Update due to security vulnerability

[Meschreiber]

sparklemotion/nokogiri#1915

[coveralls]

Coverage remained the same at 100.0% when pulling 0610207 on Meschreiber:patch-1 into ce2d340 on algolia:develop.

[coveralls]

Coverage remained the same at 100.0% when pulling 0610207 on Meschreiber:patch-1 into ce2d340 on algolia:develop.

[coveralls]

Coverage remained the same at 100.0% when pulling 0610207 on Meschreiber:patch-1 into ce2d340 on algolia:develop.

[redox]

LGTM

[Haroenv]

the other PR #2 updates to a newer version, is there a reason we went with the lowest fixed version here?

[redox]

the other PR #2 updates to a newer version, is there a reason we went with the lowest fixed version here?

No it's the opposite (or the same), isn't it?. Here it's >= 1.10.4 in #2 it's >= 1.10

[Krinkle]

the other PR #2 updates to a newer version, is there a reason we went with the lowest fixed version here?

No it's the opposite (or the same), isn't it?. Here it's >= 1.10.4 in #2 it's >= 1.10

@redox The PR that was merged (this one) indeed suggested >= 1.10.4, however it looks like @Meschreiber overwrote this in a forced pushed commit (a67821a) on the main branch and set it to ~> 1.10.4 instead, which is strictly lower. This means security updates from 1.11 and other minor-compatible releases are not applied and thus jekyll-algolia is now raising security warnings again.

[Meschreiber]

Right you are @Krinkle , I don't know what I was thinking when I pushed that. I'm sorry about that.
Here's a PR that changes it to >= 1.10.4 instead of ~> 1.10.4. #6
@redox, could you please approve when you get a chance?