bundler-audit 0.9.0 → 0.9.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1c6db011cec167c3f5091b4bc3928b297862b2d3e74184db2c33a203374f8d67
-  data.tar.gz: fe1c745f2e1202bfddfee708c512cbd34f928d6a429d8161f82394695d52b462
+  metadata.gz: 83898613996d764bcb4e3ed517da59a95132049e29e7e8afa25698d4a03f6276
+  data.tar.gz: e931b427480a4bbdaeaa4bf381141780e04d26cbd2a98c60e60f3a0431c3b4d6
 SHA512:
-  metadata.gz: edd782d23e4e776350bf77cc1dadda0d78d89cf8816540ae8b20706b42f0dbefd7a3bb30fa9093afa23c5feb78dcbe1471139fc9471cde2c575f9cb5a658a71e
-  data.tar.gz: 50c0fa97a5d5a73624cf59dde9fe5ee5f0e300230b725b1055c2b74908866d2d962c91764e3d248878237eea66b23ce170a0e70ba4829f00a7e4423a76dd6774
+  metadata.gz: fcd29c11e7cee080390e9dc3b6356fc74817835a8b9f8621d230d27ea497b81ba63abcf880799f948de6eb4768747a01dc46a0aa29841c1bd76d92cd990c2659
+  data.tar.gz: f41ece9bf750bddcf632be46f240f079074ce26c7cb69e24184002929f041ed326e1b383a3649ec680bb3d42e03c25a167b65eb93219511065c05622bee1bef3

data/.github/workflows/ruby.yml

@@ -9,6 +9,7 @@ jobs:
       fail-fast: false
       matrix:
         ruby:
+          - 2.5
           - 2.6
           - 2.7
           - 3.0

data/ChangeLog.md

@@ -1,3 +1,8 @@
+### 0.9.0.1 / 2021-08-31
+
+* Add a workaround for Psych < 3.1.0 to support running on Ruby < 2.6.
+  (issue #319)
+
 ### 0.9.0 / 2021-08-31
 
 * Load advisory metadata using `YAML.safe_load`. (issue #302)

data/README.md

@@ -1,6 +1,8 @@
 # bundler-audit
+
 [![CI](https://github.com/rubysec/bundler-audit/actions/workflows/ruby.yml/badge.svg)](https://github.com/rubysec/bundler-audit/actions/workflows/ruby.yml)
 [![Code Climate](https://codeclimate.com/github/rubysec/bundler-audit.svg)](https://codeclimate.com/github/rubysec/bundler-audit)
+[![Gem Version](https://badge.fury.io/rb/bundler-audit.svg)](https://badge.fury.io/rb/bundler-audit)
 
 * [Homepage](https://github.com/rubysec/bundler-audit#readme)
 * [Issues](https://github.com/rubysec/bundler-audit/issues)

data/lib/bundler/audit/advisory.rb

@@ -49,7 +49,12 @@ module Bundler
       def self.load(path)
         id   = File.basename(path).chomp('.yml')
         data = File.open(path) do |yaml|
-                 YAML.safe_load(yaml, permitted_classes: [Date])
+                 if Psych::VERSION >= '3.1.0'
+                   YAML.safe_load(yaml, permitted_classes: [Date])
+                 else
+                   # XXX: psych < 3.1.0 YAML.safe_load calling convention
+                   YAML.safe_load(yaml, [Date])
+                 end
                end
 
         unless data.kind_of?(Hash)

data/lib/bundler/audit/version.rb

@@ -18,6 +18,6 @@
 module Bundler
   module Audit
     # bundler-audit version
-    VERSION = '0.9.0'
+    VERSION = '0.9.0.1'
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: bundler-audit
 version: !ruby/object:Gem::Version
-  version: 0.9.0
+  version: 0.9.0.1
 platform: ruby
 authors:
 - Postmodern