bundle-safe-update 1.0.14 → 1.0.17
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/Gemfile.lock +2 -2
- data/README.md +4 -0
- data/docs/plans/2026-02-18-readme-badges-design.md +21 -0
- data/lib/bundle_safe_update/cli/output.rb +2 -2
- data/lib/bundle_safe_update/cli.rb +2 -2
- data/lib/bundle_safe_update/version.rb +1 -1
- metadata +7 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 1e2c1175b765d499a14621f62e2b048d1f196f357d792f0dbb9443b3c6bc0b08
|
|
4
|
+
data.tar.gz: cb7f143f09d8e7e474466ae2a551b5cf453b68f3b994395e9d8d0d89e710aac1
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: f49ddd5c31cd89ffa1c9c83f1e0f97a99045699d4393e693b8e8df890fc4d8529e35e9c7a6d59a4ebc20b14616a2981e7477fee34984ff3c2080cf42ec5f092f
|
|
7
|
+
data.tar.gz: e77c37ec34fa77ea04ae72b91c451abf90edf10d9e051617240d3c7cc45973ea3acd08bdc8929aacbd1a860c767acb6a21a4fea75bed6662ccfbb5550e277130
|
data/Gemfile.lock
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
PATH
|
|
2
2
|
remote: .
|
|
3
3
|
specs:
|
|
4
|
-
bundle-safe-update (1.0.
|
|
4
|
+
bundle-safe-update (1.0.17)
|
|
5
5
|
|
|
6
6
|
GEM
|
|
7
7
|
remote: https://rubygems.org/
|
|
@@ -102,7 +102,7 @@ CHECKSUMS
|
|
|
102
102
|
addressable (2.8.8) sha256=7c13b8f9536cf6364c03b9d417c19986019e28f7c00ac8132da4eb0fe393b057
|
|
103
103
|
ast (2.4.3) sha256=954615157c1d6a382bc27d690d973195e79db7f55e9765ac7c481c60bdb4d383
|
|
104
104
|
bigdecimal (3.3.1) sha256=eaa01e228be54c4f9f53bf3cc34fe3d5e845c31963e7fcc5bedb05a4e7d52218
|
|
105
|
-
bundle-safe-update (1.0.
|
|
105
|
+
bundle-safe-update (1.0.17)
|
|
106
106
|
crack (1.0.1) sha256=ff4a10390cd31d66440b7524eb1841874db86201d5b70032028553130b6d4c7e
|
|
107
107
|
date (3.5.1) sha256=750d06384d7b9c15d562c76291407d89e368dda4d4fff957eb94962d325a0dc0
|
|
108
108
|
diff-lcs (1.6.2) sha256=9ae0d2cba7d4df3075fe8cd8602a8604993efc0dfa934cff568969efb1909962
|
data/README.md
CHANGED
|
@@ -1,5 +1,9 @@
|
|
|
1
1
|
# bundle-safe-update
|
|
2
2
|
|
|
3
|
+
[](https://github.com/dsablic/bundle-safe-update/actions/workflows/ci.yml)
|
|
4
|
+
[](https://badge.fury.io/rb/bundle-safe-update)
|
|
5
|
+
[](https://opensource.org/licenses/MIT)
|
|
6
|
+
|
|
3
7
|
A CLI tool that enforces a minimum release age for Ruby gems during updates, preventing installation of gem versions that are "too new" (e.g., less than 14 days old). This helps protect against supply chain attacks by ensuring gems have had time for community review.
|
|
4
8
|
|
|
5
9
|
## Installation
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
# README Badges Design
|
|
2
|
+
|
|
3
|
+
**Date:** 2026-02-18
|
|
4
|
+
|
|
5
|
+
## Summary
|
|
6
|
+
|
|
7
|
+
Add three standard badges to the README.md for the `bundle-safe-update` gem.
