dependabot-common 0.108.3 → 0.108.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 63afec5d63d1ab119badb36496560a89b7a9007bd8429a79d723330c1b1e2f34
-  data.tar.gz: ddb29af50745ff6e27ec4ac8d016d3db304e4515cc426588b7b9092ddd04d612
+  metadata.gz: d68a1ea21546b35950e7072d9178e2579fc797704842e33ef11c497e49687581
+  data.tar.gz: ccb18143558489b6012f928ab3b707c116211f8b1ff19ac714a5110f3560cc00
 SHA512:
-  metadata.gz: 5513ec93a87c787e3254943dd1e0f5cf125fa1dcb62ceaf90e46648695b791b46b806c3e3eb5fcf7782e182151e3f02ffd75b76559509678d56eaeb436e465ca
-  data.tar.gz: c94d6e8dda4748b16e3ee5a1a2dedd24dc0768b70e1d4098c8c308cd441f958cec8b3ef667a8ebf92898e6c43b1017ccd09b6ae7ec072546b07efb6fb976d76e
+  metadata.gz: a1f3b96758218b145a841bc03b95786f1ea27078e6eadadc128f6d41e36d503d5b97474de3dbe025cc9d6c8a1450ed9ac197463d5812d9a569fcd3e12ce34d94
+  data.tar.gz: 6c18251300efc4a18452c5a2b01b6fc3f75bcb8cf642aa7c7abf0d1a49c83dcfda0e99cf91d7f9c39d6cb8caa653a7512203fe9e63b49f2379ad1e09bacc7c86

data/lib/dependabot/pull_request_creator/message_builder.rb

@@ -407,6 +407,7 @@ module Dependabot
         msg = ""
         fixed_vulns.each { |v| msg += serialized_vulnerability_details(v) }
         msg = sanitize_template_tags(msg)
+        msg = sanitize_links_and_mentions(msg)
 
         build_details_tag(summary: "Vulnerabilities fixed", body: msg)
       end
@@ -431,6 +432,7 @@ module Dependabot
           base_url: source_url(dep) + "/blob/HEAD/"
         )
         msg = sanitize_template_tags(msg)
+        msg = sanitize_links_and_mentions(msg)
 
         build_details_tag(summary: "Release notes", body: msg)
       end
@@ -450,6 +452,7 @@ module Dependabot
         msg = link_issues(text: msg, dependency: dep)
         msg = fix_relative_links(text: msg, base_url: changelog_url(dep))
         msg = sanitize_template_tags(msg)
+        msg = sanitize_links_and_mentions(msg)
 
         build_details_tag(summary: "Changelog", body: msg)
       end
@@ -470,6 +473,7 @@ module Dependabot
         msg = link_issues(text: msg, dependency: dep)
         msg = fix_relative_links(text: msg, base_url: upgrade_url(dep))
         msg = sanitize_template_tags(msg)
+        msg = sanitize_links_and_mentions(msg)
 
         build_details_tag(summary: "Upgrade guide", body: msg)
       end
@@ -496,6 +500,7 @@ module Dependabot
             "- See full diff in [compare view](#{commits_url(dep)})\n"
           end
         msg = link_issues(text: msg, dependency: dep)
+        msg = sanitize_links_and_mentions(msg)
 
         build_details_tag(summary: "Commits", body: msg)
       end

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.108.3"
+  VERSION = "0.108.4"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.108.3
+  version: 0.108.4
 platform: ruby
 authors:
 - Dependabot