Merged
Conversation
- Improve build and test automation steps - Add tasks for asset installation, linting, and variable printing - Refactor build, clean, and test steps for clarity - Enhance output messaging for better user feedback - Remove redundant install from test target
- Move logger middleware to occur after error handling - Add clarifying comments on the middleware stack order
- Bumps tool version to address potential security issues - Ensures future compatibility with updated dependency requirements - Relates to addressing security vulnerabilities
- Change faraday-related dependencies to use minimum versions - Avoid overly strict pinning to allow for compatible updates
- Bumps version to address security vulnerabilities - Keeps dependencies up to date for better performance and stability Relates to issue/27
- Refactor project metadata and links - Update gemspec dependency constraints for accuracy - Ensure correct project homepage, documentation, and changelog links - Improve gather of files for packaging
- Add patch-level constraints to runtime dependencies - Sync runtime dependencies with gemspec requirements - Update package naming and instructions for accuracy
- Bump versions for tools and lint libraries - Use latest syntax and minimum versions where required - Improve lint and json tool compatibility with ruby 3.4
- Bumps testing dependency to address security issues - Ensures compatibility with current libraries
- Bumps a core library version to patch known security issues
- Bumps test dependency to latest patch to mitigate security risks
- Bumps several library versions to address security concerns - Ensures compatibility and addresses known issues reported like rexml - Reduces risk by using patched and more secure packages
- Updates several core dependencies to their latest versions - Addresses potential security vulnerabilities flagged in outdated packages - Ensures compatibility with updated libraries for improved stability
- Remove trailing comma in metadata to conform to Ruby syntax requirements - Prevents potential errors during gem build or install - Supports resolving security and publishing issues
- Adds a help command describing all available make tasks - Groups lint and test under a single checks target for convenience - Improves linting to auto-correct safe offences - Refines vars output for better variable visibility - Adds command to display version only - Clarifies and streamlines existing task outputs
- Expand and reformat the changelog using a structured template - Add new release notes including security, features, changes, and fixes - Update formatting style to improve readability - Split legacy and new style changelog entries with a clear separator
- Increment patch number for new release - Keep consistency with updated changelog and release improvements
jonrandahl
requested review from
DanielCouzens,
ajtucker,
bogdanadrianmarc and
joescottdave
jonrandahl
deleted the
issue/27-task-resolve-security-vulnerabilities
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
chore: update dependencies and workflows to address security vulnerabilities
Relates to #27