Merge pull request #89 from truemail-rb/develop

Truemail server v0.6.0
truemail-rb · Jan 20, 2023 · a96ba48 · a96ba48
2 parents ac7c8f9 + e42a52a
commit a96ba48
Show file tree

Hide file tree

Showing 10 changed files with 79 additions and 62 deletions.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -1,7 +1,7 @@
 defaults: &defaults
   working_directory: ~/truemail-server
   docker:
-    - image: cimg/ruby:3.1.2
+    - image: cimg/ruby:3.2.0
 
 references:
   install_bundler: &install_bundler

diff --git a/.codeclimate.yml b/.codeclimate.yml
@@ -7,7 +7,7 @@ checks:
 plugins:
   rubocop:
     enabled: true
-    channel: rubocop-1-38
+    channel: rubocop-1-43
 
   reek:
     enabled: true
diff --git a/.rubocop.yml b/.rubocop.yml
@@ -20,6 +20,9 @@ Style/ParallelAssignment:
 Style/FetchEnvVar:
   Enabled: false
 
+Style/RedundantConstantBase:
+  Enabled: false
+
 # Metrics ---------------------------------------------------------------------
 
 Layout/LineLength:

diff --git a/.ruby-version b/.ruby-version
@@ -1 +1 @@
-ruby-3.1.2
+ruby-3.2.0
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,20 @@
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.6.0] - 2023-01-20
+
+### Fixed
+
+- Fixed security vulnerability issue [CVE-2022-44571](https://github.com/advisories/GHSA-93pm-5p5f-3ghx)
+
+### Changed
+
+- Updated application dependencies (rack 2.2.6.2, truemail 3.0.5)
+- Updated Ruby version to 3.2.0
+- Updated development dependencies
+- Updated application version
+- Updated readme
+
 ## [0.5.0] - 2022-11-03
 
 ### Added

diff --git a/Gemfile b/Gemfile
@@ -4,11 +4,11 @@ source 'https://rubygems.org'
 
 ruby(::File.read(::File.join(::File.dirname(__FILE__), '.ruby-version')).strip[/-(.+)/, 1])
 
-gem 'dry-struct', '~> 1.5', '>= 1.5.2'
+gem 'dry-struct', '~> 1.6'
 gem 'net-smtp', '~> 0.3.3'
-gem 'rack', '~> 2.2', '>= 2.2.4'
+gem 'rack', '~> 2.2', '>= 2.2.6.2'
 gem 'thin', '~> 1.8', '>= 1.8.1'
-gem 'truemail', '~> 3.0', '>= 3.0.1'
+gem 'truemail', '~> 3.0', '>= 3.0.5'
 
 group :development, :test do
   gem 'pry-byebug', '~> 3.10', '>= 3.10.1'
@@ -19,13 +19,13 @@ group :development, :test do
   gem 'bundler-audit', '~> 0.9.1', require: false
   gem 'fasterer', '~> 0.10.0', require: false
   gem 'overcommit', '~> 0.59.1', require: false
-  gem 'reek', '~> 6.1', '>= 6.1.1', require: false
-  gem 'rubocop', '~> 1.38', require: false
-  gem 'rubocop-performance', '~> 1.15', require: false
-  gem 'rubocop-rspec', '~> 2.14', '>= 2.14.2', require: false
+  gem 'reek', '~> 6.1', '>= 6.1.4', require: false
+  gem 'rubocop', '~> 1.43', require: false
+  gem 'rubocop-performance', '~> 1.15', '>= 1.15.2', require: false
+  gem 'rubocop-rspec', '~> 2.18', '>= 2.18.1', require: false
 end
 
 group :test do
   gem 'json_matchers', '~> 0.11.1', require: false
-  gem 'simplecov', '~> 0.21.2', require: false
+  gem 'simplecov', '~> 0.22.0', require: false
 end
diff --git a/Gemfile.lock b/Gemfile.lock
@@ -13,41 +13,38 @@ GEM
     daemons (1.4.1)
     diff-lcs (1.5.0)
     docile (1.4.0)
-    dry-container (0.11.0)
-      concurrent-ruby (~> 1.0)
-    dry-core (0.9.1)
+    dry-core (1.0.0)
       concurrent-ruby (~> 1.0)
       zeitwerk (~> 2.6)
-    dry-inflector (0.3.0)
-    dry-logic (1.3.0)
+    dry-inflector (1.0.0)
+    dry-logic (1.5.0)
       concurrent-ruby (~> 1.0)
-      dry-core (~> 0.9, >= 0.9)
+      dry-core (~> 1.0, < 2)
       zeitwerk (~> 2.6)
-    dry-struct (1.5.2)
-      dry-core (~> 0.9, >= 0.9)
-      dry-types (~> 1.6)
+    dry-struct (1.6.0)
+      dry-core (~> 1.0, < 2)
+      dry-types (>= 1.7, < 2)
       ice_nine (~> 0.11)
       zeitwerk (~> 2.6)
-    dry-types (1.6.1)
+    dry-types (1.7.0)
       concurrent-ruby (~> 1.0)
-      dry-container (~> 0.3)
-      dry-core (~> 0.9, >= 0.9)
-      dry-inflector (~> 0.1, >= 0.1.2)
-      dry-logic (~> 1.3, >= 1.3)
+      dry-core (~> 1.0, < 2)
+      dry-inflector (~> 1.0, < 2)
+      dry-logic (>= 1.4, < 2)
       zeitwerk (~> 2.6)
     eventmachine (1.2.7)
     fasterer (0.10.0)
       colorize (~> 0.7)
       ruby_parser (>= 3.19.1)
     ice_nine (0.11.2)
     iniparse (1.5.0)
-    json (2.6.2)
+    json (2.6.3)
     json_matchers (0.11.1)
       json_schema
     json_schema (0.21.0)
     kwalify (0.7.2)
     method_source (1.0.0)
-    net-protocol (0.1.3)
+    net-protocol (0.2.1)
       timeout
     net-smtp (0.3.3)
       net-protocol
@@ -56,59 +53,62 @@ GEM
       iniparse (~> 1.4)
       rexml (~> 3.2)
     parallel (1.22.1)
-    parser (3.1.2.1)
+    parser (3.2.0.0)
       ast (~> 2.4.1)
-    pry (0.14.1)
+    pry (0.14.2)
       coderay (~> 1.1)
       method_source (~> 1.0)
     pry-byebug (3.10.1)
       byebug (~> 11.0)
       pry (>= 0.13, < 0.15)
-    rack (2.2.4)
+    rack (2.2.6.2)
     rack-test (2.0.2)
       rack (>= 1.3)
     rainbow (3.1.1)
-    reek (6.1.1)
+    reek (6.1.4)
       kwalify (~> 0.7.0)
-      parser (~> 3.1.0)
+      parser (~> 3.2.0)
       rainbow (>= 2.0, < 4.0)
-    regexp_parser (2.6.0)
+    regexp_parser (2.6.2)
     rexml (3.2.5)
     rspec (3.12.0)
       rspec-core (~> 3.12.0)
       rspec-expectations (~> 3.12.0)
       rspec-mocks (~> 3.12.0)
     rspec-core (3.12.0)
       rspec-support (~> 3.12.0)
-    rspec-expectations (3.12.0)
+    rspec-expectations (3.12.2)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.12.0)
-    rspec-mocks (3.12.0)
+    rspec-mocks (3.12.3)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.12.0)
     rspec-support (3.12.0)
-    rubocop (1.38.0)
+    rubocop (1.43.0)
       json (~> 2.3)
       parallel (~> 1.10)
-      parser (>= 3.1.2.1)
+      parser (>= 3.2.0.0)
       rainbow (>= 2.2.2, < 4.0)
       regexp_parser (>= 1.8, < 3.0)
       rexml (>= 3.2.5, < 4.0)
-      rubocop-ast (>= 1.23.0, < 2.0)
+      rubocop-ast (>= 1.24.1, < 2.0)
       ruby-progressbar (~> 1.7)
-      unicode-display_width (>= 1.4.0, < 3.0)
-    rubocop-ast (1.23.0)
+      unicode-display_width (>= 2.4.0, < 3.0)
+    rubocop-ast (1.24.1)
       parser (>= 3.1.1.0)
-    rubocop-performance (1.15.0)
+    rubocop-capybara (2.17.0)
+      rubocop (~> 1.41)
+    rubocop-performance (1.15.2)
       rubocop (>= 1.7.0, < 2.0)
       rubocop-ast (>= 0.4.0)
-    rubocop-rspec (2.14.2)
+    rubocop-rspec (2.18.1)
       rubocop (~> 1.33)
+      rubocop-capybara (~> 2.17)
     ruby-progressbar (1.11.0)
-    ruby_parser (3.19.1)
+    ruby_parser (3.19.2)
       sexp_processor (~> 4.16)
     sexp_processor (4.16.1)
-    simplecov (0.21.2)
+    simplecov (0.22.0)
       docile (~> 1.1)
       simplecov-html (~> 0.11)
       simplecov_json_formatter (~> 0.1)
@@ -121,39 +121,39 @@ GEM
       eventmachine (~> 1.0, >= 1.0.4)
       rack (>= 1, < 3)
     thor (1.2.1)
-    timeout (0.3.0)
-    truemail (3.0.1)
+    timeout (0.3.1)
+    truemail (3.0.5)
       simpleidn (~> 0.2.1)
     unf (0.1.4)
       unf_ext
     unf_ext (0.0.8.2)
-    unicode-display_width (2.3.0)
-    zeitwerk (2.6.4)
+    unicode-display_width (2.4.2)
+    zeitwerk (2.6.6)
 
 PLATFORMS
-  x86_64-darwin-20
+  x86_64-darwin-22
 
 DEPENDENCIES
   bundler-audit (~> 0.9.1)
-  dry-struct (~> 1.5, >= 1.5.2)
+  dry-struct (~> 1.6)
   fasterer (~> 0.10.0)
   json_matchers (~> 0.11.1)
   net-smtp (~> 0.3.3)
   overcommit (~> 0.59.1)
   pry-byebug (~> 3.10, >= 3.10.1)
-  rack (~> 2.2, >= 2.2.4)
+  rack (~> 2.2, >= 2.2.6.2)
   rack-test (~> 2.0, >= 2.0.2)
-  reek (~> 6.1, >= 6.1.1)
+  reek (~> 6.1, >= 6.1.4)
   rspec (~> 3.12)
-  rubocop (~> 1.38)
-  rubocop-performance (~> 1.15)
-  rubocop-rspec (~> 2.14, >= 2.14.2)
-  simplecov (~> 0.21.2)
+  rubocop (~> 1.43)
+  rubocop-performance (~> 1.15, >= 1.15.2)
+  rubocop-rspec (~> 2.18, >= 2.18.1)
+  simplecov (~> 0.22.0)
   thin (~> 1.8, >= 1.8.1)
-  truemail (~> 3.0, >= 3.0.1)
+  truemail (~> 3.0, >= 3.0.5)
 
 RUBY VERSION
-   ruby 3.1.2p20
+   ruby 3.2.0p0
 
 BUNDLED WITH
-   2.3.23
+   2.4.4
diff --git a/LICENSE.txt b/LICENSE.txt
@@ -1,6 +1,6 @@
 The MIT License (MIT)
 
-Copyright (c) 2020-2022 Vladislav Trotsenko
+Copyright (c) 2020-2023 Vladislav Trotsenko
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

diff --git a/README.md b/README.md
@@ -38,7 +38,7 @@
 - One endpoint for email validation with token-based authentication
 - No DB usage
 
-## Intallation
+## Installation
 
     $ git clone https://github.com/truemail-rb/truemail-rack.git
 

diff --git a/app/truemail_server/version.rb b/app/truemail_server/version.rb
@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module TruemailServer
-  VERSION = '0.5.0'
+  VERSION = '0.6.0'
 end