oddb2xml 3.0.16 → 3.0.17

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5cba5ea3e5414179cae06dc6b1fd3e30882ebf93d158cebbbf8c384789c6f437
-  data.tar.gz: 96e18c2cfbd07cacb6266659b4995e2fdddc04b1e1dafea9410df0423ae91ae8
+  metadata.gz: df4185a65a50fc628ba92bc98fb8ac378563d5653882e3e34b54d1c1265e3808
+  data.tar.gz: a62c0d6b0b643458e9885c6ba7d8c1d54c1435696a3c73da2788fd22539a9915
 SHA512:
-  metadata.gz: 32bc1b4476bd33f7f3c04aae1f63bb7ddca649d7ca7b73942d321bda32102629ec879f3e3ac414073f72f11687752a4d113e1688b52f0c6466b45f866fddcc7c
-  data.tar.gz: fbecd040c7a10958075a6754a6b7a492d88181a0530a73112db6cbf0e51f13060a849b53689575515c98c72e93a20bc1744afd1d87eb376aeeacf0282e1592fe
+  metadata.gz: e3718c1c76fbced6bb1ce43350ae13b42fbf747e2dce91980be24df4b9dcea1a78448b20a344ab50685effe3a33341a20ebd520c1a70ed995c996a6fd0dfb0ff
+  data.tar.gz: e0c0dd04ccacc29933a582fd05d19ebee40ce7ae420ca632e4d6f5068ae92de5928ab1fa6daf3b9bd4894f5797dde0090fad74d8bdc25a3610f648b57624aa1c

data/Gemfile

@@ -7,6 +7,6 @@ group :debugger do
   gem "pry-doc"
 end
 
-gem "nokogiri", ">= 1.19.3"
+gem "nokogiri", ">= 1.18.10"
 gem "rack", ">= 3.1.20"
 gem "mutex_m"

data/Gemfile.lock

@@ -1,14 +1,14 @@
 PATH
   remote: .
   specs:
-    oddb2xml (3.0.16)
+    oddb2xml (3.0.17)
       csv
       htmlentities
       httpi
       mechanize (>= 2.8.5)
       minitar
       multi_json
-      nokogiri (>= 1.19.3)
+      nokogiri (>= 1.18.10)
       optimist
       ox
       parslet
@@ -220,7 +220,7 @@ DEPENDENCIES
   bundler
   flexmock
   mutex_m
-  nokogiri (>= 1.19.3)
+  nokogiri (>= 1.18.10)
   oddb2xml!
   pry-byebug
   pry-doc

data/History.txt

@@ -1,3 +1,6 @@
+=== 3.0.17 / 08.06.2026
+* Compatibility: relax the nokogiri requirement from ">= 1.19.3" to ">= 1.18.10" (lower bound only, no upper cap) so oddb2xml installs on Ruby 3.1 again. nokogiri 1.19.x requires Ruby >= 3.2, which made 3.0.13–3.0.16 uninstallable on Ruby 3.1.0 (the bare "gem install" crashed with the misleading RubyGems resolver error "undefined method `request' for nil:NilClass"). With a lower-bound-only floor, RubyGems still resolves the security-fixed 1.19.3 on Ruby >= 3.2, while Ruby 3.1 installs 1.18.10 (the newest 3.1-compatible release). oddb2xml uses no nokogiri 1.19-only API and runs no CSS/XSLT/C14N over untrusted input, so the 1.19.3 advisories do not apply to its usage. Note: Ruby 3.1 is EOL (since March 2025) — upgrading to Ruby >= 3.2 remains recommended.
+
 === 3.0.16 / 02.06.2026
 * Refdata cleanup: two more Swissmedic-sourced, IKSNR-scoped fixes for 50-char truncation (issue #112 cases #1 and #3). fix_truncated_metoject rebuilds every truncated METOJECT Autoinjektor name ("METOJECT Autoinjektor 10 mg/0.2 ml Inj Lös 10 mg 1") from its intact "<brand> Autoinjektor <dose>/<vol>" prefix plus the authoritative Swissmedic pack size -> "METOJECT Autoinjektor 10 mg/0.2 ml Fertpen 1 Stk", localised for FR ("stylo pré … pce") and IT ("penna preriempita … pz"); it recovers the correct count even where the truncation cut the count digits. fix_truncated_volume_unit restores the lost final "l" of the VERACTIV Vitamin D3 drops volume ("… 20'000 U.I. 10m" -> "10ml"). Both are scoped to their registration (METOJECT 65672, VERACTIV Vitamin D3 57690) and idempotent. The French wording in the VERACTIV German name remains an upstream issue.
 

data/lib/oddb2xml/version.rb

@@ -1,3 +1,3 @@
 module Oddb2xml
-  VERSION = "3.0.16"
+  VERSION = "3.0.17"
 end

data/oddb2xml.gemspec

@@ -23,7 +23,11 @@ Gem::Specification.new do |spec|
   spec.add_dependency "rubyzip", '~> 3.0.1'
   spec.add_dependency "minitar" # , '~> 0.5.2'
   spec.add_dependency "mechanize", ">= 2.8.5"
-  spec.add_dependency "nokogiri", ">= 1.19.3"
+  # Lower bound only (no upper cap) so each Ruby resolves to its best nokogiri:
+  # Ruby >= 3.2 still gets the security-fixed 1.19.3 (nokogiri 1.19.x needs Ruby >= 3.2),
+  # while Ruby 3.1 (EOL but still in production) can install 1.18.10, the newest 3.1-compatible
+  # release. oddb2xml uses no nokogiri 1.19-only API and no CSS/XSLT/C14N on untrusted input.
+  spec.add_dependency "nokogiri", ">= 1.18.10"
   spec.add_dependency "savon" , '~> 2.12.0'
   spec.add_dependency "spreadsheet" # , '~> 1.0.0'
   spec.add_dependency "rubyXL", "~> 3.4.0"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: oddb2xml
 version: !ruby/object:Gem::Version
-  version: 3.0.16
+  version: 3.0.17
 platform: ruby
 authors:
 - Yasuhiro Asaka, Zeno R.R. Davatz, Niklaus Giger
@@ -57,14 +57,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.19.3
+        version: 1.18.10
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.19.3
+        version: 1.18.10
 - !ruby/object:Gem::Dependency
   name: savon
   requirement: !ruby/object:Gem::Requirement