- Require RubyGems >= 1.8.0. Prior versions of RubyGems could not correctly
parse approximate version requirements (
~> 1.2.3
). - Updated the ruby-advisory-db.
- Added {Bundle::Audit::Advisory#unaffected_versions}.
- Added {Bundle::Audit::Advisory#unaffected?}.
- Added {Bundle::Audit::Advisory#patched?}.
- Require bundler ~> 1.2.
- Vendor a full copy of the ruby-advisory-db.
- Added {Bundler::Audit::Advisory#path} for debugging purposes.
- Added {Bundler::Audit::Advisory#to_s} for debugging purposes.
- Simply parse the
Gemfile.lock
instead of loading the bundle (@grosser). - Exit with non-zero status on failure (@grosser).
- Fixed a Ruby 1.8 syntax error.
- Imported advisories from the Ruby Advisory DB.
- If the advisory has no
patched_versions
, recommend removing or disabling the gem until a patch is made available.
- Initial release:
- Checks for vulnerable versions of gems in
Gemfile.lock
. - Prints advisory information.
- Does not require a network connection.
- Checks for vulnerable versions of gems in