{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":148821256,"defaultBranch":"master","name":"luau","ownerLogin":"luau-lang","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2018-09-14T17:29:29.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/104525888?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1726259197.0","currentOid":""},"activityList":{"items":[{"before":"05d6c3be17e7d8fe9755e01c76a11f29130f8609","after":null,"ref":"refs/heads/vvijay-update-release-workflow","pushedAt":"2024-09-13T20:26:37.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"Vighnesh-V","name":null,"path":"/Vighnesh-V","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/22487100?s=80&v=4"}},{"before":"cd1803e35e212ea5c12ae5d7fb68834c3c2bc74d","after":"e8a7acb8023d3fa30d7d6c0fbbe6fb98faae49a1","ref":"refs/heads/master","pushedAt":"2024-09-13T20:26:35.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"Vighnesh-V","name":null,"path":"/Vighnesh-V","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/22487100?s=80&v=4"},"commit":{"message":"Fix syntax error in release.yml file (#1411)\n\nValidated this with yamllint.","shortMessageHtmlLink":"Fix syntax error in release.yml file (#1411)"}},{"before":"8d35a50f3cc45faca762ffdc6db53ddbb0deadfb","after":"05d6c3be17e7d8fe9755e01c76a11f29130f8609","ref":"refs/heads/vvijay-update-release-workflow","pushedAt":"2024-09-13T20:14:07.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"Vighnesh-V","name":null,"path":"/Vighnesh-V","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/22487100?s=80&v=4"},"commit":{"message":"merge changes","shortMessageHtmlLink":"merge changes"}},{"before":null,"after":"8d35a50f3cc45faca762ffdc6db53ddbb0deadfb","ref":"refs/heads/vvijay-update-release-workflow","pushedAt":"2024-09-13T20:12:28.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"Vighnesh-V","name":null,"path":"/Vighnesh-V","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/22487100?s=80&v=4"},"commit":{"message":"fix syntax error in yaml","shortMessageHtmlLink":"fix syntax error in yaml"}},{"before":"bbc5d894a5c487d372aba1d95e5d2b5d9e483d55","after":null,"ref":"refs/heads/vvijay-update-release-workflow","pushedAt":"2024-09-13T20:09:44.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"Vighnesh-V","name":null,"path":"/Vighnesh-V","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/22487100?s=80&v=4"}},{"before":"b765d7bafdb64c52e6985cbc45bb791e7df71dd5","after":"cd1803e35e212ea5c12ae5d7fb68834c3c2bc74d","ref":"refs/heads/master","pushedAt":"2024-09-13T20:09:42.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"Vighnesh-V","name":null,"path":"/Vighnesh-V","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/22487100?s=80&v=4"},"commit":{"message":"upgrade `release.yml` to upload-artifact@v4 (#1410)\n\nGithub has deprecated `v1` and `v2` of `actions/upload-artifact` which\r\ncauses occassional CI failures and will affect our ability to make new\r\nreleases in the future. This PR updates the version used in\r\n`release.yml`.","shortMessageHtmlLink":"upgrade release.yml to upload-artifact@v4 (#1410)"}},{"before":null,"after":"bbc5d894a5c487d372aba1d95e5d2b5d9e483d55","ref":"refs/heads/vvijay-update-release-workflow","pushedAt":"2024-09-13T19:15:23.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"Vighnesh-V","name":null,"path":"/Vighnesh-V","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/22487100?s=80&v=4"},"commit":{"message":"upgrade to upload-artifact@v4","shortMessageHtmlLink":"upgrade to upload-artifact@v4"}},{"before":"f2488bdfa4986f55c84d4f07246c3fe8bfdd6608","after":"b765d7bafdb64c52e6985cbc45bb791e7df71dd5","ref":"refs/heads/master","pushedAt":"2024-09-13T18:48:25.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"Vighnesh-V","name":null,"path":"/Vighnesh-V","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/22487100?s=80&v=4"},"commit":{"message":"Sync to upstream/release/643 (#1408)\n\nPretty small release this week as well.\r\n\r\n## New Solver\r\n* We now unconditionally generalize functions with explicit generics\r\n* Bugfixes for how we run builtin tests\r\n\r\n## VM\r\n* Fixed running Luau conformance tests in LUA_VECTOR_SIZE == 4\r\nconfiguration\r\n\r\nInternal Contributors:\r\n\r\nCo-authored-by: Hunter Goldstein \r\nCo-authored-by: James McNellis \r\nCo-authored-by: Vighnesh Vijay \r\nCo-authored-by: Vyacheslav Egorov \r\n\r\n---------\r\n\r\nCo-authored-by: Aaron Weiss \r\nCo-authored-by: Alexander McCord \r\nCo-authored-by: Andy Friesen \r\nCo-authored-by: Aviral Goel \r\nCo-authored-by: David Cope \r\nCo-authored-by: Lily Brown \r\nCo-authored-by: Vyacheslav Egorov \r\nCo-authored-by: Junseo Yoo ","shortMessageHtmlLink":"Sync to upstream/release/643 (#1408)"}},{"before":"ef8e1e39456bde4427feb76efa1159afe2dc8d22","after":"4df4a1d40823775edc988df5b70ac41433f41b8c","ref":"refs/heads/merge","pushedAt":"2024-09-13T17:54:44.000Z","pushType":"push","commitsCount":6,"pusher":{"login":"Vighnesh-V","name":null,"path":"/Vighnesh-V","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/22487100?s=80&v=4"},"commit":{"message":"Merge branch 'upstream' into merge","shortMessageHtmlLink":"Merge branch 'upstream' into merge"}},{"before":"15557d8d01954eecdb7d4d3ab3e31882adf43eae","after":"cd27a20223dc0bbbd41f22b650aabfc53c6cfb25","ref":"refs/heads/upstream","pushedAt":"2024-09-13T17:54:44.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"Vighnesh-V","name":null,"path":"/Vighnesh-V","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/22487100?s=80&v=4"},"commit":{"message":"Sync to upstream/release/643","shortMessageHtmlLink":"Sync to upstream/release/643"}},{"before":"5cdea64b7a7442265566cf1ca16b2d0592c66af1","after":"f2488bdfa4986f55c84d4f07246c3fe8bfdd6608","ref":"refs/heads/master","pushedAt":"2024-09-13T17:16:30.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"aatxe","name":"aaron","path":"/aatxe","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/744293?s=80&v=4"},"commit":{"message":"Fix crash with the index type function, where it would stack overflow due to not waiting for a pending-expansion (#1407)\n\nFix for https://github.com/luau-lang/luau/issues/1406\r\n\r\nWhile it is good to let ``index`` wait for the pending-expansion. To\r\nre-produce the issue you need more than just this code:\r\nhttps://i.imgur.com/b3OmUGF.png\r\n\r\nIt needs this, else it won't crash.\r\n\r\n```lua\r\nlocal function ProblemCauser(key: Keys, value)\r\n PlayerData[key] = value\r\nend\r\n```\r\n\r\n \r\n\r\nBut regarding \"pending things\", I'd recommend **generalized functions**\r\nfor sanity checks like these, since there will be more cases of similar\r\nissues I believe. But I am 100% sure that eventually this issue here can\r\nmaybe be prevented if looking at the Constraints. _(And optimization)_\r\nNot sure if ``index`` needs the table fully completed, or if it is\r\npreferred that the info is available based on **how much info is\r\navailable at the current position in the code**.\r\n\r\nBut if this gets done, I hope that they'll be connected to the Solver\r\nLogger, because I actually refined mine with colors and more info _(yet\r\nneed to finish that)_ to understand the Luau Source Code more and to\r\ndebug issues.\r\n\r\n---------\r\n\r\nCo-authored-by: aaron ","shortMessageHtmlLink":"Fix crash with the index type function, where it would stack overflow…"}},{"before":"a8047b2e46e357737abb6283fccebc1d1b4f3f8f","after":"5cdea64b7a7442265566cf1ca16b2d0592c66af1","ref":"refs/heads/master","pushedAt":"2024-09-13T16:51:11.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"aatxe","name":"aaron","path":"/aatxe","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/744293?s=80&v=4"},"commit":{"message":"Add default \"out\" folder for CMake Project Visual Studio (#1394)\n\nhttps://learn.microsoft.com/en-us/cpp/build/cmake-projects-in-visual-studio?view=msvc-170#ide-integration\r\n\r\nApparently ``/out`` is a default folder when opening the project as a\r\nCMake project in Visual Studio.\r\n\r\n \r\n\r\nCould it be added to the ``.gitignore`` please.\r\n\r\n\r\n![image](https://github.com/user-attachments/assets/10add17c-bbfc-4811-8c43-0ed2e84c5b9e)","shortMessageHtmlLink":"Add default \"out\" folder for CMake Project Visual Studio (#1394)"}},{"before":"d9536cecd8cbaae5f6f76af79209418f0a78efaf","after":"a8047b2e46e357737abb6283fccebc1d1b4f3f8f","ref":"refs/heads/master","pushedAt":"2024-09-09T20:51:33.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"Vighnesh-V","name":null,"path":"/Vighnesh-V","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/22487100?s=80&v=4"},"commit":{"message":"keyof - fix LUAU_ASSERT when there's only one key entry (#1388)\n\nFixes https://github.com/luau-lang/luau/issues/1387\r\n\r\nWas suggested by @alexmccord \r\n\r\nI changed ``singletons[0]`` to ``singletons.front()``, unsure if that\r\nmakes a huge difference, and then I added the rest of the things needed\r\nfor the return type.\r\n\r\nMaybe it's also the ideal location since doing it before looping through\r\n``keys`` won't add the string into the type arena.\r\n\r\nI put comments next to it based on how I thought it would make sense.\r\n\r\n \r\n\r\n``LUAU_ASSERT`` seems to trigger when there's only one entry being put\r\ninside a UnionType. It's as if it was put there for quality.\r\n\r\nAllow edits by maintainers is enabled.\r\n\r\n\r\nI tested this with a quick Unit Test something like\r\n\r\n```lua\r\nlocal test: keyof\r\n```","shortMessageHtmlLink":"keyof - fix LUAU_ASSERT when there's only one key entry (#1388)"}},{"before":"b23d43496bed0f16eb6225551a9ce30435e4b4f2","after":"d9536cecd8cbaae5f6f76af79209418f0a78efaf","ref":"refs/heads/master","pushedAt":"2024-09-06T20:34:50.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"andyfriesen","name":"Andy Friesen","path":"/andyfriesen","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/123493?s=80&v=4"},"commit":{"message":"Sync to upstream/release/642 (#1385)\n\n## New Solver\r\n\r\n* The type functions `keyof` and `index` now also walk the inheritance\r\nchain when they are used on class types like Roblox instances.\r\n\r\n---------\r\n\r\nCo-authored-by: Aaron Weiss ","shortMessageHtmlLink":"Sync to upstream/release/642 (#1385)"}},{"before":"a74031bae75253b75d415a72048063836f33e62e","after":"15557d8d01954eecdb7d4d3ab3e31882adf43eae","ref":"refs/heads/upstream","pushedAt":"2024-09-06T18:35:01.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"andyfriesen","name":"Andy Friesen","path":"/andyfriesen","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/123493?s=80&v=4"},"commit":{"message":"Sync to upstream/release/642","shortMessageHtmlLink":"Sync to upstream/release/642"}},{"before":"f86f0a48ffbb9c467201c3c71ef6a11915decb30","after":"ef8e1e39456bde4427feb76efa1159afe2dc8d22","ref":"refs/heads/merge","pushedAt":"2024-09-06T18:35:01.000Z","pushType":"push","commitsCount":4,"pusher":{"login":"andyfriesen","name":"Andy Friesen","path":"/andyfriesen","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/123493?s=80&v=4"},"commit":{"message":"Merge branch 'upstream' into merge","shortMessageHtmlLink":"Merge branch 'upstream' into merge"}},{"before":"d518d14b922ff80e7e17d1912d637225472117a1","after":"b23d43496bed0f16eb6225551a9ce30435e4b4f2","ref":"refs/heads/master","pushedAt":"2024-08-30T20:16:51.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"aatxe","name":"aaron","path":"/aatxe","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/744293?s=80&v=4"},"commit":{"message":"Sync to upstream/release/641 (#1382)\n\n### What's new\r\n\r\n* Light update this week, mostly fast flag cleanups.\r\n\r\n### New Solver\r\n\r\n* Rename flag to enable new solver from\r\n`DebugLuauDeferredConstraintResolution` to `LuauSolverV2`\r\n* Added support for magic functions for the new type checker (as opposed\r\nto the type inference component)\r\n* Improved handling of `string.format` with magic function improvements\r\n* Cleaning up some of the reported errors by the new type checker\r\n* Minor refactoring of `TypeChecker2.cpp` that happens to make the diff\r\nvery hard to read.\r\n\r\n---\r\n\r\n### Internal Contributors\r\n\r\nCo-authored-by: Aaron Weiss \r\nCo-authored-by: Andy Friesen \r\nCo-authored-by: Vighnesh Vijay \r\nCo-authored-by: Vyacheslav Egorov \r\n\r\n---------\r\n\r\nCo-authored-by: Alexander McCord \r\nCo-authored-by: Andy Friesen \r\nCo-authored-by: Vighnesh \r\nCo-authored-by: Aviral Goel \r\nCo-authored-by: David Cope \r\nCo-authored-by: Lily Brown \r\nCo-authored-by: Vyacheslav Egorov \r\nCo-authored-by: Junseo Yoo ","shortMessageHtmlLink":"Sync to upstream/release/641 (#1382)"}},{"before":"ebdbcb194294f699dcc7d521e591bdddce3763fe","after":"a74031bae75253b75d415a72048063836f33e62e","ref":"refs/heads/upstream","pushedAt":"2024-08-30T19:29:53.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"aatxe","name":"aaron","path":"/aatxe","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/744293?s=80&v=4"},"commit":{"message":"Sync release to upstream/release/641","shortMessageHtmlLink":"Sync release to upstream/release/641"}},{"before":"25db8ff2cbf5da36d6e5abfec58e6c197f1f5e9b","after":"f86f0a48ffbb9c467201c3c71ef6a11915decb30","ref":"refs/heads/merge","pushedAt":"2024-08-30T19:29:53.000Z","pushType":"push","commitsCount":4,"pusher":{"login":"aatxe","name":"aaron","path":"/aatxe","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/744293?s=80&v=4"},"commit":{"message":"Merge branch 'upstream' into merge","shortMessageHtmlLink":"Merge branch 'upstream' into merge"}},{"before":"1dde4de793982dd1365d4ab8790b4bf6e411e07f","after":"d518d14b922ff80e7e17d1912d637225472117a1","ref":"refs/heads/master","pushedAt":"2024-08-23T16:35:31.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"vegorov-rbx","name":null,"path":"/vegorov-rbx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/75688451?s=80&v=4"},"commit":{"message":"Sync to upstream/release/640 (#1374)\n\n### What's new\r\n\r\n* Fixed many of the false positive errors in indexing of table unions\r\nand table intersections\r\n* It is now possible to run custom checks over Luau AST during\r\ntypechecking by setting `customModuleCheck` in `FrontendOptions`\r\n* Fixed codegen issue on arm, where number->vector cast could corrupt\r\nthat number value for the next time it's read\r\n\r\n### New Solver\r\n\r\n* `error` type now behaves as the bottom type during subtyping checks\r\n* Fixed the scope that is used in subtyping with generic types\r\n* Fixed `astOriginalCallTypes` table often used by LSP to match the old\r\nsolver\r\n\r\n---\r\n\r\n### Internal Contributors\r\n\r\nCo-authored-by: Aaron Weiss \r\nCo-authored-by: Andy Friesen \r\nCo-authored-by: Vighnesh Vijay \r\nCo-authored-by: Vyacheslav Egorov ","shortMessageHtmlLink":"Sync to upstream/release/640 (#1374)"}},{"before":"5b9344a4802fc5736b42a5e427fd456ddb8acf4c","after":"25db8ff2cbf5da36d6e5abfec58e6c197f1f5e9b","ref":"refs/heads/merge","pushedAt":"2024-08-23T15:00:31.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"vegorov-rbx","name":null,"path":"/vegorov-rbx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/75688451?s=80&v=4"},"commit":{"message":"Success, DCR mode no longer fails any tests","shortMessageHtmlLink":"Success, DCR mode no longer fails any tests"}},{"before":"d414b56acbcdd44c74799dc349b80e11ac978a3e","after":"5b9344a4802fc5736b42a5e427fd456ddb8acf4c","ref":"refs/heads/merge","pushedAt":"2024-08-23T14:58:27.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"vegorov-rbx","name":null,"path":"/vegorov-rbx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/75688451?s=80&v=4"},"commit":{"message":"Missing sync elements","shortMessageHtmlLink":"Missing sync elements"}},{"before":"3613ee9ddc0b4c72cd99178a78b42d6665924bf4","after":"d414b56acbcdd44c74799dc349b80e11ac978a3e","ref":"refs/heads/merge","pushedAt":"2024-08-23T14:34:59.000Z","pushType":"push","commitsCount":6,"pusher":{"login":"vegorov-rbx","name":null,"path":"/vegorov-rbx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/75688451?s=80&v=4"},"commit":{"message":"Merge branch 'upstream' into merge","shortMessageHtmlLink":"Merge branch 'upstream' into merge"}},{"before":"497c3edb91cd699f3b315064e6e62916ab3f5308","after":"ebdbcb194294f699dcc7d521e591bdddce3763fe","ref":"refs/heads/upstream","pushedAt":"2024-08-23T14:34:59.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"vegorov-rbx","name":null,"path":"/vegorov-rbx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/75688451?s=80&v=4"},"commit":{"message":"Sync to upstream/release/640","shortMessageHtmlLink":"Sync to upstream/release/640"}},{"before":"c33e583cd5f606ac617e10d48bfd930b80070d86","after":null,"ref":"refs/heads/dependabot/pip/tools/fuzz/jinja2-3.1.4","pushedAt":"2024-08-19T13:38:12.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"vegorov-rbx","name":null,"path":"/vegorov-rbx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/75688451?s=80&v=4"}},{"before":"91ab45ff4330c720f545d52d1da22f0ba95f19f0","after":"1dde4de793982dd1365d4ab8790b4bf6e411e07f","ref":"refs/heads/master","pushedAt":"2024-08-19T13:38:10.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"vegorov-rbx","name":null,"path":"/vegorov-rbx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/75688451?s=80&v=4"},"commit":{"message":"Bump jinja2 from 3.1.3 to 3.1.4 in /tools/fuzz (#1371)\n\nBumps [jinja2](https://github.com/pallets/jinja) from 3.1.3 to 3.1.4.\r\n
\r\nRelease notes\r\n

