v1.1.7

1.1.7 - 2026-06-15

• TAG: v1.1.7
• COVERAGE: 88.32% -- 839/950 lines in 33 files
• BRANCH COVERAGE: 58.67% -- 159/271 branches in 33 files
• 40.38% documented

Changed

• Retemplated repository metadata, workflows, modular gemfiles, documentation
  scaffolding, version_gem >= 1.1.12, and templating-isolated local workspace
  Gemfile wiring with the current kettle-jem template.

• Raised the auth-sanitizer runtime dependency floor to >= 0.2.1, so OAuth
  consumers get hash and nested-attribute inspect redaction fixes plus
  downstream RBS duplicate-declaration fixes.

• Raised the oauth-tty runtime dependency floor to >= 1.0.9.

• Raised the oauth-tty runtime dependency floor to >= 1.0.10, removing
  the transitive external cgi runtime dependency for Ruby 2.4 consumers.

Fixed

• Restored docs/CNAME so the generated documentation site keeps its custom domain.

• Pinned older Ruby appraisals to Rack 2.2 so rack-test remains compatible
  with the Ruby 2.4, Ruby 2.5, and JRuby 9.2 CI jobs.

• Derived an RSA public key from PEM private-key strings before signature
  verification, matching JRuby OpenSSL behavior while preserving RSA-SHA1
  verification semantics.

• Removed the external cgi runtime dependency because the only cgi gem
  releases installable on Ruby 2.4 call String#delete_prefix, which is
  unavailable on Ruby 2.4.

• Removed the external erb dependency from the Ruby 2.4 appraisal because
  Ruby 2.4 already provides ERB and the released erb gem depends on external
  cgi.

• Added a private-key-backed RSA-SHA1 verification fallback for JRuby OpenSSL
  versions that raise OpenSSL::PKey::PKeyError during public-key
  verification.

Official Discord 👉️

Many paths lead to being a sponsor or a backer of this project. Are you on such a path?