evolve75 / RubyTree / 31337127963

88%

master: 96%

push

github

Bump json to patched version, fixing CVE-2026-71847

json 2.21.1 and earlier ship a use-after-free in
JSON::ResumableParser#partial_value that can crash on truncated
duplicate-key streams (GHSA-9hj4-r449-hfvc). Bump the runtime
dependency floor to 2.21.2, which includes the fix.

Cherry-picked from fa380fa on master; version.rb is left unchanged
since next tracks the unreleased 3.0.0pre line.

947 of 1344 branches covered (70.46%)

2270 of 2564 relevant lines covered (88.53%)

14493.84 hits per line