feat: Release 2.5.0

fschuindt · Apr 13, 2022 · 74ffb26 · 74ffb26
1 parent 12f4394
commit 74ffb26
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,6 +6,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.5.0] - 2022-04-13
+
+### Fixed
+- Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile [CVE-2021-43809](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43809).
+- Dependency Confusion in Bundler [CVE-2020-36327](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36327).
+- Insecure path handling in Bundler [CVE-2019-3881](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3881).
+
+### Changed
+- Using Bundler 2.3.11.
+- Using `Time.current` instead of `Time.now` to work with timezones [PR 34](https://github.com/fschuindt/firebase_id_token/pull/34).
+- Caching certificates on memory using `Thread` to avoid unnecessary calls into Redis [PR 33](https://github.com/fschuindt/firebase_id_token/pull/33).
+
 ## [2.4.0] - 2020-05-02
 
 ### Fixed
@@ -97,6 +109,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [0.1.0] - 2017-04-23
 *Version removed.*
 
+[2.5.0]: https://github.com/fschuindt/firebase_id_token/compare/2.4.0...2.5.0
 [2.4.0]: https://github.com/fschuindt/firebase_id_token/compare/2.3.2...2.4.0
 [2.3.2]: https://github.com/fschuindt/firebase_id_token/compare/2.3.1...2.3.2
 [2.3.1]: https://github.com/fschuindt/firebase_id_token/compare/2.3.0...2.3.1

diff --git a/README.md b/README.md
@@ -29,7 +29,7 @@ gem install firebase_id_token
 
 or in your Gemfile
 ```
-gem 'firebase_id_token', '~> 2.4.0'
+gem 'firebase_id_token', '~> 2.5.0'
 ```
 then
 ```

diff --git a/lib/firebase_id_token/version.rb b/lib/firebase_id_token/version.rb
@@ -1,3 +1,3 @@
 module FirebaseIdToken
-  VERSION = '2.5.1'
+  VERSION = '2.5.0'
 end
-Original file line number
+Diff line change
@@ Expand Up / @@ -29,7 +29,7 @@ gem install firebase_id_token @@
     or in your Gemfile
     ```
-    gem 'firebase_id_token', '~> 2.4.0'
+    gem 'firebase_id_token', '~> 2.5.0'
     ```
     then
     ```
@@ Expand Down @@