Skip to content

Update activesupport and friends for CVE - #71

Merged
chadwilken merged 1 commit into
masterfrom
security/activesupport-7.2.3.1
Oct 14, 2026
Merged

chadwilken merged 1 commit into
masterfrom
security/activesupport-7.2.3.1

Conversation

@chadwilken

Copy link
Copy Markdown
Contributor

Description

Update activesupport and friends for CVE

Reason/Reference

CVE: https://github.com/CompanyCam/tiptap-ruby/security/dependabot/24
Closes #68

@chadwilken
chadwilken requested a review from a team October 14, 2026 14:59
@chadwilken chadwilken self-assigned this Oct 14, 2026
@chadwilken chadwilken closed this Oct 14, 2026
@chadwilken chadwilken reopened this Oct 14, 2026
Comment thread Gemfile.lock
tiptap-ruby (0.10.1)
actionview (>= 7.0)
activesupport (>= 6.0)
activesupport (>= 7.2.3.1)

@mrichman-companycam mrichman-companycam Oct 14, 2026 •

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Obviously not a blocker, but are these ready to go with the versions where this library is imported? Just curious if these will require additional upgrades elsewhere first

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm not going to publish a new version until I get all CVEs resolved and then bump version and publish. When I bump the version I'll increase the minor so that people are more aware of the change.

@chadwilken
chadwilken merged commit 74ee66f into master Oct 14, 2026
4 of 5 checks passed
@chadwilken
chadwilken deleted the security/activesupport-7.2.3.1 branch October 14, 2026 15:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[tiptap-ruby/DB 23] Medium in activesupport (rubygems)

2 participants