geocodio-gem 1.0.0 → 2.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +7 -0
  3. data/Gemfile +9 -3
  4. data/Gemfile.lock +28 -15
  5. data/lib/geocodio/gem/version.rb +1 -1
  6. metadata +47 -8
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: f27164223ee22849bfef35756d7e5522b00817939a9c33e14fc85e5463c483c2
4
- data.tar.gz: 24e53fd43c562dfd5b2d4cd081a0c148ff012a92c81653a6cecffe9dd5b726de
3
+ metadata.gz: c1f167d9c92305b9ecef0d067d0ea4fdb474461e69148e317da564134d8a156e
4
+ data.tar.gz: 763c708fc5307a9c61a68a98ed7252e52f2f2469bbc9e5560b7901cc827b1448
5
5
  SHA512:
6
- metadata.gz: 69d34db0a306f918d0b7e096c791e425d1688e48eaf9aa162337f1ebdaa7d2eef03485757e9413711b34a5f648e8a94e08868eaae104bb272c394b498e3b7ab0
7
- data.tar.gz: b85a1e566abb6b371bfb30d658f6bb2bd46eddf225f71458bf55925e4e57ebc3d3b67eaff9554c075831169778850b9afe8e7112029e5641ac73079fbd7d8fb2
6
+ metadata.gz: aec97ab8749b5f8effc6ab4b7375b4cef33cb0c2e22cc950047a0685980d2993af50ebcd07380b9dc360e1a26dcf354977f1570b0400912fa63097960485146e
7
+ data.tar.gz: 2ba781a7ade9bfc89b004a89e27a0c5dc0e7c965008fed2a45d2c4fe430ae4bfe8244883594ce9c0588627f6994f370290843d422f06afbf21f79e503f501736
data/CHANGELOG.md CHANGED
@@ -1,3 +1,10 @@
1
+ ## [2.0.0] - 2026-07-15
2
+ - **SECURITY**: Require `faraday >= 2.14.3` to address [CVE-2026-54297](https://github.com/advisories/GHSA-98m9-hrrm-r99r) — uncontrolled recursion in `Faraday::NestedParamsEncoder` allowing a stack-exhaustion denial of service via deeply nested query parameters.
3
+ - **BREAKING**: Raised `required_ruby_version` to `>= 3.0.0`. The patched Faraday 2.14.3 requires Ruby 3.0+, so Ruby 2.6/2.7 (both end-of-life) are no longer supported.
4
+ - Declared `faraday`, `faraday-follow_redirects`, and `csv` as explicit runtime dependencies in the gemspec. `faraday` and `faraday-follow_redirects` were previously only present in the development `Gemfile`, so the published gem carried no version constraint; `csv` is used at runtime and stopped being a default gem in Ruby 3.4.
5
+ - Bumped vulnerable transitive development dependencies to clear all outstanding advisories: `addressable` 2.8.1 → 2.9.0 ([GHSA-h27x-rffw-24p4](https://github.com/advisories/GHSA-h27x-rffw-24p4)) and `rexml` 3.2.5 → 3.4.4 ([GHSA-2rxp-v6pw-ch6m](https://github.com/advisories/GHSA-2rxp-v6pw-ch6m) and related). These are test-only and are not shipped with the gem.
6
+ - Updated the CI matrix to Ruby 3.0–3.3.
7
+
1
8
  ## [1.0.0] - 2026-06-05
2
9
  - **BREAKING**: Migrated to Geocodio API v2 (base URL changed from `v1.11` to `v2`)
3
10
  - **BREAKING**: Removed the top-level `input` object from `/geocode` and `/reverse` responses. The parsed address now lives in `results[].address_components`.
data/Gemfile CHANGED
@@ -11,10 +11,16 @@ gem "rake", "~> 13.0"
11
11
  gem "rspec", "~> 3.0"
12
12
  gem "webmock"
13
13
  gem "vcr"
14
+ # base64 stopped being a default gem in Ruby 3.4; vcr requires it at load time.
15
+ gem "base64"
16
+ # public_suffix (pulled in transitively via webmock -> addressable) dropped
17
+ # Ruby < 3.2 support in 7.0. Cap it so the test toolchain still installs on the
18
+ # Ruby 3.0/3.1 end of our support matrix. Not security-relevant — the
19
+ # addressable advisory is fixed in addressable itself (>= 2.9.0).
20
+ gem "public_suffix", "< 7.0"
14
21
 
15
- #API CALLS
16
- gem "faraday"
17
- gem "faraday-follow_redirects"
22
+ # NOTE: faraday and faraday-follow_redirects are declared as runtime
23
+ # dependencies in geocodio-gem.gemspec (faraday >= 2.14.3 for CVE-2026-54297).
18
24
 
19
25
  #DEBUGGING
20
26
  gem "byebug"
data/Gemfile.lock CHANGED
@@ -1,33 +1,46 @@
1
1
  PATH
2
2
  remote: .
3
3
  specs:
4
- geocodio-gem (1.0.0)
4
+ geocodio-gem (2.0.0)
5
+ csv (~> 3.0)
6
+ faraday (>= 2.14.3)
7
+ faraday-follow_redirects (>= 0.3.0)
5
8
 
6
9
  GEM
7
10
  remote: https://rubygems.org/
8
11
  specs:
9
- addressable (2.8.1)
10
- public_suffix (>= 2.0.2, < 6.0)
12
+ addressable (2.9.0)
13
+ public_suffix (>= 2.0.2, < 8.0)
14
+ base64 (0.3.0)
15
+ bigdecimal (4.1.2)
11
16
  byebug (11.1.3)
12
17
  coderay (1.1.3)
13
- crack (0.4.5)
18
+ crack (1.0.1)
19
+ bigdecimal
14
20
  rexml
21
+ csv (3.3.5)
15
22
  diff-lcs (1.5.0)
16
23
  dotenv (2.8.1)
17
- faraday (2.7.1)
18
- faraday-net_http (>= 2.0, < 3.1)
19
- ruby2_keywords (>= 0.0.4)
20
- faraday-follow_redirects (0.3.0)
24
+ faraday (2.14.3)
25
+ faraday-net_http (>= 2.0, < 3.5)
26
+ json
27
+ logger
28
+ faraday-follow_redirects (0.5.0)
21
29
  faraday (>= 1, < 3)
22
- faraday-net_http (3.0.2)
30
+ faraday-net_http (3.4.4)
31
+ net-http (~> 0.5)
23
32
  hashdiff (1.0.1)
33
+ json (2.21.1)
34
+ logger (1.7.0)
24
35
  method_source (1.0.0)
36
+ net-http (0.9.1)
37
+ uri (>= 0.11.1)
25
38
  pry (0.14.1)
26
39
  coderay (~> 1.1)
27
40
  method_source (~> 1.0)
28
- public_suffix (5.0.1)
41
+ public_suffix (6.0.2)
29
42
  rake (13.0.6)
30
- rexml (3.2.5)
43
+ rexml (3.4.4)
31
44
  rspec (3.12.0)
32
45
  rspec-core (~> 3.12.0)
33
46
  rspec-expectations (~> 3.12.0)
@@ -41,7 +54,7 @@ GEM
41
54
  diff-lcs (>= 1.2.0, < 2.0)
42
55
  rspec-support (~> 3.12.0)
43
56
  rspec-support (3.12.0)
44
- ruby2_keywords (0.0.5)
57
+ uri (1.1.1)
45
58
  vcr (6.1.0)
46
59
  webmock (3.18.1)
47
60
  addressable (>= 2.8.0)
@@ -51,16 +64,16 @@ GEM
51
64
  PLATFORMS
52
65
  arm64-darwin-21
53
66
  arm64-darwin-24
54
- universal-darwin-25
67
+ arm64-darwin-25
55
68
  x86_64-linux
56
69
 
57
70
  DEPENDENCIES
71
+ base64
58
72
  byebug
59
73
  dotenv
60
- faraday
61
- faraday-follow_redirects
62
74
  geocodio-gem!
63
75
  pry
76
+ public_suffix (< 7.0)
64
77
  rake (~> 13.0)
65
78
  rspec (~> 3.0)
66
79
  vcr
data/lib/geocodio/gem/version.rb CHANGED
@@ -1,5 +1,5 @@
1
1
  # frozen_string_literal: true
2
2
 
3
3
  module Geocodio
4
- VERSION = "1.0.0"
4
+ VERSION = "2.0.0"
5
5
  end
metadata CHANGED
@@ -1,15 +1,56 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: geocodio-gem
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.0.0
4
+ version: 2.0.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - GoldenPavilion
8
- autorequire:
9
8
  bindir: exe
10
9
  cert_chain: []
11
- date: 2026-06-05 00:00:00.000000000 Z
12
- dependencies: []
10
+ date: 1980-01-02 00:00:00.000000000 Z
11
+ dependencies:
12
+ - !ruby/object:Gem::Dependency
13
+ name: faraday
14
+ requirement: !ruby/object:Gem::Requirement
15
+ requirements:
16
+ - - ">="
17
+ - !ruby/object:Gem::Version
18
+ version: 2.14.3
19
+ type: :runtime
20
+ prerelease: false
21
+ version_requirements: !ruby/object:Gem::Requirement
22
+ requirements:
23
+ - - ">="
24
+ - !ruby/object:Gem::Version
25
+ version: 2.14.3
26
+ - !ruby/object:Gem::Dependency
27
+ name: faraday-follow_redirects
28
+ requirement: !ruby/object:Gem::Requirement
29
+ requirements:
30
+ - - ">="
31
+ - !ruby/object:Gem::Version
32
+ version: 0.3.0
33
+ type: :runtime
34
+ prerelease: false
35
+ version_requirements: !ruby/object:Gem::Requirement
36
+ requirements:
37
+ - - ">="
38
+ - !ruby/object:Gem::Version
39
+ version: 0.3.0
40
+ - !ruby/object:Gem::Dependency
41
+ name: csv
42
+ requirement: !ruby/object:Gem::Requirement
43
+ requirements:
44
+ - - "~>"
45
+ - !ruby/object:Gem::Version
46
+ version: '3.0'
47
+ type: :runtime
48
+ prerelease: false
49
+ version_requirements: !ruby/object:Gem::Requirement
50
+ requirements:
51
+ - - "~>"
52
+ - !ruby/object:Gem::Version
53
+ version: '3.0'
13
54
  description: A Ruby Gem to help you integrate your application with the Geocodio API.
14
55
  email:
15
56
  - cory@geocod.io
@@ -38,7 +79,6 @@ metadata:
38
79
  homepage_uri: https://www.geocod.io/docs
39
80
  source_code_uri: https://www.github.com/Geocodio/geocodio-gem/
40
81
  changelog_uri: https://www.github.com/Geocodio/geocodio-gem/CHANGELOG.md
41
- post_install_message:
42
82
  rdoc_options: []
43
83
  require_paths:
44
84
  - lib
@@ -46,15 +86,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
46
86
  requirements:
47
87
  - - ">="
48
88
  - !ruby/object:Gem::Version
49
- version: 2.6.0
89
+ version: 3.0.0
50
90
  required_rubygems_version: !ruby/object:Gem::Requirement
51
91
  requirements:
52
92
  - - ">="
53
93
  - !ruby/object:Gem::Version
54
94
  version: '0'
55
95
  requirements: []
56
- rubygems_version: 3.0.3.1
57
- signing_key:
96
+ rubygems_version: 4.0.11
58
97
  specification_version: 4
59
98
  summary: Geocodio Ruby Library.
60
99
  test_files: []