cvss-suite 4.1.2 → 4.1.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6e25996a78d7db22cd7ae4b7e2088f175de9eca97b74770631950c899f4e9944
-  data.tar.gz: b2aa59052d7d4785c3bdd624d178aa77cbbc047f6e3674d485556d5838e64d33
+  metadata.gz: c3efb3fc75b7c4cc0428b409767c3abc83c2efa00b0dce57597c933fd2e233f3
+  data.tar.gz: ec150b5056b70c831088d49028c69e846dff6194e4043dde7fe5d31235c18613
 SHA512:
-  metadata.gz: 5c7af2a544e4ce1a541ce4c04905f063e0ad79694386d181c2b05cab9a63405e63a6fcd4d19ab135794748ef31b8e5615651cc2b513913931eaee104e6696af2
-  data.tar.gz: 8a7b3a9f37ee7b85675e309268c628179c6a305d830b9955524f3b269e0ee31d8e8eb650480ac939c793edf1c5af381e28a739be2dd92d00e799d12b32bd5721
+  metadata.gz: 49532a6b6954c2b12734990897134beec7c8ccbadb2420111dc7c32a4858ed7a03a691226e879144f75fbdd1dc6f4e67351907d3e2f11606db8235d829394fbe
+  data.tar.gz: 6ffd130cc5107b9aeec32eb37601ef50c8c55001fe20553e46c2b82f353e72b15f4ce089f2c75959d5f9e51df63db5ea3f8795410261549cedf4f3c5fd41b798

data/.github/workflows/push.yml

@@ -0,0 +1,32 @@
+name: Push gem
+
+on:
+  push:
+    tags:
+      - "v*"
+
+jobs:
+  push:
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: write
+      id-token: write
+
+    # If you configured a GitHub environment on RubyGems, you must use it here.
+    environment: release
+
+    steps:
+      # Set up
+      - uses: actions/checkout@v5
+        with:
+          persist-credentials: false
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          bundler-cache: true
+          ruby-version: ruby
+          bundler: 2.4.22
+
+      # Release
+      - uses: rubygems/release-gem@v1

data/.github/workflows/rspec.yml

@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        ruby: [ '2.6', '2.7', '3.0', '3.1', '3.2', '3.3', '3.4' ]
+        ruby: [ '2.6', '2.7', '3.0', '3.1', '3.2', '3.3', '3.4', '4.0' ]
     steps:
     - uses: actions/checkout@v4
     - name: Set up ${{ matrix.ruby }}

data/.rubocop.yml

@@ -45,6 +45,7 @@ Metrics/BlockLength:
     - 'spec/cvss3/cvss3_spec.rb'
     - 'spec/cvss31/cvss31_spec.rb'
     - 'spec/cvss40/cvss40_spec.rb'
+    - 'spec/cvss_metric_spec.rb'
 
 Style/IfUnlessModifier:
   Exclude:

data/CHANGES.md

@@ -1,7 +1,22 @@
+> [!WARNING]
+> Starting with version 5.0.0, changes are no longer documented in this file. Please see the [Releases page](../../releases) for the changelog going forward.
+
 # Change Log
 All notable changes to this project will be documented in this file.
 This project adheres to [Semantic Versioning](http://semver.org/).
 
+## [4.1.4] - 2026-07-05
+
+### Fixes
+
+Support BigDecimal 4.0 [#60](https://github.com/0llirocks/cvss-suite/pull/60). (@Bo98)
+
+## [4.1.3] - 2026-04-26
+
+### Fixes
+
+See [v4.1.3](https://github.com/0llirocks/cvss-suite/releases/tag/v4.1.3). (@sachin-sandhu)
+
 ## [4.1.2] - 2025-12-05
 
 ### Improvements

data/LICENSE.md

@@ -14,6 +14,7 @@ Contributors:
 - Karim ElGhandour <https://github.com/kghandour>
 - Adam Hess <https://github.com/HParker>
 - Jason Garber <https://github.com/jgarber>
+- Sachin Sandhu <https://github.com/sachin-sandhu>
 
 Permission is hereby granted, free of charge, to any person obtaining a copy of
 this software and associated documentation files (the "Software"), to deal in
@@ -30,4 +31,4 @@ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
 FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
 COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
 IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
-CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/Rakefile

@@ -0,0 +1,2 @@
+require "bundler/setup"
+Bundler::GemHelper.install_tasks

data/cvss_suite.gemspec

@@ -24,7 +24,7 @@ in version 4.0, 3.1, 3.0 and 2.'
 
