easy_meli 0.6.17 → 0.6.18

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. checksums.yaml +4 -4
  2. data/.github/workflows/ci.yml +2 -2
  3. data/CHANGELOG.md +4 -0
  4. data/Gemfile.lock +27 -20
  5. data/easy_meli.gemspec +1 -1
  6. data/lib/easy_meli/version.rb +1 -1
  7. metadata +5 -5
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 49141fd745100d6d1afd7ae24ea19123601154ef71ca1e60a5c98afab687d97f
4
- data.tar.gz: 6f90bdf708fe53be9fcb1553023da35e861dedd5051ade9a46dd35a8d57de131
3
+ metadata.gz: f53720d5c973abecb10c0a92fcdec2de507951944f211ce377bfacac6233c065
4
+ data.tar.gz: b69d037d9c5267fe02f35d156a3dcf007ec4ebbe0edf6b0317d052967a623547
5
5
  SHA512:
6
- metadata.gz: 30b9a621c52ee9c75b449ae3461b979f69cebb0c89901c00b8ed9c6285b209de569cabb2e0a317b30e67d8b3f223b6b93d50511eca1bd6cfcefe2bc7743ef219
7
- data.tar.gz: b000edd8ee03d2bd4512e717251fda1a3d2a8ce9cbe08fd3a80299dfebcee670162c5f1d00acbbc9badc9c5fb133688ab177b0573729cda0a4a49427e4ec0a71
6
+ metadata.gz: b6788076ade269afbd99bde1c6b9b5d25fdb533e09c26e154cdf80666a7b0e4eceb7fd144ca5093b2268c92c397c5f2d94fd6d8ea17e032dca4236768beb6996
7
+ data.tar.gz: 47935bd0163b3f55827881a0dc42a17428441c4007df6f2f400498dca2a0cc6d2f034626155c7c8251aa9caa4a13bb37a8ebb4f4782d69a8f260471a78b8c9ed
data/.github/workflows/ci.yml CHANGED
@@ -12,13 +12,13 @@ jobs:
12
12
  ruby_version: [ '2.7', '3.1' ]
13
13
  steps:
14
14
  - name: Checkout
15
- uses: actions/checkout@v2
15
+ uses: actions/checkout@v4
16
16
  - name: Setup ruby ${{ matrix.ruby_version }}
17
17
  uses: ruby/setup-ruby@v1
18
18
  with:
19
19
  ruby-version: ${{ matrix.ruby_version }}
20
20
  - name: Setup cache key and directory for gems cache
21
- uses: actions/cache@v2
21
+ uses: actions/cache@v4
22
22
  with:
23
23
  path: vendor/bundle
24
24
  key: ${{ runner.os }}-gem-use-ruby-${{ matrix.ruby_version }}-${{ hashFiles('**/Gemfile.lock') }}
data/CHANGELOG.md CHANGED
@@ -1,4 +1,8 @@
1
1
  # Changelog
2
+ ## V 0.6.18
3
+ - Update httparty from ~> 0.21 to ~> 0.24 (security fix for CVE-2025-68696 - SSRF vulnerability)
4
+ - Fix tests to use proper path format with leading slash
5
+
2
6
  ## V 0.6.17
3
7
  - Update rexml from 3.3.9 to 3.4.2
4
8
 
data/Gemfile.lock CHANGED
@@ -1,44 +1,51 @@
1
1
  PATH
2
2
  remote: .
3
3
  specs:
4
- easy_meli (0.6.17)
5
- httparty (~> 0.21)
4
+ easy_meli (0.6.18)
5
+ httparty (~> 0.24)
6
6
  multi_xml (~> 0.6.0)
7
7
  rexml (~> 3.4.2)
8
8
 
9
9
  GEM
10
10
  remote: https://rubygems.org/
11
11
  specs:
12
- addressable (2.8.0)
13
- public_suffix (>= 2.0.2, < 5.0)
14
- coderay (1.1.2)
15
- crack (0.4.3)
16
- safe_yaml (~> 1.0.0)
12
+ addressable (2.8.8)
13
+ public_suffix (>= 2.0.2, < 8.0)
14
+ bigdecimal (4.0.1)
15
+ coderay (1.1.3)
16
+ crack (1.0.1)
17
+ bigdecimal
18
+ rexml
17
19
  csv (3.3.5)
18
- hashdiff (1.0.1)
19
- httparty (0.23.2)
20
+ hashdiff (1.2.1)
21
+ httparty (0.24.0)
20
22
  csv
21
23
  mini_mime (>= 1.0.0)
22
24
  multi_xml (>= 0.5.2)
23
- method_source (1.0.0)
25
+ io-console (0.8.2)
26
+ method_source (1.1.0)
24
27
  mini_mime (1.1.5)
25
- minitest (5.18.1)
26
- mocha (1.11.2)
28
+ minitest (5.27.0)
29
+ mocha (3.0.1)
30
+ ruby2_keywords (>= 0.0.5)
27
31
  multi_xml (0.6.0)
28
- pry (0.13.1)
32
+ pry (0.16.0)
29
33
  coderay (~> 1.1)
30
34
  method_source (~> 1.0)
31
- public_suffix (4.0.6)
32
- rake (13.0.1)
35
+ reline (>= 0.6.0)
36
+ public_suffix (7.0.0)
37
+ rake (13.3.1)
38
+ reline (0.6.3)
39
+ io-console (~> 0.5)
33
40
  rexml (3.4.4)
34
- safe_yaml (1.0.5)
35
- webmock (3.8.3)
36
- addressable (>= 2.3.6)
41
+ ruby2_keywords (0.0.5)
42
+ webmock (3.26.1)
43
+ addressable (>= 2.8.0)
37
44
  crack (>= 0.3.2)
38
45
  hashdiff (>= 0.4.0, < 2.0.0)
39
46
 
40
47
  PLATFORMS
41
- ruby
48
+ arm64-darwin-25
42
49
 
43
50
  DEPENDENCIES
44
51
  bundler (~> 2.3.6)
@@ -50,4 +57,4 @@ DEPENDENCIES
50
57
  webmock
51
58
 
52
59
  BUNDLED WITH
53
- 2.3.6
60
+ 2.3.27
data/easy_meli.gemspec CHANGED
@@ -29,7 +29,7 @@ Gem::Specification.new do |spec|
29
29
  spec.executables = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
30
30
  spec.require_paths = ["lib"]
31
31
 
32
- spec.add_dependency "httparty", "~> 0.21"
32
+ spec.add_dependency "httparty", "~> 0.24"
33
33
  spec.add_dependency "rexml", "~> 3.4.2"
34
34
  spec.add_dependency "multi_xml", "~> 0.6.0"
35
35
 
data/lib/easy_meli/version.rb CHANGED
@@ -1,3 +1,3 @@
1
1
  module EasyMeli
2
- VERSION = '0.6.17'
2
+ VERSION = '0.6.18'
3
3
  end
metadata CHANGED
@@ -1,13 +1,13 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: easy_meli
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.6.17
4
+ version: 0.6.18
5
5
  platform: ruby
6
6
  authors:
7
7
  - Eric Northam
8
8
  bindir: exe
9
9
  cert_chain: []
10
- date: 2025-10-10 00:00:00.000000000 Z
10
+ date: 1980-01-02 00:00:00.000000000 Z
11
11
  dependencies:
12
12
  - !ruby/object:Gem::Dependency
13
13
  name: httparty
@@ -15,14 +15,14 @@ dependencies:
15
15
  requirements:
16
16
  - - "~>"
17
17
  - !ruby/object:Gem::Version
18
- version: '0.21'
18
+ version: '0.24'
19
19
  type: :runtime
20
20
  prerelease: false
21
21
  version_requirements: !ruby/object:Gem::Requirement
22
22
  requirements:
23
23
  - - "~>"
24
24
  - !ruby/object:Gem::Version
25
- version: '0.21'
25
+ version: '0.24'
26
26
  - !ruby/object:Gem::Dependency
27
27
  name: rexml
28
28
  requirement: !ruby/object:Gem::Requirement
@@ -179,7 +179,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
179
179
  - !ruby/object:Gem::Version
180
180
  version: '0'
181
181
  requirements: []
182
- rubygems_version: 3.6.2
182
+ rubygems_version: 3.6.7
183
183
  specification_version: 4
184
184
  summary: A simple gem to work with MercadoLibre's API
185
185
  test_files: []