Releases: VerdigrisTech/green-button-data
Releases · VerdigrisTech/green-button-data
v2.0.1
v2.0.0
BREAKING CHANGES
- Drops support for Ruby v2.5 and lower versions
Changes
- Gem updates by @tedWexus in #26
- Update parsed data from RetailCustomer XML by @tedWexus in #27
- Replace Fixnum (deprecated) with Integer by @tedWexus in #28
- Bump addressable from 2.6.0 to 2.8.0 by @dependabot in #29
- Update SCE RetailCustomer XML parsing by @tedWexus in #30
Fixes
- CVE-2022-24839
- CVE-2022-23437
- CVE-2018-25032
- CWE-1333
- CVE-2021-30560
- CVE-2022-23308
- CVE-2019-20388
- CVE-2020-24977
- CVE-2021-3517
- CVE-2021-3518
- CVE-2021-3537
- CVE-2021-3541
Full Changelog: v1.0.3...v2.0.0
v1.0.3
Fixes
- Security vulnerability related to json gem CVE-2020-10663
v1.0.2
Fixes
- Security vulnerability related to libxml by upgrading nokogiri to ~> 1.10.8 CVE-2017-15412
v1.0.1
v1.0.0
🚨 Backwards Breaking Changes
- Minimal Ruby version updated to stable releases (>= 2.4.0)
- Dropped support for unmaintained Ruby versions 2.1, 2.2, and 2.3 (these will no longer receive security updates)
New Features
Fixes
v0.7.5
v0.7.4
Fixes
- Security vulnerability related to libxml2 by upgrading nokogiri to ~> 1.8.2 [CVE-2017-15412]
v0.7.3
Fixes
- Duplicate phase code caused by ambiguous XSLT schema (Credit: @NansD)
- Security vulnerability related to libxml2 by upgrading nokogiri to ~> 1.8.1 [CVE-2017-0663, CVE-2017-7375, CVE-2017-7376, CVE-2017-9047, CVE-2017-9048, CVE-2017-9049, CVE-2017-9050]
v0.7.2
This release is a security patch.
Fixes
- Security vulnerability related to libxslt that can cause denial of service attack by upgrading nokogiri to
~> 1.8
[CVE-2017-5029]