All Versions
16
Latest Version
Avg Release Cycle
226 days
Latest Release
1090 days ago
Changelog History
Page 2
Changelog History
Page 2
-
v0.3.1 Changes
April 20, 2014- โ Added thor ~> 0.18 as a dependency.
- No longer rely on the vendored version of thor within bundler.
- โก๏ธ Store the timestamp of when
data/ruby-advisory-db
was last updated indata/ruby-advisory-db.ts
. - ๐ Use
data/ruby-advisory-db.ts
instead of the creation time of thedataruby-advisory-db
directory, which is always the install time of the rubygem.
-
v0.3.0 Changes
November 01, 2013- โ Added {Bundler::Audit::Database.update!} which uses
git
to download [ruby-advisory-db] to~/.local/share/ruby-advisory-db
. - {Bundler::Audit::Database.path} now returns the path to either
~/.local/share/ruby-advisory-db
or the vendored copy, depending on which is more recent.
CLI
- โ Added the
bundler-audit update
sub-command.
- โ Added {Bundler::Audit::Database.update!} which uses
-
v0.2.0 Changes
August 27, 2013- ๐ Require RubyGems >= 1.8.0. Prior versions of RubyGems could not correctly
parse approximate version requirements (
~> 1.2.3
). - โก๏ธ Updated the [ruby-advisory-db].
- โ Added {Bundler::Audit::Advisory#unaffected_versions}.
- โ Added {Bundler::Audit::Advisory#unaffected?}.
- โ Added {Bundler::Audit::Advisory#patched?}.
- ๐ Renamed
Advisory#cve
to {Bundler::Audit::Advisory#id}.
- ๐ Require RubyGems >= 1.8.0. Prior versions of RubyGems could not correctly
parse approximate version requirements (
-
v0.1.2 Changes
February 18, 2013- Require [bundler] ~> 1.2.
- ๐ Vendor a full copy of the [ruby-advisory-db].
- โ Added {Bundler::Audit::Advisory#path} for debugging purposes.
- โ Added {Bundler::Audit::Advisory#to_s} for debugging purposes.
CLI
- ๐ Simply parse the
Gemfile.lock
instead of loading the bundle (@grosser). - Exit with non-zero status on failure (@grosser).
-
v0.1.1 Changes
February 12, 2013- ๐ Fixed a Ruby 1.8 syntax error.
-
v0.1.0 Changes
February 12, 2013- ๐ Initial release:
- Checks for vulnerable versions of gems in
Gemfile.lock
. - Prints advisory information.
- Does not require a network connection.
- Checks for vulnerable versions of gems in
Advisories
๐ [ruby-advisory-db]: https://github.com/rubysec/ruby-advisory-db#readme
- ๐ Initial release: