mrjoy-0.2.1 / 2013-09-13

  • Integrate upstream changes from 0.2.0, with local changes from 0.1.4.
  • Make specs automatically refresh .gitignore'd Gemfile.lock in spec scenarios when the Gemfile has changed in a way that bundle install isn't happy about (e.g. version bump on a gem previously listed in the Gemfile.)

0.2.0 / 2013-03-05

  • Require RubyGems >= 1.8.0. Prior versions of RubyGems could not correctly parse approximate version requirements (~> 1.2.3).
  • Updated the ruby-advisory-db.
  • Added Bundle::Audit::Advisory#unaffected_versions.
  • Added Bundle::Audit::Advisory#unaffected?.
  • Added Bundle::Audit::Advisory#patched?.
  • Renamed Advisory#cve to Bundle::Audit::Advisory#id.

mrjoy-0.1.4 / 2013-08-15

  • RVM compartmentalization for the project (only relevant to people hacking on it).
  • Adding Ruby 2.0.0 to Travis config.
  • Updated the ruby-advisory-db from ffce5a2 to ee2ff0b.
  • Update Advisory class to compensate for change in naming convention in ruby-advisory-db.
  • Make some tests less brittle, and get them passing again after the ruby-advisory-db update.
  • Add ability for individual spec files to be called individually.
  • Rename gem so this can be installed via Rubygems.

mrjoy-0.1.3 / 2013-03-05

  • Require RubyGems >= 1.8.0. Prior versions of RubyGems could not correctly parse approximate version requirements (~> 1.2.3).
  • Updated the ruby-advisory-db.
  • Added Bundle::Audit::Advisory#unaffected_versions.
  • Added Bundle::Audit::Advisory#unaffected?.
  • Added Bundle::Audit::Advisory#patched?.

0.1.2 / 2013-02-17

CLI

  • Simply parse the Gemfile.lock instead of loading the bundle (@grosser).
  • Exit with non-zero status on failure (@grosser).

0.1.1 / 2013-02-12

  • Fixed a Ruby 1.8 syntax error.

Advisories

CLI

  • If the advisory has no patched_versions, recommend removing or disabling the gem until a patch is made available.

0.1.0 / 2013-02-11

  • Initial release:
    • Checks for vulnerable versions of gems in Gemfile.lock.
    • Prints advisory information.
    • Does not require a network connection.

Advisories