Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Changelog for 1.2.2 (#378) #387

Merged
merged 1 commit into from Mar 21, 2019
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
37 changes: 37 additions & 0 deletions Changelog.md
@@ -1,3 +1,40 @@
1.2.2
=====

* Expand from root rather than current working directory
* Disable symlinks and check for path traversal
* Consolidate path traversal tests
* Add jwilk's path traversal tests
* Trigger CI again
* Move jruby to allow failures matrix till crc uint 32 issues are resolved
* Fix CVE-2018-1000544 symlink path traversal
* Fix CVE-2018-1000544 absolute path traversal
* Fix jruby version
* When globbing in ZipFSDir, take CWD into account.
* Pass glob through from ZipFileNameMapper.
* Turn off all terminal output in all tests.
* Handle stored files with general purpose bit 3 set
* Fix regression caused by Rubocop cleanup
* Added fix for calling 'close' on a StringIO-backed zip file, and specs
* Bump Ruby versions on Travis CI
* Travis: Typo
* Travis: Workaround a rbx-3 autoload issue
* CI against Ruby 2.2.8, 2.3.5, and 2.4.2
* Travis: typo
* Travis: Try using rbx-3
* Travis: update RubyGems
* Travis: drop oraclejdk-7
* Travis: use JRUBY_OPTS="--debug"
* Travis: use pre-installed Travis rubies
* README: Use a blockquote to make text readable
* add option to force entry names encoding
* Make naming on README more consistent
* Apply automatic correction by rubocop
* Disable Style/MutableConstant because existent code relies on it
* Add rubocop dependency and correct settings
* Save temporary files to a temporary directory
* File.join() is our friend for joining paths

1.2.1
=====

Expand Down