   spec.metadata = {
     'bug_tracker_uri' => 'https://github.com/0llirocks/cvss-suite/issues',
-    'changelog_uri' => 'https://github.com/0llirocks/cvss-suite/blob/master/CHANGES.md',
+    'changelog_uri' => 'https://github.com/0llirocks/cvss-suite/releases',
     'documentation_uri' => "https://www.rubydoc.info/gems/cvss-suite/#{CvssSuite::VERSION}",
     'homepage_uri' => 'https://cvss-suite.0lli.rocks',
     'source_code_uri' => 'https://github.com/0llirocks/cvss-suite'
@@ -37,7 +37,7 @@ in version 4.0, 3.1, 3.0 and 2.'
   spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
   spec.require_paths = ['lib']
 
-  spec.add_dependency 'bigdecimal', '~> 3.1'
+  spec.add_dependency 'bigdecimal', '>= 3.1', '< 5'
 
   spec.add_development_dependency 'bundler', '2.4.22'
   spec.add_development_dependency 'csv', '~> 3.3'
@@ -45,4 +45,5 @@ in version 4.0, 3.1, 3.0 and 2.'
   spec.add_development_dependency 'rspec-its', '~> 1.2'
   spec.add_development_dependency 'rubocop', '1.50.2'
   spec.add_development_dependency 'simplecov', '~> 0.18'
+  spec.add_development_dependency 'rake'
 end

data/lib/cvss_suite/cvss_31_and_before.rb

@@ -40,8 +40,8 @@ module CvssSuite
     # Returns the Overall Score of the CVSS vector.
     def overall_score
       check_validity
-      return temporal_score if @temporal.valid? && !@environmental.valid?
-      return environmental_score if @environmental.valid?
+      return temporal_score if @temporal.explicitly_provided? && !@environmental.explicitly_provided?
+      return environmental_score if @environmental.explicitly_provided?
 
       base_score
     end

data/lib/cvss_suite/cvss_metric.rb

@@ -24,6 +24,17 @@ module CvssSuite
       true
     end
 
+    ##
+    # Returns if any property in this metric was explicitly provided
+    # (i.e., set to a value other than the default 'X' or 'ND').
+    def explicitly_provided?
+      @properties.any? do |property|
+        property.valid? &&
+          property.selected_value[:abbreviation] != 'X' &&
+          property.selected_value[:abbreviation] != 'ND'
+      end
+    end
+
     ##
     # Returns number of properties for this metric.
     def count

data/lib/cvss_suite/version.rb

@@ -4,5 +4,5 @@
 # See the LICENSE.md file in the top-level directory.
 
 module CvssSuite
-  VERSION = '4.1.2'.freeze
+  VERSION = '4.1.4'.freeze
 end

metadata

@@ -1,28 +1,34 @@
 --- !ruby/object:Gem::Specification
 name: cvss-suite
 version: !ruby/object:Gem::Version
-  version: 4.1.2
+  version: 4.1.4
 platform: ruby
 authors:
 - 0llirocks
 bindir: exe
 cert_chain: []
-date: 2025-12-05 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bigdecimal
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '3.1'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '5'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '3.1'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '5'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -107,6 +113,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '0.18'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 description: |-
   This Ruby gem calculates the score based on the vector of the
   Common Vulnerability Scoring System (https://www.first.org/cvss/specification-document)
@@ -118,6 +138,7 @@ files:
 - ".github/ISSUE_TEMPLATE/bug_report.md"
 - ".github/ISSUE_TEMPLATE/custom.md"
 - ".github/ISSUE_TEMPLATE/feature_request.md"
+- ".github/workflows/push.yml"
 - ".github/workflows/rspec.yml"
 - ".github/workflows/rubocop.yml"
 - ".gitignore"
@@ -131,6 +152,7 @@ files:
 - LICENSE.md
 - PULL_REQUEST_TEMPLATE.md
 - README.md
+- Rakefile
 - _config.yml
 - bin/console
 - bin/setup
@@ -175,8 +197,8 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/0llirocks/cvss-suite/issues
-  changelog_uri: https://github.com/0llirocks/cvss-suite/blob/master/CHANGES.md
-  documentation_uri: https://www.rubydoc.info/gems/cvss-suite/4.1.2
+  changelog_uri: https://github.com/0llirocks/cvss-suite/releases
+  documentation_uri: https://www.rubydoc.info/gems/cvss-suite/4.1.4
   homepage_uri: https://cvss-suite.0lli.rocks
   source_code_uri: https://github.com/0llirocks/cvss-suite
 rdoc_options: []
@@ -193,7 +215,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.0.dev
+rubygems_version: 4.0.10
 specification_version: 4
 summary: Ruby gem for processing cvss vectors.
 test_files: []