rack-cloudflare_middleware 1.2.2 → 1.2.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (10) hide show
  1. checksums.yaml +4 -4
  2. data/.github/workflows/ci.yml +3 -3
  3. data/.github/workflows/release.yml +3 -1
  4. data/CHANGELOG.md +8 -3
  5. data/CODEOWNERS +2 -0
  6. data/Gemfile +4 -4
  7. data/Gemfile.lock +45 -41
  8. data/lib/rack/cloudflare_middleware/version.rb +1 -1
  9. metadata +3 -3
  10. data/.github/workflows/pull-request-updated.yml +0 -36
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 8d81d3ecb48c6e3fceaaad766016e093caf5caba2b0176aa7613fe480b1e865a
4
- data.tar.gz: 911cdb9c16f3dd50bbbd5c9c4a0f6039db5ebbdeaf4c85294687fdbced2e6e87
3
+ metadata.gz: 1e072e19640e5ab0839946a07b45b2bc3c96f5c82d2d1f2eb5e4dacd45d905d5
4
+ data.tar.gz: c0e6c9baaf3174163785cbc0e7308a209405bec198a630f49bf117a3248f7f97
5
5
  SHA512:
6
- metadata.gz: 3af4c44a7ff108468ad09081d44bf28626004070ffea1603a4e9de19c6b21917f780abd5e6f07a7ac09ab7ad85f15f5dd23eb4c18b77c180ebc21c5e5cfef752
7
- data.tar.gz: 42a7a38e2c70f3722e3addb0037fd365d03a2c46f830d84e94832fec3f770bb655b0820c171cf6bd9d55c6c8fb09021082b1aedcde0a485ab31dc41eb1dcca68
6
+ metadata.gz: 3a459d3d80c6ed44eb6c4d932784591cf7f3661c4cc9bb5201188b9551199550a4b2b1b6fb36f2ad8def142f34b75f3864ec53c85d7b0458c1eb2375b2bb889b
7
+ data.tar.gz: 0d8a3bc82581206924393b028af66174ff43725e45551fbcccc6e5faffb73631e4427767303e3f514ae8ee75c4f052fd52d222c19a5c3e30fcf737011c743051
data/.github/workflows/ci.yml CHANGED
@@ -19,7 +19,7 @@ jobs:
19
19
  ruby: ["3.1", "3.2", "3.3", "3.4"]
20
20
  steps:
21
21
  - name: Checkout code
22
- uses: actions/checkout@v4
22
+ uses: actions/checkout@v6
23
23
  - name: Install Ruby and gems
24
24
  uses: ruby/setup-ruby@v1
25
25
  with:
@@ -35,7 +35,7 @@ jobs:
35
35
  contents: read
36
36
  steps:
37
37
  - name: Checkout code
38
- uses: actions/checkout@v4
38
+ uses: actions/checkout@v6
39
39
  - name: Install Ruby and gems
40
40
  uses: ruby/setup-ruby@v1
41
41
  with:
@@ -44,7 +44,7 @@ jobs:
44
44
  - name: Bundle Audit Check
45
45
  run: bundle exec bundle-audit update && bundle exec bundle-audit check
46
46
  - name: Setup Python
47
- uses: actions/setup-python@v5
47
+ uses: actions/setup-python@v6
48
48
  with:
49
49
  python-version: "3.12"
50
50
  - name: Run pre-commit
data/.github/workflows/release.yml CHANGED
@@ -5,9 +5,11 @@ on:
5
5
  jobs:
6
6
  release:
7
7
  runs-on: ubuntu-24.04
8
+ permissions:
9
+ contents: read
8
10
  steps:
9
11
  - name: Checkout code
10
- uses: actions/checkout@v4
12
+ uses: actions/checkout@v6
11
13
  - name: Install Ruby and gems
12
14
  uses: ruby/setup-ruby@v1
13
15
  with:
data/CHANGELOG.md CHANGED
@@ -1,6 +1,11 @@
1
- NEXT
2
- ----
3
- - Drop support for Ruby <3.1
1
+
2
+ v1.2.4 - 2026-02-10
3
+ -------------------
4
+ - Updated Faraday dependency to >= 2.14.1 to address CVE-2026-25765 (SSRF vulnerability)
5
+
6
+ v1.2.3 - 2025-07-25
7
+ -------------------
8
+ - Libraries updates
4
9
 
5
10
  v1.2.2 - 2024-05-22
6
11
  -------------------
data/CODEOWNERS ADDED
@@ -0,0 +1,2 @@
1
+ # Auto-tag the "Infrastructure" otherwise anyone can approve changes
2
+ ** @instrumentl/infrastructure
data/Gemfile CHANGED
@@ -4,8 +4,8 @@ source "https://rubygems.org"
4
4
 
5
5
  gemspec
6
6
 
7
- gem "faraday", "~> 2.13"
8
- gem "rake", "~> 13.2"
7
+ gem "faraday", "~> 2.14"
8
+ gem "rake", "~> 13.3"
9
9
 
10
10
  group :development, :test do
11
11
  gem "rspec", "~> 3.13"
@@ -13,6 +13,6 @@ group :development, :test do
13
13
  gem "rack-test", "~> 2"
14
14
  gem "standard", "~> 1"
15
15
  gem "pry"
16
- gem "webmock", "~> 3.25"
17
- gem "bundler-audit", "~> 0.9.2"
16
+ gem "webmock", "~> 3.26"
17
+ gem "bundler-audit", "~> 0.9.3"
18
18
  end
data/Gemfile.lock CHANGED
@@ -1,7 +1,7 @@
1
1
  PATH
2
2
  remote: .
3
3
  specs:
4
- rack-cloudflare_middleware (1.2.2)
4
+ rack-cloudflare_middleware (1.2.4)
5
5
  faraday (>= 1.0, < 3)
6
6
  rack (>= 2, < 4)
7
7
 
@@ -11,63 +11,67 @@ GEM
11
11
  addressable (2.8.7)
12
12
  public_suffix (>= 2.0.2, < 7.0)
13
13
  ast (2.4.3)
14
- bigdecimal (3.1.9)
15
- bundler-audit (0.9.2)
16
- bundler (>= 1.2.0, < 3)
14
+ bigdecimal (3.3.1)
15
+ bundler-audit (0.9.3)
16
+ bundler (>= 1.2.0)
17
17
  thor (~> 1.0)
18
18
  coderay (1.1.3)
19
- crack (1.0.0)
19
+ crack (1.0.1)
20
20
  bigdecimal
21
21
  rexml
22
- diff-lcs (1.5.1)
23
- faraday (2.13.1)
22
+ diff-lcs (1.6.2)
23
+ faraday (2.14.1)
24
24
  faraday-net_http (>= 2.0, < 3.5)
25
25
  json
26
26
  logger
27
- faraday-net_http (3.4.0)
28
- net-http (>= 0.5.0)
29
- hashdiff (1.1.2)
30
- json (2.12.0)
27
+ faraday-net_http (3.4.2)
28
+ net-http (~> 0.5)
29
+ hashdiff (1.2.1)
30
+ io-console (0.8.2)
31
+ json (2.18.1)
31
32
  language_server-protocol (3.17.0.5)
32
33
  lint_roller (1.1.0)
33
34
  logger (1.7.0)
34
35
  method_source (1.1.0)
35
- net-http (0.6.0)
36
- uri
36
+ net-http (0.9.1)
37
+ uri (>= 0.11.1)
37
38
  parallel (1.27.0)
38
- parser (3.3.8.0)
39
+ parser (3.3.10.0)
39
40
  ast (~> 2.4.1)
40
41
  racc
41
- prism (1.4.0)
42
- pry (0.15.2)
42
+ prism (1.6.0)
43
+ pry (0.16.0)
43
44
  coderay (~> 1.1)
44
45
  method_source (~> 1.0)
45
- public_suffix (6.0.1)
46
+ reline (>= 0.6.0)
47
+ public_suffix (6.0.2)
46
48
  racc (1.8.1)
47
- rack (3.1.15)
49
+ rack (3.2.4)
48
50
  rack-test (2.2.0)
49
51
  rack (>= 1.3)
50
52
  rainbow (3.1.1)
51
- rake (13.2.1)
52
- regexp_parser (2.10.0)
53
- rexml (3.4.1)
54
- rspec (3.13.0)
53
+ rake (13.3.1)
54
+ regexp_parser (2.11.3)
55
+ reline (0.6.3)
56
+ io-console (~> 0.5)
57
+ rexml (3.4.4)
58
+ rspec (3.13.2)
55
59
  rspec-core (~> 3.13.0)
56
60
  rspec-expectations (~> 3.13.0)
57
61
  rspec-mocks (~> 3.13.0)
58
- rspec-core (3.13.2)
62
+ rspec-core (3.13.6)
59
63
  rspec-support (~> 3.13.0)
60
- rspec-expectations (3.13.3)
64
+ rspec-expectations (3.13.5)
61
65
  diff-lcs (>= 1.2.0, < 2.0)
62
66
  rspec-support (~> 3.13.0)
63
67
  rspec-its (2.0.0)
64
68
  rspec-core (>= 3.13.0)
65
69
  rspec-expectations (>= 3.13.0)
66
- rspec-mocks (3.13.2)
70
+ rspec-mocks (3.13.6)
67
71
  diff-lcs (>= 1.2.0, < 2.0)
68
72
  rspec-support (~> 3.13.0)
69
- rspec-support (3.13.1)
70
- rubocop (1.75.5)
73
+ rspec-support (3.13.6)
74
+ rubocop (1.81.7)
71
75
  json (~> 2.3)
72
76
  language_server-protocol (~> 3.17.0.2)
73
77
  lint_roller (~> 1.1.0)
@@ -75,10 +79,10 @@ GEM
75
79
  parser (>= 3.3.0.2)
76
80
  rainbow (>= 2.2.2, < 4.0)
77
81
  regexp_parser (>= 2.9.3, < 3.0)
78
- rubocop-ast (>= 1.44.0, < 2.0)
82
+ rubocop-ast (>= 1.47.1, < 2.0)
79
83
  ruby-progressbar (~> 1.7)
80
84
  unicode-display_width (>= 2.4.0, < 4.0)
81
- rubocop-ast (1.44.1)
85
+ rubocop-ast (1.48.0)
82
86
  parser (>= 3.3.7.2)
83
87
  prism (~> 1.4)
84
88
  rubocop-performance (1.25.0)
@@ -86,10 +90,10 @@ GEM
86
90
  rubocop (>= 1.75.0, < 2.0)
87
91
  rubocop-ast (>= 1.38.0, < 2.0)
88
92
  ruby-progressbar (1.13.0)
89
- standard (1.50.0)
93
+ standard (1.52.0)
90
94
  language_server-protocol (~> 3.17.0.2)
91
95
  lint_roller (~> 1.0)
92
- rubocop (~> 1.75.5)
96
+ rubocop (~> 1.81.7)
93
97
  standard-custom (~> 1.0.0)
94
98
  standard-performance (~> 1.8)
95
99
  standard-custom (1.0.2)
@@ -98,12 +102,12 @@ GEM
98
102
  standard-performance (1.8.0)
99
103
  lint_roller (~> 1.1)
100
104
  rubocop-performance (~> 1.25.0)
101
- thor (1.3.2)
102
- unicode-display_width (3.1.4)
103
- unicode-emoji (~> 4.0, >= 4.0.4)
104
- unicode-emoji (4.0.4)
105
- uri (1.0.3)
106
- webmock (3.25.1)
105
+ thor (1.4.0)
106
+ unicode-display_width (3.2.0)
107
+ unicode-emoji (~> 4.1)
108
+ unicode-emoji (4.1.0)
109
+ uri (1.1.1)
110
+ webmock (3.26.1)
107
111
  addressable (>= 2.8.0)
108
112
  crack (>= 0.3.2)
109
113
  hashdiff (>= 0.4.0, < 2.0.0)
@@ -116,16 +120,16 @@ PLATFORMS
116
120
 
117
121
  DEPENDENCIES
118
122
  bundler (~> 2)
119
- bundler-audit (~> 0.9.2)
120
- faraday (~> 2.13)
123
+ bundler-audit (~> 0.9.3)
124
+ faraday (~> 2.14)
121
125
  pry
122
126
  rack-cloudflare_middleware!
123
127
  rack-test (~> 2)
124
- rake (~> 13.2)
128
+ rake (~> 13.3)
125
129
  rspec (~> 3.13)
126
130
  rspec-its (~> 2.0)
127
131
  standard (~> 1)
128
- webmock (~> 3.25)
132
+ webmock (~> 3.26)
129
133
 
130
134
  BUNDLED WITH
131
135
  2.5.23
data/lib/rack/cloudflare_middleware/version.rb CHANGED
@@ -2,6 +2,6 @@
2
2
 
3
3
  module Rack
4
4
  module CloudflareMiddleware
5
- VERSION = "1.2.2"
5
+ VERSION = "1.2.4"
6
6
  end
7
7
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: rack-cloudflare_middleware
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.2.2
4
+ version: 1.2.4
5
5
  platform: ruby
6
6
  authors:
7
7
  - James Brown
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2025-05-23 00:00:00.000000000 Z
11
+ date: 2026-02-10 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: faraday
@@ -115,12 +115,12 @@ extra_rdoc_files: []
115
115
  files:
116
116
  - ".github/dependabot.yml"
117
117
  - ".github/workflows/ci.yml"
118
- - ".github/workflows/pull-request-updated.yml"
119
118
  - ".github/workflows/release.yml"
120
119
  - ".gitignore"
121
120
  - ".pre-commit-config.yaml"
122
121
  - ".rubocop.yml"
123
122
  - CHANGELOG.md
123
+ - CODEOWNERS
124
124
  - Gemfile
125
125
  - Gemfile.lock
126
126
  - LICENSE.txt
data/.github/workflows/pull-request-updated.yml DELETED
@@ -1,36 +0,0 @@
1
- name: Pull Request Updated
2
-
3
- on:
4
- pull_request:
5
- types:
6
- - opened
7
- - reopened
8
- - edited
9
- - synchronize
10
- - ready_for_review
11
- - converted_to_draft
12
-
13
- jobs:
14
- tag-for-dependabot:
15
- name: Tag libero For Dependabot
16
- if: ${{ github.actor == 'dependabot[bot]' }}
17
- runs-on: ubuntu-24.04
18
- timeout-minutes: 2
19
- permissions:
20
- contents: read
21
- pull-requests: write
22
- steps:
23
- - name: Generate a token
24
- id: generate_token
25
- uses: actions/create-github-app-token@v2
26
- with:
27
- app-id: ${{ secrets.DEPENDABOT_AUTO_MERGER_APP_ID }}
28
- private-key: ${{ secrets.DEPENDABOT_AUTO_MERGER_PRIVATE_KEY }}
29
- owner: ${{ github.repository_owner }}
30
- repositories: ${{ github.event.repository.name }}
31
- - name: Auto Assign
32
- run: gh pr edit "$PR_URL" --add-reviewer "$REVIEWER"
33
- env:
34
- PR_URL: ${{ github.event.pull_request.html_url }}
35
- REVIEWER: instrumentl/libero
36
- GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}