jefferies_tube 1.6.7 → 1.6.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a9e80582fe28bd3365637fbe6a724aea315c7179ee53dafe949b885a45d96844
-  data.tar.gz: 28d47c45e7f3f7c14b8fba4d6e4b0060055fee85629f698b2244983f4523d784
+  metadata.gz: d43758c5c5aa990e21debc8c4338ae40016c7885c5a42e236d6c8e12d9d650c8
+  data.tar.gz: 5199e634f68f80e71a3ae5975138bc499a66be8f63e636728085f9581fa37817
 SHA512:
-  metadata.gz: c9c137056b8440aad2e4740e4fc3ecac821a108b35592ee540d2460e4ee6e30a995be707e15debf640146c647b1032a369ad3682158a6908c2002cae433ab81e
-  data.tar.gz: b1a468401e87daed3bbc92a7b5facf88da4c1095462376286552309d09e2d5741b59858f4124e1a90e120b60173b02ea54e27f6856c9311cd4fa44240f20e83e
+  metadata.gz: 2b06ed2aec54ec7db1271aa1532aef953372f87affade53a375621aa3a35bc5aa0b680e16e9009c23a5d2edfb0beb41a66a0bef5577398cd4c054b76a0f9071c
+  data.tar.gz: 1580240cb171dbc75ce91e8b978ac6673249d8bcc31f045dd98258a66244f4b78f21a0e5d15f0e3a581102c407d1e488f8b217ab8f9426652759319ed2b9881e

data/CHANGELOG.md

@@ -6,6 +6,13 @@ This project attempts to follow [semantic versioning](https://semver.org/)
 
 ## Unreleased
 
+## 1.6.9
+  * Refactor checking for JT_RSPEC environment variable when starting simplecov; prepends env var to rails application's spec_helper if
+    that line does not already exist.
+
+## 1.6.8
+  * Add support for ignoring CVEs in .bundler-audit.yml, remove support for setting ignored CVEs in deploy.rb via `:bundler_audit_ignore`
+
 ## 1.6.7
   * Add Lint/Syntax to rubocop rules
 

data/README.md

@@ -111,9 +111,12 @@ before 'deploy', 'deploy:create_tag'
 
 By default jefferies_tube will raise an error and stop if it detects any vulnerabilities is your installed gems. If you need to deploy anyway even with vulnerabilities you can do `I_KNOW_GEMS_ARE_INSECURE=true cap <environment> deploy`.
 
-To ignore specific CVE's when running bundler-audit, inside `config/deploy.rb`:
-```ruby
-set :bundler_audit_ignore, ["CVE-1234-5678"]
+To ignore specific CVE's when running bundler-audit, add a .bundler-audit.yml file to your projets root directory, and ignore vulnerabilities like so:
+
+```yml
+---
+ignore:
+  - CVE-2024-6484
 ```
 
 ### Enable/Disable Maintence Mode

data/lib/jefferies_tube/capistrano/deploy.rb

@@ -30,8 +30,8 @@ namespace :deploy do
     Bundler::Audit::Database.update!
     scanner = Bundler::Audit::Scanner.new
     vulnerable = false
-    ignore = fetch(:bundler_audit_ignore, [])
-    scanner.scan(ignore: ignore) do |result|
+
+    scanner.scan do |result|
       vulnerable = true
       case result
       when Bundler::Audit::Results::InsecureSource
@@ -51,4 +51,4 @@ namespace :deploy do
 end
 
 before 'deploy:migrate', 'deploy:backup_database'
-before 'deploy', 'deploy:scan_gems'
+before 'deploy', 'deploy:scan_gems'

data/lib/jefferies_tube/railtie.rb

@@ -77,7 +77,19 @@ module JefferiesTube
     end
 
     initializer 'load simplecov for tests' do |config|
-      if ::Rails.env.test? && ENV['JT_RAKE']
+      existing_spec_helper = File.join(::Rails.root.join "spec", "spec_helper.rb" )
+      if !(File.open(existing_spec_helper, &:readline) == "ENV['JT_RSPEC'] = 'true'\n")
+        content = File.read(existing_spec_helper)
+        File.open(existing_spec_helper, "w") do |line|
+          line.puts "ENV['JT_RSPEC'] = 'true'"
+          line.puts "# ENV['JT_RSPEC'] = 'true' is required for correctly running SimpleCov via the jefferies_tube default rake task"
+          line.puts "\n"
+          line.puts content
+        end
+      end
+
+      if ::Rails.env.test? && ENV['JT_RSPEC'] == 'true'
+        ENV['JT_RSPEC'] = nil
         simplecov_config = 'config/simplecov.rb'
         require_relative simplecov_config
       end
@@ -88,7 +100,6 @@ module JefferiesTube
       if defined?(RSpec)
         require 'rspec/core/rake_task'
         task :jtspec do
-          ENV['JT_RAKE'] = "true"
           Rake::Task["spec"].invoke
         end
         task default: :jtspec

data/lib/jefferies_tube/version.rb

@@ -1,7 +1,7 @@
 require 'open-uri'
 
 module JefferiesTube
-  VERSION = "1.6.7"
+  VERSION = "1.6.9"
 
   def self.latest_rubygems_version
     JSON.parse(URI.parse("https://rubygems.org/api/v1/versions/jefferies_tube/latest.json").read)["version"]

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: jefferies_tube
 version: !ruby/object:Gem::Version
-  version: 1.6.7
+  version: 1.6.9
 platform: ruby
 authors:
 - Brian Samson
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-10-24 00:00:00.000000000 Z
+date: 2024-10-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: awesome_print
@@ -225,7 +225,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.10
+rubygems_version: 3.5.22
 signing_key:
 specification_version: 4
 summary: Ten Forward Consulting useful tools.