pheme 5.2.1 → 5.2.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ecfddff20a7d97a6a105457f4de521514fdc3067ba909c0c2b925a317af9c539
-  data.tar.gz: cbd269a2535d26c588c2edfe00fc725a9863c6c3ceee4ae341b3c78f339e1dfa
+  metadata.gz: f73be2c0198c779c7160e45a9822d56bc75dead45e91162d0fc404c6b50823a0
+  data.tar.gz: 652c61378164b2c04aa8b8785aebd53ab4f423dd2d4fee35f0e59d95554e2a58
 SHA512:
-  metadata.gz: 886b590366a034b19d6e6a8a0013c129a46df1bc0151c220698532174086e5d1262fc8f8acaaff417f1f73749fdef144d698ef834a5c68e3de31084c69ecf202
-  data.tar.gz: c7025c16b16a214e633ee7753e7839cd02a1229c9534d17448d185aa7f8c0ad0bd809e206650310446873e9d642fa4dd18dd69e3b479c512b20b0ca90d4e2c33
+  metadata.gz: 890b6bba427ebcedd1f9678736ce83b90b71886248d586528f84a35537cdc5d593d54d1551077613bbba82ae2c98ae1d63f86425c4cca8f2c4a93d0765cfd035
+  data.tar.gz: 8da31084687842480e05028030d0bedeab510f71d6310bf1201f266389c346179168adaaf5465880ea24299c80dfb110a67807c7afd95d9e9bc3e38d33aee27b

data/CHANGELOG.md

@@ -4,6 +4,15 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+
+## 5.2.3 - 2023-07-17
+### Changed
+- Updated dependencies
+
+## 5.2.2 - 2023-07-14
+### Changed
+- Added SECURITY.md file to repo
+
 ## 5.2.1 - 2023-07-05
 ### Changed
 - Updated dependencies

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    pheme (5.2.1)
+    pheme (5.2.3)
       activesupport (>= 4)
       aws-sdk-sns (~> 1.1)
       aws-sdk-sqs (~> 1.3)
@@ -20,17 +20,17 @@ GEM
       public_suffix (>= 2.0.2, < 6.0)
     ast (2.4.2)
     aws-eventstream (1.2.0)
-    aws-partitions (1.783.0)
-    aws-sdk-core (3.176.1)
+    aws-partitions (1.786.0)
+    aws-sdk-core (3.178.0)
       aws-eventstream (~> 1, >= 1.0.2)
       aws-partitions (~> 1, >= 1.651.0)
       aws-sigv4 (~> 1.5)
       jmespath (~> 1, >= 1.6.1)
-    aws-sdk-sns (1.63.0)
-      aws-sdk-core (~> 3, >= 3.176.0)
+    aws-sdk-sns (1.65.0)
+      aws-sdk-core (~> 3, >= 3.177.0)
       aws-sigv4 (~> 1.1)
-    aws-sdk-sqs (1.59.0)
-      aws-sdk-core (~> 3, >= 3.176.0)
+    aws-sdk-sqs (1.61.0)
+      aws-sdk-core (~> 3, >= 3.177.0)
       aws-sigv4 (~> 1.1)
     aws-sigv4 (1.6.0)
       aws-eventstream (~> 1, >= 1.0.2)
@@ -48,13 +48,13 @@ GEM
     jmespath (1.6.2)
     json (2.6.3)
     language_server-protocol (3.17.0.3)
-    lint_roller (1.0.0)
+    lint_roller (1.1.0)
     minitest (5.18.1)
     parallel (1.23.0)
     parser (3.2.2.3)
       ast (~> 2.4.1)
       racc
-    public_suffix (5.0.1)
+    public_suffix (5.0.3)
     racc (1.7.1)
     rack (3.0.8)
     rainbow (3.1.1)
@@ -77,7 +77,7 @@ GEM
     rspec-its (1.3.0)
       rspec-core (>= 3.0.0)
       rspec-expectations (>= 3.0.0)
-    rspec-mocks (3.12.5)
+    rspec-mocks (3.12.6)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.12.0)
     rspec-support (3.12.1)
@@ -120,16 +120,17 @@ GEM
     simplecov-html (0.12.3)
     simplecov_json_formatter (0.1.4)
     smarter_csv (1.8.5)
-    standard (1.29.0)
+    standard (1.30.1)
       language_server-protocol (~> 3.17.0.2)
       lint_roller (~> 1.0)
       rubocop (~> 1.52.0)
       standard-custom (~> 1.0.0)
       standard-performance (~> 1.1.0)
-    standard-custom (1.0.1)
-      lint_roller (~> 1.0)
-    standard-performance (1.1.0)
+    standard-custom (1.0.2)
       lint_roller (~> 1.0)
+      rubocop (~> 1.50)
+    standard-performance (1.1.1)
+      lint_roller (~> 1.1)
       rubocop-performance (~> 1.18.0)
     standard-rails (0.1.0)
       lint_roller (~> 1.0)
@@ -138,10 +139,11 @@ GEM
     tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
     unicode-display_width (2.4.2)
-    ws-style (7.1.1)
+    ws-style (7.1.3)
       rubocop-rspec (>= 2.2.0)
       rubocop-vendor (>= 0.11)
-      standard (>= 1.28.2)
+      standard (>= 1.30.1)
+      standard-custom (>= 1.0.2)
       standard-rails (>= 0.1.0)
 
 PLATFORMS

data/SECURITY.md

@@ -0,0 +1,15 @@
+# Security Policy
+
+Wealthsimple secures our code base using a combination of code review, dependency review, and periodic security reviews. Static analysis is performed during automated verification additionally safeguards against common coding errors which may result in vulnerabilities.
+
+### Reporting a Vulnerability
+
+For general defects about this project, please file a [Bug Report](https://github.com/wealthsimple/pheme/issues/new/choose)
+
+To report a vulnerability about this project please [Report a security vulnerability](https://github.com/wealthsimple/pheme/security/advisories/new)
+
+If you have a vulnerability to report about the Wealthsimple platform, please use our white hat bug bounty program at [Hackerone](https://hackerone.com/wealthsimple)
+
+### General Support
+
+For additional support, please open a [Github Discussion](https://github.com/wealthsimple/pheme/discussions). 

data/lib/pheme/version.rb

@@ -1,3 +1,3 @@
 module Pheme
-  VERSION = '5.2.1'.freeze
+  VERSION = '5.2.3'.freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pheme
 version: !ruby/object:Gem::Version
-  version: 5.2.1
+  version: 5.2.3
 platform: ruby
 authors:
 - Peter Graham
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-07-05 00:00:00.000000000 Z
+date: 2023-07-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -228,6 +228,7 @@ files:
 - LICENSE
 - README.md
 - Rakefile
+- SECURITY.md
 - catalog-info.yaml
 - lib/pheme.rb
 - lib/pheme/compression.rb