Skip to content

v5.18.1

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 13 Mar 07:21
v5.18.1
771e5b4
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fixed

  • Fixed a bug where passing an array as a request payload would delete its contents, causing API calls with array parameters to silently send empty data. (#697)

Changed

  • Updated zache from 0.13.2 to 0.15.2
  • Updated jwt from 2.9.3 to 2.10.2
  • Updated addressable from 2.8.7 to 2.8.8

Security

  • Removed unused coveralls and irb dev dependencies, eliminating OS Command Injection vulnerability in thor introduced transitively via coveralls
  • Replaced dotenv-rails with standalone dotenv, removing the full Rails transitive dependency chain and resolving 5 XSS vulnerabilities in rails-html-sanitizer
  • Upgraded rexml to 3.4.4 (via simplecov-cobertura and webmock upgrades) to fix XML Entity Expansion vulnerability
Assets 2
Loading