From 3403d7f0efee931a36827d332ad05cf982aeeb9c Mon Sep 17 00:00:00 2001 From: Derek Prior Date: Mon, 26 Sep 2016 22:20:33 -0400 Subject: [PATCH] v1.15.0 --- Gemfile.lock | 82 ++++++++++++++++++++-------------------- NEWS.md | 9 +++++ lib/clearance/version.rb | 2 +- 3 files changed, 52 insertions(+), 41 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index 945e8d271..f8f03b9f0 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -1,7 +1,7 @@ PATH remote: . specs: - clearance (1.14.2) + clearance (1.15.0) bcrypt email_validator (~> 1.4) rails (>= 3.1) @@ -9,36 +9,36 @@ PATH GEM remote: https://rubygems.org/ specs: - actionmailer (4.2.6) - actionpack (= 4.2.6) - actionview (= 4.2.6) - activejob (= 4.2.6) + actionmailer (4.2.7.1) + actionpack (= 4.2.7.1) + actionview (= 4.2.7.1) + activejob (= 4.2.7.1) mail (~> 2.5, >= 2.5.4) rails-dom-testing (~> 1.0, >= 1.0.5) - actionpack (4.2.6) - actionview (= 4.2.6) - activesupport (= 4.2.6) + actionpack (4.2.7.1) + actionview (= 4.2.7.1) + activesupport (= 4.2.7.1) rack (~> 1.6) rack-test (~> 0.6.2) rails-dom-testing (~> 1.0, >= 1.0.5) rails-html-sanitizer (~> 1.0, >= 1.0.2) - actionview (4.2.6) - activesupport (= 4.2.6) + actionview (4.2.7.1) + activesupport (= 4.2.7.1) builder (~> 3.1) erubis (~> 2.7.0) rails-dom-testing (~> 1.0, >= 1.0.5) rails-html-sanitizer (~> 1.0, >= 1.0.2) - activejob (4.2.6) - activesupport (= 4.2.6) + activejob (4.2.7.1) + activesupport (= 4.2.7.1) globalid (>= 0.3.0) - activemodel (4.2.6) - activesupport (= 4.2.6) + activemodel (4.2.7.1) + activesupport (= 4.2.7.1) builder (~> 3.1) - activerecord (4.2.6) - activemodel (= 4.2.6) - activesupport (= 4.2.6) + activerecord (4.2.7.1) + activemodel (= 4.2.7.1) + activesupport (= 4.2.7.1) arel (~> 6.0) - activesupport (4.2.6) + activesupport (4.2.7.1) i18n (~> 0.7) json (~> 1.7, >= 1.7.7) minitest (~> 5.1) @@ -75,7 +75,7 @@ GEM factory_girl_rails (4.7.0) factory_girl (~> 4.7.0) railties (>= 3.0.0) - globalid (0.3.6) + globalid (0.3.7) activesupport (>= 4.1.0) i18n (0.7.0) json (1.8.3) @@ -84,13 +84,15 @@ GEM mail (2.6.4) mime-types (>= 1.16, < 4) method_source (0.8.2) - mime-types (3.0) + mime-types (3.1) mime-types-data (~> 3.2015) - mime-types-data (3.2016.0221) - mini_portile2 (2.0.0) - minitest (5.8.4) - nokogiri (1.6.7.2) - mini_portile2 (~> 2.0.0.rc2) + mime-types-data (3.2016.0521) + mini_portile2 (2.1.0) + minitest (5.9.1) + nokogiri (1.6.8) + mini_portile2 (~> 2.1.0) + pkg-config (~> 1.1.7) + pkg-config (1.1.7) pry (0.10.3) coderay (~> 1.1.0) method_source (~> 0.8.1) @@ -98,16 +100,16 @@ GEM rack (1.6.4) rack-test (0.6.3) rack (>= 1.0) - rails (4.2.6) - actionmailer (= 4.2.6) - actionpack (= 4.2.6) - actionview (= 4.2.6) - activejob (= 4.2.6) - activemodel (= 4.2.6) - activerecord (= 4.2.6) - activesupport (= 4.2.6) + rails (4.2.7.1) + actionmailer (= 4.2.7.1) + actionpack (= 4.2.7.1) + actionview (= 4.2.7.1) + activejob (= 4.2.7.1) + activemodel (= 4.2.7.1) + activerecord (= 4.2.7.1) + activesupport (= 4.2.7.1) bundler (>= 1.3.0, < 2.0) - railties (= 4.2.6) + railties (= 4.2.7.1) sprockets-rails rails-deprecated_sanitizer (1.0.3) activesupport (>= 4.2.0.alpha) @@ -117,12 +119,12 @@ GEM rails-deprecated_sanitizer (>= 1.0.1) rails-html-sanitizer (1.0.3) loofah (~> 2.0) - railties (4.2.6) - actionpack (= 4.2.6) - activesupport (= 4.2.6) + railties (4.2.7.1) + actionpack (= 4.2.7.1) + activesupport (= 4.2.7.1) rake (>= 0.8.7) thor (>= 0.18.1, < 2.0) - rake (11.1.2) + rake (11.3.0) rspec-core (3.4.4) rspec-support (~> 3.4.0) rspec-expectations (3.4.0) @@ -143,10 +145,10 @@ GEM shoulda-matchers (2.8.0) activesupport (>= 3.0.0) slop (3.6.0) - sprockets (3.6.0) + sprockets (3.7.0) concurrent-ruby (~> 1.0) rack (> 1, < 3) - sprockets-rails (3.0.4) + sprockets-rails (3.2.0) actionpack (>= 4.0) activesupport (>= 4.0) sprockets (>= 3.0.0) diff --git a/NEWS.md b/NEWS.md index 38a9bbba0..9ab3d5e89 100644 --- a/NEWS.md +++ b/NEWS.md @@ -3,6 +3,15 @@ The noteworthy changes for each Clearance version are included here. For a complete changelog, see the git history for each version via the version links. +## [1.15.0] - September 26, 2016 + +### Security +- Prevent possible password reset token leak to external sites linked to on the + password reset page. See [PR #707] for more information. + +[PR #707]: https://github.com/thoughtbot/clearance/pull/707 +[1.15.0]: https://github.com/thoughtbot/clearance/compare/v1.14.2...v1.15.0 + ## [1.14.2] - August 10, 2016 ### Fixed diff --git a/lib/clearance/version.rb b/lib/clearance/version.rb index ba851321b..e702abb2b 100644 --- a/lib/clearance/version.rb +++ b/lib/clearance/version.rb @@ -1,3 +1,3 @@ module Clearance - VERSION = "1.14.2".freeze + VERSION = "1.15.0".freeze end