Bump nokogiri from 1.10.10 to 1.11.0 (#617)
Bump nokogiri from 1.10.10 to 1.11.0 (#617)

Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.10.10 to 1.11.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/sparklemotion/nokogiri/releases">nokogiri's releases</a>.</em></p>
<blockquote>
<h2>v1.11.0 / 2021-01-03</h2>
<h3>Notes</h3>
<h4>Faster, more reliable installation: Native Gems for Linux and OSX/Darwin</h4>
<p>&quot;Native gems&quot; contain pre-compiled libraries for a specific machine architecture. On supported platforms, this removes the need for compiling the C extension and the packaged libraries. This results in <strong>much faster installation</strong> and <strong>more reliable installation</strong>, which as you probably know are the biggest headaches for Nokogiri users.</p>
<p>We've been shipping native Windows gems since 2009, but starting in v1.11.0 we are also shipping native gems for these platforms:</p>
<ul>
<li>Linux: <code>x86-linux</code> and <code>x86_64-linux</code> -- including musl platforms like alpine</li>
<li>OSX/Darwin: <code>x86_64-darwin</code> and <code>arm64-darwin</code></li>
</ul>
<p>We'd appreciate your thoughts and feedback on this work at <a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2075">#2075</a>.</p>
<h3>Dependencies</h3>
<h4>Ruby</h4>
<p>This release introduces support for Ruby 2.7 and 3.0 in the precompiled native gems.</p>
<p>This release ends support for:</p>
<ul>
<li>Ruby 2.3, for which <a href="https://www.ruby-lang.org/en/news/2019/03/31/support-of-ruby-2-3-has-ended/">official support ended on 2019-03-31</a> [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1886">#1886</a>] (Thanks <a href="https://github.com/ashmaroli">@ashmaroli</a>!)</li>
<li>Ruby 2.4, for which <a href="https://www.ruby-lang.org/en/news/2020/04/05/support-of-ruby-2-4-has-ended/">official support ended on 2020-04-05</a></li>
<li>JRuby 9.1, which is the Ruby 2.3-compatible release.</li>
</ul>
<h4>Gems</h4>
<ul>
<li>Explicitly add racc as a runtime dependency. [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1988">#1988</a>] (Thanks, <a href="https://github.com/voxik">@voxik</a>!)</li>
<li>[MRI] Upgrade mini_portile2 dependency from <code>~&gt; 2.4.0</code> to <code>~&gt; 2.5.0</code> [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2005">#2005</a>] (Thanks, <a href="https://github.com/alejandroperea">@alejandroperea</a>!)</li>
</ul>
<h3>Security</h3>
<p>See note below about CVE-2020-26247 in the &quot;Changed&quot; subsection entitled &quot;XML::Schema parsing treats input as untrusted by default&quot;.</p>
<h3>Added</h3>
<ul>
<li>Add Node methods for manipulating &quot;keyword attributes&quot; (for example, <code>class</code> and <code>rel</code>): <code>#kwattr_values</code>, <code>#kwattr_add</code>, <code>#kwattr_append</code>, and <code>#kwattr_remove</code>. [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2000">#2000</a>]</li>
<li>Add support for CSS queries <code>a:has(&gt; b)</code>, <code>a:has(~ b)</code>, and <code>a:has(+ b)</code>. [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/688">#688</a>] (Thanks, <a href="https://github.com/jonathanhefner">@jonathanhefner</a>!)</li>
<li>Add <code>Node#value?</code> to better match expected semantics of a Hash-like object. [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1838">#1838</a>, <a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1840">#1840</a>] (Thanks, <a href="https://github.com/MatzFan">@MatzFan</a>!)</li>
<li>[CRuby] Add <code>Nokogiri::XML::Node#line=</code> for use by downstream libs like nokogumbo. [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1918">#1918</a>] (Thanks, <a href="https://github.com/stevecheckoway">@stevecheckoway</a>!)</li>
<li><code>nokogiri.gemspec</code> is back after a 10-year hiatus. We still prefer you use the official releases, but master is pretty stable these days, and YOLO.</li>
</ul>
<h3>Performance</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/sparklemotion/nokogiri/blob/master/CHANGELOG.md">nokogiri's changelog</a>.</em></p>
<blockquote>
<h2>v1.11.0 / 2021-01-03</h2>
<h3>Notes</h3>
<h4>Faster, more reliable installation: Native Gems for Linux and OSX/Darwin</h4>
<p>&quot;Native gems&quot; contain pre-compiled libraries for a specific machine architecture. On supported platforms, this removes the need for compiling the C extension and the packaged libraries. This results in <strong>much faster installation</strong> and <strong>more reliable installation</strong>, which as you probably know are the biggest headaches for Nokogiri users.</p>
<p>We've been shipping native Windows gems since 2009, but starting in v1.11.0 we are also shipping native gems for these platforms:</p>
<ul>
<li>Linux: <code>x86-linux</code> and <code>x86_64-linux</code> -- including musl platforms like alpine</li>
<li>OSX/Darwin: <code>x86_64-darwin</code> and <code>arm64-darwin</code></li>
</ul>
<p>We'd appreciate your thoughts and feedback on this work at <a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2075">#2075</a>.</p>
