rubytree 2.2.0 → 2.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4453bf8edf542985ddd52c289e7194263a5251cedd9ffd0655248a8c13585dd0
-  data.tar.gz: 67a85efeb8483aecdd9a576708a92eee8e333103b34b3ed04fcf748b73f1a07f
+  metadata.gz: 40fad408b86296928f63867c64413a015df9ad82c370db702f2d553dffd7378a
+  data.tar.gz: e688cb8c355642973f61cbbf46012ae525f83284f5bb97a1bbb2f53660b8481f
 SHA512:
-  metadata.gz: 66220dddff61b9bb9198c72530ae6a6e66d0d66c713236e1aca5b44f77818798acaae9e4f2d6356d95cf0872f219f3c74d7b3e21e2b570a4e6d285499a6dc582
-  data.tar.gz: e15ecf207beb379c10a298dc1202c8bf9ec5ad3b4e6538793b7b139a64af8fa8b2883b8155dbd222e6b2d304fc15bf6b32d0a12088ee27fcf9c23ac75d67186e
+  metadata.gz: 3cc82139dde41db5c3e3cd3a158dd722b8f2915282cfaa28184f6790a48c1a023abf75260474837da9e768a28a763ad71f8d2f1f896503aeb9417813099093ea
+  data.tar.gz: f4c04d7f4f5a0c4e031d8d2513ef0a3fbc94cad374b4a749f2b38334149bd97d62c1e57c0d1a79765ee3daa6716af4399bbd5dcd62baf630ac33a6905562d550

data/Gemfile.lock

@@ -1,8 +1,8 @@
 PATH
   remote: .
   specs:
-    rubytree (2.2.0)
-      json (~> 2.0, > 2.9)
+    rubytree (2.2.1)
+      json (~> 2.0, >= 2.19.9)
 
 GEM
   remote: https://rubygems.org/
@@ -11,7 +11,7 @@ GEM
     date (3.4.1)
     diff-lcs (1.5.1)
     docile (1.4.1)
-    json (2.9.1)
+    json (2.21.1)
     language_server-protocol (3.17.0.3)
     parallel (1.26.3)
     parser (3.3.6.0)
@@ -73,7 +73,7 @@ GEM
     unicode-display_width (3.1.2)
       unicode-emoji (~> 4.0, >= 4.0.4)
     unicode-emoji (4.0.4)
-    yard (0.9.37)
+    yard (0.9.44)
 
 PLATFORMS
   ruby
@@ -91,7 +91,7 @@ DEPENDENCIES
   simplecov (~> 0.22)
   simplecov-lcov (~> 0.8)
   test-unit (~> 3.6)
-  yard (~> 0.0, >= 0.9.37)
+  yard (~> 0.0, >= 0.9.44)
 
 BUNDLED WITH
    2.3.4

data/History.md

@@ -1,5 +1,11 @@
 # History of Changes
 
+### 2.2.1 / 2026-07-24
+
+* Bump the `json` runtime dependency to 2.19.9+, fixing a heap buffer
+  overflow when generating to a streamed IO
+  ([CVE-2026-54696](https://github.com/ruby/json/security/advisories/GHSA-x2f5-4prf-w687)).
+
 ### 2.2.0 / 2026-02-06
 
 * Prevent cycles by rejecting attempts to add an ancestor as a child.

data/lib/tree/version.rb

@@ -4,7 +4,7 @@
 #
 # Author:: Anupam Sengupta (anupamsg@gmail.com)
 #
-# Copyright (c) 2012-2024 Anupam Sengupta. All rights reserved.
+# Copyright (c) 2012-2026 Anupam Sengupta. All rights reserved.
 #
 # Redistribution and use in source and binary forms, with or without
 # modification, are permitted provided that the following conditions are met:
@@ -35,5 +35,5 @@
 
 module Tree
   # Rubytree Package Version
-  VERSION = '2.2.0'
+  VERSION = '2.2.1'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rubytree
 version: !ruby/object:Gem::Version
-  version: 2.2.0
+  version: 2.2.1
 platform: ruby
 authors:
 - Anupam Sengupta
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-02-06 00:00:00.000000000 Z
+date: 2026-07-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: json
@@ -17,9 +17,9 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '2.0'
-    - - ">"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '2.9'
+        version: 2.19.9
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -27,9 +27,9 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '2.0'
-    - - ">"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '2.9'
+        version: 2.19.9
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -199,7 +199,7 @@ dependencies:
         version: '0.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.9.37
+        version: 0.9.44
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -209,7 +209,7 @@ dependencies:
         version: '0.0'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.9.37
+        version: 0.9.44
 description: |2
 
       RubyTree is a Ruby implementation of the generic tree data structure. It
@@ -258,7 +258,6 @@ files:
 - lib/tree/utils/tree_merge_handler.rb
 - lib/tree/utils/utils.rb
 - lib/tree/version.rb
-- rubytree.gemspec
 - spec/spec_helper.rb
 - spec/tree_spec.rb
 - test/run_test.rb
@@ -305,7 +304,7 @@ post_install_message: |2
       ========================================================================
 rdoc_options:
 - "--title"
-- 'Rubytree Documentation: rubytree-2.2.0'
+- 'Rubytree Documentation: rubytree-2.2.1'
 - "--main"
 - README.md
 - "--quiet"

data/rubytree.gemspec

@@ -1,114 +0,0 @@
-#
-# gemspec for the rubytree gem.
-#
-# Author:: Anupam Sengupta (anupamsg@gmail.com)
-#
-# Copyright (c) 2012-2024 Anupam Sengupta. All rights reserved.
-#
-# frozen_string_literal: true
-
-require File.join(__dir__, '/lib/tree/version')
-
-Gem::Specification.new do |s|
-  s.name                  = 'rubytree'
-  s.version               = Tree::VERSION
-  s.license               = 'BSD-2-Clause'
-  # NOTE: s.date should NOT be assigned. It is automatically set to pkg date.
-  s.platform              = Gem::Platform::RUBY
-  s.author                = 'Anupam Sengupta'
-  s.email                 = 'anupamsg@gmail.com'
-  s.homepage              = 'http://rubytree.anupamsg.me'
-
-  s.required_ruby_version = '>=2.7'
-
-  s.summary               = 'A generic tree data structure for Ruby.'
-
-  s.description           = <<-END_DESC
-
-    RubyTree is a Ruby implementation of the generic tree data structure. It
-    provides simple APIs to store named nodes, and to access, modify, and
-    traverse the tree.
-
-    The data model is node-centric, where nodes in the tree are the primary
-    structural elements. It supports all common tree-traversal methods (pre-order,
-    post-order, and breadth first).
-
-    RubyTree mixes in the Enumerable and Comparable modules and behaves like a
-    standard Ruby collection (iteration, comparison, etc.).
-
-    RubyTree also includes a binary tree implementation, which provides in-order
-    node traversal besides the other methods.
-
-    RubyTree can import from and export to JSON, and supports Ruby’s object
-    marshaling.
-  END_DESC
-
-  s.metadata = {
-    'rubygems_mfa_required' => 'true',
-    'github_repo' => 'ssh://github.com/evolve75/rubytree'
-  }
-
-  s.files                = Dir['lib/**/*.rb']  # The actual code
-  s.files               += Dir['[A-Z]*']       # Various documentation files
-  s.files               += Dir['test/**/*.rb'] # Test cases
-  s.files               += Dir['spec/**/*.rb'] # Rspec Test cases
-  s.files               += Dir['examples/**/*.rb'] # Examples
-
-  # @todo: Check if this is really needed.
-  s.files               += ['.gemtest'] # Support for gem-test
-
-  s.require_paths        = ['lib']
-
-  s.extra_rdoc_files     = %w[README.md LICENSE.md API-CHANGES.md History.md]
-  s.rdoc_options         = ['--title', "Rubytree Documentation: #{s.name}-#{s.version}",
-                            '--main', 'README.md',
-                            '--quiet']
-
-  s.add_runtime_dependency 'json', '~> 2.0', '> 2.9'
-
-  # NOTE: Rake is added as a development and test dependency in the Gemfile.
-  s.add_development_dependency 'bundler', '~> 2.3'
-  s.add_development_dependency 'rake', '~> 13.2'
-  s.add_development_dependency 'rdoc', '~> 6.10'
-  s.add_development_dependency 'rspec', '~> 3.0', '>= 3.13'
-  s.add_development_dependency 'rtagstask', '~> 0.0.4'
-  s.add_development_dependency 'rubocop', '~> 1.69'
-  s.add_development_dependency 'rubocop-rake', '~> 0.6'
-  s.add_development_dependency 'rubocop-rspec', '~> 3.3'
-  s.add_development_dependency 'simplecov', '~> 0.22'
-  s.add_development_dependency 'simplecov-lcov', '~> 0.8'
-  s.add_development_dependency 'test-unit', '~> 3.6'
-  s.add_development_dependency 'yard', '~> 0.0', '>= 0.9.37'
-
-  s.post_install_message = <<-END_MESSAGE
-    ========================================================================
-                    Thank you for installing RubyTree.
-
-    Note::
-    - 2.1.1 is a minor update that updates all dependencies and
-            Updates the guard clause for creating a tree from a hash.
-
-    - 2.1.0 is a minor update that brings all libraries to their
-            latest stable versions. This version no longer supports
-            Ruby 2.6 (minimum requirement is now >= 2.7).
-
-    - 2.0.0 is a major release with BREAKING API changes.
-            See `API-CHANGES.md` for details.
-
-    - `Tree::TreeNode#depth` method has been removed (it was broken).
-
-    - Support for `CamelCase` methods names has bee removed.
-
-    - The predicate methods no longer have `is_` or `has_` prefixes. However,
-      aliases with these prefixes exist to support existing client code.
-
-    - Use of integers as node names does not require the optional
-      `num_as_name` flag.
-
-    - `structured_warnings` is no longer a dependency.
-
-    - Explicit support for rbx Ruby has been removed.
-
-    ========================================================================
-  END_MESSAGE
-end