Sourced from rdoc's releases.

v6.14.0

What's Changed

✨ Enhancements

• Add support for canonical URL link tag by @​p8 in ruby/rdoc#1354
• Set language in HTML by @​p8 in ruby/rdoc#1361

🐛 Bug Fixes

• Fix image tag with external source by @​ybiquitous in ruby/rdoc#1348

🛠 Other Changes

• Bump ruby/setup-ruby from 1.227.0 to 1.229.0 by @​dependabot in ruby/rdoc#1336
• Fix RDoc::Options example in README by @​tompng in ruby/rdoc#1337
• Bump step-security/harden-runner from 2.11.0 to 2.11.1 by @​dependabot in ruby/rdoc#1338
• Bump ruby/setup-ruby from 1.229.0 to 1.230.0 by @​dependabot in ruby/rdoc#1339
• Runs ruby-core workflow on ubuntu-latest by @​st0012 in ruby/rdoc#1345
• Move default RDoc headings to a constant by @​vinistock in ruby/rdoc#1341
• Enable Style/MethodDefParentheses rule by @​vinistock in ruby/rdoc#1342
• Bump ruby/setup-ruby from 1.230.0 to 1.233.0 by @​dependabot in ruby/rdoc#1346
• Fix rubygems hook execution when gemspec.rdoc_options contains --ri by @​tompng in ruby/rdoc#1347
• Update ri manpage to show how to access ruby pages by @​adam12 in ruby/rdoc#1340
• Fix link to CONTRIBUTING on README by @​ybiquitous in ruby/rdoc#1350
• Bump step-security/harden-runner from 2.11.1 to 2.12.0 by @​dependabot in ruby/rdoc#1351
• Bump ruby/setup-ruby from 1.233.0 to 1.235.0 by @​dependabot in ruby/rdoc#1352
• Don't run CI jobs for push by Dependabot by @​kou in ruby/rdoc#1353
• Fix typo in test name by @​p8 in ruby/rdoc#1355
• Polish link underline in Darkfish CSS by @​ybiquitous in ruby/rdoc#1349
• Rename test classes from Test* to *Test by @​st0012 in ruby/rdoc#1359
• Bump ruby/setup-ruby from 1.235.0 to 1.237.0 by @​dependabot in ruby/rdoc#1362
• Declare erb as a dependency by @​st0012 in ruby/rdoc#1368
• Load cgi/escape instead of cgi/util by @​Earlopain in ruby/rdoc#1366
• Add a new workflow to deploy page preview for PRs from forks by @​st0012 in ruby/rdoc#1365
• Bump version to 6.14.0 by @​st0012 in ruby/rdoc#1371

Full Changelog: https://github.com/ruby/rdoc/compare/v6.13.1...v6.14.0

• 9684f85 Bump version to 6.14.0 (#1371)
• 103a6a1 Fix PR commenting workflow
• 9dc9211 Fetch PR details first to get the correct commit sha
• 06dff66 Test workflow fix: use sha for build checkout instead
• ecef239 Add a new workflow to deploy page preview for PRs from forks (#1365)
• 61a2dae Load cgi/escape instead of cgi/util (#1366)
• eb05c44 Declare erb as a dependency (#1368)
• 8417536 Merge pull request #1361 from p8/features/html-lang
• c68ae93 Add support for canonical URL link tag (#1354)
• c0438ac Set language in HTML
• Additional commits viewable in compare view

Sourced from nokogiri's releases.

v1.18.8 / 2025-04-21

Security

• [CRuby] Vendored libxml2 is updated to v2.13.8 to address CVE-2025-32414 and CVE-2025-32415. See GHSA-5w6v-399v-w3cc for more information.

36badd2eb281fca6214a5188e24a34399b15d89730639a068d12931e2adc210e  nokogiri-1.18.8-aarch64-linux-gnu.gem
664e0f9a77a7122a66d6c03abba7641ca610769a4728db55ee1706a0838b78a2  nokogiri-1.18.8-aarch64-linux-musl.gem
483b5b9fb33653f6f05cbe00d09ea315f268f0e707cfc809aa39b62993008212  nokogiri-1.18.8-arm64-darwin.gem
17de01ca3adf9f8e187883ed73c672344d3dbb3c260f88ffa1008e8dc255a28e  nokogiri-1.18.8-arm-linux-gnu.gem
6e6d7e71fc39572bd613a82d528cf54392c3de1ba5ce974f05c832b8187a040b  nokogiri-1.18.8-arm-linux-musl.gem
8c7464875d9ca7f71080c24c0db7bcaa3940e8be3c6fc4bcebccf8b9a0016365  nokogiri-1.18.8.gem
41002596960ff854198a20aaeb34cff0d445406d5ad85ba7ca9c3fd0c8f03de0  nokogiri-1.18.8-java.gem
11ab0f76772c5f2d718fb253fca5b74c6ef7628b72bbf8deba6ab1ffc93344cf  nokogiri-1.18.8-x64-mingw-ucrt.gem
024cdfe7d9ae3466bba6c06f348fb2a8395d9426b66a3c82f1961b907945cc0c  nokogiri-1.18.8-x86_64-darwin.gem
4a747875db873d18a2985ee2c320a6070c4a414ad629da625fbc58d1a20e5ecc  nokogiri-1.18.8-x86_64-linux-gnu.gem
ddd735fba49475a395b9ea793bb6474e3a3125b89960339604d08a5397de1165  nokogiri-1.18.8-x86_64-linux-musl.gem

Sourced from nokogiri's changelog.

v1.18.8 / 2025-04-21

Security

• [CRuby] Vendored libxml2 is updated to v2.13.8 to address CVE-2025-32414 and CVE-2025-32415. See GHSA-5w6v-399v-w3cc for more information.

• 9187f4a version bump to v1.18.8
• 1deea04 dep: libxml2 to v2.13.8 (branch v1.18.x) (#3509)
• 6457fe6 dep: libxml2 to v2.13.8
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions