acts_as_trackable 0.4.7 → 0.4.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b5b80f9034320d884d7aea289f96f0a9f1ea7307ea693d9a5a2deeb6eb3c36c7
-  data.tar.gz: b59ac0c983f3a786962fd4ebdc387f8910cc47d0ffe4a1d7ea113d442171faaa
+  metadata.gz: 486c206ac65738a02df5428d68e9e6dce61fbebeae384e90d6e4ae0797a3b1c2
+  data.tar.gz: 38ce9d95272a0f863bae6837388fc39c8f8a63d802f112e620b8618100cfd563
 SHA512:
-  metadata.gz: d43d5b1eecebbb49aeac58dabbb0830f9e5f9fc1b6f21e034e63231f2ad88c04af8f81e3cad3de72470088a2692bb74a4d26ed7a9a65c41b8cda8100ad6ec5b0
-  data.tar.gz: 6bd5f1afadd1e08af969ad233e7c097eb42b24d5db04fec5a647ed2b2271186fada7efde9104f494f5ca1d853a35468923037796ae94d1890329626b069f8032
+  metadata.gz: fb07f9636519322fc2fb0566dc4026479ef2fc02792e1f4592d29ea2e17f0ea3c67388dfa99d7fd0e00453dec433c979463ec15ec9bfd6bc6594ff487d3ca0e1
+  data.tar.gz: a03a9469f0872a1f7c2022dee83b8e57fb8a7e765cf687a0c6f2a1a722eb25fb5ada89e0d302f96adc1e62135ff12b4972a2af2b12cf41f4c68744e54d41a28d

data/Gemfile

@@ -2,7 +2,6 @@ source 'https://rubygems.org'
 
 gemspec
 gem 'activerecord', '~> 7.2', '>= 7.2.2'
-gem 'activesupport', '~> 7.2', '>= 7.2.2'
 
 group :test do
   gem 'sqlite3', '~> 2.2'

data/Gemfile.lock

@@ -1,35 +1,18 @@
 PATH
   remote: .
   specs:
-    acts_as_trackable (0.4.6)
+    acts_as_trackable (0.4.8)
 
 GEM
   remote: https://rubygems.org/
   specs:
-    actionpack (7.2.2.2)
-      actionview (= 7.2.2.2)
-      activesupport (= 7.2.2.2)
-      nokogiri (>= 1.8.5)
-      racc
-      rack (>= 2.2.4, < 3.2)
-      rack-session (>= 1.0.1)
-      rack-test (>= 0.6.3)
-      rails-dom-testing (~> 2.2)
-      rails-html-sanitizer (~> 1.6)
-      useragent (~> 0.16)
-    actionview (7.2.2.2)
-      activesupport (= 7.2.2.2)
-      builder (~> 3.1)
-      erubi (~> 1.11)
-      rails-dom-testing (~> 2.2)
-      rails-html-sanitizer (~> 1.6)
-    activemodel (7.2.2.2)
-      activesupport (= 7.2.2.2)
-    activerecord (7.2.2.2)
-      activemodel (= 7.2.2.2)
-      activesupport (= 7.2.2.2)
+    activemodel (7.2.3)
+      activesupport (= 7.2.3)
+    activerecord (7.2.3)
+      activemodel (= 7.2.3)
+      activesupport (= 7.2.3)
       timeout (>= 0.4.0)
-    activesupport (7.2.2.2)
+    activesupport (7.2.3)
       base64
       benchmark (>= 0.3)
       bigdecimal
@@ -42,79 +25,21 @@ GEM
       securerandom (>= 0.3)
       tzinfo (~> 2.0, >= 2.0.5)
     base64 (0.3.0)
-    benchmark (0.4.1)
-    bigdecimal (3.2.2)
-    builder (3.3.0)
-    concurrent-ruby (1.3.5)
-    connection_pool (2.5.3)
-    crass (1.0.6)
-    date (3.4.1)
+    benchmark (0.5.0)
+    bigdecimal (4.0.1)
+    concurrent-ruby (1.3.6)
+    connection_pool (2.5.5)
     drb (2.2.3)
-    erubi (1.13.1)
-    generator_spec (0.10.0)
-      activesupport (>= 3.0.0)
-      railties (>= 3.0.0)
-    i18n (1.14.7)
+    i18n (1.14.8)
       concurrent-ruby (~> 1.0)
-    io-console (0.8.0)
-    irb (1.15.1)
-      pp (>= 0.6.0)
-      rdoc (>= 4.0.0)
-      reline (>= 0.4.2)
     logger (1.7.0)
-    loofah (2.24.0)
-      crass (~> 1.0.2)
-      nokogiri (>= 1.12.0)
-    minitest (5.25.5)
-    nokogiri (1.18.9-arm64-darwin)
-      racc (~> 1.4)
-    nokogiri (1.18.9-x86_64-darwin)
-      racc (~> 1.4)
-    pp (0.6.2)
-      prettyprint
-    prettyprint (0.2.0)
-    psych (5.2.3)
-      date
-      stringio
-    racc (1.8.1)
-    rack (3.1.20)
-    rack-session (2.1.1)
-      base64 (>= 0.1.0)
-      rack (>= 3.0.0)
-    rack-test (2.2.0)
-      rack (>= 1.3)
-    rackup (2.2.1)
-      rack (>= 3)
-    rails-dom-testing (2.2.0)
-      activesupport (>= 5.0.0)
-      minitest
-      nokogiri (>= 1.6)
-    rails-html-sanitizer (1.6.2)
-      loofah (~> 2.21)
-      nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0)
-    railties (7.2.2.2)
-      actionpack (= 7.2.2.2)
-      activesupport (= 7.2.2.2)
-      irb (~> 1.13)
-      rackup (>= 1.0.0)
-      rake (>= 12.2)
-      thor (~> 1.0, >= 1.2.2)
-      zeitwerk (~> 2.6)
-    rake (13.2.1)
-    rdoc (6.12.0)
-      psych (>= 4.0.0)
-    reline (0.6.0)
-      io-console (~> 0.5)
+    minitest (5.27.0)
     securerandom (0.4.1)
-    sqlite3 (2.6.0-arm64-darwin)
-    sqlite3 (2.6.0-x86_64-darwin)
-    stringio (3.1.5)
-    thor (1.4.0)
-    timeout (0.4.3)
+    sqlite3 (2.8.1-arm64-darwin)
+    sqlite3 (2.8.1-x86_64-darwin)
+    timeout (0.6.0)
     tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
-    useragent (0.16.11)
-    zeitwerk (2.6.18)
 
 PLATFORMS
   arm64-darwin
@@ -122,9 +47,7 @@ PLATFORMS
 
 DEPENDENCIES
   activerecord (~> 7.2, >= 7.2.2)
-  activesupport (~> 7.2, >= 7.2.2)
   acts_as_trackable!
-  generator_spec
   sqlite3 (~> 2.2)
 
 BUNDLED WITH

data/acts_as_trackable.gemspec

@@ -32,8 +32,6 @@ Gem::Specification.new do |spec|
     `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) || f.end_with?('.gem') }
   end
 
-  spec.add_development_dependency 'generator_spec'
-
   spec.bindir        = 'exe'
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ['lib']

data/changelog.md

@@ -1,4 +1,10 @@
 # acts_as_trackable Changelog
+## Version: 0.4.8
+  ### Patch
+    - Removed unused `generator_spec` development dependency, eliminating unnecessary transitive dependencies (railties, actionpack, nokogiri, rack, loofah, etc.).
+    - Removed redundant `activesupport` declaration from Gemfile (already pulled in by activerecord).
+    - Resolves GHSA-wx95-c6cv-8532 (nokogiri) by removing nokogiri from the dependency tree entirely.
+
 ## Version: 0.4.7
   ### Patch
     - Security Fix: Upgraded Rack dependency from 3.1.18 to 3.1.20 to patch CVE-2026-22860 and CVE-2026-25500.

data/lib/acts_as_trackable/version.rb

@@ -1,3 +1,3 @@
 module ActsAsTrackable
-  VERSION = '0.4.7'.freeze
+  VERSION = '0.4.8'.freeze
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: acts_as_trackable
 version: !ruby/object:Gem::Version
-  version: 0.4.7
+  version: 0.4.8
 platform: ruby
 authors:
 - Ahmad Keewan
@@ -9,22 +9,8 @@ authors:
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-02-18 00:00:00.000000000 Z
-dependencies:
-- !ruby/object:Gem::Dependency
-  name: generator_spec
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
+date: 2026-02-25 00:00:00.000000000 Z
+dependencies: []
 description: |
   ActsAsTrackable is designed to simplify the process of tracking database object activities in Ruby on Rails applications.
   By including the gem and running a few setup commands, developers can make their models trackable with minimal effort.