active_utils 3.6.0 → 3.6.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 573d4f872e7eb4088934db0121c99539f8e904c5e238f86cf75c80efdf5a6024
4
- data.tar.gz: 83ba430d4ed0202d8676aeb88da792b3d063f8e1af8f20fc2e727ed0fce538de
3
+ metadata.gz: aa7e9d1c3eb6702cab0b038bc9bf41b7e43f62ce3f46b17e6801f2b5583f11dd
4
+ data.tar.gz: 9ba812e2a5a1d5e776c5201369cbbdb0c683ff1b0cf7fd41c4f97559a25fc9b1
5
5
  SHA512:
6
- metadata.gz: 321c201934f5528369b2b7d9266aa372ecb37b04413f6b49c3c2cd8da810d4831473d6279bff890b12eb5b967a44591ac01679bd749da1d12e7696a53a97c6da
7
- data.tar.gz: fe0f4497ba31a54aa6788c21f1e82484c0b4ca40a5591733520a181cef04f63d15ac7611b75a1dcd4253edfec144ce6d6edb9b6fc2635f1c4f87e8e4aab0acae
6
+ metadata.gz: 848e007668d4c44f8eb49915250df9e0e1581de2a681718a281599ab72cca9df75dd05291686cecb177ac99056411edface748f26ed1a39cffa1c1394e7680b4
7
+ data.tar.gz: 3534a4e8e0821aafdee59971eeed1ebba86e3e2f156c430857efec509ca9e8f65ef9ab1152ed46dc561422149e83eec0ea6ef1658d434f0b0362ac85572a05ac
data/CHANGELOG.md CHANGED
@@ -1,5 +1,13 @@
1
1
  # ActiveUtils changelog
2
2
 
3
+ ### Version 3.6.2 (October 21, 2026)
4
+
5
+ - Address CVE-2026-111943 and SI-3057 by removing compromised emSign CA roots from the vendored CA bundle
6
+
7
+ ### Version 3.6.1 (September 02, 2026)
8
+
9
+ - Update the curl domain in the `update_cert_file` rake task and update the vendored CA certificate
10
+
3
11
  ### Version 3.6.0 (September 15, 2025)
4
12
 
5
13
  - Catch and raise `Errno::ENETUNREACH` syscall errors as `ActiveUtils::ConnectionError`
data/Gemfile.lock CHANGED
@@ -1,7 +1,7 @@
1
1
  PATH
2
2
  remote: .
3
3
  specs:
4
- active_utils (3.6.0)
4
+ active_utils (3.6.2)
5
5
  activesupport (>= 4.2)
6
6
  i18n
7
7
 
data/Rakefile CHANGED
@@ -13,7 +13,7 @@ desc "Update the built-in CA root certificate file"
13
13
  task :update_cert_file do
14
14
  require 'net/http'
15
15
  require 'uri'
16
- cert_uri = URI('http://curl.haxx.se/ca/cacert.pem')
16
+ cert_uri = URI('https://curl.se/ca/cacert.pem')
17
17
  response = Net::HTTP.get_response(cert_uri)
18
18
  if response.code == '200'
19
19
  cert_path = File.expand_path('../lib/certs/cacert.pem', __FILE__)
@@ -1,3 +1,3 @@
1
1
  module ActiveUtils
2
- VERSION = "3.6.0"
2
+ VERSION = "3.6.2"
3
3
  end