rubyforgood / Flaredown

Flaredown web app and API
http://www.flaredown.com
GNU General Public License v3.0
39 stars 15 forks source link

Upgrade symmetric-encryption gem & bundler #732

Closed haydenrou closed 5 months ago

haydenrou commented 6 months ago

This PR:

*After our upgrade to Ruby 3.1.3, we require an upgrade to the symmetric-encryption gem (in an ideal world we may look for an alternative, since it's reasonably unmaintained - the last commit was 2 years ago). The reason for this was that Ruby 3.1 uses Psych 4.0, which has a breaking change when loading YAML in certain ways, see: https://bugs.ruby-lang.org/issues/17866 Version 4.5 of symmetric-encryption fixes this issue with this commit https://github.com/reidmorrison/symmetric-encryption/commit/6a60abc6d25373966e7a2b5571e0622fd5dff4dd , but I've upgraded to the latest version regardless, as it seems safe.

Closes #733