Skip to content

Release v5.20.0#746

Merged
arpit-jn merged 1 commit into
masterfrom
release/v5.20.0
May 29, 2026
Merged

Release v5.20.0#746
arpit-jn merged 1 commit into
masterfrom
release/v5.20.0

Conversation

@arpit-jn
Copy link
Copy Markdown
Contributor

@arpit-jn arpit-jn commented May 29, 2026

Changed

Widened jwt gem dependency from ~> 2.7 to >= 2.7, < 4.0, enabling support for jwt 3.x alongside 2.x. (#726) (contributed by @dan98765)

Fixed

Corrected incorrect YARD @param descriptions in the Organizations API. (#637) (contributed by @qtro)

Security

Bumped jwt from 3.1.2 to 3.2.0, addressing CVE-2026-44351 (empty-key HMAC bypass). (#745)

@arpit-jn arpit-jn requested a review from a team as a code owner May 29, 2026 09:24
Copy link
Copy Markdown

@developerkunal developerkunal left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@arpit-jn arpit-jn merged commit cce6e76 into master May 29, 2026
8 checks passed
@arpit-jn arpit-jn deleted the release/v5.20.0 branch May 29, 2026 09:30
@arpit-jn arpit-jn deployed to release May 29, 2026 09:32 — with GitHub Actions Active
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants