manageiq-style 1.5.4 → 1.5.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5c53a743c920fb4713516c400e68d36d71473eb4d7593130e5d452889435d47f
-  data.tar.gz: 8b6aa5ec3342efb309c8735e2e054506c19fe95b88be029571f9e0f8f37b645d
+  metadata.gz: 9bd1d7fd6d0b88bd7028b1039097a173df9ee6a0218f2727670af45c726d2acc
+  data.tar.gz: f75328202dc38168b655fd55eeed83b5ebc79890bc745bdbfdaf8bfe16662eb5
 SHA512:
-  metadata.gz: 728953d1b2cfcb5566e737795371e5d7d371ede563c08415ce374f8cad7c34762dbe811972a19724983d125125b9bb50d2fd5fd1302bb30167433f44efdcdefc
-  data.tar.gz: 7dfdd24a96bda5833c6435df16494411916365a409de91bdfef4cc56015461c3e5761c25a5f78344ee78dc138af0fd92fd96eb4878ec3735f2c12065bd4cb42e
+  metadata.gz: 795925d1043e9afcda036e1277038e2213e2ca45abf8ad3832c7aa21b7aca1533fe6f8c8fac6941a7a75d43e83729fd7b3fc3fd7b8d9af8998ddaf1ea6cce12d
+  data.tar.gz: 5635f6cf4b32bbe12b4417cf31d4ac34849fc69c2d0b55cf4c4163c163363cc19d97d3b23afa730d58bc12dca1ed5fafa7cd6cfc929e13dbbd122a5235c4a3c6

data/CHANGELOG.md

@@ -4,6 +4,15 @@ This project adheres to [Semantic Versioning](http://semver.org/).
 
 ## [Unreleased]
 
+## [1.5.6] - 2025-07-03
+### Changed
+- Lockdown rubocop-ast to the last version before the deprecation warnings [[#62](https://github.com/ManageIQ/manageiq-style/pull/62)]
+- Revert rack individual exclusion in favor of a simple minimum [[#61](https://github.com/ManageIQ/manageiq-style/pull/61)]
+
+## [1.5.5] - 2025-03-14
+### Changed
+- Loosen rack dependency down to the 2.2 range, but only to safe versions [[#60](https://github.com/ManageIQ/manageiq-style/pull/60)]
+
 ## [1.5.4] - 2025-03-13
 ### Changed
 - Enforce a minimum version for rack for CVEs [[#59](https://github.com/ManageIQ/manageiq-style/pull/59)]
@@ -46,7 +55,9 @@ This project adheres to [Semantic Versioning](http://semver.org/).
 ## [1.0.1] - 2020-06-19
 ## [1.0.0] - 2020-05-19
 
-[Unreleased]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.4...HEAD
+[Unreleased]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.6...HEAD
+[1.5.6]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.5...v1.5.6
+[1.5.5]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.4...v1.5.5
 [1.5.4]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.3...v1.5.4
 [1.5.3]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.2...v1.5.3
 [1.5.2]: https://github.com/ManageIQ/manageiq-style/compare/v1.5.1...v1.5.2

data/lib/manageiq/style/version.rb

@@ -1,5 +1,5 @@
 module ManageIQ
   module Style
-    VERSION = "1.5.4".freeze
+    VERSION = "1.5.6".freeze
   end
 end

data/manageiq-style.gemspec

@@ -26,11 +26,18 @@ Gem::Specification.new do |spec|
   spec.add_runtime_dependency "more_core_extensions"
   spec.add_runtime_dependency "optimist"
   spec.add_runtime_dependency "rubocop", "= 1.56.3"
+  spec.add_runtime_dependency "rubocop-ast", "~> 1.40.0"
   spec.add_runtime_dependency "rubocop-performance"
   spec.add_runtime_dependency "rubocop-rails"
 
   spec.add_runtime_dependency "rexml", ">= 3.3.9"  # rubocop depends on rexml. Enforce a minimum for CVE-2024-49761
-  spec.add_runtime_dependency "rack", ">= 3.1.12"  # rubocop-rails depends on rack. Enforce a minimum for CVE-2025-27610
+
+  # rubocop-rails depends on rack. Enforce a minimum of 2.2.17, 3.0.18, or 3.1.16 for various CVEs
+  #
+  # NOTE: Previously we locked down to exclude many specific versions, but due to
+  # https://github.com/rubygems/rubygems.org/issues/5541 we can't release the gem.
+  # For now, we just lock down to at least the minimum rack.
+  spec.add_runtime_dependency "rack", ">= 2.2.17", "< 4"
 
   spec.add_development_dependency "rake",      "~> 12.0"
   spec.add_development_dependency "rspec",     "~> 3.0"

data/test.rb

@@ -0,0 +1,5 @@
+begin
+  puts "Hi"
+ensure
+  puts "There"
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: manageiq-style
 version: !ruby/object:Gem::Version
-  version: 1.5.4
+  version: 1.5.6
 platform: ruby
 authors:
 - ManageIQ Authors
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-03-13 00:00:00.000000000 Z
+date: 2025-07-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: more_core_extensions
@@ -52,6 +52,20 @@ dependencies:
     - - '='
       - !ruby/object:Gem::Version
         version: 1.56.3
+- !ruby/object:Gem::Dependency
+  name: rubocop-ast
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.40.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.40.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +114,20 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.12
+        version: 2.2.17
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '4'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.1.12
+        version: 2.2.17
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '4'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -185,6 +205,7 @@ files:
 - renovate.json
 - styles/base.yml
 - styles/cc_base.yml
+- test.rb
 homepage: https://github.com/ManageIQ/manageiq-style
 licenses:
 - MIT