Omniauth Versions Save

• Fix CVE-2017-17042

• Use warn over $stderr.puts

• Update mock_request_call to use the same logic as #912. (PR: #913)

• Allow for origin param to be renamed or disabled. (PR: #912; Issue: #910)

Fixes

• Revert #806 - "Sets omniauth.headers on the request phase" due to ActionDispatch::Cookies::CookieOverflow issues. (PR: #889; Issue: #888)

Updates / Fixes

• Performance benchmarks for middleware call (PR: #775)
• Simplify Default Strategy Options (PR: #777)
• Improve perf by using Hashie::Mash#[] (PR: #778)
• Pass through test_mode with alternate request method (PR: #779)
• Avoid Minitest warnings (PR: #850)
• Set omniauth.headers on the request phase (PR: #806)
• Set params when mocking a failure (PR: #812; Issue: #811)
• docs: TestCase expects class in strategy method array (PR: #868)
• Update AuthHash#regular_writer to ensure that #info is a Hash (#848)
• Loosen hashie requirements to fix potential performance issues. Please define 3.4.6 in your Gemfile if you experience issues with 3.5.x. (PR: #887; Issue: #886)

Defined Support

• Required Ruby version: >= 2.1.9

Fixes

• Updated Hashie's disable_warnings setting

Updated Dependencies & Security Updates

• jruby-openssl - ~> 0.9.19
• rake - >= 12.0
• yard - >= 0.9
• hashie - ~> 3.5.0
• json - ~> 2.0.3
• mime-types - ~> 3.1
• rest-client - ~> 2.0.0
• rspec - ~> 3.5.0
• rubocop - >= 0.47
• simplecov - >= 0.13
• tins - ~> 1.13.0
• bundler - ~> 1.14

Dropped Support

• jruby-19mode (EOL)
• 1.9.3 (EOL)
• 2.0.0 (EOL)

Security

Updates the following gem requirements to avoid dependency-related security issues:

• jruby-openssl
• rack
• rest-client

Fixes

• Mitigate Hashie regressions

Security Updates

• Update Rack to => 1.6.2