x for the CVE-2026-85396 fix (#966); fixes GHSA-3343-386p-v26g

Possible output changes

  • jekyll-remote-theme 0.6.x requires Ruby 3.0 or later and adds a runtime dependency on openssl (>= 3.1.2).
  • jekyll-seo-tag 2.9.x changes some <head> output: it adds twitter:description, shortens descriptions to 100 words and supports canonical: false.
  • jekyll-redirect-from 0.17.0 skips redirect_to targets that aren't http(s) or relative, with a build warning. It also percent-encodes characters such as quotes, < and >.

What's Changed

Full Changelog: github/pages-gem@v232...v233

Commits
  • e382ad7 Merge pull request #969 from github/prep-233
  • 5b971e2 Bump version to 233
  • 38fbe00 Merge pull request #968 from github/update-tests
  • 047f3ba update test
  • f7dd561 Merge pull request #965 from benbalter/security-bumps
  • 09226aa Bump jekyll-remote-theme to 0.6.2 for rubyzip and local-path fixes
  • adedc53 Bump jekyll-seo-tag, jekyll-feed and jekyll-redirect-from for security fixes
  • cd7369a Merge pull request #929 from github/security-fixes
  • 4db45df Fix security issues in various workflows
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github-pages](https://github.com/github/pages-gem) from 232 to 233.
- [Release notes](https://github.com/github/pages-gem/releases)
- [Commits](github/pages-gem@v232...v233)

---
updated-dependencies:
- dependency-name: github-pages
  dependency-version: '233'
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Nov 9, 2026
@jwheare
jwheare merged commit 4d85ddb into master Nov 9, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant