search

usabilityhub / rails-erb-loader

Embedded Ruby (.erb) webpack loader for Ruby projects.
MIT License
103 stars 28 forks source link

Please, craft a new release! #115

Open texpert opened 2 years ago

texpert commented 2 years ago

3 years since last release.

Although most changes are dependencies updated and some documentation changes, a minor version bump would be great!

PikachuEXE commented 2 years ago

I don't have access so I can't do it

rhys-vdw commented 2 years ago

Oh sorry. I think that's me?

texpert commented 2 years ago

Yep, @rhys-vdw , it would be great, if you please!

rhys-vdw commented 2 years ago

@texpert it looks like we are reluctant to do a release due to a lack of bandwidth to properly review the package. Our position is that we would like to donate the project to Rails org if possible. @PikachuEXE are you in a position to follow up on this?

rhys-vdw commented 2 years ago

For now you can simply depend on the GitHub package in your package.json or vendor it into your codebase if you're not happy with that approach, @texpert.

PikachuEXE commented 2 years ago

Since rails 7 use import map now. I am not sure if they would accept it. Easier to create an organization, move this project into it, add people to manage it. But yes for now @texpert please just point to the GitHub repo until we figure out how we handle this project's future.

Eusebius1920 commented 1 year ago

~There is a ciritical CVE caused by loader-utils:~

https://github.com/advisories/GHSA-76p3-8jx3-jpfq

~The affected version is used by the current package-version, but is fixed in master:~ 37cb03953ec232022cfd9e70d05dd37b24a57c16

~So releasing a new version got a little more urgent.~

Edit: A patched version of legacy loader-utils (1.4.1) was released, so this is no longer true

Regarding organisation: Maybe you can team up with the guys from shakacode? They took over webpacker and are activley maintaining it as "shakapacker".