Operating System
Ubuntu 21.04
Ruby Version
ruby 2.7
Jekyll Version
3.9.2
GitHub Pages Version
227
Expected Behavior
The activesupport 6.1.7.1 can be used with jekyll 3.9.x.
Current Behavior
The CVE-2023-22796 requires activesupport to be updated to 6.1.7.1 or 7.0.4.1.
The github-pages 227 gem depends on jekyll = 3.9.2, which depends on i18n ~> 0.7.
The activesupport 6.1.7.1 depends on i18n >= 1.6, < 2, which prevents an update. The activesupport 6.0.6.1 was the last version that depended on i18n >= 0.7, < 2, which then uses i18n 0.9.5 to also satisfy jekyll's i18n ~> 0.7 requirement.
To fix the issue would require using jekyll >= 4.0.0, which depends on i18n >= 0.9.5, < 2 or a new 3.9.x release with a higher i18n dependency version.
Re-post of github/pages-gem#866
CC: @parkr
Relevant log output
No response
Code Sample
No response
Operating System
Ubuntu 21.04
Ruby Version
ruby 2.7
Jekyll Version
3.9.2
GitHub Pages Version
227
Expected Behavior
The
activesupport6.1.7.1can be used withjekyll3.9.x.Current Behavior
The
CVE-2023-22796requiresactivesupportto be updated to6.1.7.1or7.0.4.1.The
github-pages227gem depends onjekyll= 3.9.2, which depends oni18n ~> 0.7.The
activesupport6.1.7.1depends oni18n >= 1.6, < 2, which prevents an update. Theactivesupport6.0.6.1was the last version that depended oni18n >= 0.7, < 2, which then usesi18n0.9.5to also satisfyjekyll'si18n ~> 0.7requirement.To fix the issue would require using
jekyll>= 4.0.0, which depends oni18n >= 0.9.5, < 2or a new3.9.xrelease with a higheri18ndependency version.Re-post of github/pages-gem#866
CC: @parkr
Relevant log output
No response
Code Sample
No response