attr_encrypted.gemspec in attr_encrypted-2.0.0 vs attr_encrypted.gemspec in attr_encrypted-3.0.0
- old
+ new
@@ -26,11 +26,11 @@
s.files = `git ls-files`.split("\n")
s.test_files = `git ls-files -- test/*`.split("\n")
s.required_ruby_version = '>= 2.0.0'
- s.add_dependency('encryptor', ['~> 2.0.0'])
+ s.add_dependency('encryptor', ['~> 3.0.0'])
# support for testing with specific active record version
activerecord_version = if ENV.key?('ACTIVERECORD')
"~> #{ENV['ACTIVERECORD']}"
else
'>= 2.0.0'
@@ -53,8 +53,11 @@
s.add_development_dependency("codeclimate-test-reporter")
s.cert_chain = ['certs/saghaulor.pem']
s.signing_key = File.expand_path("~/.ssh/gem-private_key.pem") if $0 =~ /gem\z/
- s.post_install_message = "\n\n\nWARNING: Several insecure default options and features have been deprecated in attr_encrypted v2.0.0. Please see the README for more details.\n\n\n"
+ s.post_install_message = "\n\n\nWARNING: Several insecure default options and features were deprecated in attr_encrypted v2.0.0.\n
+Additionally, there was a bug in Encryptor v2.0.0 that insecurely encrypted data when using an AES-*-GCM algorithm.\n
+This bug was fixed but introduced breaking changes between v2.x and v3.x.\n
+Please see the README for more information regarding upgrading to attr_encrypted v3.0.0.\n\n\n"
end