Skip to content

GHSA SYNC: Added ghsa field/value to 1 advisory#945

Merged
postmodern merged 4 commits into
rubysec:masterfrom
jasnow:ghsa-syncbot-2026-01-01-09_28_58
Jan 8, 2026
Merged

GHSA SYNC: Added ghsa field/value to 1 advisory#945
postmodern merged 4 commits into
rubysec:masterfrom
jasnow:ghsa-syncbot-2026-01-01-09_28_58

Conversation

@jasnow

@jasnow jasnow commented Jan 1, 2026

Copy link
Copy Markdown
Member

GHSA SYNC: Added ghsa field/value to 1 advisory

FYI: Do them one at a time until I catch up.

@jasnow

jasnow commented Jan 1, 2026

Copy link
Copy Markdown
Member Author

Appears that the gem kwalify does not work with Ruby 4.0. Will research.

@jasnow

jasnow commented Jan 1, 2026

Copy link
Copy Markdown
Member Author

@postmodern - Appears that ruby/setup-ruby@v1 inside .github/workflows/ruby.yml is defaulting to Ruby 4.0.0.
Ruby 3.4.8 works for now.

@postmodern postmodern left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have pinned the CI Ruby version to 3.4 until Kwalify is fixed; or we decide to replace/remove it. You can remove the last two commits that fixes the CI and rebase against the master branch.

Removed StringScanner class and its peep method.
@postmodern postmodern merged commit f5eede9 into rubysec:master Jan 8, 2026
1 check passed
@jasnow jasnow deleted the ghsa-syncbot-2026-01-01-09_28_58 branch January 8, 2026 20:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants