manageiq-style 1.5.6 → 1.5.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9bd1d7fd6d0b88bd7028b1039097a173df9ee6a0218f2727670af45c726d2acc
-  data.tar.gz: f75328202dc38168b655fd55eeed83b5ebc79890bc745bdbfdaf8bfe16662eb5
+  metadata.gz: 0bd98f853751ea933d11b67925a3b3a07dc1352258f1f0dbfa43ff161ab5dbbb
+  data.tar.gz: 129a0b2145e7c6cf7070dee40138d6c022fb939e877f1a4061c34340f74f1227
 SHA512:
-  metadata.gz: 795925d1043e9afcda036e1277038e2213e2ca45abf8ad3832c7aa21b7aca1533fe6f8c8fac6941a7a75d43e83729fd7b3fc3fd7b8d9af8998ddaf1ea6cce12d
-  data.tar.gz: 5635f6cf4b32bbe12b4417cf31d4ac34849fc69c2d0b55cf4c4163c163363cc19d97d3b23afa730d58bc12dca1ed5fafa7cd6cfc929e13dbbd122a5235c4a3c6
+  metadata.gz: 7e3b5931ac2bd44de6d4592cc0e8d1658df061e70e3b5830c2fb9595e4c5355172243fd95674b54f306e9eb5ad44b96ed2dd99241f96f75a14cf5b85d96eb0de
+  data.tar.gz: 7064dbf3ddf3f6bff37da1cf5e1abcb89d0eedfb5c2a2187c31b36c04a64214bc90bd67c6f90912f7ca32daee761b0b8e45ab60ecd97e9c2c607f259381a3825

data/.github/workflows/ci.yaml

@@ -19,7 +19,7 @@ jobs:
     env:
       CC_TEST_REPORTER_ID: ${{ secrets.CC_TEST_REPORTER_ID }}
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - name: Set up Ruby
       uses: ruby/setup-ruby@v1
       with:

data/CHANGELOG.md

@@ -1,9 +1,19 @@
 # Change Log
+
 All notable changes to this project will be documented in this file.
 This project adheres to [Semantic Versioning](http://semver.org/).
 
 ## [Unreleased]
 
+## [1.5.8] - 2025-10-01
+### Changed
+- Bump minimum version for rack for CVE-2025-59830 [[#66](https://github.com/ManageIQ/manageiq-style/pull/66)]
+
+## [1.5.7] - 2025-09-22
+### Changed
+- Bump minimum for rexml for CVE-2025-58767 [[#65](https://github.com/ManageIQ/manageiq-style/pull/65)]
+- Drop require_nested and include_concern [[#63](https://github.com/ManageIQ/manageiq-style/pull/63)]
+
 ## [1.5.6] - 2025-07-03
 ### Changed
 - Lockdown rubocop-ast to the last version before the deprecation warnings [[#62](https://github.com/ManageIQ/manageiq-style/pull/62)]
@@ -55,7 +65,9 @@ This project adheres to [Semantic Versioning](http://semver.org/).
 ## [1.0.1] - 2020-06-19
 ## [1.0.0] - 2020-05-19
 
-[Unreleased]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.6...HEAD
+[Unreleased]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.8...HEAD
+[1.5.8]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.7...v1.5.8
+[1.5.7]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.6...v1.5.7
 [1.5.6]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.5...v1.5.6
 [1.5.5]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.4...v1.5.5
 [1.5.4]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.3...v1.5.4

data/lib/manageiq/style/version.rb

@@ -1,5 +1,5 @@
 module ManageIQ
   module Style
-    VERSION = "1.5.6".freeze
+    VERSION = "1.5.8".freeze
   end
 end

data/manageiq-style.gemspec

@@ -30,14 +30,14 @@ Gem::Specification.new do |spec|
   spec.add_runtime_dependency "rubocop-performance"
   spec.add_runtime_dependency "rubocop-rails"
 
-  spec.add_runtime_dependency "rexml", ">= 3.3.9"  # rubocop depends on rexml. Enforce a minimum for CVE-2024-49761
+  spec.add_runtime_dependency "rexml", ">= 3.4.4"  # rubocop depends on rexml. Enforce a minimum for CVE-2025-58767
 
-  # rubocop-rails depends on rack. Enforce a minimum of 2.2.17, 3.0.18, or 3.1.16 for various CVEs
+  # rubocop-rails depends on rack. Enforce a minimum of 2.2.18 for various CVEs
   #
   # NOTE: Previously we locked down to exclude many specific versions, but due to
   # https://github.com/rubygems/rubygems.org/issues/5541 we can't release the gem.
   # For now, we just lock down to at least the minimum rack.
-  spec.add_runtime_dependency "rack", ">= 2.2.17", "< 4"
+  spec.add_runtime_dependency "rack", ">= 2.2.18", "< 4" # CVE-2025-59830 https://github.com/advisories/GHSA-625h-95r8-8xpm
 
   spec.add_development_dependency "rake",      "~> 12.0"
   spec.add_development_dependency "rspec",     "~> 3.0"

data/styles/base.yml

@@ -241,8 +241,6 @@ Style/MethodCallWithArgsParentheses:
     - deprecate_attribute
     - drop_trigger
     - encrypt_column
-    - include_concern
-    - require_nested
     - signal
     - supports
     - supports_not

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: manageiq-style
 version: !ruby/object:Gem::Version
-  version: 1.5.6
+  version: 1.5.8
 platform: ruby
 authors:
 - ManageIQ Authors
-autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-07-03 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: more_core_extensions
@@ -100,21 +99,21 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.3.9
+        version: 3.4.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.3.9
+        version: 3.4.4
 - !ruby/object:Gem::Dependency
   name: rack
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.2.17
+        version: 2.2.18
     - - "<"
       - !ruby/object:Gem::Version
         version: '4'
@@ -124,7 +123,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.2.17
+        version: 2.2.18
     - - "<"
       - !ruby/object:Gem::Version
         version: '4'
@@ -171,7 +170,6 @@ dependencies:
       - !ruby/object:Gem::Version
         version: 0.21.2
 description: Style and linting configuration for ManageIQ projects.
-email:
 executables:
 - manageiq-style
 extensions: []
@@ -213,7 +211,6 @@ metadata:
   homepage_uri: https://github.com/ManageIQ/manageiq-style
   rubygems_mfa_required: 'true'
   source_code_uri: https://github.com/ManageIQ/manageiq-style
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -228,8 +225,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.22
-signing_key:
+rubygems_version: 3.7.1
 specification_version: 4
 summary: Style and linting configuration for ManageIQ projects.
 test_files: []