Skip to content

Bump Scriban from 5.9.1 to 7.2.6 - #106

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/GroupsGenerator/multi-0dfad6866f
Open

Bump Scriban from 5.9.1 to 7.2.6#106
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/GroupsGenerator/multi-0dfad6866f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 30, 2026

Copy link
Copy Markdown
Contributor

Updated Scriban from 5.9.1 to 7.2.6.

Release notes

Sourced from Scriban's releases.

7.2.6

Changes

✨ New Features

  • Add NuGet Trusted Publishing via dotnet-releaser (ebb0c638)

🐛 Bug Fixes

  • Fix missing tests (c3f03bfc)

📦 Dependencies

  • Bump deps (a1caafbe)

🧰 Misc

  • Enforce LoopLimit for lazy array multiplication (973edd1f)
  • Avoid work when multiplying empty strings (9fe9627b)
  • Enforce LoopLimit when expanding indexed arrays (41c27a18)
  • Share LoopLimit across nested iteration (d17bd4bf)
  • Allow platform-specific parser depth guard (420513a9)

Full Changelog: 7.2.5...7.2.6

Published with dotnet-releaser

7.2.5

Changes

🧰 Misc

  • Allow nulls in nullable builtin functions (88729199)

Full Changelog: 7.2.4...7.2.5

Published with dotnet-releaser

7.2.4

Changes

🐛 Bug Fixes

  • Fix build warning (4ca0455a)

🧰 Misc

  • Clarify URL escaping semantics (99cc7c61)

Full Changelog: 7.2.3...7.2.4

Published with dotnet-releaser

7.2.3

Changes

🧰 Misc

  • Document safe include file loading (34d1cd12)
  • Restrict reflected writes to public setters (c7377a60)

Full Changelog: 7.2.2...7.2.3

Published with dotnet-releaser

7.2.2

Changes

🐛 Bug Fixes

  • Fix parametric function variable scope (#​676) (54b781ec)

🧰 Misc

  • Clarify variable scope documentation (390db7ff)
  • Clarify MemberFilter sandbox limitations (29294e1b)

Full Changelog: 7.2.1...7.2.2

Published with dotnet-releaser

7.2.1

Changes

🧰 Misc

  • Limit array multiplication growth (205ca6a7)
  • Stop parsing at expression depth limit (8fdbd687)
  • Document member filters as reflection-only (d45f7f03)

Full Changelog: 7.2.0...7.2.1

Published with dotnet-releaser

7.2.0

Changes

🐛 Bug Fixes

  • Fix readme with source embedding (#​671) (c8094b09)

🧰 Misc

  • Merge commit from fork (7fdf19df)

Full Changelog: 7.1.0...7.2.0

Published with dotnet-releaser

7.1.0

Changes

🐛 Bug Fixes

  • Fix System.Text.Json to use 9.0.14 instead (Fixes #​668) (41e94911)

🧰 Misc

  • Added DateTime.UtcNow Support (PR #​667) by @​boslandj

Full Changelog: 7.0.6...7.1.0

Published with dotnet-releaser

7.0.6

Changes

🐛 Bug Fixes

  • Fix runtime polyfills (#​665) (37f226ac)

🧰 Misc

  • Document TemplateContext runtime controls (32ce64cd)
  • Use GitHub alerts in documentation (5946a931)
  • Remove H1 headings from site docs (73895d33)

Full Changelog: 7.0.5...7.0.6

Published with dotnet-releaser

7.0.5

Changes

🐛 Bug Fixes

  • Fix include indentation after newline (60ab0d94)

Full Changelog: 7.0.4...7.0.5

Published with dotnet-releaser

7.0.4

Changes

🧰 Misc

  • Remove duplicated runtime attributes (e8b19f66)

Full Changelog: 7.0.3...7.0.4

Published with dotnet-releaser

7.0.3

Changes

🐛 Bug Fixes

  • Fix IsPackable for CheckSourceEmbedded.csproj (3f49de50)

Full Changelog: 7.0.2...7.0.3

Published with dotnet-releaser

7.0.0

Changes

✨ New Features

  • Add security tests for untested protection paths (570466a4)
  • Add AOT/trimming compatibility (#​656) (a58550f1)
  • Add nullable support (e5f6950f)
  • Add public comments to generated visitor code (035db9a3)

🐛 Bug Fixes

  • Fix TemplateLoader doc reference (73271543)
  • Fix delegate optional defaults (a12cd0ba)
  • Fix null-conditional indexers (e4693e77)
  • Fix AsyncCodeGen solution lookup (d56dc4e1)
  • Fix pipe argument docs (4cb135ab)
  • Fix generator execution after nullable support (de47d8ad)
  • Fix Scriban.props and ci (ebfc4054)
  • Fix NU5129 as no-warning (25d148a1)

🧰 Maintenance

  • Update ci (bafc1b5b)

🧰 Misc

  • Remove changelog.md (8939dde5)
  • Harden string padding width limits (4227fdee)
  • Bound object.to_json recursion and cycles (760dc212)
  • Enforce parser depth for array initializers (f55280a0)
  • Clear include cache on TemplateContext.Reset (099cb049)
  • Reset typed accessor cache with MemberFilter changes (8180fb6c)
  • Enforce cumulative output size limits (98563216)
  • Harden expression evaluation resource bounds (2d01bd15)
  • Apply LoopLimit to internal iteration paths (dde661d3)
  • Sync builtin overload docs with DocGen (b6c65c79)
  • Disable STJ for source-embedded builds (9abb65bb)
  • Enforce LimitToString in string Append, Prepend, Replace, ReplaceFirst (d3841086)
  • Await async model members (ecca082b)
  • Update follow-up plan (2f99ca64)
  • Make array.sort stable (b3571666)
  • Support dotted array.sort paths (1df80f77)
  • Finalize follow-up plan (3ec006c9)
  • Remove completed issue plan (8557aadf)
  • Update deps (3f080790)
  • Change LexerOptions / ParserOptions to record (0c229175)
  • Remove Nustache (f2ea38fa)
  • Update readme (b3f915e5)

Full Changelog: 6.6.0...7.0.0
... (truncated)

6.6.0

Changes

✨ New Features

  • Add missing async generated code (8d23abb0)
  • Add limits for default safety (b5ac4bf3) by @​skdishansachin

🐛 Bug Fixes

  • Fix JsonElement support for netstandard (88943520)

🧰 Misc

  • Merge commit from fork (a6fe6074) by @​skdishansachin

Full Changelog: 6.5.8...6.6.0

Published with dotnet-releaser

6.5.8

Changes

🚀 Enhancements

  • Evaluate named arg. values in caller context (PR #​652) by @​meld-cp

🧰 Misc

  • Cleanup Include remove magic checks (PR #​651) by @​Benkei

Full Changelog: 6.5.7...6.5.8

Published with dotnet-releaser

6.5.7

Changes

🚀 Enhancements

  • Refactor Include using PushLocal and PopLocal Part 2 (PR #​650) by @​Benkei

Full Changelog: 6.5.6...6.5.7

Published with dotnet-releaser

6.5.6

Changes

🐛 Bug Fixes

  • Refactor Include using PushLocal and PopLocal (PR #​649) by @​Benkei
  • Fixes documentation (#​647) (6513395f)

🧰 Misc

  • Feature/#​645 broken link (PR #​646) by @​mikeclayton

Full Changelog: 6.5.5...6.5.6

Published with dotnet-releaser

6.5.5

Changes

🐛 Bug Fixes

  • Fix Include named arg values being lost for nested includes (PR #​643) by @​meld-cp

Full Changelog: 6.5.4...6.5.5

Published with dotnet-releaser

6.5.4

Changes

✨ New Features

  • Add instructions (6ccb65f3)
  • Add site (f9afab3e)
  • Add Scriban.AppService playground backend (b1072d73)
  • Add social banner (11cbacaf)
  • Add ScriptArray.From() static factory method (4b3f0417)

🐛 Bug Fixes

  • fix date.parse test with 'Z' not working if local timezone > UTC+03:00 (PR #​642) by @​meld-cp

📚 Documentation

  • Add doc for runtime by splitting existing doc (ce0a2b60)

🧰 Misc

  • include template - Named array args don't stay as arrays in the template (PR #​641) by @​meld-cp
  • Redirect Try out links to site playground, support URL parameters (0592e64c)
  • Update readme for the online demo (5b9f5113)
  • Use dark theme (18331e9a)

Full Changelog: 6.5.3...6.5.4

Published with dotnet-releaser

6.5.3

Changes

🐛 Bug Fixes

  • Fix setting variable in a scope while it is also declared in an outer scope (577e2d47)

📦 Dependencies

  • Bump Scriban to net8.0 (fc29ec64)

🧰 Misc

  • Update date.now in tests for 2026 (f00a6bbf)

Full Changelog: 6.5.2...6.5.3

Published with dotnet-releaser

6.5.2

Changes

🐛 Bug Fixes

  • Fix #​634: ObjectToString has side-effect leading to incorrect escaping with lazy evaluation (PR #​635) by @​anya-hichu

Full Changelog: 6.5.1...6.5.2

Published with dotnet-releaser

6.5.1

Changes

🐛 Bug Fixes

  • Fix async code for promoted variables (ac6a80aa)

🧰 Misc

  • Migrate to slnx and central package management (63bc3d61)

Full Changelog: 6.5.0...6.5.1

Published with dotnet-releaser

6.5.0

Changes

🐛 Bug Fixes

  • Fix Liquid date output formatting (PR #​627) by @​meld-cp
  • Update ScriptBinaryExpression.cs (PR #​630) by @​marcelo8690

Full Changelog: 6.4.0...6.5.0

Published with dotnet-releaser

6.4.0

Changes

🚀 Enhancements

  • Promote named args to local vars when using includes (PR #​626) by @​meld-cp

Full Changelog: 6.3.0...6.4.0

Published with dotnet-releaser

6.3.0

Changes

🐛 Bug Fixes

  • Fix loop limits (#​616) (b9a64f79)
  • Fix newline_to_br function on Windows (5c6e39ad)
  • Fix uint (6fda3a5e)

🚀 Enhancements

  • Update BuiltinFunctions.cs: set correct initial capacity (PR #​621) by @​ChrisVanDijk
  • Update TemplateContext.cs: remove unused _availableTags (PR #​623) by @​ChrisVanDijk
  • Add uint calculation (PR #​624) by @​dunds-com

📚 Documentation

  • Update alert messages in readme to be more obvious (PR #​619) by @​JackGilmore
  • Fix doc generation (67d5494b)

📦 Dependencies

  • Update dependencies NuGet (c8eaa485)

Full Changelog: 6.2.1...6.3.0

Published with dotnet-releaser

6.2.1

Changes

🐛 Bug Fixes

  • fixes #​608 (PR #​609) by @​julichan

Full Changelog: 6.2.0...6.2.1

Published with dotnet-releaser

6.2.0

Changes

✨ New Features

  • Add Try Out link to builtins.md (PR #​603) by @​ThumNet

🧰 Misc

  • Update on include code - fixes #​605 (PR #​607) by @​julichan

Full Changelog: 6.1.0...6.2.0

Published with dotnet-releaser

6.1.0

Changes

🚀 Enhancements

  • Add string.sha512 and string.hmac_sha512 (PR #​602) by @​ThumNet
  • Add html.newline_to_br function (PR #​604) by @​ThumNet

🧰 Misc

  • Template code made more customizable (PR #​600) by @​julichan

Full Changelog: 6.0.0...6.1.0

Published with dotnet-releaser

6.0.0

Changes

🐛 Bug Fixes

  • Fix DateTime and Object tests (PR #​593) by @​user-named-void
  • Fix ScriptRange Add when IList has a fixed size (PR #​596) by @​user-named-void
  • Fix CI badge (bb80a3e8)
  • Fix string interpolation (#​564, #​586) (06aed9fb)
  • Fix named arguments followed by pipe (#​589) (034330e6)
  • Fix function pointer with path and params argument (Fixes #​516) (5184825b)

📚 Documentation

  • Fix documentation for JSON (only available in net7.0+, fixed #​597) (0f15b2f0)

🧰 Misc

  • Update JsonElementExtensions.cs add #nullable enable (PR #​595) by @​kcalderon37

Full Changelog: 5.12.1...6.0.0

Published with dotnet-releaser

5.12.1

Changes

🐛 Bug Fixes

  • Fix string concat (#​579) (f8fa7e2a)

Full Changelog: 5.12.0...5.12.1

Published with dotnet-releaser

5.12.0

Changes

🐛 Bug Fixes

  • #​563 Assignment to dictionary issue (PR #​574) by @​gavin-hay-dispatch

Full Changelog: 5.11.0...5.12.0

Published with dotnet-releaser

5.11.0

Changes

🐛 Bug Fixes

  • Fix: If statement comparing string and null value results in object reference error (PR #​557) by @​BenJBailey
  • Fix a bug in bug in DictionaryAccessor (PR #​554) by @​SergeyXa
  • Fix serializing DateTime with object.to_json (PR #​558) by @​ChopperRob

🚀 Enhancements

  • feat: fix #​555 Error object.to_json with date or timespan (PR #​561) by @​r-Larch
  • Add option to not indent on empty lines (PR #​560) by @​Arthri

🧰 Misc

  • Update runtime.md: add documentation on getting variables from global (PR #​545) by @​BenJBailey
  • Update readme.md (5343f93b)

Full Changelog: 5.10.0...5.11.0

Published with dotnet-releaser

5.10.0

Changes

🚀 Enhancements

  • Implements Full Support for System.Text.Json - Closes #​527 (PR #​533) by @​r-Larch

🧰 Maintenance

  • Update ci with reusable workflow (26166021)
  • Fix ci packaging with new NuGet (956aa2bc)

🏭 Tests

  • Fix tests for running on ubuntu (24e708c8)
  • Fix tests for ubuntu (bis) (4ae27561)

🧰 Misc

  • Update NuGet dependencies (38c79b5f)
  • Update readme.md (3afac40c)

Full Changelog: 5.9.1...5.10.0

Published with dotnet-releaser

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---
updated-dependencies:
- dependency-name: Scriban
  dependency-version: 7.2.6
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Scriban
  dependency-version: 7.2.6
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jul 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants