kotovalexarian-likes-github/rest-client--rest-client
1
0
Fork 0
mirror of https://github.com/rest-client/rest-client.git synced 2022-11-09 13:49:40 -05:00
Code Releases Activity

Import history notes for latest 1.6.x releases.

Browse source
This commit is contained in:
Andy Brody 2019-08-21 18:47:04 -04:00 committed by Andy Brody
parent 3a54b05d11
commit 223f6ead5e
1 changed files with 18 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
history.md
View file

@ -1,8 +1,8 @@
# 2.1.0.rc1 # 2.1.0.rc1
- Add a dependency on http-accept for parsing Content-Type charset headers. - Add a dependency on http-accept for parsing Content-Type charset headers.
This works around a bad memory leak introduced in Ruby 2.4.x (the leak is This works around a bad memory leak introduced in MRI Ruby 2.4.0 and fixed in
probably a bug in MRI). (#615) Ruby 2.4.2. (#615)
- Use mime/types/columnar from mime-types 2.6.1+, which is leaner in memory - Use mime/types/columnar from mime-types 2.6.1+, which is leaner in memory
usage than the older storage model of mime-types. (#393) usage than the older storage model of mime-types. (#393)
- Add `:log` option to individual requests. This allows users to set a log on a - Add `:log` option to individual requests. This allows users to set a log on a
@ -216,6 +216,22 @@ release:
- Disable timeouts with :timeout => nil rather than :timeout => -1 - Disable timeouts with :timeout => nil rather than :timeout => -1
- Drop all Net::HTTP monkey patches - Drop all Net::HTTP monkey patches
# 1.6.14
- This release is unchanged from 1.6.9. It was published in order to supersede
the malicious 1.6.10-13 versions, even for users who are still pinning to the
legacy 1.6.x series. All users are encouraged to upgrade to rest-client 2.x.
# 1.6.10, 1.6.11, 1.6.12, 1.6.13 (CVE-2019-15224)
- These versions were pushed by a malicious actor and included a backdoor permitting
remote code execution in Rails environments. (#713)
- They were live for about five days before being yanked.
# 1.6.9
- Move rdoc to a development dependency
# 1.6.8 # 1.6.8
- The 1.6.x series will be the last to support Ruby 1.8.7 - The 1.6.x series will be the last to support Ruby 1.8.7