govspeak 6.5.3 → 6.5.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 753ae3784f7f2ea1afcba0ab048130ea81a12d18e6b83297c0044a029b9a7f96
-  data.tar.gz: 66b4612a2f7f821e94b5e0b5bc1a2471e40cc171506337f4c76dd3c95c087921
+  metadata.gz: a09b3928e9718aa64cd781681dbc8ac51d8534ddc27b26f54e8416b21f60e501
+  data.tar.gz: f8b6da3c1bf3c3b4c7792263853837886b42f7dc6abe6346d81289695ea7986d
 SHA512:
-  metadata.gz: 979a24087e5278d5c5c045f02bbd65bd2b9265ba255af4d00de3697d44af9024330973d477177aacf117ac3cfa5210c209bc545117d4a1731e9b0b2cdfd4fbb9
-  data.tar.gz: b6e1a3e1d72f7c83b747cdc204b32efc7824dbea550cd9bdc3d965cd685952ff1dee44066dd9d3215c04f050abe8647b30584a3fca7d43c181a3d2eed2ae4b9b
+  metadata.gz: 9de09348513cfd10e76a9960bfe8012213a99447244cf9d89a2e3da8cb18f93b28e8b63dd63304de06c51a6e3b9e82bc5b1f2de43ff531dfb23f4832d1a18e0b
+  data.tar.gz: 0b464f824b1ff7f8ee77619d2dd1195a22c8777b79b675d9e7fbb1b88011075552f496b294e26d9b65908f2a26031de30ff93c1a12ba3a9743786a4219cfb2de

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 6.5.4
+
+* Require Sanitize to be at least 5.2.1 due to https://nvd.nist.gov/vuln/detail/CVE-2020-4054
+
 ## 6.5.3
 
 * Use button component for buttons (PR#176)

data/lib/govspeak/version.rb

@@ -1,3 +1,3 @@
 module Govspeak
-  VERSION = "6.5.3".freeze
+  VERSION = "6.5.4".freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: govspeak
 version: !ruby/object:Gem::Version
-  version: 6.5.3
+  version: 6.5.4
 platform: ruby
 authors:
 - GOV.UK Dev
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-02-11 00:00:00.000000000 Z
+date: 2020-07-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: actionview
@@ -54,16 +54,16 @@ dependencies:
   name: govuk_publishing_components
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '16.16'
+        version: '21.4'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '16.16'
+        version: '21.4'
 - !ruby/object:Gem::Dependency
   name: htmlentities
   requirement: !ruby/object:Gem::Requirement
@@ -152,16 +152,22 @@ dependencies:
   name: sanitize
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 5.2.1
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '5'
+        version: '6'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '5'
+        version: 5.2.1
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '6'
 - !ruby/object:Gem::Dependency
   name: minitest
   requirement: !ruby/object:Gem::Requirement
@@ -210,14 +216,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2'
+        version: 3.3.2
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2'
+        version: 3.3.2
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -365,23 +371,23 @@ signing_key:
 specification_version: 4
 summary: Markup language for single domain
 test_files:
-- test/blockquote_extra_quote_remover_test.rb
-- test/govspeak_test_helper.rb
-- test/govspeak_structured_headers_test.rb
 - test/govspeak_attachment_link_test.rb
-- test/govspeak_attachments_image_test.rb
 - test/test_helper.rb
-- test/govspeak_attachments_inline_test.rb
-- test/html_sanitizer_test.rb
 - test/govspeak_button_test.rb
-- test/govspeak_images_bang_test.rb
-- test/govspeak_images_test.rb
+- test/govspeak_test.rb
 - test/html_validator_test.rb
 - test/govspeak_attachment_test.rb
-- test/govspeak_extract_contact_content_ids_test.rb
-- test/govspeak_test.rb
-- test/govspeak_link_extractor_test.rb
-- test/govspeak_link_test.rb
 - test/govspeak_contacts_test.rb
-- test/presenters/h_card_presenter_test.rb
+- test/govspeak_test_helper.rb
+- test/blockquote_extra_quote_remover_test.rb
 - test/govspeak_table_with_headers_test.rb
+- test/govspeak_attachments_image_test.rb
+- test/html_sanitizer_test.rb
+- test/govspeak_link_test.rb
+- test/govspeak_extract_contact_content_ids_test.rb
+- test/govspeak_structured_headers_test.rb
+- test/govspeak_images_test.rb
+- test/presenters/h_card_presenter_test.rb
+- test/govspeak_images_bang_test.rb
+- test/govspeak_link_extractor_test.rb
+- test/govspeak_attachments_inline_test.rb