diff --git a/CHANGELOG.md b/CHANGELOG.md index 7312e4d61..0ba8d048f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,9 +4,10 @@ - Prevent admins from leaving their dedicated group - Faraday was downgraded from 1.0 to 0.17 for better compatibility with elasticsearch-ruby 5 (#205 #196) - Added an option to allow usage in production without HTTPS +- Now using node.js instead of therubyracer for building javascript assets - Fix a bug: when an admin logs on the subscription page, his view is broken - Fix a bug: admin's members list shows the same members multiple times -- Fix a security issue: updated actionpack-page_caching from 1.1.0 to 1.2.1 to fix [CVE-2020-8159](https://nvd.nist.gov/vuln/detail/CVE-2020-8159) +- Fix a security issue: updated actionpack-page_caching from 1.1.0 to 1.2.2 to fix [CVE-2020-8159](https://nvd.nist.gov/vuln/detail/CVE-2020-8159) ## v4.4.1 2020 May 12 diff --git a/Gemfile b/Gemfile index b41b8ca29..3eb93aaca 100644 --- a/Gemfile +++ b/Gemfile @@ -121,7 +121,7 @@ gem 'pundit' gem 'oj' -gem 'actionpack-page_caching', '1.2.1' +gem 'actionpack-page_caching', '1.2.2' gem 'rails-observers' gem 'chroma' diff --git a/Gemfile.lock b/Gemfile.lock index dbb074ebc..486eaf098 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -39,7 +39,7 @@ GEM rack-test (>= 0.6.3) rails-dom-testing (~> 2.0) rails-html-sanitizer (~> 1.0, >= 1.0.2) - actionpack-page_caching (1.2.1) + actionpack-page_caching (1.2.2) actionpack (>= 5.0.0) actionview (5.2.4.2) activesupport (= 5.2.4.2) @@ -458,7 +458,7 @@ PLATFORMS DEPENDENCIES aasm - actionpack-page_caching (= 1.2.1) + actionpack-page_caching (= 1.2.2) active_record_query_trace api-pagination apipie-rails