Skip to content

Relax dependency constraints and address vulnerabilities#1

Open
PendragonDevelopment wants to merge 1 commit into
bryanwoods:masterfrom
headwayio:chore/relax-dependency-constraints
Open

Relax dependency constraints and address vulnerabilities#1
PendragonDevelopment wants to merge 1 commit into
bryanwoods:masterfrom
headwayio:chore/relax-dependency-constraints

Conversation

@PendragonDevelopment
Copy link
Copy Markdown

Summary

  • Hardcode version string instead of requiring library for VERSION constant
  • Relax administrate dependency from ~> 0.2.1 to >= 0.2.1
  • Relax cocoon dependency from ~> 1.2 to >= 1.2
  • Relax Rails dependency from ~> 4.2 to >= 6.0
  • Add bundler >= 2.2.33 dev dependency (addresses known security vulnerability)
  • Add rake >= 12.3.3 dev dependency (addresses known security vulnerability)

Test plan

  • Verify gem installs correctly with modern Rails versions (7.x, 8.x)
  • Verify gem works with administrate >= 0.2.1

🤖 Generated with Claude Code

- Hardcode version string instead of requiring library for VERSION constant
- Relax administrate dependency from ~> 0.2.1 to >= 0.2.1
- Relax cocoon dependency from ~> 1.2 to >= 1.2
- Relax Rails dependency from ~> 4.2 to >= 6.0
- Add bundler >= 2.2.33 dev dependency (security fix)
- Add rake >= 12.3.3 dev dependency (security fix)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant