Require omniauth-rails_csrf_protection v2.0+ for Rails 8.2 compatibility (#2520)

* Bump omniauth-rails_csrf_protection to 2.0 to drop ActiveSupport::Configurable

omniauth-rails_csrf_protection 1.0.2 does `include ActiveSupport::Configurable`
in its TokenVerifier, which triggers on Rails 8.1:

  DEPRECATION WARNING: ActiveSupport::Configurable is deprecated without
  replacement, and will be removed in Rails 8.2.

v2.0 reworks TokenVerifier to delegate `config` to `ActionController::Base.config`
on Rails 8.1+, so it no longer references (or even requires) the deprecated
module. The gem's runtime deps, railtie, and public middleware integration are
unchanged, so this is a behavior-preserving bump. Pin `>= 2.0` so a fresh
install can't regress to the deprecated version.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019eC5BNZmL6LPBMCUr35ev9

* Verbosity

Signed-off-by: Juan José Mata <juanjo.mata@gmail.com>

---------

Signed-off-by: Juan José Mata <juanjo.mata@gmail.com>
Co-authored-by: Claude <noreply@anthropic.com>
This commit is contained in:
Juan José Mata
2026-06-28 20:00:28 +02:00
committed by GitHub
parent 1d909a0b9e
commit 2e91453fcc
2 changed files with 3 additions and 3 deletions

View File

@@ -92,7 +92,7 @@ gem "pdf-reader", "~> 2.12"
# OpenID Connect, OAuth & SAML authentication
gem "omniauth", "~> 2.1"
gem "omniauth-rails_csrf_protection"
gem "omniauth-rails_csrf_protection", ">= 2.0"
gem "omniauth_openid_connect"
gem "omniauth-google-oauth2"
gem "omniauth-github"

View File

@@ -470,7 +470,7 @@ GEM
omniauth-oauth2 (1.8.0)
oauth2 (>= 1.4, < 3)
omniauth (~> 2.0)
omniauth-rails_csrf_protection (1.0.2)
omniauth-rails_csrf_protection (2.0.1)
actionpack (>= 4.2)
omniauth (~> 2.0)
omniauth-saml (2.2.4)
@@ -906,7 +906,7 @@ DEPENDENCIES
omniauth (~> 2.1)
omniauth-github
omniauth-google-oauth2
omniauth-rails_csrf_protection
omniauth-rails_csrf_protection (>= 2.0)
omniauth-saml (~> 2.1)
omniauth_openid_connect
ostruct