rack-proxy 1.0.1 → 1.0.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: ec993cb1f75831f1f7270d06634ba8c94b40246af6a622e239e29ddd2ff74e20
4
- data.tar.gz: e5105cdc0ce7f69fb47b36e483dde1bad7799ff90f052566e526cc65d99fe7b5
3
+ metadata.gz: c85038309db55ace1d7ad2de733dc4a539859cf585c2ffb69b73c13a914f1d47
4
+ data.tar.gz: e0328851b0d2a9698b05f356bbb0322c6f3cf4c760b10d93a91194df0849ce44
5
5
  SHA512:
6
- metadata.gz: 701b98893deaf804c09f965a6ad12d3a7c219be357bfd1d3457beeab4598af699863b44df149a0d4c5c433dab75cdb3ee080a9503e9916142adb7a60ba3b8bf8
7
- data.tar.gz: e75ba8fe0ed1beaa2aa480f3f19805e3a8be98c8ed05af84e9b00e6812b420a67d8d102031afcff78c23026193a43354b20126477e40d9f41ab50514ec0b8acc
6
+ metadata.gz: 7bba2a24c71a1521a3d9f9d42d7bffd56b8545f05a8f060fb7236c76d0d5dccba4099015eb25f69e5d98d79b937a4e6d8b26fac5e69345a814222bc65cf3f3d9
7
+ data.tar.gz: 34502c66d9801a04d95849773d3dc8c43aa24629db6cb780bb06834054ffc41588ddd1610ec39e33f6b7c64b163311633a47bc988b48eacd7d3e0578bda2568f
data/CHANGELOG.md CHANGED
@@ -8,6 +8,26 @@ follow [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
8
8
 
9
9
  Nothing yet.
10
10
 
11
+ ## [1.0.2] - 2026-09-01
12
+
13
+ Housekeeping — no library behavior changes. **No action is needed by users:**
14
+ the shipped gem does not depend on `json` and was never affected by the
15
+ advisory below.
16
+
17
+ ### Security
18
+
19
+ - Development dependency `json` bumped 2.21.1 → 2.21.2 to clear
20
+ CVE-2026-71847 / GHSA-9hj4-r449-hfvc (`JSON::ResumableParser#partial_value`
21
+ dereferences a freed input buffer on truncated duplicate-key streams).
22
+ `json` reaches this repo only transitively (`standard` → `rubocop` → `json`)
23
+ and lives solely in the development `Gemfile.lock`; the bump keeps the CI
24
+ `bundler-audit` gate green.
25
+
26
+ ### Changed
27
+
28
+ - Release workflow: the laggy rubygems full-index await was replaced with a
29
+ versions-API check, so a successful publish no longer fails the run. (#142)
30
+
11
31
  ## [1.0.1] - 2026-07-23
12
32
 
13
33
  Docs and housekeeping — no library behavior changes.
@@ -175,7 +195,8 @@ or a compatible fix. See the README's "Upgrading" section for migration steps.
175
195
 
176
196
  Older releases (≤ 0.7.8) predate this changelog; see the git history and tags.
177
197
 
178
- [Unreleased]: https://github.com/ncr/rack-proxy/compare/v1.0.1...HEAD
198
+ [Unreleased]: https://github.com/ncr/rack-proxy/compare/v1.0.2...HEAD
199
+ [1.0.2]: https://github.com/ncr/rack-proxy/compare/v1.0.1...v1.0.2
179
200
  [1.0.1]: https://github.com/ncr/rack-proxy/compare/v1.0.0...v1.0.1
180
201
  [1.0.0]: https://github.com/ncr/rack-proxy/compare/v0.8.3...v1.0.0
181
202
  [0.8.3]: https://github.com/ncr/rack-proxy/compare/v0.8.2...v0.8.3
@@ -2,6 +2,6 @@
2
2
 
3
3
  module Rack
4
4
  class Proxy
5
- VERSION = "1.0.1"
5
+ VERSION = "1.0.2"
6
6
  end
7
7
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: rack-proxy
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.0.1
4
+ version: 1.0.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - Jacek Becela
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2026-07-23 00:00:00.000000000 Z
11
+ date: 2026-09-01 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: rack