Skip to content

v3.0.0.rc4

Pre-release
Pre-release

Choose a tag to compare

View all tags
@SeanLF SeanLF released this 13 Jul 15:33
· 51 commits to main since this release
v3.0.0.rc4
1286676
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Prerelease. Three SARIF / GitHub Code Scanning fixes on top of rc3. Install with gem install still_active --pre; the latest tag stays on 2.0.0, so plain installs are unaffected.

Fixed

  • Cross-ecosystem SARIF no longer reads as a Ruby audit (#146). The --sbom path emitted the native Gemfile audit's Ruby-worded rule catalog, so a Go/npm/pypi repo's Code Scanning alerts were titled "Gem source repository is archived", advised bundle update <gem>, and cited Gemfile.lock/RubyGems. Rule wording is now ecosystem-neutral on the SBOM path (the native Gemfile output is unchanged), and a latent ruleIndex mismatch was fixed along the way.
  • tool.driver.version is now populated (#147). It was null, so a consumer reading version rather than semanticVersion saw nothing.
  • tool.driver.semanticVersion is now valid SemVer 2.0.0 (#148). It carried the RubyGems version verbatim (3.0.0.rc4), which is not valid SemVer for a prerelease; it now renders as 3.0.0-rc4, while version keeps the free-form gem version.

Full changelog: https://github.com/SeanLF/still_active/blob/main/CHANGELOG.md

Assets 2
Loading