1.1.7 - 2026-06-15
- TAG: v1.1.7
- COVERAGE: 88.32% -- 839/950 lines in 33 files
- BRANCH COVERAGE: 58.67% -- 159/271 branches in 33 files
- 40.38% documented
Changed
-
Retemplated repository metadata, workflows, modular gemfiles, documentation
scaffolding,version_gem>= 1.1.12, and templating-isolated local workspace
Gemfile wiring with the currentkettle-jemtemplate. -
Raised the
auth-sanitizerruntime dependency floor to>= 0.2.1, so OAuth
consumers get hash and nested-attribute inspect redaction fixes plus
downstream RBS duplicate-declaration fixes. -
Raised the
oauth-ttyruntime dependency floor to>= 1.0.9. -
Raised the
oauth-ttyruntime dependency floor to>= 1.0.10, removing
the transitive externalcgiruntime dependency for Ruby 2.4 consumers.
Fixed
-
Restored
docs/CNAMEso the generated documentation site keeps its custom domain. -
Pinned older Ruby appraisals to Rack 2.2 so
rack-testremains compatible
with the Ruby 2.4, Ruby 2.5, and JRuby 9.2 CI jobs. -
Derived an RSA public key from PEM private-key strings before signature
verification, matching JRuby OpenSSL behavior while preserving RSA-SHA1
verification semantics. -
Removed the external
cgiruntime dependency because the onlycgigem
releases installable on Ruby 2.4 callString#delete_prefix, which is
unavailable on Ruby 2.4. -
Removed the external
erbdependency from the Ruby 2.4 appraisal because
Ruby 2.4 already provides ERB and the releasederbgem depends on external
cgi. -
Added a private-key-backed RSA-SHA1 verification fallback for JRuby OpenSSL
versions that raiseOpenSSL::PKey::PKeyErrorduring public-key
verification.
Many paths lead to being a sponsor or a backer of this project. Are you on such a path?