From ab5b37d8fc7ca3f404aaabac3f31304db4282b7c Mon Sep 17 00:00:00 2001 From: James Hush Date: Wed, 11 Mar 2026 09:46:38 +0800 Subject: [PATCH 1/3] fix: bump required Ruby version to 3.0+ to resolve faraday SSRF vulnerability Faraday >= 2.9.0 requires Ruby >= 3.0, which prevented Dependabot from resolving the SSRF fix. Bumps required_ruby_version from 2.7 to 3.0 and adds Ruby 3.2/3.3 to the CI matrix. Co-Authored-By: Claude Opus 4.6 --- .github/workflows/main.yml | 2 +- daily-ruby.gemspec | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 2c6cb20..73469f0 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -7,7 +7,7 @@ jobs: runs-on: ubuntu-latest strategy: matrix: - ruby-version: ["3.0", "3.1"] + ruby-version: ["3.0", "3.1", "3.2", "3.3"] steps: - uses: actions/checkout@v2 diff --git a/daily-ruby.gemspec b/daily-ruby.gemspec index 545e351..9ebf8b6 100644 --- a/daily-ruby.gemspec +++ b/daily-ruby.gemspec @@ -25,7 +25,7 @@ Gem::Specification.new do |s| s.summary = "The official Daily API Ruby client" s.description = "The official Daily API Ruby client for Daily's REST API" s.license = "MIT" - s.required_ruby_version = ">= 2.7" + s.required_ruby_version = ">= 3.0" s.metadata = {} s.add_runtime_dependency 'faraday', '>= 1.0.1', '< 3.0' From 61b61ea01a0b0387b9f5941f1161c374333e4905 Mon Sep 17 00:00:00 2001 From: James Hush Date: Wed, 11 Mar 2026 09:56:08 +0800 Subject: [PATCH 2/3] chore: bump version to 1.0.4 Co-Authored-By: Claude Opus 4.6 --- lib/daily-ruby/version.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/daily-ruby/version.rb b/lib/daily-ruby/version.rb index b8d8ae4..739ac12 100644 --- a/lib/daily-ruby/version.rb +++ b/lib/daily-ruby/version.rb @@ -11,5 +11,5 @@ =end module Daily - VERSION = '1.0.3' + VERSION = '1.0.4' end From 2d0b0ab6036bf9e321d65e5e755e67906077db63 Mon Sep 17 00:00:00 2001 From: James Hush Date: Wed, 11 Mar 2026 10:04:05 +0800 Subject: [PATCH 3/3] chore: update Gemfile.lock for v1.0.4 Co-Authored-By: Claude Opus 4.6 --- Gemfile.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile.lock b/Gemfile.lock index 955d9f9..cbeff92 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -1,7 +1,7 @@ PATH remote: . specs: - daily-ruby (1.0.3) + daily-ruby (1.0.4) faraday (>= 1.0.1, < 3.0) faraday-multipart marcel