jefferies_tube 1.6.6 → 1.6.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: caff068fa6bfbefa05d86cd266529396142b804e6e10af91562b84cc821911ed
-  data.tar.gz: 8c4942d1eb54e987e969029e1e3cb2d2094064ebae79fc2ff728c854fdc2ea20
+  metadata.gz: 7b9466c608ebb3036068f91caaacc927e157b03e45dfa83b201f2822683d7d60
+  data.tar.gz: cfef6348b6e2e237312dc8cc3328750832dd57f0cd640dbdb8863ef58a70da32
 SHA512:
-  metadata.gz: '080248b9cbaa14f04ca9443db64a48ac06c244f47106d3c93b04fa445c6ab13d6a5003f47c0a276c7f8c0234b5850229d79556f770cf3efcf8a9ae711a89e996'
-  data.tar.gz: 431e102ca417962014e94022b83e4bcbd94da098b100e44264ca8c2b52065d91774a0590938c191d3440a36cafb88ce86fe1c278f59343aa4a69febf28e84c4b
+  metadata.gz: 4cbe0c0a98edf3a57ddd60e74425415fad6f1d59e5cbead19fc5306f5bbb7668bd40cc47f9099a499b3ea28fe1a2eba5172a8acb335ba518621ac051f0e17702
+  data.tar.gz: 6bea0c1b6494d95568c9188dfc00cabd40afc4b2e2d876df545240333c825d55b0ea75a1c6a299ba67be97abffcaf521ebdc01c55e755a43c01c4d1a8d5d46c1

data/.ruby-version

@@ -1 +1 @@
-3.2
+3.2.2

data/CHANGELOG.md

@@ -6,6 +6,12 @@ This project attempts to follow [semantic versioning](https://semver.org/)
 
 ## Unreleased
 
+## 1.6.8
+  * Add support for ignoring CVEs in .bundler-audit.yml, remove support for setting ignored CVEs in deploy.rb via `:bundler_audit_ignore`
+
+## 1.6.7
+  * Add Lint/Syntax to rubocop rules
+
 ## 1.6.6
   * Fix to paths for remote cap tasks that caused execjs to fail in some circumstances
 

data/README.md

@@ -111,9 +111,12 @@ before 'deploy', 'deploy:create_tag'
 
 By default jefferies_tube will raise an error and stop if it detects any vulnerabilities is your installed gems. If you need to deploy anyway even with vulnerabilities you can do `I_KNOW_GEMS_ARE_INSECURE=true cap <environment> deploy`.
 
-To ignore specific CVE's when running bundler-audit, inside `config/deploy.rb`:
-```ruby
-set :bundler_audit_ignore, ["CVE-1234-5678"]
+To ignore specific CVE's when running bundler-audit, add a .bundler-audit.yml file to your projets root directory, and ignore vulnerabilities like so:
+
+```yml
+---
+ignore:
+  - CVE-2024-6484
 ```
 
 ### Enable/Disable Maintence Mode

data/default.yml

@@ -3,9 +3,12 @@ require: rubocop-rails
 AllCops:
   DisabledByDefault: true
   SuggestExtensions: false
-Style/IndentationConsistency:
-  Enabled: true
+  Exclude:
+    - "vendor/**/*"
+    - 'tmp/**/*'
 
+Lint/Syntax:
+  Enabled: true
 Layout/LineLength:
   Max: 200
 Layout/EmptyLines:

data/lib/jefferies_tube/capistrano/deploy.rb

@@ -30,8 +30,8 @@ namespace :deploy do
     Bundler::Audit::Database.update!
     scanner = Bundler::Audit::Scanner.new
     vulnerable = false
-    ignore = fetch(:bundler_audit_ignore, [])
-    scanner.scan(ignore: ignore) do |result|
+
+    scanner.scan do |result|
       vulnerable = true
       case result
       when Bundler::Audit::Results::InsecureSource
@@ -51,4 +51,4 @@ namespace :deploy do
 end
 
 before 'deploy:migrate', 'deploy:backup_database'
-before 'deploy', 'deploy:scan_gems'
+before 'deploy', 'deploy:scan_gems'

data/lib/jefferies_tube/version.rb

@@ -1,7 +1,7 @@
 require 'open-uri'
 
 module JefferiesTube
-  VERSION = "1.6.6"
+  VERSION = "1.6.8"
 
   def self.latest_rubygems_version
     JSON.parse(URI.parse("https://rubygems.org/api/v1/versions/jefferies_tube/latest.json").read)["version"]

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: jefferies_tube
 version: !ruby/object:Gem::Version
-  version: 1.6.6
+  version: 1.6.8
 platform: ruby
 authors:
 - Brian Samson
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-12-13 00:00:00.000000000 Z
+date: 2024-09-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: awesome_print
@@ -225,7 +225,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.0.dev
+rubygems_version: 3.5.18
 signing_key:
 specification_version: 4
 summary: Ten Forward Consulting useful tools.