Bump jekyll-feed from 0.17.0 to 0.18.0 #7

Open

dependabot[bot] wants to merge 1 commit from dependabot/bundler/jekyll-feed-0.18.0 into main

dependabot[bot] commented

2026-10-19 08:02:40 +00:00

(Migrated from github.com)

Bumps jekyll-feed from 0.17.0 to 0.18.0.

Release notes

Sourced from jekyll-feed's releases.

v0.18.0

Security

Escape xml:lang values and CDATA terminators in the feed (GHSA-3gx8-pqcm-38hw, #396)

Development Fixes

Upgrade to Rake 13 to fix master (#381)

feat(CI): Add Ruby 3.2/3.3 to the test matrix (#402)

Fix style offenses (#414)

Documentation

Fix typos in Readme (#384)

Minor Enhancements

Icon and logo support with simple tests (#412)

Changelog

Sourced from jekyll-feed's changelog.

0.18.0 / 2026-09-29

Security

Escape xml:lang values and CDATA terminators in the feed (GHSA-3gx8-pqcm-38hw, #396)

Development Fixes

Upgrade to Rake 13 to fix master (#381)

feat(CI): Add Ruby 3.2/3.3 to the test matrix (#402)

Fix style offenses (#414)

Documentation

Fix typos in Readme (#384)

Minor Enhancements

Icon and logo support with simple tests (#412)

Commits

61a0447 Merge pull request #431 from jekyll/escape-entry-lang
2215b0e Release 0.18.0
b4225de Escape entry language
43cc5d5 Update history to reflect merge of #414 [ci skip]
7aa1e69 Fix style offenses (#414)
1f3d80f Update history to reflect merge of #412 [ci skip]
f0ccb2f Icon and logo support with simple tests (#412)
f321e1c Update history to reflect merge of #402 [ci skip]
d9f04a7 feat(CI): Add Ruby 3.2/3.3 to the test matrix (#402)
7d9c3a4 History.markdown: Fix release date of 0.9.3
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [jekyll-feed](https://github.com/jekyll/jekyll-feed) from 0.17.0 to 0.18.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jekyll/jekyll-feed/releases">jekyll-feed's releases</a>.</em></p> <blockquote> <h2>v0.18.0</h2> <h3>Security</h3> <ul> <li>Escape <code>xml:lang</code> values and CDATA terminators in the feed (GHSA-3gx8-pqcm-38hw, <a href="https://redirect.github.com/jekyll/jekyll-feed/issues/396">#396</a>)</li> </ul> <h3>Development Fixes</h3> <ul> <li>Upgrade to Rake 13 to fix master (<a href="https://redirect.github.com/jekyll/jekyll-feed/issues/381">#381</a>)</li> <li>feat(CI): Add Ruby 3.2/3.3 to the test matrix (<a href="https://redirect.github.com/jekyll/jekyll-feed/issues/402">#402</a>)</li> <li>Fix style offenses (<a href="https://redirect.github.com/jekyll/jekyll-feed/issues/414">#414</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>Fix typos in Readme (<a href="https://redirect.github.com/jekyll/jekyll-feed/issues/384">#384</a>)</li> </ul> <h3>Minor Enhancements</h3> <ul> <li>Icon and logo support with simple tests (<a href="https://redirect.github.com/jekyll/jekyll-feed/issues/412">#412</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jekyll/jekyll-feed/blob/master/History.markdown">jekyll-feed's changelog</a>.</em></p> <blockquote> <h2>0.18.0 / 2026-09-29</h2> <h3>Security</h3> <ul> <li>Escape <code>xml:lang</code> values and CDATA terminators in the feed (GHSA-3gx8-pqcm-38hw, <a href="https://redirect.github.com/jekyll/jekyll-feed/issues/396">#396</a>)</li> </ul> <h3>Development Fixes</h3> <ul> <li>Upgrade to Rake 13 to fix master (<a href="https://redirect.github.com/jekyll/jekyll-feed/issues/381">#381</a>)</li> <li>feat(CI): Add Ruby 3.2/3.3 to the test matrix (<a href="https://redirect.github.com/jekyll/jekyll-feed/issues/402">#402</a>)</li> <li>Fix style offenses (<a href="https://redirect.github.com/jekyll/jekyll-feed/issues/414">#414</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>Fix typos in Readme (<a href="https://redirect.github.com/jekyll/jekyll-feed/issues/384">#384</a>)</li> </ul> <h3>Minor Enhancements</h3> <ul> <li>Icon and logo support with simple tests (<a href="https://redirect.github.com/jekyll/jekyll-feed/issues/412">#412</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jekyll/jekyll-feed/commit/61a0447d10cb263b639c8fd13468676c278f89a6"><code>61a0447</code></a> Merge pull request <a href="https://redirect.github.com/jekyll/jekyll-feed/issues/431">#431</a> from jekyll/escape-entry-lang</li> <li><a href="https://github.com/jekyll/jekyll-feed/commit/2215b0e2fab0b64a6020dffd1a0c946a416e71ca"><code>2215b0e</code></a> Release 0.18.0</li> <li><a href="https://github.com/jekyll/jekyll-feed/commit/b4225de025ed0ad9a4549315f0a310aa6f15e61c"><code>b4225de</code></a> Escape entry language</li> <li><a href="https://github.com/jekyll/jekyll-feed/commit/43cc5d51e30b59ab8d8ba970e42c8c437e2b233f"><code>43cc5d5</code></a> Update history to reflect merge of <a href="https://redirect.github.com/jekyll/jekyll-feed/issues/414">#414</a> [ci skip]</li> <li><a href="https://github.com/jekyll/jekyll-feed/commit/7aa1e69b76806e56bd37e129bd37cb38a974fd3c"><code>7aa1e69</code></a> Fix style offenses (<a href="https://redirect.github.com/jekyll/jekyll-feed/issues/414">#414</a>)</li> <li><a href="https://github.com/jekyll/jekyll-feed/commit/1f3d80ff19afedc6e98c75d89505b7809af5bd70"><code>1f3d80f</code></a> Update history to reflect merge of <a href="https://redirect.github.com/jekyll/jekyll-feed/issues/412">#412</a> [ci skip]</li> <li><a href="https://github.com/jekyll/jekyll-feed/commit/f0ccb2f306bf8c8e591c6dacf7fa33f7a27db94c"><code>f0ccb2f</code></a> Icon and logo support with simple tests (<a href="https://redirect.github.com/jekyll/jekyll-feed/issues/412">#412</a>)</li> <li><a href="https://github.com/jekyll/jekyll-feed/commit/f321e1cd8115599340fb3668edab1ae768c25927"><code>f321e1c</code></a> Update history to reflect merge of <a href="https://redirect.github.com/jekyll/jekyll-feed/issues/402">#402</a> [ci skip]</li> <li><a href="https://github.com/jekyll/jekyll-feed/commit/d9f04a734b497d2cbb699c429ca1fb4758d98956"><code>d9f04a7</code></a> feat(CI): Add Ruby 3.2/3.3 to the test matrix (<a href="https://redirect.github.com/jekyll/jekyll-feed/issues/402">#402</a>)</li> <li><a href="https://github.com/jekyll/jekyll-feed/commit/7d9c3a4c215ee37d1db28e48126096a0e447c457"><code>7d9c3a4</code></a> History.markdown: Fix release date of 0.9.3</li> <li>Additional commits viewable in <a href="https://github.com/jekyll/jekyll-feed/compare/v0.17.0...v0.18.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=jekyll-feed&package-manager=bundler&previous-version=0.17.0&new-version=0.18.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin "dependabot/bundler/jekyll-feed-0.18.0:dependabot/bundler/jekyll-feed-0.18.0"

git switch "dependabot/bundler/jekyll-feed-0.18.0"

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch "main"

git merge --no-ff "dependabot/bundler/jekyll-feed-0.18.0"

git switch "dependabot/bundler/jekyll-feed-0.18.0"

git rebase "main"

git switch "main"

git merge --ff-only "dependabot/bundler/jekyll-feed-0.18.0"

git switch "dependabot/bundler/jekyll-feed-0.18.0"

git rebase "main"

git switch "main"

git merge --no-ff "dependabot/bundler/jekyll-feed-0.18.0"

git switch "main"

git merge --squash "dependabot/bundler/jekyll-feed-0.18.0"