Skip to content

fix: revert required_ruby_version to >=2.4 for 1.10.x#230

Merged
bufferoverflow merged 1 commit intoomniauth:release/1.10.xfrom
ilikepi:fix/revert_ruby_version_change_in_1.10.x
Sep 18, 2024
Merged

fix: revert required_ruby_version to >=2.4 for 1.10.x#230
bufferoverflow merged 1 commit intoomniauth:release/1.10.xfrom
ilikepi:fix/revert_ruby_version_change_in_1.10.x

Conversation

@ilikepi
Copy link
Copy Markdown
Contributor

@ilikepi ilikepi commented Sep 17, 2024

In #228, it was noted that the required_ruby_version setting for the gem was bumped between gem version 2.1.0 to 2.1.1. This was addressed in e9d5238 and released as gem version 2.1.2.

Earlier today, gem version 1.10.4 was released in order to resolve GHSA-cvp8-5r8g-fhvq for older rubies (ref #229), however this also highlights an earlier case in which the required_ruby_version setting was bumped during a patch release. In this case, between gem version 1.10.1 and 1.10.2, required_ruby_version was bumped from >=2.1 to >=2.4.

With this PR, I am requesting that the required_ruby_version change made in gem version 1.10.2 be reverted in order to expand the ability for users stuck on the 1.10.x tree to resolve GHSA-cvp8-5r8g-fhvq.

@ilikepi ilikepi force-pushed the fix/revert_ruby_version_change_in_1.10.x branch from c467c01 to 5abd24d Compare September 17, 2024 17:52
@bufferoverflow bufferoverflow merged commit ac96799 into omniauth:release/1.10.x Sep 18, 2024
@bufferoverflow
Copy link
Copy Markdown
Member

here you go https://rubygems.org/gems/omniauth-saml/versions/1.10.5

@ilikepi ilikepi deleted the fix/revert_ruby_version_change_in_1.10.x branch September 18, 2024 05:42
@ilikepi
Copy link
Copy Markdown
Contributor Author

ilikepi commented Sep 18, 2024

Thank you so much!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants