From 992f060ddf3714db10fabbf4d560ba71b1abd48b Mon Sep 17 00:00:00 2001 From: Kenyon Ralph Date: Wed, 23 Jul 2025 01:08:57 -0700 Subject: [PATCH] thor: require 1.4 or newer Thor 1.4.0 resolves a security issue: https://github.com/rails/thor/pull/897 Related: https://github.com/voxpupuli/modulesync/pull/309 --- ext/project_data.yaml | 2 +- openfact.gemspec | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/ext/project_data.yaml b/ext/project_data.yaml index bbd94f287..70cb0a6e8 100644 --- a/ext/project_data.yaml +++ b/ext/project_data.yaml @@ -15,4 +15,4 @@ gem_default_executables: 'facter' gem_required_ruby_version: ['>= 2.5', '< 4.0'] gem_runtime_dependencies: hocon: ~> 1.3 - thor: ['>= 1.0.1', '< 1.3'] + thor: ~> 1.4 diff --git a/openfact.gemspec b/openfact.gemspec index 31b0a0d0d..78c9b1c2a 100644 --- a/openfact.gemspec +++ b/openfact.gemspec @@ -49,5 +49,5 @@ Gem::Specification.new do |spec| spec.add_runtime_dependency 'base64', '>= 0.1', '< 0.4' spec.add_runtime_dependency 'hocon', '~> 1.3' spec.add_runtime_dependency 'logger', '~> 1.7' - spec.add_runtime_dependency 'thor', ['>= 1.0.1', '< 2'] + spec.add_runtime_dependency 'thor', '~> 1.4' end