goshippo / shippo-ruby-client

Shipping API Ruby library (USPS, FedEx, UPS and more)
https://goshippo.com/docs/
76 stars 72 forks source link

relax json dependency to allow CVE fix in 2.3.0 #97

Closed axlekb closed 4 years ago

axlekb commented 4 years ago

Fixes https://github.com/goshippo/shippo-ruby-client/issues/96

oehlschl commented 4 years ago

FYI, I think this issue was resolved in master with the introduction of v4.0. (See #90)

I think that's the recommended upgrade path. (See #96 for where another conversation about this was had.)