active_publisher 1.4.0 → 1.4.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4511b016ac3dfe0e3e989710d404442680368ab1bb38c60f96df746d8f1fcff1
-  data.tar.gz: 99231f3a27692319247c201bf6c817a24c3dca029bfed1fd0d650fabbb435681
+  metadata.gz: 29d5272d509cc5f9a8e2ff0de59457ef5de1a98e57db0d777feb9e27f6e4e75d
+  data.tar.gz: 97b72119524a26af0caf2536f71e08547dbc3785ce6aacf3143a848a325a9cee
 SHA512:
-  metadata.gz: 4d7fe20fe406d7aefb29c4a8c00b69109f090841e8674a9ff6377e498a9c581fb95c1817591039fdeff44039babfc5bd082666f95b300e79ce2ecf1892ea5fe7
-  data.tar.gz: 4e359732a9f4e1f0ac3dead33d20c2d1272e2cc6d354fb5694f348db2906377121c075c626ec2108f8dfa64e1ffc999553874c28ded9ff2f027ac0d6f4451cf5
+  metadata.gz: 83072d8997f470c99b02c683cddc669b57e6087576fae90ef957b79d414652785a1e4c9b1de384aa35a8c89be2276f539f1abcd17a88a67598496162c2bab4c1
+  data.tar.gz: e388ff6b32215969e32f437f7663216e703ef53ccd03e792ac427604629e4e658313b095aec14ae18c2bd6b35c6a8e147e22f5130c776d50f7d6a459d164e63b

data/.circleci/config.yml

@@ -49,9 +49,9 @@ workflows:
           matrix:
             parameters:
               ruby-image:
-                - circleci/ruby:2.5
                 - circleci/ruby:2.6
                 - circleci/ruby:2.7
-                - circleci/jruby:9.1
+                - cimg/ruby:3.0
+                - cimg/ruby:3.1
                 - circleci/jruby:9.2
                 - circleci/jruby:9.3

data/lib/active_publisher/configuration.rb

@@ -83,11 +83,13 @@ module ActivePublisher
       yaml_config = {}
       absolute_config_path = ::File.expand_path(::File.join("config", "active_publisher.yml"))
       action_subscriber_config_file = ::File.expand_path(::File.join("config", "action_subscriber.yml"))
+
       if ::File.exists?(absolute_config_path)
-        yaml_config = ::YAML.load(::ERB.new(::File.read(absolute_config_path)).result)[env]
+        yaml_config = load_yaml_config_from_file(absolute_config_path)[env]
       elsif ::File.exists?(action_subscriber_config_file)
-        yaml_config = ::YAML.load(::ERB.new(::File.read(action_subscriber_config_file)).result)[env]
+        yaml_config = load_yaml_config_from_file(action_subscriber_config_file)[env]
       end
+
       yaml_config
     end
     private_class_method :attempt_to_load_yaml_file
@@ -101,6 +103,14 @@ module ActivePublisher
     end
     private_class_method :fetch_config_value
 
+    def self.load_yaml_config_from_file(file_path)
+      erb_yaml = ::ERB.new(::File.read(file_path)).result
+      # Defined in Psych 3.2+ and the new canonical way to load trusted documents:
+      # https://github.com/ruby/psych/issues/533#issuecomment-1019363688
+      ::YAML.respond_to?(:unsafe_load) ? ::YAML.unsafe_load(erb_yaml) : ::YAML.load(erb_yaml)
+    end
+    private_class_method :load_yaml_config_from_file
+
     ##
     # Instance Methods
     #

data/lib/active_publisher/version.rb

@@ -1,3 +1,3 @@
 module ActivePublisher
-  VERSION = "1.4.0"
+  VERSION = "1.4.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: active_publisher
 version: !ruby/object:Gem::Version
-  version: 1.4.0
+  version: 1.4.2
 platform: ruby
 authors:
 - Brian Stien
@@ -12,7 +12,7 @@ authors:
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2022-02-22 00:00:00.000000000 Z
+date: 2022-05-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bunny
@@ -223,7 +223,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.1
+rubygems_version: 3.3.13
 signing_key:
 specification_version: 4
 summary: Aims to make publishing work across MRI and jRuby painless and add some nice