Skip to content

Bump yard from 0.9.37 to 0.9.45 - #501

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bundler/yard-0.9.45
Open

Bump yard from 0.9.37 to 0.9.45#501
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bundler/yard-0.9.45

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 14, 2026

Copy link
Copy Markdown
Contributor

Bumps yard from 0.9.37 to 0.9.45.

Release notes

Sourced from yard's releases.

Release v0.9.45

  • Use @param types to document generated Struct.new and Data.define members (#1684)
  • Add compatibility with RDoc 8
  • Fix TypesExplainer parsing of types following Hash collections (#1688)
  • Fix HTML generation for RBS constants without source values (#1686)
  • Fix method redefinition warnings when loading YARD with Ruby warnings enabled (#1687)
  • Improve sanitization of yard server request paths

Release v0.9.44

  • Fix possible path traversal with document_root (--docroot) and disk caching (--cache) set in yard server (GHSA-pxcc-8665-phx8)
  • Fix support for HTML entities in HybridMarkup (#1680, #1681)
  • Add support for string literals in TypesExplainer (#1628)
  • Add support for multiple & nested Hash keys definition (#1630)

Release v0.9.43

  • Fix attribute registration in .rbs files (#1583)

Release v0.9.42

  • Fix alternating rows when loading a module in default HTML templates with subelements in the nav frame
  • Fix reliability of keypresses and copy/paste in search box (#1174)
  • Fix regression in yard server search box styling
  • Fix possible path traversal with document_root (--docroot) set in yard server (GHSA-xfhh-rx56-rxcr)

Release v0.9.41

  • Add support for rdoc-image:... syntax in HybridMarkup (#1676)
  • Add support for colon suffix code blocks in HybridMarkup (rdoc compatibility)
  • Fix responsiveness and state issues with nav frame links in yard server

Release v0.9.40

  • Add support for Ruby .rbs files (docstrings included) (#1673)
  • Add built-in hybrid RDoc/Markdown renderer (HybridMarkdown) requiring no external gems (#1674)
  • Add support for #- as a comment-block separator. See Getting Started Guide.
  • Add support for commonmarker version >= 1.0.
  • Remove usage of jQuery in default templates. jQuery library is still packaged in templates for backward compatibility (#1675)
  • Fix false self-referential mixin when bare name matches ancestor namespace (#1672)
  • Fix bracket/brace map corruption from Ruby 3.0+ pattern matching deconstruction (#1671)
  • Fix @!scope class on attributes (#1582, #1655, #1666)
  • Fix @!parse directives not including source for block (#1665)

... (truncated)

Changelog

Sourced from yard's changelog.

0.9.45 - July 14th, 2026

  • Use @param types to document generated Struct.new and Data.define members (#1684)
  • Add compatibility with RDoc 8
  • Fix TypesExplainer parsing of types following Hash collections (#1688)
  • Fix HTML generation for RBS constants without source values (#1686)
  • Fix method redefinition warnings when loading YARD with Ruby warnings enabled (#1687)
  • Improve sanitization of yard server request paths

0.9.44 - May 25th, 2026

  • Fix possible path traversal with document_root (--docroot) and disk caching (--cache) set in yard server (GHSA-pxcc-8665-phx8)
  • Fix support for HTML entities in HybridMarkup (#1680, #1681)
  • Add support for string literals in TypesExplainer (#1628)
  • Add support for multiple & nested Hash keys definition (#1630)

0.9.43 - April 17th, 2026

  • Fix attribute registration in .rbs files (#1583)

0.9.42 - April 16th, 2026

  • Fix alternating rows when loading a module in default HTML templates with subelements in the nav frame
  • Fix reliability of keypresses and copy/paste in search box (#1174)
  • Fix regression in yard server search box styling
  • Fix possible path traversal with document_root (--docroot) set in yard server (GHSA-xfhh-rx56-rxcr)

0.9.41 - April 14th, 2026

  • Add support for rdoc-image:... syntax in HybridMarkup (#1676)
  • Add support for colon suffix code blocks in HybridMarkup (rdoc compatibility)
  • Fix responsiveness and state issues with nav frame links in yard server

0.9.40 - April 12th, 2026

  • Add support for Ruby .rbs files (docstrings included) (#1673)
  • Add built-in hybrid RDoc/Markdown renderer (HybridMarkdown) requiring no external gems (#1674)
  • Add support for #- as a comment-block separator. See Getting Started Guide.

... (truncated)

Commits
  • 2659ecd Release: v0.9.45
  • 2b467e0 Create a gh-fix skill
  • 2842ba7 Update changelog
  • 00fe9b1 Refactor server sanitization logic
  • c6fd371 Use @​param types for Struct and Data members (#1695)
  • d2a8883 Merge remote-tracking branch 'origin/main' into fix/issue-1684-struct-data-pa...
  • 674d0cf Fix parser method redefinition warnings (#1694)
  • 9483cd3 Use param types for Struct and Data members
  • 12ed8b7 Merge main into fix/issue-1687-method-redefined-warnings
  • 9b874e2 Fix HTML generation for RBS constants
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [yard](https://github.com/lsegal/yard) from 0.9.37 to 0.9.45.
- [Release notes](https://github.com/lsegal/yard/releases)
- [Changelog](https://github.com/lsegal/yard/blob/main/CHANGELOG.md)
- [Commits](lsegal/yard@v0.9.37...v0.9.45)

---
updated-dependencies:
- dependency-name: yard
  dependency-version: 0.9.45
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependabot Pull requests that update a dependency file label Jul 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant