Bump middleman-blog and middleman

[dependabot-preview]

Bumps middleman-blog and middleman. These dependencies needed to be updated together.
Updates middleman-blog from 3.5.3 to 4.0.3

Changelog

Sourced from middleman-blog's changelog.

4.0.3

• Loosen dependencies and test against Middlman v5 betas
• Adapt to core Rubocop standards
• Title should be always a string (#351)
• Fixed multibyte tags.

4.0.2

• Pushed Gem 2017-05-22
• Updated safe_parameterize - needs heavy testing from community
• Deprecating previous_article and next_article in favour of article_previous article_next
• Deprecating local_articles in favour of articles_by_locale
• Pull request #336 Add article_locale_next and article_locale_previous
• Pull request #312 Generating a blog article can optional create article subdirectory added manually
• Updated Gemfile for testing tools to remove the deprecation warnings from Aruba
• Added myself to GemSpec so I can push Gem live
• Edited Travis.yml to be inline with middleman core and the Ruby versions it tests against
• Created an GitHub Issue Template
• Created an Editor config
• Ruby 2.3.1 - middleman-core (master/4.2.1) - middleman-cli (master/4.2.1) - middleman-blog (local) - All tests pass
• Updated the Gemfile to use https to remove security warning - upped gem versions to match core
• Updated the license and readme

4.0.1

• Pull in article command from v3.5.3 tag
• Summary fix
• Add address parse cache
• Add filter option
• Make sure to not generate invalid html when creating article summary
• If a summary_generator is defined, always use it to generate summaries
• Fix issue #269: duplicated key

4.0.0.rc.1

• Removed article sub command.

Commits

• dfe64c7 Bump min ruby version [ci skip]
• 62a44f7 Require v5 passing travis
• 1fffef8 Test against ruby 2.6.0
• 12ea399 Allow beta failures for now
• 3e57af6 Update to rubocop standards, test against stable and master Middleman, fix build
• 4f698b6 Merge pull request #351 from dtorres/once-a-title
• 6409583 Disable Travis CI email notifications
• fec110f fixed for multibyte
• dbf8eff Title should be always a string
• e495bbe updated version
• Additional commits viewable in compare view

Updates middleman from 3.4.1 to 4.3.7

Changelog

Sourced from middleman's changelog.

4.3.7

• Allow ActiveSupport a wider range to avoid security warnings. #2327

4.3.6

• Reset Content-Length header when rewriting (#2316)
• Add Ruby 2.7.0 to CI

4.3.5

• Fix i18n with anchor v4 (#2287)

4.3.4

• Fix using the :anchor argument with i18n's url_for. #2286

4.3.4

• Fix ignore of files controlled by i18n. #2039 #2143

4.3.3

• Add --bail to fail a build upon the first error and show the error messages. (#2246)

4.3.2

• Resolve Haml 5 warnings (#2149)

4.3.1

• Fix sassc imports of gem files that expect old sass to be present.

4.3.0

• Only SassC from now on.
• Fix regression (all the way back to v3) for Integer/Date keys in YAML. #2238
• Fix API to allow rack server according to docs (config.ru instructions do not seem to work middleman/middlemanapp.com#794)
• Require i18n ~> 0.8.0 to handle 0.7.0 security issue.
• Allow Bundler 2

4.2.1

• Fix some issues with Ruby 2.4.0

4.2.0

Fix #1951. A failed build would "clean" all files in build. Possibly breaking change, "clean" and "after_build" are only run for sucessful builds.

4.1.14

... (truncated)

Commits

• f1ee616 Bump
• 63cfc42 Loosen activesupport dependence (#2327)
• 5d3b695 Add empty image alt tag if alt text not specified (#2323)
• e8cf86f Disable therubyracer
• d82bdf9 Prepare 4.3.6
• de7c758 Reset Content-Length header when rewriting (#2316)
• 9296d62 Add Ruby 2.7.0 to CI
• 646be3f Prep
• 3b20249 Fix i18n with anchor v4 (#2287)
• ffaac13 Update changelog [ci skip]
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[dependabot-preview]

Superseded by #83.