Juan José Mata 2e91453fcc Require omniauth-rails_csrf_protection v2.0+ for Rails 8.2 compatibility (#2520) ...

* Bump omniauth-rails_csrf_protection to 2.0 to drop ActiveSupport::Configurable

omniauth-rails_csrf_protection 1.0.2 does `include ActiveSupport::Configurable`
in its TokenVerifier, which triggers on Rails 8.1:

  DEPRECATION WARNING: ActiveSupport::Configurable is deprecated without
  replacement, and will be removed in Rails 8.2.

v2.0 reworks TokenVerifier to delegate `config` to `ActionController::Base.config`
on Rails 8.1+, so it no longer references (or even requires) the deprecated
module. The gem's runtime deps, railtie, and public middleware integration are
unchanged, so this is a behavior-preserving bump. Pin `>= 2.0` so a fresh
install can't regress to the deprecated version.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019eC5BNZmL6LPBMCUr35ev9

* Verbosity

Signed-off-by: Juan José Mata <juanjo.mata@gmail.com>

---------

Signed-off-by: Juan José Mata <juanjo.mata@gmail.com>
Co-authored-by: Claude <noreply@anthropic.com>

2026-06-28 20:00:28 +02:00

2.9 KiB

Raw Blame History

View Raw