From 92ba680ef890aff539bd26c24fe723b0c750178b Mon Sep 17 00:00:00 2001 From: Jordan Bostrom Date: Tue, 28 May 2024 12:00:18 -0400 Subject: [PATCH] rm Ruby 2.4 support to address rexml CVE, add Ruby 3.3 support --- .github/workflows/main.yml | 2 +- .ruby-version | 2 +- Gemfile.lock | 4 ++-- memo_wise.gemspec | 2 +- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 6c13c04..2c1bf85 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -14,7 +14,7 @@ jobs: matrix: # Due to https://github.com/actions/runner/issues/849, we have to use # quotes for '3.0' -- without quotes, CI sees '3' and runs the latest. - ruby: [2.4, 2.5, 2.6, 2.7, '3.0', 3.1, 3.2, jruby, truffleruby-head] + ruby: [2.5, 2.6, 2.7, '3.0', 3.1, 3.2, 3.3, jruby, truffleruby-head] runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 diff --git a/.ruby-version b/.ruby-version index be94e6f..bea438e 100644 --- a/.ruby-version +++ b/.ruby-version @@ -1 +1 @@ -3.2.2 +3.3.1 diff --git a/Gemfile.lock b/Gemfile.lock index d1d00d9..9b0b66b 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -33,7 +33,7 @@ GEM rake (13.1.0) redcarpet (3.6.0) regexp_parser (2.8.0) - rexml (3.2.5) + rexml (3.2.6) rouge (4.1.0) rspec (3.13.0) rspec-core (~> 3.13.0) @@ -54,7 +54,7 @@ GEM parser (>= 3.2.0.0) rainbow (>= 2.2.2, < 4.0) regexp_parser (>= 1.8, < 3.0) - rexml (>= 3.2.5, < 4.0) + rexml (>= 3.2.6, < 4.0) rubocop-ast (>= 1.28.0, < 2.0) ruby-progressbar (~> 1.7) unicode-display_width (>= 2.4.0, < 3.0) diff --git a/memo_wise.gemspec b/memo_wise.gemspec index 7d5fe41..6c951a6 100644 --- a/memo_wise.gemspec +++ b/memo_wise.gemspec @@ -23,7 +23,7 @@ Gem::Specification.new do |spec| "marc@usainnov.com", ] - spec.required_ruby_version = Gem::Requirement.new(">= 2.4.0") + spec.required_ruby_version = Gem::Requirement.new(">= 2.5.0") # Specify which files should be added to the gem when it is released. # The `git ls-files -z` loads the files in the RubyGem that have been added