Sourced from jinja2's\r\nreleases.

\r\n
\r\n

3.1.4

\r\n

This is the Jinja 3.1.4 security release, which fixes security issues\r\nand bugs but does not otherwise change behavior and should not result in\r\nbreaking changes.

\r\n

PyPI: https://pypi.org/project/Jinja2/3.1.4/\r\nChanges: https://jinja.palletsprojects.com/en/3.1.x/changes/#version-3-1-4

\r\n
    \r\n
  • The xmlattr filter does not allow keys with\r\n/ solidus, > greater-than sign, or\r\n= equals sign, in addition to disallowing spaces.\r\nRegardless of any validation done by Jinja, user input should never be\r\nused as keys to this filter, or must be separately validated first.\r\nGHSA-h75v-3vvj-5mfj
    • \r\n
\r\n
\r\n
\r\n
\r\nChangelog\r\n

Sourced from jinja2's\r\nchangelog.

\r\n
\r\n

Version 3.1.4

\r\n

Released 2024-05-05

\r\n
    \r\n
  • The xmlattr filter does not allow keys with\r\n/ solidus, >\r\ngreater-than sign, or = equals sign, in addition to\r\ndisallowing spaces.\r\nRegardless of any validation done by Jinja, user input should never be\r\nused\r\nas keys to this filter, or must be separately validated first.\r\n:ghsa:h75v-3vvj-5mfj
    • \r\n
\r\n
\r\n
\r\n
\r\nCommits\r\n
    \r\n
  • dd4a8b5\r\nrelease version 3.1.4
    • \r\n
  • 0668239\r\nMerge pull request from GHSA-h75v-3vvj-5mfj
    • \r\n
  • d655030\r\ndisallow invalid characters in keys to xmlattr filter
    • \r\n
  • a7863ba\r\nadd ghsa links
    • \r\n
  • b5c98e7\r\nstart version 3.1.4
    • \r\n
  • da3a9f0\r\nupdate project files (#1968)
    • \r\n
  • 0ee5eb4\r\nsatisfy formatter, linter, and strict mypy
    • \r\n
  • 20477c6\r\nupdate project files (#5457)
    • \r\n
  • e491223\r\nupdate pyyaml dev dependency
    • \r\n
  • 36f9885\r\nfix pr link
    • \r\n
  • Additional commits viewable in compare\r\nview
    • \r\n
\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=jinja2&package-manager=pip&previous-version=3.1.3&new-version=3.1.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/luau-lang/luau/network/alerts).\r\n\r\n
\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump jinja2 from 3.1.3 to 3.1.4 in /tools/fuzz (#1371)"}},{"before":null,"after":"c33e583cd5f606ac617e10d48bfd930b80070d86","ref":"refs/heads/dependabot/pip/tools/fuzz/jinja2-3.1.4","pushedAt":"2024-08-19T13:22:45.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump jinja2 from 3.1.3 to 3.1.4 in /tools/fuzz\n\nBumps [jinja2](https://github.com/pallets/jinja) from 3.1.3 to 3.1.4.\n- [Release notes](https://github.com/pallets/jinja/releases)\n- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)\n- [Commits](https://github.com/pallets/jinja/compare/3.1.3...3.1.4)\n\n---\nupdated-dependencies:\n- dependency-name: jinja2\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump jinja2 from 3.1.3 to 3.1.4 in /tools/fuzz"}},{"before":"675a7ee0ea63b03dffb6947b2daca06e1f73ac13","after":null,"ref":"refs/heads/dependabot/pip/tools/fuzz/jinja2-3.1.3","pushedAt":"2024-08-19T13:21:57.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"vegorov-rbx","name":null,"path":"/vegorov-rbx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/75688451?s=80&v=4"}},{"before":"25f91aa8b82fa3a9e415afbb83574c56b43cad80","after":"91ab45ff4330c720f545d52d1da22f0ba95f19f0","ref":"refs/heads/master","pushedAt":"2024-08-19T13:21:56.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"vegorov-rbx","name":null,"path":"/vegorov-rbx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/75688451?s=80&v=4"},"commit":{"message":"Bump jinja2 from 3.1.2 to 3.1.3 in /tools/fuzz (#1144)\n\nBumps [jinja2](https://github.com/pallets/jinja) from 3.1.2 to 3.1.3.\r\n
\r\nRelease notes\r\n

Sourced from jinja2's\r\nreleases.

\r\n
\r\n

3.1.3

\r\n

This is a fix release for the 3.1.x feature branch.

\r\n
    \r\n
  • Fix for GHSA-h5c8-rqwp-cp95.\r\nYou are affected if you are using xmlattr and passing user\r\ninput as attribute keys.
    • \r\n
  • Changes: https://jinja.palletsprojects.com/en/3.1.x/changes/#version-3-1-3
    • \r\n
  • Milestone: https://github.com/pallets/jinja/milestone/15?closed=1
    • \r\n
\r\n
\r\n
\r\n
\r\nChangelog\r\n

Sourced from jinja2's\r\nchangelog.

\r\n
\r\n

Version 3.1.3

\r\n

Released 2024-01-10

\r\n
    \r\n
  • Fix compiler error when checking if required blocks in parent\r\ntemplates are\r\nempty. :pr:1858
    • \r\n
  • xmlattr filter does not allow keys with spaces.\r\nGHSA-h5c8-rqwp-cp95
    • \r\n
  • Make error messages stemming from invalid nesting of {% trans\r\n%} blocks\r\nmore helpful. :pr:1918
    • \r\n
\r\n
\r\n
\r\n
\r\nCommits\r\n
    \r\n
  • d9de4bb\r\nrelease version 3.1.3
    • \r\n
  • 50124e1\r\nskip test pypi
    • \r\n
  • 9ea7222\r\nuse trusted publishing
    • \r\n
  • da703f7\r\nuse trusted publishing
    • \r\n
  • bce1746\r\nuse trusted publishing
    • \r\n
  • 7277d80\r\nupdate pre-commit hooks
    • \r\n
  • 5c8a105\r\nMake nested-trans-block exceptions nicer (#1918)
    • \r\n
  • 19a55db\r\nMake nested-trans-block exceptions nicer
    • \r\n
  • 7167953\r\nMerge pull request from GHSA-h5c8-rqwp-cp95
    • \r\n
  • 7dd3680\r\nxmlattr filter disallows keys with spaces
    • \r\n
  • Additional commits viewable in compare\r\nview
    • \r\n
\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=jinja2&package-manager=pip&previous-version=3.1.2&new-version=3.1.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/luau-lang/luau/network/alerts).\r\n\r\n
\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"Bump jinja2 from 3.1.2 to 3.1.3 in /tools/fuzz (#1144)"}},{"before":"1788e237fcf8b7059966dffe1e11cd65028733c9","after":"25f91aa8b82fa3a9e415afbb83574c56b43cad80","ref":"refs/heads/master","pushedAt":"2024-08-16T18:29:33.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"Vighnesh-V","name":null,"path":"/Vighnesh-V","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/22487100?s=80&v=4"},"commit":{"message":"Sync to upstream/release/639 (#1368)\n\n# What's Changed?\r\n\r\n- Variety of bugfixes in the new solver\r\n\r\n## New Solver\r\n\r\n- Fix an issue where we would hit a recursion limit when applying long\r\nchains of type refinements.\r\n- Weaken the types of `table.freeze` and `table.clone` in the new solver\r\nso we can accept common code patterns like `local a = table.freeze({x=5,\r\nx=0})` at the expense of accepting code like `table.freeze(true)`.\r\n- Don't warn when the # operator is used on a value of type never\r\n\r\n## VM\r\n- Fix a bug in lua_resume where too many values might be removed from\r\nstack when resume throws an error\r\n\r\n---\r\nCo-authored-by: Aaron Weiss \r\nCo-authored-by: Andy Friesen \r\nCo-authored-by: Vighnesh Vijay \r\nCo-authored-by: Vyacheslav Egorov \r\n\r\n---------\r\n\r\nCo-authored-by: Aaron Weiss \r\nCo-authored-by: Alexander McCord \r\nCo-authored-by: Andy Friesen \r\nCo-authored-by: Aviral Goel \r\nCo-authored-by: David Cope \r\nCo-authored-by: Lily Brown \r\nCo-authored-by: Vyacheslav Egorov \r\nCo-authored-by: Junseo Yoo ","shortMessageHtmlLink":"Sync to upstream/release/639 (#1368)"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"Y3Vyc29yOnYyOpK7MjAyNC0wOS0xM1QyMDoyNjozNy4wMDAwMDBazwAAAAS13NK3","startCursor":"Y3Vyc29yOnYyOpK7MjAyNC0wOS0xM1QyMDoyNjozNy4wMDAwMDBazwAAAAS13NK3","endCursor":"Y3Vyc29yOnYyOpK7MjAyNC0wOC0xNlQxODoyOTozMy4wMDAwMDBazwAAAAScZ_q5"}},"title":"Activity · luau-lang/luau"}