Skip to content

fix: relax json pin restriction to minor, not patch revision#138

Open
YOU54F wants to merge 1 commit into
masterfrom
fix/json-deps
Open

fix: relax json pin restriction to minor, not patch revision#138
YOU54F wants to merge 1 commit into
masterfrom
fix/json-deps

Conversation

@YOU54F

@YOU54F YOU54F commented Jan 9, 2026

Copy link
Copy Markdown
Member

Hey @impurist,

This following commit pins json to a json's patch version, could we relax it to patch so that we can use the latest json gem in the pact-docker-cli

6da53f5

pact-docker-cli fails to update, as it requires -> 2.18

https://github.com/pact-foundation/pact-docker-cli/actions/runs/20855919023/job/59922394460

Thank you!

PS. the restriction is too strict for pact-standalone, which currently uses standard gems from ruby 3.3.9. of which json is 2.7.2, that can be resolved, by using native extensions which I've recently built for all platforms (windows support is new), which is why previously we had to pin to std gems to avoid building native extensions

@bryan-ash

Copy link
Copy Markdown

@YOU54F we'd love to see this merged. json currently has a CVE that we cannot patch.

@YOU54F
YOU54F requested a review from impurist July 6, 2026 16:37
@YOU54F

YOU54F commented Jul 6, 2026

Copy link
Copy Markdown
Member Author

Hey @bryan-ash, let me check up on it.

Hey @impurist - Could you cast your eyes on this please, if your happy, I'll cut a release.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants