Skip to content

Conversation

@btihen
Copy link

@btihen btihen commented Aug 12, 2025

Thor < 1.4 has a security issue, see: GHSA-mqcp-p2hv-vw6x

This address the issue: #130

I needed to make ActiveJob minimally 7.0 in order to load the Logger properly

Co-authored-by: Tobias <[email protected]>
@@ -1,3 +1,3 @@
module Gush
VERSION = '4.2.0'.freeze
VERSION = '4.2.1'.freeze

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
VERSION = '4.2.1'.freeze
VERSION = '4.3.0'.freeze

I would say it's not only a patch as we do not support activejob 6 anymore

@eglitobias
Copy link

Please also update the https://github.com/chaps-io/gush/blob/master/.github/workflows/ruby.yml#L29 and add Rails 8.1

@eglitobias
Copy link

@pokonski @krzyzak
Could one of you review and merge this MR when you get a chance? 🙏
It includes an important security update, and once it’s merged, we’ll also be able to use Gush in a Rails 8.1 app.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants