Releases: healthify/fake_idp
Releases · healthify/fake_idp
Update ruby-saml dependency
1.3.0
Breaking Changes
- None
Changes
- Removes
Gemfile.lockto allow newer versions ofsinatra
1.2.0
Breaking changes
None
Changes
- Loosens
nokogiriversion constraints to permit versions newer than 1.12- Helps address CVEs:
1.1.0
Breaking Changes
None. This is a minor release
Changes
- Removes a version constraint imposed by
fake_idpon ActiveModel.
We don't depend directly on ActiveModel/ActiveSupport so ultimately it is not our responsibility to add version restrictions to avoid CVEs. This just isn't feasible with our team's bandwidth but we will continue to monitor our first-party dependencies and keep those versions up-to-date to keep our users safe.
1.0.5
- Pins nokogiri to ~> 1.12.5 to address CVE-2021-41098 (GHSA-2rr5-8q37-2w7h)
- Updates ruby-saml to 1.13.0
1.0.4
1.0.4
1.0.3
Allows for leveraging ruby-saml versions as new as 1.12 while still supporting prior versions
1.0.2
Loosens restrictions on which versions of ActiveModel are allowed (and thereby ActiveSupport)
1.0.0
Bump to v1.0.0 (#42) Co-Authored-By: Robyn-Dale Samuda <[email protected]>
Make ruby-saml a runtime dependency
This change facilitates using the public SamlResponse class to construct responses which depends on the ruby-saml gem