#200) * chore: relax faraday and sorbet-runtime version constraints - faraday: ~> 2.12.2 -> ~> 2.12 (unblocks security fix in 2.14.1) - faraday-multipart: ~> 1.1.0 -> ~> 1.1 (allows 1.2.x, Ruby 4 compat) - faraday-net_http_persistent: ~> 2.3.0 -> ~> 2.3 - sorbet-runtime: ~> 0.5.11820 -> >= 0.5.11820, < 2 (allows 0.5.x and 0.6.x) - sorbet (dev): ~> 0.5 -> ~> 0.6 Closes #196, closes #189 * chore: add Ruby 4.0 to CI matrix, run lint checks on 3.4 and 4.0 * fix: update sorbet RBI stubs for Sorbet 0.6 compatibility - Remove conflicting method stubs from hidden.rbi (now in Sorbet 0.6 stdlib) - Add typed: true headers to gem RBIs missing sigils - Ignore sorbet/rbi/sorbet-typed in sorbet config (stale 0.5 community stubs) - Delete sorbet/rbi/sorbet-typed (ignored, 1071 lines of stale stubs removed) * chore: make lint configurable via matrix flag instead of hardcoded ruby version check Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * enabled lint check on ruby 3.4 as well * fix: tighten sorbet-runtime upper bound from < 2 to < 1 Current sorbet versions are 0.5.x and 0.6.x, both of which are < 1. Using < 2 was unnecessarily wide and would allow a hypothetical 1.x series without explicit opt-in. --------- Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Faraday dependency locked in a version affected by a security issue #196

Description

Metadata

Metadata

Assignees

Labels

Type

Fields

Projects

Milestone

Relationships

Development

Issue actions