Update bcrypt 3.1.16 → 3.1.20 (patch)

[depfu]

Here is everything you need to know about this update. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ bcrypt (3.1.16 → 3.1.20) · Repo · Changelog

Release Notes

3.1.20 (from changelog)

  - Limit packaged files -- decrease gem filesize by ~28% [GH #272 by @pusewicz]

3.1.19 (from changelog)

  - Deprecate passing the third argument to `BCrypt::Engine.hash_secret` [GH #207 by @sergey-alekseev]
  - Add GC guards so the C compiler won't optimize out references [GH #270]

3.1.18 (from changelog)

  - Unlock GVL when calculating hashes and salts [GH #260]
  - Fix compilation warnings in `ext/mri/bcrypt_ext.c` [GH #261]

3.1.17 (from changelog)

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 64 commits:

• Bump version/changelog
• Merge pull request #273 from bcrypt-ruby/ci-updates
• Run old rubies on Ubuntu 20.04
• Add 3.2 to the test matrix
• Merge pull request #272 from pusewicz/patch-1
• Limit packaged files
• bumping Java version https://github.com/rake-compiler/rake-compiler/pull/172
• bumping version / updating changelog
• Merge pull request #270 from itarato/bugfix/PA-missing-gc-guard
• Fixing a rare bug when calling BCrypt::Engine#hash_secret - which produces nil accidentally 1 out of 500 cases in TruffleRuby.
• Merge pull request #168 from bcrypt-ruby/no-null-bytes
• Add a test for passwords with null bytes
• Merge pull request #207 from sergey-alekseev/deprecate-passing-the-third-argument-to-hash-secret
• deprecate passing the third argument to `BCrypt::Engine.hash_secret`
• Merge pull request #263 from nwjsmith/three-one-eighteen
• Merge pull request #261 from nwjsmith/ci-improvements
• Update for release
• Remove AppVeyor configuration
• Fix compiler warnings
• Update rake-compiler
• Work around bug in JDK for JRuby tests
• Merge pull request #260 from nwjsmith/unlock-gvl
• Re-introduce GVL unlock
• Use `free` instead of `xfree`
• Update for release
• Merge pull request #243 from JoshCheek/prefix-value
• Merge pull request #257 from petergoldstein/feature/add_ruby_3_1_to_ci
• Add Ruby 3.1 to CI
• Merge pull request #255 from asavageiv/alan/long-passwords
• test: Simplify password create tests for long secrets
• test: Reword hash_secret specs for clarity
• Truncate based on bytesize instead of number of chars
• Switch from 255 char max to 72
• Truncate secrets greater than 255 chars in hash_secret
• Add a test demonstrating passwords >255 chars fail
• Merge pull request #253 from athix/feature/build-status-badge
• Update README build status badge
• Remove .travis.yml (unused)
• Minor whitespace fixes
• Merge pull request #252 from athix/feature/github-actions
• Include doesn't work as expected
• Remove mswin and try using include instead of exclude for mingw
• Fine tune exclusions
• Add windows to github action and remove jruby from ubuntu matrix
• Use latest setup-ruby and add mingw/mswin
• Use default rake task
• Add Github Action
• Some URL updates now that this has moved to an org
• Merge pull request #247 from athix/feature/document-edge-case
• Document all possible permutations
• Document BCrypt::Password#== edge case/gotcha
• Make the prefix less sus
• Merge pull request #121 from kachick/fix-regex-in-validator
• Merge pull request #242 from kachick/ignore-gemfilelock
• Fix a regex in Bcrypt::Password.valid_hash? and Bcrypt::Engine.valid_salt?
• Ignore Gemfile.lock in git
• Merge pull request #241 from shmokmt/improve-readme
• Update version
• Merge pull request #240 from timcraft/patch-1
• Test on ruby 3.0
• Make min time difference still x4
• Merge pull request #223 from bjfish/add-truffleruby-to-ci
• Merge pull request #236 from mmccarthy15/master
• additional changelog comment

---

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands

@​depfu rebase

Rebases against your default branch and redoes this update

@​depfu recreate

Recreates this PR, overwriting any edits that you've made to it

@​depfu merge

Merges this PR once your tests are passing and conflicts are resolved

@​depfu cancel merge

Cancels automatic merging of this PR

@​depfu close

Closes this PR and deletes the branch

@​depfu reopen

Restores the branch and reopens this PR (if it's closed)

@​depfu pause

Ignores all future updates for this dependency and closes this PR

@​depfu pause [minor|major]

Ignores all future minor/major updates for this dependency and closes this PR

@​depfu resume

Future versions of this dependency will create PRs again (leaves this PR as is)

Go to the Depfu Dashboard to see the state of your dependencies and to customize how Depfu works.

[depfu]

Closed in favor of #293.