🔒 Security Fixes
- CRITICAL:
- Fixed regex anchor vulnerability in UUID/ULID validators
- Fixed action_text-trix XSS vulnerability (updated to >= 2.1.16)
⚡ Performance Improvements
- Extract regex patterns to frozen constants (
UUID_PATTERN, ULID_PATTERN)
- Cache Ruby version check in
V7_AVAILABLE constant
- Add lazy loading with
ActiveSupport.on_load(:active_record) hook
- Memoize primary key type detection in migrations
✨ Improvements
- Eager configuration validation: Setting
uuid_version = :v7 on Ruby < 3.3 now fails at boot time with clear error message
- Namespace cleanup:
uuid and ulid schema helpers now scoped to ActiveRecord::Schema instead of global Object
🗑️ Removed
- Unused
SqliteCrypto::Error class
- Unused
SqliteCrypto.load_extensions placeholder method
📦 Upgrade
bundle update sqlite_crypto
