0.4.0.0

biscuit-auth · Jul 31, 2024 · 1fc1646 · 1fc1646
1 parent aca2c4c
commit 1fc1646
Show file tree

Hide file tree

Showing 4 changed files with 13 additions and 3 deletions.
diff --git a/biscuit-servant/ChangeLog.md b/biscuit-servant/ChangeLog.md
@@ -1,5 +1,9 @@
 # Changelog for biscuit-servant
 
+## 0.4.0.0
+
+- use biscuit-haskell 0.4.0.0
+
 ## 0.3.0.1
 
 - use biscuit-haskell 0.3.0.1

diff --git a/biscuit-servant/biscuit-servant.cabal b/biscuit-servant/biscuit-servant.cabal
@@ -1,7 +1,7 @@
 cabal-version: 2.0
 
 name:           biscuit-servant
-version:        0.3.0.1
+version:        0.4.0.0
 category:       Security
 synopsis:       Servant support for the Biscuit security token
 description:    Please see the README on GitHub at <https://github.com/biscuit-auth/biscuit-haskell#readme>
@@ -34,7 +34,7 @@ library
   ghc-options: -Wall
   build-depends:
     base                 >= 4.7 && <5,
-    biscuit-haskell      >= 0.3 && < 0.4,
+    biscuit-haskell      >= 0.4 && < 0.5,
     bytestring           >= 0.10 && <0.12,
     mtl                  >= 2.2 && < 2.4,
     text                 >= 1.2 && <3,

diff --git a/biscuit/ChangeLog.md b/biscuit/ChangeLog.md
@@ -1,5 +1,11 @@
 # Changelog for biscuit-haskell
 
+## 0.4.0.0
+
+- abort authorization on evaluation error as mandated by the spec
+- use utf8 byte count in `{string}.length()` as mandated by the spec
+- fix security issue with third-party blocks public key interning, see [advisory](https://github.com/biscuit-auth/biscuit/security/advisories/GHSA-rgqv-mwc3-c78m)
+
 ## 0.3.0.1
 
 - GHC 9.6 and 9.8 support

diff --git a/biscuit/biscuit-haskell.cabal b/biscuit/biscuit-haskell.cabal
@@ -1,7 +1,7 @@
 cabal-version: 2.0
 
 name:           biscuit-haskell
-version:        0.3.0.1
+version:        0.4.0.0
 category:       Security
 synopsis:       Library support for the Biscuit security token
 description:    Please see the README on GitHub at <https://github.com/biscuit-auth/biscuit-haskell#readme>