Skip to content

Bump carrierwave from 2.0.2 to 2.1.1

NipaNipa requested to merge dependabot/bundler/carrierwave-2.1.1 into master

Bumps carrierwave from 2.0.2 to 2.1.1.

Changelog

Sourced from carrierwave's changelog.

2.1.1 - 2021-02-08

Security

2.1.0 - 2020-02-16

Added

Fixed

  • Fix Ruby 2.7 deprecations(@​mshibuya 9a37fc9e)
  • Fix S3 path-style URL for host with dots for buckets that are placed in other regions than us-east-1(@​Bonias #2439)
  • Make MiniMagick::Image constant absolute to prevent misleading 'uninitialized constant' error(@​p8 #2437)
Commits
  • 003e2ce Version 2.1.1
  • 15bcf8d Fix Code Injection vulnerability in CarrierWave::RMagick
  • e0f79e3 Fix SSRF vulnerability in the remote file download feature
  • 3356634 Version 2.1.0
  • 8964775 Merge pull request #2444 from inkoop/backblaze-private-bucket-support
  • 9a37fc9 Test against Ruby 2.7
  • 3dfacea backblaze authenticated_url spec added
  • caf9018 merged master
  • e39194f Merge pull request #2438 from jaredbeck/patch-2
  • 21a0061 Merge pull request #2439 from Bonias/aws-use-proper-region-for-path-style-url
  • Additional commits viewable in compare view

Merge request reports