manageiq-style 1.5.3 → 1.5.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 62c9e80318c44899a01039ae2ca2f4f952f4a0336ef291daaf5d1c396b09ff57
-  data.tar.gz: 27812f1d7ee64dbdbc5baa0613b634f0fe931370a425c053138e10a71659df6d
+  metadata.gz: 9bd1d7fd6d0b88bd7028b1039097a173df9ee6a0218f2727670af45c726d2acc
+  data.tar.gz: f75328202dc38168b655fd55eeed83b5ebc79890bc745bdbfdaf8bfe16662eb5
 SHA512:
-  metadata.gz: 3f68ae2839032bd0898e758f8cf709509ec9efad314e733c3d31baea95c852275891eb631aa80c7c9cc835f7f55822028c5a78c573223eb86c0cfc9edb35e572
-  data.tar.gz: 72fbda8714aa329c8d42609eb892658772a02b914f6a5a4050ff624661e874a137a36cbce946bf198739342be976b960b23b2cabbca3ecc2cef19adedf1df425
+  metadata.gz: 795925d1043e9afcda036e1277038e2213e2ca45abf8ad3832c7aa21b7aca1533fe6f8c8fac6941a7a75d43e83729fd7b3fc3fd7b8d9af8998ddaf1ea6cce12d
+  data.tar.gz: 5635f6cf4b32bbe12b4417cf31d4ac34849fc69c2d0b55cf4c4163c163363cc19d97d3b23afa730d58bc12dca1ed5fafa7cd6cfc929e13dbbd122a5235c4a3c6

data/CHANGELOG.md

@@ -4,6 +4,19 @@ This project adheres to [Semantic Versioning](http://semver.org/).
 
 ## [Unreleased]
 
+## [1.5.6] - 2025-07-03
+### Changed
+- Lockdown rubocop-ast to the last version before the deprecation warnings [[#62](https://github.com/ManageIQ/manageiq-style/pull/62)]
+- Revert rack individual exclusion in favor of a simple minimum [[#61](https://github.com/ManageIQ/manageiq-style/pull/61)]
+
+## [1.5.5] - 2025-03-14
+### Changed
+- Loosen rack dependency down to the 2.2 range, but only to safe versions [[#60](https://github.com/ManageIQ/manageiq-style/pull/60)]
+
+## [1.5.4] - 2025-03-13
+### Changed
+- Enforce a minimum version for rack for CVEs [[#59](https://github.com/ManageIQ/manageiq-style/pull/59)]
+
 ## [1.5.3] - 2025-01-09
 ### Changed
 - Bump Rexml minimum version for CVE-2024-49761 [[#57](https://github.com/ManageIQ/manageiq-style/pull/57)]
@@ -42,7 +55,10 @@ This project adheres to [Semantic Versioning](http://semver.org/).
 ## [1.0.1] - 2020-06-19
 ## [1.0.0] - 2020-05-19
 
-[Unreleased]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.3...HEAD
+[Unreleased]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.6...HEAD
+[1.5.6]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.5...v1.5.6
+[1.5.5]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.4...v1.5.5
+[1.5.4]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.3...v1.5.4
 [1.5.3]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.2...v1.5.3
 [1.5.2]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.1...v1.5.2
 [1.5.1]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.0...v1.5.1

data/lib/manageiq/style/version.rb

@@ -1,5 +1,5 @@
 module ManageIQ
   module Style
-    VERSION = "1.5.3".freeze
+    VERSION = "1.5.6".freeze
   end
 end

data/manageiq-style.gemspec

@@ -26,13 +26,18 @@ Gem::Specification.new do |spec|
   spec.add_runtime_dependency "more_core_extensions"
   spec.add_runtime_dependency "optimist"
   spec.add_runtime_dependency "rubocop", "= 1.56.3"
+  spec.add_runtime_dependency "rubocop-ast", "~> 1.40.0"
   spec.add_runtime_dependency "rubocop-performance"
   spec.add_runtime_dependency "rubocop-rails"
-  # style depends upon rubocop
-  # rubocop depends upon rexml.
-  #   minimum rexml version is here for CVE-2024-49761
-  #   remove after upgrading rubocop. (newer versions no longer depend upon rexml)
-  spec.add_runtime_dependency "rexml", ">= 3.3.9"
+
+  spec.add_runtime_dependency "rexml", ">= 3.3.9"  # rubocop depends on rexml. Enforce a minimum for CVE-2024-49761
+
+  # rubocop-rails depends on rack. Enforce a minimum of 2.2.17, 3.0.18, or 3.1.16 for various CVEs
+  #
+  # NOTE: Previously we locked down to exclude many specific versions, but due to
+  # https://github.com/rubygems/rubygems.org/issues/5541 we can't release the gem.
+  # For now, we just lock down to at least the minimum rack.
+  spec.add_runtime_dependency "rack", ">= 2.2.17", "< 4"
 
   spec.add_development_dependency "rake",      "~> 12.0"
   spec.add_development_dependency "rspec",     "~> 3.0"

data/renovate.json

@@ -1,6 +1,5 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    "config:recommended"
-  ]
+  "inheritConfig": true,
+  "inheritConfigRepoName": "manageiq/renovate-config"
 }

data/test.rb

@@ -0,0 +1,5 @@
+begin
+  puts "Hi"
+ensure
+  puts "There"
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: manageiq-style
 version: !ruby/object:Gem::Version
-  version: 1.5.3
+  version: 1.5.6
 platform: ruby
 authors:
 - ManageIQ Authors
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-01-09 00:00:00.000000000 Z
+date: 2025-07-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: more_core_extensions
@@ -52,6 +52,20 @@ dependencies:
     - - '='
       - !ruby/object:Gem::Version
         version: 1.56.3
+- !ruby/object:Gem::Dependency
+  name: rubocop-ast
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.40.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.40.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
@@ -94,6 +108,26 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: 3.3.9
+- !ruby/object:Gem::Dependency
+  name: rack
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.2.17
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '4'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.2.17
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '4'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -171,6 +205,7 @@ files:
 - renovate.json
 - styles/base.yml
 - styles/cc_base.yml
+- test.rb
 homepage: https://github.com/ManageIQ/manageiq-style
 licenses:
 - MIT
@@ -193,7 +228,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.23
+rubygems_version: 3.5.22
 signing_key:
 specification_version: 4
 summary: Style and linting configuration for ManageIQ projects.