Skip to content

fix: relax json pin restriction to minor, not patch revision#138

Merged
YOU54F merged 1 commit into
masterfrom
fix/json-deps
Jul 21, 2026
Merged

fix: relax json pin restriction to minor, not patch revision#138
YOU54F merged 1 commit into
masterfrom
fix/json-deps

Conversation

@YOU54F

@YOU54F YOU54F commented Jan 9, 2026

Copy link
Copy Markdown
Member

Hey @impurist,

This following commit pins json to a json's patch version, could we relax it to patch so that we can use the latest json gem in the pact-docker-cli

6da53f5

pact-docker-cli fails to update, as it requires -> 2.18

https://github.com/pact-foundation/pact-docker-cli/actions/runs/20855919023/job/59922394460

Thank you!

PS. the restriction is too strict for pact-standalone, which currently uses standard gems from ruby 3.3.9. of which json is 2.7.2, that can be resolved, by using native extensions which I've recently built for all platforms (windows support is new), which is why previously we had to pin to std gems to avoid building native extensions

@bryan-ash

Copy link
Copy Markdown

@YOU54F we'd love to see this merged. json currently has a CVE that we cannot patch.

@YOU54F
YOU54F requested a review from impurist July 6, 2026 16:37
@YOU54F

YOU54F commented Jul 6, 2026

Copy link
Copy Markdown
Member Author

Hey @bryan-ash, let me check up on it.

Hey @impurist - Could you cast your eyes on this please, if your happy, I'll cut a release.

@YOU54F

YOU54F commented Jul 21, 2026

Copy link
Copy Markdown
Member Author

Now removing the introduced json dep from #118

@YOU54F
YOU54F merged commit 21ad8d7 into master Jul 21, 2026
24 checks passed
@YOU54F
YOU54F deleted the fix/json-deps branch July 21, 2026 09:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants