Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: revert required_ruby_version to >=2.4 for 1.10.x #230

Conversation

ilikepi
Copy link
Contributor

@ilikepi ilikepi commented Sep 17, 2024

In #228, it was noted that the required_ruby_version setting for the gem was bumped between gem version 2.1.0 to 2.1.1. This was addressed in e9d5238 and released as gem version 2.1.2.

Earlier today, gem version 1.10.4 was released in order to resolve GHSA-cvp8-5r8g-fhvq for older rubies (ref #229), however this also highlights an earlier case in which the required_ruby_version setting was bumped during a patch release. In this case, between gem version 1.10.1 and 1.10.2, required_ruby_version was bumped from >=2.1 to >=2.4.

With this PR, I am requesting that the required_ruby_version change made in gem version 1.10.2 be reverted in order to expand the ability for users stuck on the 1.10.x tree to resolve GHSA-cvp8-5r8g-fhvq.

@ilikepi ilikepi force-pushed the fix/revert_ruby_version_change_in_1.10.x branch from c467c01 to 5abd24d Compare September 17, 2024 17:52
@bufferoverflow bufferoverflow merged commit ac96799 into omniauth:release/1.10.x Sep 18, 2024
@bufferoverflow
Copy link
Member

here you go https://rubygems.org/gems/omniauth-saml/versions/1.10.5

@ilikepi ilikepi deleted the fix/revert_ruby_version_change_in_1.10.x branch September 18, 2024 05:42
@ilikepi
Copy link
Contributor Author

ilikepi commented Sep 18, 2024

Thank you so much!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants