Bump bolt/bolt from 3.6.7 to 3.6.10

[dependabot]

Bumps bolt/bolt from 3.6.7 to 3.6.10.

Release notes

Sourced from bolt/bolt's releases.

Maintenance release 3.6.10

To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.6/bolt-v3.6.9.tar.gz
tar -xzf bolt-v3.6.9.tar.gz --strip-components=1
php app/nut init

For detailed installation instructions and other ways to install, see the documentation: https://docs.bolt.cm/3.6/installation/installation

Released: 2019-08-15. Notable changes:

• Security: Prevent XSS in system log (for authenticated users) #7802
• Security: Prevent XSS in image alt/title (for authenticated users) #7801
• Security: Prevent XSS in "Create file" in file manager (for authenticated users) #7800
• Fixes: Prevent update of guzzlehttp/psr7 to 1.6, fixes tests #7798
• Fixed: Fix taxonomy name collision #7799
• Fixed: Rebuilding assets, fixing tags cloud #7794

Special thanks go out to @​marcingajda for his contributions, and to @​KotatuBot
for responsibly disclosing the XSS issues to us.

Maintenance release 3.6.9

To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.6/bolt-v3.6.9.tar.gz
tar -xzf bolt-v3.6.9.tar.gz --strip-components=1
php app/nut init

For detailed installation instructions and other ways to install, see the documentation: https://docs.bolt.cm/3.6/installation/installation

Released: 2019-06-24. Notable changes:

• Added: Add abbreviations to CKeditor, using <abbr>-tag. #7783
• Fixed: Use isIterable over Traversable #7778
• Updated: Select2 updated to 4.0.7, since it finally works on IE 11 again. #7783

Maintenance release 3.6.8

To do a 15-second install, use the following:

curl -O https://bolt.cm/distribution/archive/3.6/bolt-v3.6.8.tar.gz
tar -xzf bolt-v3.6.8.tar.gz --strip-components=1
php app/nut init

For detailed installation instructions and other ways to install, see the documentation: https://docs.bolt.cm/3.6/installation/installation

... (truncated)

Changelog

Sourced from bolt/bolt's changelog.

Bolt 3.6.10

Released: 2019-08-15. Notable changes:

• Security: Prevent XSS in system log (for authenticated users) #7802
• Security: Prevent XSS in image alt/title (for authenticated users) #7801
• Security: Prevent XSS in "Create file" in file manager (for authenticated users) #7800
• Fixes: Prevent update of guzzlehttp/psr7 to 1.6, fixes tests #7798
• Fixed: Fix taxonomy name collision #7799
• Fixed: Rebuilding assets, fixing tags cloud #7794

Special thanks go out to @​marcingajda for his contributions, and to @​KotatuBot
for responsibly disclosing the XSS issues to us.

Bolt 3.6.9

Released: 2019-06-24. Notable changes:

• Added: Add abbreviations to CKeditor, using <abbr>-tag. #7783
• Fixed: Use isIterable over Traversable #7778
• Updated: Select2 updated to 4.0.7, since it finally works on IE 11 again. #7783

Bolt 3.6.8

Released: 2019-05-23. Notable changes:

• Fixed: Make sure stripFields is set to array by default #7776

Commits

• 023e8f5 Merge pull request #7803 from bolt/release/3.6.10
• c0d8325 Fix markdown links
• 9131e13 Preparing release 3.6.10
• 45780fa Merge pull request #7802 from bolt/hotfix/prevent-xss-in-systemlog
• 00635cf Merge branch '3.6' into hotfix/prevent-xss-in-systemlog
• 520c457 Merge pull request #7801 from bolt/hotfix/xss-in-image-alt
• 7910ea8 Prevent XSS in system log
• 2634a56 Prevent XSS in image alt/title
• 1ef6237 Merge pull request #7800 from bolt/hotfix/prevent-xss-in-create-file
• bd7e939 Prevent XSS in "Create file" in file manager
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

[dependabot]

Superseded by #16.