Skip to content

Conversation

@jasnow
Copy link
Contributor

@jasnow jasnow commented Jan 1, 2026

GHSA SYNC: Added ghsa field/value to 1 advisory

FYI: Do them one at a time until I catch up.

@jasnow
Copy link
Contributor Author

jasnow commented Jan 1, 2026

Appears that the gem kwalify does not work with Ruby 4.0. Will research.

@jasnow
Copy link
Contributor Author

jasnow commented Jan 1, 2026

@postmodern - Appears that ruby/setup-ruby@v1 inside .github/workflows/ruby.yml is defaulting to Ruby 4.0.0.
Ruby 3.4.8 works for now.

Copy link
Member

@postmodern postmodern left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have pinned the CI Ruby version to 3.4 until Kwalify is fixed; or we decide to replace/remove it. You can remove the last two commits that fixes the CI and rebase against the master branch.

Removed StringScanner class and its peep method.
@postmodern postmodern merged commit f5eede9 into rubysec:master Jan 8, 2026
1 check passed
@jasnow jasnow deleted the ghsa-syncbot-2026-01-01-09_28_58 branch January 8, 2026 20:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants