Skip to content

Bump icalendar from 2.12.3 to 2.12.5 - #5731

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/icalendar-2.12.5
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/icalendar-2.12.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026 •

Copy link
Copy Markdown
Contributor

Bumps icalendar from 2.12.3 to 2.12.5.

Changelog

Sourced from icalendar's changelog.

2.12.5 - 2026-09-25

  • Generate timezone transition onsets and recurrence dates using the previous UTC offset. - Ben Abulafia
  • Limit parsing depth
  • Remove TZID from DATE values - Henry Blyth

2.12.4 - 2026-07-31

  • TEXT unescape fix - Vincent Gao
Commits
  • 0bcfef3 Bump version to 2.12.5
  • 18803f0 Merge pull request #326 from bensynapse/fix-timezone-transition-onsets
  • fdaafa5 Merge pull request #327 from icalendar/limit-parse-depth
  • c7cd145 Remove EOL ruby from testing matrix
  • 849b39a Limit how deeply nested an ics file can be
  • c68c941 Add failing test for parse depth
  • cee52d1 Fix generated timezone transition onsets
  • a085861 Merge pull request #325 from henrahmagix/patch-1
  • 1b6cc48 Delete tzid: keyword arg from DATE values
  • 2a83c51 Bump version to 2.12.4
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Oct 1, 2026
@dorner

dorner commented Oct 1, 2026

Copy link
Copy Markdown
Collaborator

oof this one needs to be looked at.

Bumps [icalendar](https://github.com/icalendar/icalendar) from 2.12.3 to 2.12.5.
- [Changelog](https://github.com/icalendar/icalendar/blob/main/CHANGELOG.md)
- [Commits](icalendar/icalendar@v2.12.3...v2.12.5)

---
updated-dependencies:
- dependency-name: icalendar
  dependency-version: 2.12.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bundler/icalendar-2.12.5 branch from a4451e0 to b7a1a2c Compare October 11, 2026 15:01

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant