bcrypt4 4.0.2 → 4.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: b7e2ef2aa50440cba6c84645825a7e81228860da
-  data.tar.gz: b38c2eb8d1621b3fda32aafe8bde141274273a16
+  metadata.gz: ebc8bfadae926c9aeec878993336f55a2500fc25
+  data.tar.gz: 47fb56fd2256dcc7255a95d1b88b8505a7d0e9e5
 SHA512:
-  metadata.gz: 0445b23872a9b8a23ead7994e8fad4c3e29dd90af0ec9d5650af83af58cc1e16d825319fc69ee33eaf1959320d9ac8f4b874cc100c828a7bee101b6aeb9130ea
-  data.tar.gz: 394317a40d9594829a830af1720a7267705f60f652bb2a91c900caf3d711f5815ddd82ee231a81c379d001629e5ef062b4be59196773452020b7158965cdcb8c
+  metadata.gz: bea8f56d0f6287b0d919497838dbc6d91684eab695880ea455e35e1ebe8731fa053b8f92d80158ef879848c1a56687504715bbf22dbf1434ec1bf502f812b999
+  data.tar.gz: 90d11a9197f24fc53b2793957829351b31d6482f00f3d1fd0ee7e5534bf5111638ee28feea03d25134d779e3123af21a0a876be65ffd8fe01e4a23ecd9d38b99

data/.travis.yml

@@ -3,8 +3,8 @@ before_install:
   # jruby-head does not have bundler.
   - which bundle || gem install bundler
 rvm:
-  - 1.8.7
-  - 1.9.2
+    #- 1.8.7 #no longer supported as min requirements are 1.9.3
+    #- 1.9.2 #no longer supported as min requirements are 1.9.3
   - 1.9.3
   - 2.0.0
   - 2.1.0
@@ -12,19 +12,17 @@ rvm:
   - 2.3.0
   - 2.4.1
   - ruby-head
-  - jruby-18mode
+    #- jruby-18mode #no longer supported as min requirements are 1.9.3
   - jruby-19mode
   - jruby-head
   - rbx
-  - ree
+    #- ree #no longer supported as min requirements are 1.9.3
 script: bundle exec rake
 matrix:
   allow_failures:
-    - rvm: rbx
-    #known issue with jruby 2y hashs
-    - rvm: jruby-18mode 
+    #not entirely sure what the error is with this, need to look in to it more, volunteers?
+    - rvm: rbx 
+    #known issues with interop on 2y, jBCrypt has not been updated in years :(
     - rvm: jruby-19mode
     - rvm: jruby-head
-    # known issue with json dependency
-    - rvm: 2.4.1
   fast_finish: true

data/CHANGELOG

@@ -91,3 +91,6 @@
 
 4.0.2 Jul 20 2017
   - Add note about forthcoming gem which sets min requirements of 1.9.3
+
+4.1.0 Jul 20 2017
+  - Drop support for < ruby 1.9.3, update dependencies

data/Gemfile.lock

@@ -1,32 +1,29 @@
 PATH
   remote: .
   specs:
-    bcrypt4 (4.0.2)
+    bcrypt4 (4.1.0)
 
 GEM
   remote: https://rubygems.org/
   specs:
-    diff-lcs (1.2.5)
-    json (1.8.3)
-    json (1.8.3-java)
-    rake (10.4.2)
-    rake-compiler (0.9.5)
+    diff-lcs (1.3)
+    rake (12.0.0)
+    rake-compiler (1.0.4)
       rake
-    rdoc (3.12.2)
-      json (~> 1.4)
-    rspec (3.3.0)
-      rspec-core (~> 3.3.0)
-      rspec-expectations (~> 3.3.0)
-      rspec-mocks (~> 3.3.0)
-    rspec-core (3.3.2)
-      rspec-support (~> 3.3.0)
-    rspec-expectations (3.3.1)
+    rdoc (5.1.0)
+    rspec (3.6.0)
+      rspec-core (~> 3.6.0)
+      rspec-expectations (~> 3.6.0)
+      rspec-mocks (~> 3.6.0)
+    rspec-core (3.6.0)
+      rspec-support (~> 3.6.0)
+    rspec-expectations (3.6.0)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.3.0)
-    rspec-mocks (3.3.2)
+      rspec-support (~> 3.6.0)
+    rspec-mocks (3.6.0)
       diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.3.0)
-    rspec-support (3.3.0)
+      rspec-support (~> 3.6.0)
+    rspec-support (3.6.0)
 
 PLATFORMS
   java
@@ -36,9 +33,9 @@ PLATFORMS
 
 DEPENDENCIES
   bcrypt4!
-  rake-compiler (~> 0.9.2)
-  rdoc (~> 3.12)
-  rspec (>= 3)
+  rake-compiler (~> 1.0.4)
+  rdoc (~> 5.1.0)
+  rspec (= 3.6)
 
 BUNDLED WITH
-   1.11.2
+   1.13.6

data/README.md

@@ -29,14 +29,15 @@ re-hash those passwords. This vulnerability only affected the JRuby gem.
 
 The bcrypt gem is available on the following ruby platforms:
 
-* JRuby
+* JRuby 1.9.3 or greater
 ** NOTE: due to the reliance on JBCrypt for this library, there is a known issue with bcrypt '2y' format and this will not interoperate with other implementations for '2y' hashes (pull requests welcome).
-* RubyInstaller 1.8, 1.9, 2.0, 2.1, and 2.2 builds on win32
-* Any 1.8, 1.9, 2.0, 2.1, 2.2, or 2.3 Ruby on a BSD/OS X/Linux system with a compiler
+* RubyInstaller 1.9.3, 2.0, 2.1, and 2.2 builds on win32
+*  1.9.3 and greater or any 2.0, 2.1, 2.2, 2.3, or 2.4 Ruby on a BSD/OS X/Linux system with a compiler
+
 
 ## How to use `bcrypt()` in your Rails application
 
-*Note*: Rails versions >= 3 ship with `ActiveModel::SecurePassword` which uses bcrypt-ruby.
+*Note*: Rails versions >= 3 ship with `ActiveModel::SecurePassword` which uses bcrypt-ruby. (not this version)
 `has_secure_password` [docs](http://api.rubyonrails.org/classes/ActiveModel/SecurePassword/ClassMethods.html#method-i-has_secure_password)
 implements a similar authentication strategy to the code below.
 

data/Rakefile

@@ -9,7 +9,7 @@ require 'benchmark'
 
 CLEAN.include(
   "tmp",
-  "lib/1.8",
+  #"lib/1.8",
   "lib/1.9",
   "lib/2.0",
   "lib/2.1",

data/bcrypt4.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |s|
   s.name = 'bcrypt4'
-  s.version = '4.0.2'
+  s.version = '4.1.0'
 
   s.summary = "OpenBSD's bcrypt() password hashing algorithm."
   s.description = <<-EOF
@@ -12,9 +12,11 @@ Gem::Specification.new do |s|
   s.files = `git ls-files`.split("\n")
   s.require_path = 'lib'
 
-  s.add_development_dependency 'rake-compiler', '~> 0.9.2'
-  s.add_development_dependency 'rspec', '>= 3'
-  s.add_development_dependency 'rdoc', '~> 3.12'
+  s.required_ruby_version = Gem::Requirement.new(">= 1.9.3".freeze)
+
+  s.add_development_dependency 'rake-compiler', '~> 1.0.4'
+  s.add_development_dependency 'rspec', '3.6'
+  s.add_development_dependency 'rdoc', '~> 5.1.0'
 
   s.has_rdoc = true
   s.rdoc_options += ['--title', 'bcrypt-ruby', '--line-numbers', '--inline-source', '--main', 'README.md']
@@ -29,8 +31,8 @@ Gem::Specification.new do |s|
 
   s.post_install_message = %q{
 
-  This is the last version of the bcrypt4 library that will support any format of ruby lower than 1.9.3 
-  If you are still using 1.9.2 or older, do not update past 4.0.2
+  There is a known issue with JRuby and '2y' format bcrypt hashes.
+  Due to an unfixed issue in jBCrypt, these hashes are not the same as on other implementations.
 
 }
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: bcrypt4
 version: !ruby/object:Gem::Version
-  version: 4.0.2
+  version: 4.1.0
 platform: ruby
 authors:
 - Coda Hale
@@ -16,42 +16,42 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.9.2
+        version: 1.0.4
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.9.2
+        version: 1.0.4
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '='
       - !ruby/object:Gem::Version
-        version: '3'
+        version: '3.6'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '='
       - !ruby/object:Gem::Version
-        version: '3'
+        version: '3.6'
 - !ruby/object:Gem::Dependency
   name: rdoc
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.12'
+        version: 5.1.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.12'
+        version: 5.1.0
 description: |2
       bcrypt() is a sophisticated and secure hash algorithm designed by The OpenBSD project
       for hashing passwords. The bcrypt Ruby gem provides a simple wrapper for safely handling
@@ -103,9 +103,12 @@ homepage: https://github.com/dissolve/bcrypt-ruby
 licenses:
 - MIT
 metadata: {}
-post_install_message: "\n\n  This is the last version of the bcrypt4 library that
-  will support any format of ruby lower than 1.9.3 \n  If you are still using 1.9.2
-  or older, do not update past 4.0.2\n\n"
+post_install_message: |2+
+
+
+    There is a known issue with JRuby and '2y' format bcrypt hashes.
+    Due to an unfixed issue in jBCrypt, these hashes are not the same as on other implementations.
+
 rdoc_options:
 - "--title"
 - bcrypt-ruby
@@ -119,7 +122,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.9.3
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="