galtzo-floss / activerecord-transactionable / 34743093623

96%

push

github

🔒️ Raise activerecord floor to guard against a moderate CVE

The Gemfile pinned activerecord to "~> 7.2", which permits 7.2.0
through 7.2.2.1 — affected by a moderate-severity ANSI escape
injection advisory in Active Record logging, fixed upstream in
7.2.2.2. The resolved/locked version was already patched (7.2.3.2);
raised the constraint to "~> 7.2.2, >= 7.2.2.2" so a future
bundle update cannot regress into the vulnerable range.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01URwq1vEg3L7F3ddUr5eEn4

39 of 44 branches covered (88.64%)

Branch coverage included in aggregate %.

142 of 145 relevant lines covered (97.93%)

119.3 hits per line