From 1fc1646cb4dcc61b0cb10f703ef02f7cd8b43ffa Mon Sep 17 00:00:00 2001 From: Clement Delafargue Date: Wed, 31 Jul 2024 10:27:35 +0200 Subject: [PATCH] 0.4.0.0 --- biscuit-servant/ChangeLog.md | 4 ++++ biscuit-servant/biscuit-servant.cabal | 4 ++-- biscuit/ChangeLog.md | 6 ++++++ biscuit/biscuit-haskell.cabal | 2 +- 4 files changed, 13 insertions(+), 3 deletions(-) diff --git a/biscuit-servant/ChangeLog.md b/biscuit-servant/ChangeLog.md index 49bec8a..e200d7c 100644 --- a/biscuit-servant/ChangeLog.md +++ b/biscuit-servant/ChangeLog.md @@ -1,5 +1,9 @@ # Changelog for biscuit-servant +## 0.4.0.0 + +- use biscuit-haskell 0.4.0.0 + ## 0.3.0.1 - use biscuit-haskell 0.3.0.1 diff --git a/biscuit-servant/biscuit-servant.cabal b/biscuit-servant/biscuit-servant.cabal index f5ee011..10cf924 100644 --- a/biscuit-servant/biscuit-servant.cabal +++ b/biscuit-servant/biscuit-servant.cabal @@ -1,7 +1,7 @@ cabal-version: 2.0 name: biscuit-servant -version: 0.3.0.1 +version: 0.4.0.0 category: Security synopsis: Servant support for the Biscuit security token description: Please see the README on GitHub at @@ -34,7 +34,7 @@ library ghc-options: -Wall build-depends: base >= 4.7 && <5, - biscuit-haskell >= 0.3 && < 0.4, + biscuit-haskell >= 0.4 && < 0.5, bytestring >= 0.10 && <0.12, mtl >= 2.2 && < 2.4, text >= 1.2 && <3, diff --git a/biscuit/ChangeLog.md b/biscuit/ChangeLog.md index 01c8b43..af68a58 100644 --- a/biscuit/ChangeLog.md +++ b/biscuit/ChangeLog.md @@ -1,5 +1,11 @@ # Changelog for biscuit-haskell +## 0.4.0.0 + +- abort authorization on evaluation error as mandated by the spec +- use utf8 byte count in `{string}.length()` as mandated by the spec +- fix security issue with third-party blocks public key interning, see [advisory](https://github.com/biscuit-auth/biscuit/security/advisories/GHSA-rgqv-mwc3-c78m) + ## 0.3.0.1 - GHC 9.6 and 9.8 support diff --git a/biscuit/biscuit-haskell.cabal b/biscuit/biscuit-haskell.cabal index 907fd6b..b8123d7 100644 --- a/biscuit/biscuit-haskell.cabal +++ b/biscuit/biscuit-haskell.cabal @@ -1,7 +1,7 @@ cabal-version: 2.0 name: biscuit-haskell -version: 0.3.0.1 +version: 0.4.0.0 category: Security synopsis: Library support for the Biscuit security token description: Please see the README on GitHub at