faraday-ssrf-filter 0.2.0 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 206732b1be24cc589db0e685c1e8dbf88e49456cea31ced6d5a7413849028efb
4
- data.tar.gz: 16623fab822a35efb5472165fc457e898be7f8c844f00bc47717fa51c088ed3b
3
+ metadata.gz: 6ce2c67639d9546f95ab72e44ec84c2ec1e1a7574d5486901b735b2419c0c96a
4
+ data.tar.gz: 8a624f33a4339bd383e139293d61b2f0ada25477659223b74047c8126cf5bfde
5
5
  SHA512:
6
- metadata.gz: 18808e3051e9679e89c5406557630e9f80718713f0fad48e10a39b5fff5a5eb467c52f025d531d2a95d83ab2ecddf93fb668d2b19e6cdcc7224a214a672c3e24
7
- data.tar.gz: c8ed8035bf83314c96b3ec756cab4d41dbf96472bb17a2ace3537d4ccdc4e167d369174f26c6022d441e56b5e9419a7ecb03cde275f64213c18ce3bf4c9e49a6
6
+ metadata.gz: d80b281c71bdf2329d019cc58b04ad4ef02a2984e0d46828af7a5acad28fa92df3e3193fc845559a317272ad651a94006769a1690dcb3044fcfa6a235ca7d444
7
+ data.tar.gz: 54ac93b6e7346217b352b187fb8cb7cb7b0c38ccdab5e357969b80b627141e52198ec673ef85efaa523cdd34bda324ce9c335acf05670fb32fb9668225ab4d37
data/CHANGELOG.md CHANGED
@@ -1,5 +1,13 @@
1
1
  # Changelog
2
2
 
3
+ ## 0.3.0 (2026-10-18)
4
+
5
+ - **Breaking:** require Ruby 3.3+ (3.0–3.2 are end-of-life)
6
+ - Block `192.88.99.0/24` (6to4 relay anycast, deprecated by RFC 7526) and its IPv6-mapped forms
7
+ - Test against Ruby 3.3, 3.4, 4.0 and head
8
+ - Pin RubyGems credentials action to a commit SHA; least-privilege CI token
9
+ - Run RuboCop in default Rake task
10
+
3
11
  ## 0.2.0 (2026-05-18)
4
12
 
5
13
  - Add gem name autoload (`require 'faraday-ssrf-filter'` now works)
data/README.md CHANGED
@@ -18,6 +18,11 @@ Inspired by [ssrf_filter](https://github.com/arkadiyt/ssrf_filter) (which uses `
18
18
  - **Scheme validation** (only `http`/`https` by default)
19
19
  - Works with **all Faraday adapters**
20
20
 
21
+ ## Requirements
22
+
23
+ - Ruby 3.3+
24
+ - Faraday 1.x or 2.x
25
+
21
26
  ## Installation
22
27
 
23
28
  Add to your Gemfile:
@@ -26,6 +26,7 @@ module Faraday
26
26
  IPAddr.new('172.16.0.0/12'),
27
27
  IPAddr.new('192.0.0.0/24'),
28
28
  IPAddr.new('192.0.2.0/24'),
29
+ IPAddr.new('192.88.99.0/24'),
29
30
  IPAddr.new('192.168.0.0/16'),
30
31
  IPAddr.new('198.18.0.0/15'),
31
32
  IPAddr.new('198.51.100.0/24'),
@@ -2,6 +2,6 @@
2
2
 
3
3
  module Faraday
4
4
  module SsrfFilter
5
- VERSION = '0.2.0'
5
+ VERSION = '0.3.0'
6
6
  end
7
7
  end
@@ -8,5 +8,4 @@ module Faraday
8
8
  module SsrfFilter
9
9
  Faraday::Request.register_middleware(ssrf_filter: Faraday::SsrfFilter::Middleware)
10
10
  end
11
-
12
11
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: faraday-ssrf-filter
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.2.0
4
+ version: 0.3.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Quentin Rousseau
@@ -49,9 +49,9 @@ homepage: https://github.com/kwent/faraday-ssrf-filter
49
49
  licenses:
50
50
  - MIT
51
51
  metadata:
52
- homepage_uri: https://github.com/kwent/faraday-ssrf-filter
53
52
  source_code_uri: https://github.com/kwent/faraday-ssrf-filter
54
53
  changelog_uri: https://github.com/kwent/faraday-ssrf-filter/blob/main/CHANGELOG.md
54
+ bug_tracker_uri: https://github.com/kwent/faraday-ssrf-filter/issues
55
55
  rubygems_mfa_required: 'true'
56
56
  rdoc_options: []
57
57
  require_paths:
@@ -60,14 +60,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
60
60
  requirements:
61
61
  - - ">="
62
62
  - !ruby/object:Gem::Version
63
- version: 3.0.0
63
+ version: '3.3'
64
64
  required_rubygems_version: !ruby/object:Gem::Requirement
65
65
  requirements:
66
66
  - - ">="
67
67
  - !ruby/object:Gem::Version
68
68
  version: '0'
69
69
  requirements: []
70
- rubygems_version: 3.6.9
70
+ rubygems_version: 4.0.20
71
71
  specification_version: 4
72
72
  summary: Faraday middleware to prevent SSRF attacks
73
73
  test_files: []