omniauth-forge 0.2.0 → 0.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1cb4f77badd5cdc2b3f89e6a113464d0754866fa131c79b296cd456ce56d6f49
-  data.tar.gz: 1572222dce88b591b6c4c5fd065cdf4704c76594a600eaf89dd6af434d8587c6
+  metadata.gz: 0026b8a76cbdfc8a4f4c925e13d2e3461106ef116f8cad0671dda6c133860b30
+  data.tar.gz: aab3d98a8533ff9630d25e56cc432472a396256e8a1a8d904b26c202b3835704
 SHA512:
-  metadata.gz: a389bd5fd21dd71206da6416424d9af83974931576f27a01bf75b6417a29b809384fcbb00efcd0007177b4c4747762a1580622480f79dfeb435322639614592a
-  data.tar.gz: 20e5a61bb17833cdd90e7b38b9663da51bbc948322fa438e8b35d01151b7d71a5ab076b5c7d6bc7ecf0b89e357803c3ca4fcf590894d40c4c837f2c8465169f8
+  metadata.gz: 7cf6960e07c22135d23a9a4c06bc43e3c61cdd4f901ade7c01be1857483c4f7e1ae53011e306fc8a27817f95a191959741cf45c67d5e9e3f152c7ea66c125fec
+  data.tar.gz: b3ad7d8f23675a455e648ee37f7f0ab02d3cc9349192198dc8a60911c0253df8524fc04a4e2d7deffe5a8fde30819e00cd8433718effd12c6623bfaaab0f3679

data/CHANGELOG.md

@@ -6,6 +6,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.2.1] - 2021-01-20
+### Changed
+- Forced Ominauth >= 2 to mitigate CVE-2015-9284
+
 ## [0.2.0] - 2021-01-19
 ### Added
 - Using rubocop + prettier combo for linting
@@ -17,6 +21,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - First working version of the gem.
 - Added proper documentation.
 
-[Unreleased]: https://github.com/shotgunsoftware/omniauth-forge/compare/v0.2.0...HEAD
+[Unreleased]: https://github.com/shotgunsoftware/omniauth-forge/compare/v0.2.1...HEAD
+[0.2.0]: https://github.com/shotgunsoftware/omniauth-forge/releases/tag/v0.2.1
 [0.2.0]: https://github.com/shotgunsoftware/omniauth-forge/releases/tag/v0.2.0
 [0.1.1]: https://github.com/shotgunsoftware/omniauth-forge/releases/tag/v0.1.1

data/Rakefile

@@ -1,8 +1,3 @@
 # frozen_string_literal: true
 
 require "bundler/gem_tasks"
-require "rspec/core/rake_task"
-
-RSpec::Core::RakeTask.new(:spec)
-
-task default: :spec

data/lib/omniauth_forge/version.rb

@@ -2,6 +2,6 @@
 
 module OmniAuth
   module Forge
-    VERSION = '0.2.0'
+    VERSION = '0.2.1'
   end
 end

data/omniauth_forge.gemspec

@@ -32,9 +32,8 @@ Gem::Specification.new do |spec|
   spec.executables = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ['lib']
 
-  spec.add_dependency 'omniauth'
+  spec.add_dependency 'omniauth', '>= 2'
   spec.add_dependency 'omniauth-oauth2'
-  spec.add_dependency 'omniauth-rails_csrf_protection', '> 0.1' # No CVE-2015-9284
   spec.add_dependency 'zeitwerk', '~> 2'
 
   spec.add_development_dependency 'bundler'

metadata

@@ -1,11 +1,11 @@
 --- !ruby/object:Gem::Specification
 name: omniauth-forge
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.1
 platform: ruby
 authors:
 - Denis <Zaratan> Pasin
-autorequire:
+autorequire: 
 bindir: exe
 cert_chain: []
 date: 2021-01-20 00:00:00.000000000 Z
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '2'
 - !ruby/object:Gem::Dependency
   name: omniauth-oauth2
   requirement: !ruby/object:Gem::Requirement
@@ -38,20 +38,6 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
-- !ruby/object:Gem::Dependency
-  name: omniauth-rails_csrf_protection
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">"
-      - !ruby/object:Gem::Version
-        version: '0.1'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">"
-      - !ruby/object:Gem::Version
-        version: '0.1'
 - !ruby/object:Gem::Dependency
   name: zeitwerk
   requirement: !ruby/object:Gem::Requirement
@@ -401,7 +387,7 @@ metadata:
   homepage_uri: https://github.com/shotgunsoftware/omniauth-forge
   source_code_uri: https://github.com/shotgunsoftware/omniauth-forge
   changelog_uri: https://github.com/shotgunsoftware/omniauth-forge/blob/main/CHANGELOG.md
-post_install_message:
+post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -416,8 +402,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.4
-signing_key:
+rubygems_version: 3.2.3
+signing_key: 
 specification_version: 4
 summary: Connect to Autodesk's forge with omniauth strategy
 test_files: []