lean_cms 0.2.13 → 0.2.14
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +13 -1
- data/lib/lean_cms/version.rb +1 -1
- metadata +12 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 2c3bd4652704809211640b7ae93d01adeea6aed91b100fcdd3130de31c64f88f
|
|
4
|
+
data.tar.gz: 20ea98a3f29b8f6946fe733e57c36613d13a5620ea879d32657011a84484fdb2
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 5cd6ee260ad53ac9dc842641e52c79d0db0ddba7b8ed852514526aaa21c9d55724e501a3be35af5bac4c5bd21a5d3d0f3e7f4db90dcf165184f38f83f250a317
|
|
7
|
+
data.tar.gz: c9bcdf31ccfea9b99d1a57af5a71a502b40c065080143fc956420230ad6ddfa44eeccc834be980a590ad98ed3da2fb6909ab00456d1a4a1e847870c569f8759f
|
data/CHANGELOG.md
CHANGED
|
@@ -7,6 +7,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
|
|
7
7
|
|
|
8
8
|
## [Unreleased]
|
|
9
9
|
|
|
10
|
+
## [0.2.14] — 2026-11-03
|
|
11
|
+
|
|
12
|
+
Security maintenance release — no feature or behavior changes.
|
|
13
|
+
|
|
14
|
+
### Security
|
|
15
|
+
- **`view_component` minimum raised to `>= 4.14`** (still `~> 4.0`). Versions before 4.12 are affected by an `around_render` HTML-safety bypass (CVE-2026-54498, high) and stale render context on reused component instances (CVE-2026-54497); 4.14 completes the fix for slot/`with_content` state leaking across reused instances (GHSA-8qw7-6phv-7q6p). Hosts on a recent 4.x are unaffected by the bump.
|
|
16
|
+
- **Host apps: keep Rails patched.** Lean CMS uses Active Storage variants, which are affected by an arbitrary file read / RCE advisory in variant processing. Run Rails `>= 8.0.5.1` (8.0.x) or `>= 8.1.3.1` (8.1.x). The gemspec's `rails ~> 8.0` constraint is unchanged since no single constraint excludes every affected version across both series; `bundle-audit` in your app will flag it.
|
|
17
|
+
|
|
18
|
+
### Changed
|
|
19
|
+
- `.ruby-version` (local development) bumped `3.4.7` → `3.4.12`, matching the floating Ruby 3.4 now used in CI.
|
|
20
|
+
|
|
10
21
|
## [0.2.13] — 2026-05-15
|
|
11
22
|
|
|
12
23
|
Metadata-only bump after the initial v0.2.12 RubyGems publish — no code changes.
|
|
@@ -230,7 +241,8 @@ Hosts moving from in-app auth to gem auth should:
|
|
|
230
241
|
- `lean_cms:stats` rake task — prints content field counts by page
|
|
231
242
|
- `LeanCms::SyncHelper` — SQLite database sync between local and production
|
|
232
243
|
|
|
233
|
-
[Unreleased]: https://github.com/Ovrland-Services/lean-cms/compare/v0.2.
|
|
244
|
+
[Unreleased]: https://github.com/Ovrland-Services/lean-cms/compare/v0.2.14...HEAD
|
|
245
|
+
[0.2.14]: https://github.com/Ovrland-Services/lean-cms/compare/v0.2.13...v0.2.14
|
|
234
246
|
[0.2.13]: https://github.com/Ovrland-Services/lean-cms/compare/v0.2.12...v0.2.13
|
|
235
247
|
[0.2.12]: https://github.com/Ovrland-Services/lean-cms/compare/v0.2.11...v0.2.12
|
|
236
248
|
[0.2.11]: https://github.com/Ovrland-Services/lean-cms/compare/v0.2.10...v0.2.11
|
data/lib/lean_cms/version.rb
CHANGED
metadata
CHANGED
|
@@ -1,13 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: lean_cms
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.2.
|
|
4
|
+
version: 0.2.14
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Matt Thompson
|
|
8
|
+
autorequire:
|
|
8
9
|
bindir: bin
|
|
9
10
|
cert_chain: []
|
|
10
|
-
date:
|
|
11
|
+
date: 2026-11-03 00:00:00.000000000 Z
|
|
11
12
|
dependencies:
|
|
12
13
|
- !ruby/object:Gem::Dependency
|
|
13
14
|
name: rails
|
|
@@ -44,6 +45,9 @@ dependencies:
|
|
|
44
45
|
- - "~>"
|
|
45
46
|
- !ruby/object:Gem::Version
|
|
46
47
|
version: '4.0'
|
|
48
|
+
- - ">="
|
|
49
|
+
- !ruby/object:Gem::Version
|
|
50
|
+
version: '4.14'
|
|
47
51
|
type: :runtime
|
|
48
52
|
prerelease: false
|
|
49
53
|
version_requirements: !ruby/object:Gem::Requirement
|
|
@@ -51,6 +55,9 @@ dependencies:
|
|
|
51
55
|
- - "~>"
|
|
52
56
|
- !ruby/object:Gem::Version
|
|
53
57
|
version: '4.0'
|
|
58
|
+
- - ">="
|
|
59
|
+
- !ruby/object:Gem::Version
|
|
60
|
+
version: '4.14'
|
|
54
61
|
- !ruby/object:Gem::Dependency
|
|
55
62
|
name: kaminari
|
|
56
63
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -295,6 +302,7 @@ metadata:
|
|
|
295
302
|
changelog_uri: https://github.com/Ovrland-Services/lean-cms/blob/main/CHANGELOG.md
|
|
296
303
|
documentation_uri: https://leancms.dev/docs/
|
|
297
304
|
bug_tracker_uri: https://github.com/Ovrland-Services/lean-cms/issues
|
|
305
|
+
post_install_message:
|
|
298
306
|
rdoc_options: []
|
|
299
307
|
require_paths:
|
|
300
308
|
- lib
|
|
@@ -309,7 +317,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
309
317
|
- !ruby/object:Gem::Version
|
|
310
318
|
version: '0'
|
|
311
319
|
requirements: []
|
|
312
|
-
rubygems_version: 3.
|
|
320
|
+
rubygems_version: 3.0.3.1
|
|
321
|
+
signing_key:
|
|
313
322
|
specification_version: 4
|
|
314
323
|
summary: Lightweight Rails CMS with in-context editing for marketing sites.
|
|
315
324
|
test_files: []
|