manageiq-style 1.5.1 → 1.5.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0ff678b23779e542316f6f93b5d006441c10f9d36ada1ee8b4ab0c223a96644a
-  data.tar.gz: 2cadbd06b654539dbbe13a44e86959e9f12a58990077603a5ce1c0f38cfe85ad
+  metadata.gz: 62c9e80318c44899a01039ae2ca2f4f952f4a0336ef291daaf5d1c396b09ff57
+  data.tar.gz: 27812f1d7ee64dbdbc5baa0613b634f0fe931370a425c053138e10a71659df6d
 SHA512:
-  metadata.gz: ef1efb9b9c0bbe60040c5d0ca70c2965e188007dd7b6fe27d7206e8f4afc87a8636ed9b9b410dfc2424771fa308f9eeb4c1d5702e8c731b42540696f541dd28d
-  data.tar.gz: 3230c00c0b9b425a24dfbba6f6a0a8b67ae90a57a10aed981791e5c44f8ef59bba0af4b767d60ea78b5a841a7bcee74569d75bd57c1e8c0643b106c34037cbe2
+  metadata.gz: 3f68ae2839032bd0898e758f8cf709509ec9efad314e733c3d31baea95c852275891eb631aa80c7c9cc835f7f55822028c5a78c573223eb86c0cfc9edb35e572
+  data.tar.gz: 72fbda8714aa329c8d42609eb892658772a02b914f6a5a4050ff624661e874a137a36cbce946bf198739342be976b960b23b2cabbca3ecc2cef19adedf1df425

data/.github/workflows/ci.yaml

@@ -12,6 +12,7 @@ jobs:
     strategy:
       matrix:
         ruby-version:
+        - '2.7'
         - '3.0'
         - '3.1'
         - '3.2'
@@ -28,6 +29,6 @@ jobs:
     - name: Run tests
       run: bundle exec rake
     - name: Report code coverage
-      if: ${{ github.ref == 'refs/heads/master' && matrix.ruby-version == '3.0' }}
+      if: ${{ github.ref == 'refs/heads/master' && matrix.ruby-version == '3.1' }}
       continue-on-error: true
-      uses: paambaati/codeclimate-action@v5
+      uses: paambaati/codeclimate-action@v9

data/CHANGELOG.md

@@ -4,6 +4,14 @@ This project adheres to [Semantic Versioning](http://semver.org/).
 
 ## [Unreleased]
 
+## [1.5.3] - 2025-01-09
+### Changed
+- Bump Rexml minimum version for CVE-2024-49761 [[#57](https://github.com/ManageIQ/manageiq-style/pull/57)]
+
+## [1.5.2] - 2024-03-29
+### Changed
+- Revert "Drop Ruby 2.7" [[#49](https://github.com/ManageIQ/manageiq-style/pull/49)]
+
 ## [1.5.1] - 2024-03-29
 ### Changed
 - Change Gemspec cop rules for Gemspec/DevelopmentDependencies and Gemspec/RequiredRubyVersion [[#45](https://github.com/ManageIQ/manageiq-style/pull/45)]
@@ -34,7 +42,9 @@ This project adheres to [Semantic Versioning](http://semver.org/).
 ## [1.0.1] - 2020-06-19
 ## [1.0.0] - 2020-05-19
 
-[Unreleased]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.1...HEAD
+[Unreleased]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.3...HEAD
+[1.5.3]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.2...v1.5.3
+[1.5.2]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.1...v1.5.2
 [1.5.1]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.0...v1.5.1
 [1.5.0]: https://github.com/ManageIQ/manageiq-style/compare/v1.4.0...v1.5.0
 [1.4.0]: https://github.com/ManageIQ/manageiq-style/compare/v1.3.3...v1.4.0

data/lib/manageiq/style/version.rb

@@ -1,5 +1,5 @@
 module ManageIQ
   module Style
-    VERSION = "1.5.1".freeze
+    VERSION = "1.5.3".freeze
   end
 end

data/manageiq-style.gemspec

@@ -9,7 +9,6 @@ Gem::Specification.new do |spec|
   spec.description   = spec.summary
   spec.homepage      = "https://github.com/ManageIQ/manageiq-style"
   spec.license       = "MIT"
-  spec.required_ruby_version = Gem::Requirement.new(">= 3.0.0")
 
   spec.metadata["homepage_uri"] = spec.homepage
   spec.metadata["rubygems_mfa_required"] = "true"
@@ -29,6 +28,11 @@ Gem::Specification.new do |spec|
   spec.add_runtime_dependency "rubocop", "= 1.56.3"
   spec.add_runtime_dependency "rubocop-performance"
   spec.add_runtime_dependency "rubocop-rails"
+  # style depends upon rubocop
+  # rubocop depends upon rexml.
+  #   minimum rexml version is here for CVE-2024-49761
+  #   remove after upgrading rubocop. (newer versions no longer depend upon rexml)
+  spec.add_runtime_dependency "rexml", ">= 3.3.9"
 
   spec.add_development_dependency "rake",      "~> 12.0"
   spec.add_development_dependency "rspec",     "~> 3.0"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: manageiq-style
 version: !ruby/object:Gem::Version
-  version: 1.5.1
+  version: 1.5.3
 platform: ruby
 authors:
 - ManageIQ Authors
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2024-03-29 00:00:00.000000000 Z
+date: 2025-01-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: more_core_extensions
@@ -80,6 +80,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: rexml
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.3.9
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.3.9
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -172,14 +186,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 3.0.0
+      version: '0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.26
+rubygems_version: 3.5.23
 signing_key:
 specification_version: 4
 summary: Style and linting configuration for ManageIQ projects.