gala
gala copied to clipboard
Remove `openssl` dep constraint
Your explicit pin to openssl 3.1.0 prevents any upgrade of this gem to pick up bug/CVE/exploit fixes. Are there really such exotic things that gala is doing which require such an extreme approach as pinning a stdlib?
@DeeMeyers could we please get this pin for openssl removed?
Hey @fz-ryanbigg @smathy - we are not actively maintaining this project, but I have circulated this request internally to see if any team has ownership or capacity to support the requested changes. Candidly, forking might be the best option if you prefer to continue using this tool.