iCook's official tvOS app

Polydice, Inc.

Last update: Nov 17, 2022

Related tags

Video iCook-tvOS

Overview

iCook tvOS App

A tvOS app that plays iCook TV videos.

Quick Start

Run the following commands to install dependencies:

make bootstrap

Production Setups

If you work at Polydice, instead of make bootstrap, set up the project step by step with the following commands. Fill in the credentials and ask admin for required files.

bundle install
bundle exec pod install

API

pod install will prompt for the required configuration to run the app:

CocoaPods-Keys has detected a keys mismatch for your setup.
What is the key for BaseAPIURL
>

TBD: API details are hidden for now due to proprietary reasons.

Required Keys

Managed by CocoaPods-Keys:

BaseAPIURL
FacebookAppID

Required Files

Required by the Firebase SDK for the Release configuration:
```
iCookTV/GoogleService-Info.plist
```

Demo

Download the tvOS app from App Store.

Contact

License

The names and icons for iCook are trademarks of Polydice, Inc. Please refer to the guidelines at iCook Newsroom.

The source code is released under the MIT license. See LICENSE for more info.

Comments

Swift 5

Part the subsequent updates of #9. Update the codebase to the latest Swift syntax and Xcode 10.3.

⬜️ Remove R.swift ⬜️ Replace Freddy with Swift Codable ⬜️ Replace Quick and Nimble with XCTest ✅ Update the project to Xcode 10.3 with Swift 5

⚠️ Not ready to merge until the previous PRs are merged. The base branch needs to be updated.

opened by bcylin 5
Danger.systems

http://danger.systems/

@polydice/ios could you please help with a public_repo scope token from @polydicebot for the DangerCI to use?

http://danger.systems/guides/getting_started.html#setting-up-an-access-token

Then add the token as DANGER_GITHUB_API_TOKEN to Travis CI env to see if this works, thanks.

opened by bcylin 5
Update project configuration
This PR separates the changes of project config from #8.

It seems to be very difficult to migrate the project from Swift 3 to Swift 5 at once. One possible approach is to reduce third party dependencies and update different parts of the project separately.

It updates Gems and fixes SwiftLint warnings, getting prepared for the migration to Swift 5. CocoaPods is locked at 1.3.1 with Xcode 9.2 to keep the CI running. #trivial

Subsequent updates:

Close #8

Remove R.swift

Replace Freddy with Swift Codable

Replace Quick and Nimble with XCTest

Update the project to Xcode 10.3 with Swift 5
opened by bcylin 3
Bump addressable from 2.7.0 to 2.8.0
Bumps addressable from 2.7.0 to 2.8.0.

Changelog

Sourced from addressable's changelog.

Addressable 2.8.0

fixes ReDoS vulnerability in Addressable::Template#match

no longer replaces + with spaces in queries for non-http(s) schemes

fixed encoding ipv6 literals

the :compacted flag for normalized_query now dedupes parameters

fix broken escape_component alias

dropping support for Ruby 2.0 and 2.1

adding Ruby 3.0 compatibility for development tasks

drop support for rack-mount and remove Addressable::Template#generate

performance improvements

switch CI/CD to GitHub Actions

Commits

6469a23 Updating gemspec again

2433638 Merge branch 'main' of github.com:sporkmonger/addressable into main

e9c76b8 Merge pull request #378 from ashmaroli/flat-map

56c5cf7 Update the gemspec

c1fed1c Require a non-vulnerable rake

0d8a312 Adding note about ReDoS vulnerability

89c7613 Merge branch 'template-regexp' into main

cf8884f Note about alias fix

bb03f71 Merge pull request #371 from charleystran/add_missing_encode_component_doc_entry

6d1d809 Adding note about :compacted normalization

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 2
Fastlane update & cleanups
[x] Update fastlane and gems

[x] Use fastlane plugin for codecov coverage reporting

[x] Avoid specifying target device for CI

[x] Add Matchfile for cert management
opened by dlackty 2
Clean up tracking
[x] Remove Treasure Data SDK

[x] Migrate Crashlytics from Fabric to Firebase

[x] Drop Fabric Answers as there's no replacement from Firebase yet

[x] Use Facebook Analytics
opened by dlackty 2
Remove R.swift

This PR removes the dependency of R.swift, which caused a problem in some versions of Xcode and CocoaPods. Part the subsequent updates of #9.

✅ Remove R.swift ⬜️ Replace Freddy with Swift Codable ⬜️ Replace Quick and Nimble with XCTest ⬜️ Update the project to Xcode 10.3 with Swift 5

⚠️ ~~Not ready to merge until #9 is merged. The base branch needs to be updated.~~

opened by bcylin 2
Bump kramdown from 2.2.1 to 2.3.0
Bumps kramdown from 2.2.1 to 2.3.0.

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Replace Quick and Nimble with XCTest

Quick and Nimble caused unexpected errors when running tests on CI. Replacing it with simple XCTest cases should resolve the difficulties after switching to Xcode 10.

Part the subsequent updates of #9.

⬜️ Remove R.swift ⬜️ Replace Freddy with Swift Codable ✅ Replace Quick and Nimble with XCTest ⬜️ Update the project to Xcode 10.3 with Swift 5

⚠️ Not ready to merge until the previous three PRs are merged. The base branch needs to be updated.

opened by bcylin 1
Swift Codable

The JSON parsing using Freddy is outdated after Swift 3. This PR replace it with Swift Codable.

Part the subsequent updates of #9.

⬜️ Remove R.swift ✅ Replace Freddy with Swift Codable ⬜️ Replace Quick and Nimble with XCTest ⬜️ Update the project to Xcode 10.3 with Swift 5

⚠️ ~~Not ready to merge until the previous two PRs are merged. The base branch needs to be updated.~~

opened by bcylin 1
Update Gems and remove R.swift
It seems to be very difficult to migrate the project from Swift 3 to Swift 5 at once. One possible approach is to reduce third party dependencies and update different parts of the project separately.

This PR updates the Gems and removes the dependency of R.swift, which caused a problem in some versions of Xcode and CocoaPods.

TBD:

Replace Freddy with Swift Codable

Replace Quick and Nimble with XCTest

Update the project to Xcode 10.1 with Swift 4.2

Update the project to Xcode 10.3 with Swift 5
opened by bcylin 1
Bump addressable from 2.7.0 to 2.8.1
Bumps addressable from 2.7.0 to 2.8.1.

Changelog

Sourced from addressable's changelog.

Addressable 2.8.1

refactor Addressable::URI.normalize_path to address linter offenses (#430)

remove redundant colon in Addressable::URI::CharacterClasses::AUTHORITY regex (#438)

update gemspec to reflect supported Ruby versions (#466, #464, #463)

compatibility w/ public_suffix 5.x (#466, #465, #460)

fixes "invalid byte sequence in UTF-8" exception when unencoding URLs containing non UTF-8 characters (#459)

Ractor compatibility (#449)

use the whole string instead of a single line for template match (#431)

force UTF-8 encoding only if needed (#341)

#460: sporkmonger/addressable#460 #463: sporkmonger/addressable#463 #464: sporkmonger/addressable#464 #465: sporkmonger/addressable#465 #466: sporkmonger/addressable#466

Addressable 2.8.0

fixes ReDoS vulnerability in Addressable::Template#match

no longer replaces + with spaces in queries for non-http(s) schemes

fixed encoding ipv6 literals

the :compacted flag for normalized_query now dedupes parameters

fix broken escape_component alias

dropping support for Ruby 2.0 and 2.1

adding Ruby 3.0 compatibility for development tasks

drop support for rack-mount and remove Addressable::Template#generate

performance improvements

switch CI/CD to GitHub Actions

Commits

8657465 Update version, gemspec, and CHANGELOG for 2.8.1 (#474)

4fc5bb6 CI: remove Ubuntu 18.04 job (#473)

860fede Force UTF-8 encoding only if needed (#341)

99810af Merge pull request #431 from ojab/ct-_do_not_parse_multiline_strings

7ce0f48 Merge branch 'main' into ct-_do_not_parse_multiline_strings

7ecf751 Merge pull request #449 from okeeblow/freeze_concatenated_strings

41f12dd Merge branch 'main' into freeze_concatenated_strings

068f673 Merge pull request #459 from jarthod/iso-encoding-problem

b4c9882 Merge branch 'main' into iso-encoding-problem

08d27e8 Merge pull request #471 from sporkmonger/sporkmonger-enable-codeql

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Bump tzinfo from 1.2.7 to 1.2.10
Bumps tzinfo from 1.2.7 to 1.2.10.

Release notes

Sourced from tzinfo's releases.

v1.2.10

Fixed a relative path traversal bug that could cause arbitrary files to be loaded with require when used with RubyDataSource. Please refer to https://github.com/tzinfo/tzinfo/security/advisories/GHSA-5cm2-9h8c-rvfx for details. CVE-2022-31163.

Ignore the SECURITY file from Arch Linux's tzdata package. #134.

TZInfo v1.2.10 on RubyGems.org

v1.2.9

Fixed an incorrect InvalidTimezoneIdentifier exception raised when loading a zoneinfo file that includes rules specifying an additional transition to the final defined offset (for example, Africa/Casablanca in version 2018e of the Time Zone Database). #123.

TZInfo v1.2.9 on RubyGems.org

v1.2.8

Added support for handling "slim" format zoneinfo files that are produced by default by zic version 2020b and later. The POSIX-style TZ string is now used calculate DST transition times after the final defined transition in the file. The 64-bit section is now always used regardless of whether Time has support for 64-bit times. #120.

Rubinius is no longer supported.

TZInfo v1.2.8 on RubyGems.org

Changelog

Sourced from tzinfo's changelog.

Version 1.2.10 - 19-Jul-2022

Fixed a relative path traversal bug that could cause arbitrary files to be loaded with require when used with RubyDataSource. Please refer to https://github.com/tzinfo/tzinfo/security/advisories/GHSA-5cm2-9h8c-rvfx for details. CVE-2022-31163.

Ignore the SECURITY file from Arch Linux's tzdata package. #134.

Version 1.2.9 - 16-Dec-2020

Fixed an incorrect InvalidTimezoneIdentifier exception raised when loading a zoneinfo file that includes rules specifying an additional transition to the final defined offset (for example, Africa/Casablanca in version 2018e of the Time Zone Database). #123.

Version 1.2.8 - 8-Nov-2020

Added support for handling "slim" format zoneinfo files that are produced by default by zic version 2020b and later. The POSIX-style TZ string is now used calculate DST transition times after the final defined transition in the file. The 64-bit section is now always used regardless of whether Time has support for 64-bit times. #120.

Rubinius is no longer supported.

Commits

0814dcd Fix the release date.

fd05e2a Preparing v1.2.10.

b98c32e Merge branch 'fix-directory-traversal-1.2' into 1.2

ac3ee68 Remove unnecessary escaping of + within regex character classes.

9d49bf9 Fix relative path loading tests.

394c381 Remove private_constant for consistency and compatibility.

5e9f990 Exclude Arch Linux's SECURITY file from the time zone index.

17fc9e1 Workaround for 'Permission denied - NUL' errors with JRuby on Windows.

6bd7a51 Update copyright years.

9905ca9 Fix directory traversal in Timezone.get when using Ruby data source

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Bump jmespath from 1.4.0 to 1.6.1
Bumps jmespath from 1.4.0 to 1.6.1.

Release notes

Sourced from jmespath's releases.

Release v1.6.1 - 2022-03-07

Issue - Use JSON.parse instead of JSON.load.

Release v1.6.0 - 2022-02-14

Feature - Add support for string comparissons.

Release v1.5.0 - 2022-01-10

Support implicitly convertible objects/duck-type values responding to to_hash and to_ary.

[See related GitHub pull request #51](jmespath/jmespath.rb#51).

Changelog

Sourced from jmespath's changelog.

1.6.1 (2022-03-07)

Issue - Use JSON.parse instead of JSON.load.

1.6.0 (2022-02-14)

Feature - Add support for string comparisons.

1.5.0 (2022-01-10)

Support implicitly convertible objects/duck-type values responding to to_hash and to_ary.

[See related GitHub pull request #51](jmespath/jmespath.rb#51).

Commits

6e429f6 Bumped version to v1.6.1

e884128 Merge pull request #55 from jmespath/json-parse

f517de4 Use JSON.parse instead of JSON.load

754bf30 Create security.md

010e3cd Release 1.6.0

ac17836 Add changelog for string comparison.

4b8773a Allow string comparison (#49)

9655aa9 Minor fixes to use 1p release tools.

fb80f31 Bumped version to v1.5.0

77913ac Use the new 1p gem release tools

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Bump git from 1.7.0 to 1.11.0
Bumps git from 1.7.0 to 1.11.0.

Release notes

Sourced from git's releases.

Release v1.11.0

Full Changelog

292087e Supress unneeded test output (#570)

19dfe5e Add support for fetch options "--force/-f" and "--prune-tags/-P". (#563)

018d919 Fix bug when grepping lines that contain numbers surrounded by colons (#566)

c04d16e remove from maintainer (#567)

291ca09 Address command line injection in Git::Lib#fetch

521b8e7 Release v1.10.2 (#561)

Release v1.10.2

Full Changelog

57f941c Release v1.10.2

c987a74 Add create-release, setup, and console dev scripts (#560)

12e3d03 Store tempfile objects to prevent deletion during tests (#555)

Release v1.10.1

Full Changelog

c7b12af Release v1.10.1

ea28118 Properly escape double quotes in shell commands on Windows (#552)

db060fc Properly unescape diff paths (#504)

ea47044 Add Ruby 3.0 to CI build (#547)

cb01d2b Create a Docker image to run the changelog (#546)

v.1.10.0

Full Changelog

8acec7d Release v1.10.0 (#545)

8feb4ff Refactor directory initialization (#544)

3884314 Add -ff option to git clean (#529)

984ff7f #533 Add --depth options for fetch call (#534)

6cba37e Add support for git init --initial-branch=main argument (#539)

ff98c42 Add support for the git merge --no-commit argument (#538)

1023f85 Require pathname module (#536)

v1.9.1

Full Changelog

58100b0 Release v1.9.1 (#527)

45aeac9 Fix the gpg_sign commit option (#525)

v1.9.0

Full Changelog

07a1167 Release v1.9.0 (#524)

8fe479b Fix worktree test when git dir includes symlinks (#522)

0cef8ac feat: add --gpg-sign option on commits (#518)

765df7c Adds file option to config_set to allow adding to specific git-config files (#458)

... (truncated)

Changelog

Sourced from git's changelog.

v1.11.0

292087e Supress unneeded test output (#570)

19dfe5e Add support for fetch options "--force/-f" and "--prune-tags/-P". (#563)

018d919 Fix bug when grepping lines that contain numbers surrounded by colons (#566)

c04d16e remove from maintainer (#567)

291ca09 Address command line injection in Git::Lib#fetch

521b8e7 Release v1.10.2 (#561)

See https://github.com/ruby-git/ruby-git/releases/tag/v1.11.0

v1.10.2

See https://github.com/ruby-git/ruby-git/releases/tag/v1.10.2

1.10.1

See https://github.com/ruby-git/ruby-git/releases/tag/v1.10.1

1.10.0

See https://github.com/ruby-git/ruby-git/releases/tag/v1.10.0

1.9.1

See https://github.com/ruby-git/ruby-git/releases/tag/v1.9.1

1.9.0

See https://github.com/ruby-git/ruby-git/releases/tag/v1.9.0

1.8.1

See https://github.com/ruby-git/ruby-git/releases/tag/v1.8.1

1.8.0

See https://github.com/ruby-git/ruby-git/releases/tag/v1.8.0

Commits

546bc03 Release v1.11.0

292087e Supress unneeded test output (#570)

19dfe5e Add support for fetch options "--force/-f" and "--prune-tags/-P". (#563)

018d919 Fix bug when grepping lines that contain numbers surrounded by colons (#566)

c04d16e remove from maintainer (#567)

291ca09 Address command line injection in Git::Lib#fetch

521b8e7 Release v1.10.2 (#561)

c987a74 Add create-release, setup, and console dev scripts (#560)

12e3d03 Store tempfile objects to prevent deletion during tests (#555)

735b083 Release v1.10.1 (#553)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Bump cocoapods-downloader from 1.3.0 to 1.6.3
Bumps cocoapods-downloader from 1.3.0 to 1.6.3.

Release notes

Sourced from cocoapods-downloader's releases.

1.6.3

Enhancements

None.

Bug Fixes

None.

1.6.2

Enhancements

None.

Bug Fixes

None.

1.6.1

Enhancements

None.

Bug Fixes

None.

1.6.0

Enhancements

None.

Bug Fixes

Adds a check for command injections in the input for hg and git.
orta #124

1.5.1

Enhancements

None.

Bug Fixes

Fix "can't modify frozen string" errors when pods are integrated using the branch option
buju77 #10920

1.5.0

... (truncated)

Changelog

Sourced from cocoapods-downloader's changelog.

1.6.3 (2022-04-01)

Enhancements

None.

Bug Fixes

None.

1.6.2 (2022-03-28)

Enhancements

None.

Bug Fixes

None.

1.6.1 (2022-03-23)

Enhancements

None.

Bug Fixes

None.

1.6.0 (2022-03-22)

Enhancements

None.

Bug Fixes

Adds a check for command injections in the input for hg and git.
orta #124

1.5.1 (2021-09-07)

Enhancements

None.

... (truncated)

Commits

c03e2ed Release 1.6.3

f75bccc Disable Bazaar tests due to macOS 12.3 not including python2

52a0d54 Merge pull request #128 from CocoaPods/validate_before_dl

d27c983 Ensure that the git pre-processor doesn't accidentally bail also

3adfe1f [CHANGELOG] Add empty Master section

591167a Release 1.6.2

d2564c3 Merge pull request #127 from CocoaPods/validate_before_dl

99fec61 Switches where we check for invalid input, to move it inside the download fun...

96679f2 [CHANGELOG] Add empty Master section

3a7c54b Release 1.6.1

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Bump rexml from 3.2.4 to 3.2.5
Bumps rexml from 3.2.4 to 3.2.5.

Changelog

Sourced from rexml's changelog.

3.2.5 - 2021-04-05 {#version-3-2-5}

Improvements

Add more validations to XPath parser.

require "rexml/document" by default. [GitHub#36][Patch by Koichi ITO]

Don't add #dcloe method to core classes globally. [GitHub#37][Patch by Akira Matsuda]

Add more documentations. [Patch by Burdette Lamar]

Added REXML::Elements#parent. [GitHub#52][Patch by Burdette Lamar]

Fixes

Fixed a bug that REXML::DocType#clone doesn't copy external ID information.

Fixed round-trip vulnerability bugs. See also: https://www.ruby-lang.org/en/news/2021/04/05/xml-round-trip-vulnerability-in-rexml-cve-2021-28965/ [HackerOne#1104077][CVE-2021-28965][Reported by Juho Nurminen]

Thanks

Koichi ITO

Akira Matsuda

Burdette Lamar

Juho Nurminen

Commits

a622645 Add 3.2.5 entry

3c137eb Fix a parser bug that some data may be ignored before DOCTYPE

9b311e5 Fix a bug that invalid document declaration may be accepted

f9d88e4 Fix a bug that invalid document declaration may be generated

f7bab89 Fix a bug that invalid element end may be accepted

6a250d2 Fix a bug that invalid element start may be accepted

2fe62e2 Fix a bug that invalid notation declaration may be accepted

a659c63 Fix a bug that invalid notation declaration may be generated

790dd11 Use ruby/setup-ruby (#66)

eda1b20 Clean up and enhance high-level RDoc (#65)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1

Releases(v1.1.0)

v1.1.0(May 13, 2020)
Added

Syntax check with SwiftLint #3

Code coverage

A little help from Danger #4

Protocol extended features

Swift 3 syntax updates #5

Simpler project quick start #6

Replace Freddy with Swift Codable #11

Replace Quick and Nimble with XCTest #12

Swift 5 #13

Update gems and migrate to GitHub Actions #14

Clean up tracking #15

Clean up Fastlane and CI #16

Add ComScore SDK #17

Source code(tar.gz)
Source code(zip)
v1.0.0(Aug 27, 2016)
Initial release written in Swift 2.2

Play high quality iCook TV videos

Blurred background based on focus items

Source code(tar.gz)
Source code(zip)