ruby-changelog
ruby-changelog copied to clipboard
Update all Ruby Releases + CVE information
This is just before the upcoming 3.4 release in a few days.
A few notes:
-
The CVE -> Ruby mapping not perfect. For example, https://github.com/ruby/ruby/releases/tag/v3_3_5 notes a [ReXML backport](Bug #20667: Backport REXML CVE fixes), which fixes CVE-2024-43398 with a version bump on rexml. However, it doesn't show up for us.
-
With higher frequency of patch releases, the timeline view doesn't show most patch releases, except the latest
-
I did not find any noteworthy feature additions or internal changes in the added releases, so there are no additional comments.
These are the releases I added:
- 3.3.4
- 3.3.5
- 3.3.6
- 3.2.5
- 3.2.6
- 2.7.8
I'll file a separate PR for 3.4 once it lands.
Could this be merged?
Hi @captn3m0, thanks for the pull request and apologies for not getting back. I'll check your PR this week.