Skip to content

Update thor version #76

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft

Mathiyarasy wants to merge 1 commit into main

from dev/Mathi/thor

Draft

Update thor version #76

Mathiyarasy wants to merge 1 commit into main from dev/Mathi/thor

+5 −1

Conversation

Copy link

@Mathiyarasy Mathiyarasy commented Jul 22, 2025

Fixes : https://github.com/github/codespaces-rails/security/dependabot/73

Changes:

Updated thor to patched version 1.4.0


 Update thor version

fcbe315

@Mathiyarasy Mathiyarasy marked this pull request as ready for review

July 22, 2025 12:01

Copilot AI review requested due to automatic review settings

July 22, 2025 12:01

Copilot AI reviewed

View reviewed changes

Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR addresses a security vulnerability by updating the Thor gem to version 1.4.0 or higher, as identified by Dependabot security alert #73.

Adds an explicit version constraint for the thor gem to ensure the patched version 1.4.0 or higher is used
Includes a comment explaining the security fix rationale

@Mathiyarasy Mathiyarasy marked this pull request as draft

July 22, 2025 12:03

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

1 participant