<h3>Dependencies</h3>
<h4>Ruby</h4>
<p>This release introduces support for Ruby 2.7 and 3.0 in the precompiled native gems.</p>
<p>This release ends support for:</p>
<ul>
<li>Ruby 2.3, for which <a href="https://www.ruby-lang.org/en/news/2019/03/31/support-of-ruby-2-3-has-ended/">official support ended on 2019-03-31</a> [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1886">#1886</a>] (Thanks <a href="https://github.com/ashmaroli">@ashmaroli</a>!)</li>
<li>Ruby 2.4, for which <a href="https://www.ruby-lang.org/en/news/2020/04/05/support-of-ruby-2-4-has-ended/">official support ended on 2020-04-05</a></li>
<li>JRuby 9.1, which is the Ruby 2.3-compatible release.</li>
</ul>
<h4>Gems</h4>
<ul>
<li>Explicitly add racc as a runtime dependency. [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1988">#1988</a>] (Thanks, <a href="https://github.com/voxik">@voxik</a>!)</li>
<li>[MRI] Upgrade mini_portile2 dependency from <code>~&gt; 2.4.0</code> to <code>~&gt; 2.5.0</code> [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2005">#2005</a>] (Thanks, <a href="https://github.com/alejandroperea">@alejandroperea</a>!)</li>
</ul>
<h3>Security</h3>
<p>See note below about CVE-2020-26247 in the &quot;Changed&quot; subsection entitled &quot;XML::Schema parsing treats input as untrusted by default&quot;.</p>
<h3>Added</h3>
<ul>
<li>Add Node methods for manipulating &quot;keyword attributes&quot; (for example, <code>class</code> and <code>rel</code>): <code>#kwattr_values</code>, <code>#kwattr_add</code>, <code>#kwattr_append</code>, and <code>#kwattr_remove</code>. [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2000">#2000</a>]</li>
<li>Add support for CSS queries <code>a:has(&gt; b)</code>, <code>a:has(~ b)</code>, and <code>a:has(+ b)</code>. [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/688">#688</a>] (Thanks, <a href="https://github.com/jonathanhefner">@jonathanhefner</a>!)</li>
<li>Add <code>Node#value?</code> to better match expected semantics of a Hash-like object. [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1838">#1838</a>, <a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1840">#1840</a>] (Thanks, <a href="https://github.com/MatzFan">@MatzFan</a>!)</li>
<li>[CRuby] Add <code>Nokogiri::XML::Node#line=</code> for use by downstream libs like nokogumbo. [<a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1918">#1918</a>] (Thanks, <a href="https://github.com/stevecheckoway">@stevecheckoway</a>!)</li>
<li><code>nokogiri.gemspec</code> is back after a 10-year hiatus. We still prefer you use the official releases, but master is pretty stable these days, and YOLO.</li>
</ul>
<h3>Performance</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/sparklemotion/nokogiri/commit/1c1fba5e34bf620d83e96fb9dcbd7393c05a03e5"><code>1c1fba5</code></a> version bump to v1.11.0</li>
<li><a href="https://github.com/sparklemotion/nokogiri/commit/c6b17a69d0e685c08016e602e4d5818b16de7eba"><code>c6b17a6</code></a> doc: remove versioning policy from CHANGELOG since it's in README</li>
<li><a href="https://github.com/sparklemotion/nokogiri/commit/ff14f0647c404cd2674b83702f6f974eb35f9d02"><code>ff14f06</code></a> Create dependabot.yml</li>
<li><a href="https://github.com/sparklemotion/nokogiri/commit/638ab65fe0244393f73e7f8bb2c29cda63caaa84"><code>638ab65</code></a> doc: tweak logo and &quot;Description&quot; section in README</li>
<li><a href="https://github.com/sparklemotion/nokogiri/commit/340686b0990e42ccd9d06c0d11198f8df26f69a7"><code>340686b</code></a> ci: move truffleruby jobs to a separate pipeline</li>
<li><a href="https://github.com/sparklemotion/nokogiri/commit/f6d2742784f93347f4101aeff473a8b34607b594"><code>f6d2742</code></a> ci: update nokogiri master-branch git resource with webhook</li>
<li><a href="https://github.com/sparklemotion/nokogiri/commit/4b55ecb52ff42169a206156490b58b6979c62fe4"><code>4b55ecb</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/2162">#2162</a> from parndt/use-ruby-setup-ruby</li>
<li><a href="https://github.com/sparklemotion/nokogiri/commit/e6c077266062f0423f951680e15bb1fa188901e6"><code>e6c0772</code></a> Use ruby/setup-ruby action which bundles</li>
<li><a href="https://github.com/sparklemotion/nokogiri/commit/940823fee6f91fb3b33b29b90444b1623fa2e505"><code>940823f</code></a> ci: update macos builds to install latest bundler</li>
<li><a href="https://github.com/sparklemotion/nokogiri/commit/0e6ce7c503087cc2795dba20695e969aeeb3beda"><code>0e6ce7c</code></a> gem: fix packaging of native gems without java files</li>
<li>Additional commits viewable in <a href="https://github.com/sparklemotion/nokogiri/compare/v1.10.10...v1.11.0">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=nokogiri&package-manager=bundler&previous-version=1.10.10&new-version=1.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/chanzuckerberg/idseq-web-private/network/alerts).

</details>
chanzuckerberg/idseq-web,chanzuckerberg/idseq-web,chanzuckerberg/idseq-web,chanzuckerberg/idseq-web,chanzuckerberg/idseq-web