Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jquery ui rails v5 #63

Open
wants to merge 9 commits into
base: master
Choose a base branch
from
Open

Conversation

matfiz
Copy link

@matfiz matfiz commented Feb 3, 2015

Due to the security issues with old versions of jquery-ui-rails, it would be reasonable to require jquery-ui-rails ~> 5.0.

@matfiz
Copy link
Author

matfiz commented Feb 3, 2015

As the latest Rails 3 version is 3.2.22 and maybe further will come along (only as security updates, if someone will be willing to apply it), I have loosen the requirement for Rails in .gemspec

@@ -17,7 +17,7 @@ Gem::Specification.new do |s|
s.files = Dir["{app,config,db,lib}/**/*"] + ["MIT-LICENSE", "Rakefile", "README.md"]
s.test_files = Dir["test/**/*"]

s.add_dependency "rails", ">= 3.1.0", "<= 3.2.12"
s.add_dependency "rails", ">= 3.1.0", "<= 3.2.40"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We will have to update this every new version?
Wouldn't doing the following be better?

s.add_dependency "rails", ">= 3.1.0", "~> 3.2"‎

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good point! However "> 3.2" that you suggested will also catch the update to version Rails 3.3 ;-) Sure there will not be Rails 3.3, but it should rather be eg. "> 3.2.19". I will correct it accordingly.

Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants