Skip to content

Commit f186af6

Browse files
authored
Technical/Fix security vulnerability issue (#97)
* Fixed security vulnerability rack issue CVE-2023-27539 * Updated project dependencies * Updated app version * Updated changelog
1 parent 544de10 commit f186af6

File tree

4 files changed

+24
-13
lines changed

4 files changed

+24
-13
lines changed

CHANGELOG.md

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,17 @@
22

33
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
44

5+
## [0.8.0] - 2023-03-28
6+
7+
### Fixed
8+
9+
- Fixed security vulnerability issue [CVE-2023-27539](https://github.com/advisories/GHSA-c6qg-cjj8-47qp)
10+
11+
### Changed
12+
13+
- Updated development dependencies
14+
- Updated application version
15+
516
## [0.7.0] - 2023-03-11
617

718
### Added

Gemfile

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,20 +6,20 @@ ruby(::File.read(::File.join(::File.dirname(__FILE__), '.ruby-version')).strip[/
66

77
gem 'dry-struct', '~> 1.6'
88
gem 'net-smtp', '~> 0.3.3'
9-
gem 'rack', '~> 2.2', '>= 2.2.6.3'
9+
gem 'rack', '~> 2.2', '>= 2.2.6.4'
1010
gem 'thin', '~> 1.8', '>= 1.8.1'
1111
gem 'truemail', '~> 3.0', '>= 3.0.7'
1212

1313
group :development, :test do
1414
gem 'pry-byebug', '~> 3.10', '>= 3.10.1'
15-
gem 'rack-test', '~> 2.0', '>= 2.0.2'
15+
gem 'rack-test', '~> 2.1'
1616
gem 'rspec', '~> 3.12'
1717

1818
# Code quality
1919
gem 'bundler-audit', '~> 0.9.1', require: false
2020
gem 'fasterer', '~> 0.10.0', require: false
2121
gem 'reek', '~> 6.1', '>= 6.1.4', require: false
22-
gem 'rubocop', '~> 1.48', require: false
22+
gem 'rubocop', '~> 1.48', '>= 1.48.1', require: false
2323
gem 'rubocop-performance', '~> 1.16', require: false
2424
gem 'rubocop-rspec', '~> 2.19', require: false
2525
end

Gemfile.lock

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ GEM
3232
dry-logic (~> 1.4)
3333
zeitwerk (~> 2.6)
3434
eventmachine (1.2.7)
35-
fasterer (0.10.0)
35+
fasterer (0.10.1)
3636
colorize (~> 0.7)
3737
ruby_parser (>= 3.19.1)
3838
ice_nine (0.11.2)
@@ -55,8 +55,8 @@ GEM
5555
pry-byebug (3.10.1)
5656
byebug (~> 11.0)
5757
pry (>= 0.13, < 0.15)
58-
rack (2.2.6.3)
59-
rack-test (2.0.2)
58+
rack (2.2.6.4)
59+
rack-test (2.1.0)
6060
rack (>= 1.3)
6161
rainbow (3.1.1)
6262
reek (6.1.4)
@@ -74,11 +74,11 @@ GEM
7474
rspec-expectations (3.12.2)
7575
diff-lcs (>= 1.2.0, < 2.0)
7676
rspec-support (~> 3.12.0)
77-
rspec-mocks (3.12.3)
77+
rspec-mocks (3.12.4)
7878
diff-lcs (>= 1.2.0, < 2.0)
7979
rspec-support (~> 3.12.0)
8080
rspec-support (3.12.0)
81-
rubocop (1.48.0)
81+
rubocop (1.48.1)
8282
json (~> 2.3)
8383
parallel (~> 1.10)
8484
parser (>= 3.2.0.0)
@@ -88,7 +88,7 @@ GEM
8888
rubocop-ast (>= 1.26.0, < 2.0)
8989
ruby-progressbar (~> 1.7)
9090
unicode-display_width (>= 2.4.0, < 3.0)
91-
rubocop-ast (1.27.0)
91+
rubocop-ast (1.28.0)
9292
parser (>= 3.2.1.0)
9393
rubocop-capybara (2.17.1)
9494
rubocop (~> 1.41)
@@ -134,11 +134,11 @@ DEPENDENCIES
134134
json_matchers (~> 0.11.1)
135135
net-smtp (~> 0.3.3)
136136
pry-byebug (~> 3.10, >= 3.10.1)
137-
rack (~> 2.2, >= 2.2.6.3)
138-
rack-test (~> 2.0, >= 2.0.2)
137+
rack (~> 2.2, >= 2.2.6.4)
138+
rack-test (~> 2.1)
139139
reek (~> 6.1, >= 6.1.4)
140140
rspec (~> 3.12)
141-
rubocop (~> 1.48)
141+
rubocop (~> 1.48, >= 1.48.1)
142142
rubocop-performance (~> 1.16)
143143
rubocop-rspec (~> 2.19)
144144
simplecov (~> 0.22.0)

app/truemail_server/version.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# frozen_string_literal: true
22

33
module TruemailServer
4-
VERSION = '0.7.0'
4+
VERSION = '0.8.0'
55
end

0 commit comments

Comments
 (0)