|
|
8
|
+
|
|
9
|
+
## Badges
|
|
10
|
+
|
|
11
|
+
Insert immediately after the `# bundle-safe-update` heading, before the description paragraph:
|
|
12
|
+
|
|
13
|
+
```markdown
|
|
14
|
+
[](https://github.com/dsablic/bundle-safe-update/actions/workflows/ci.yml)
|
|
15
|
+
[](https://badge.fury.io/rb/bundle-safe-update)
|
|
16
|
+
[](https://opensource.org/licenses/MIT)
|
|
17
|
+
```
|
|
18
|
+
|
|
19
|
+
- **CI**: GitHub Actions status for the `CI` workflow on `master`
|
|
20
|
+
- **Gem Version**: Current published version from RubyGems via badge.fury.io
|
|
21
|
+
- **License**: Static MIT badge via shields.io
|
|
@@ -130,10 +130,10 @@ module BundleSafeUpdate
|
|
|
130
130
|
puts
|
|
131
131
|
if lock_only
|
|
132
132
|
puts(cyan("Updating lock file for #{gem_names.length} gem(s): #{gem_names.join(', ')}"))
|
|
133
|
-
puts(cyan("Running: bundle lock --update #{gem_names.join(' ')}"))
|
|
133
|
+
puts(cyan("Running: bundle lock --conservative --update #{gem_names.join(' ')}"))
|
|
134
134
|
else
|
|
135
135
|
puts(cyan("Updating #{gem_names.length} gem(s): #{gem_names.join(', ')}"))
|
|
136
|
-
puts(cyan("Running: bundle update #{gem_names.join(' ')}"))
|
|
136
|
+
puts(cyan("Running: bundle update --conservative #{gem_names.join(' ')}"))
|
|
137
137
|
end
|
|
138
138
|
end
|
|
139
139
|
|
|
@@ -126,9 +126,9 @@ module BundleSafeUpdate
|
|
|
126
126
|
|
|
127
127
|
def update_command(gem_names, lock_only)
|
|
128
128
|
if lock_only
|
|
129
|
-
%w[bundle lock --update] + gem_names
|
|
129
|
+
%w[bundle lock --conservative --update] + gem_names
|
|
130
130
|
else
|
|
131
|
-
%w[bundle update] + gem_names
|
|
131
|
+
%w[bundle update --conservative] + gem_names
|
|
132
132
|
end
|
|
133
133
|
end
|
|
134
134
|
|
metadata
CHANGED
|
@@ -1,13 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: bundle-safe-update
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.0.
|
|
4
|
+
version: 1.0.17
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Denis Sablic
|
|
8
|
+
autorequire:
|
|
8
9
|
bindir: exe
|
|
9
10
|
cert_chain: []
|
|
10
|
-
date:
|
|
11
|
+
date: 2026-03-02 00:00:00.000000000 Z
|
|
11
12
|
dependencies: []
|
|
12
13
|
description: A CLI tool that prevents installation of gem versions that are too new
|
|
13
14
|
(e.g., <14 days old), helping protect against supply chain attacks.
|
|
@@ -28,6 +29,7 @@ files:
|
|
|
28
29
|
- bin/install-hooks
|
|
29
30
|
- bin/setup
|
|
30
31
|
- bundle-safe-update.gemspec
|
|
32
|
+
- docs/plans/2026-02-18-readme-badges-design.md
|
|
31
33
|
- exe/bundle-safe-update
|
|
32
34
|
- lib/bundle_safe_update.rb
|
|
33
35
|
- lib/bundle_safe_update/audit_checker.rb
|
|
@@ -50,6 +52,7 @@ metadata:
|
|
|
50
52
|
rubygems_mfa_required: 'true'
|
|
51
53
|
source_code_uri: https://github.com/dsablic/bundle-safe-update
|
|
52
54
|
changelog_uri: https://github.com/dsablic/bundle-safe-update/releases
|
|
55
|
+
post_install_message:
|
|
53
56
|
rdoc_options: []
|
|
54
57
|
require_paths:
|
|
55
58
|
- lib
|
|
@@ -64,7 +67,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
64
67
|
- !ruby/object:Gem::Version
|
|
65
68
|
version: '0'
|
|
66
69
|
requirements: []
|
|
67
|
-
rubygems_version:
|
|
70
|
+
rubygems_version: 3.5.22
|
|
71
|
+
signing_key:
|
|
68
72
|
specification_version: 4
|
|
69
73
|
summary: Enforce minimum release age for Ruby gems during updates
|
|
70
74
|
test_files: []
|