Merge pull request #217 from solidusio/waiting-for-dev/bump_version_a…

…nd_update_changelog Bump version and update changelog
solidusio · Nov 17, 2021 · b02f891 · b02f891
2 parents 731a664 + 1f89574
commit b02f891
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [v2.5.4](https://github.com/solidusio/solidus_auth_devise/tree/v2.5.4) (2021-11-17)
+
+[Full Changelog](https://github.com/solidusio/solidus_auth_devise/compare/v2.5.3...v2.5.4)
+
+**Fixed bugs:**
+
+- Fix authentication bypass by CSRF weakness [GHSA-xm34-v85h-9pg2](https://github.com/solidusio/solidus_auth_devise/security/advisories/GHSA-xm34-v85h-9pg2)
 ## [v2.5.3](https://github.com/solidusio/solidus_auth_devise/tree/v2.5.3) (2021-01-29)
 
 [Full Changelog](https://github.com/solidusio/solidus_auth_devise/compare/v2.5.2...v2.5.3)

diff --git a/lib/spree/auth/version.rb b/lib/spree/auth/version.rb
@@ -2,6 +2,6 @@
 
 module Spree
   module Auth
-    VERSION = '2.5.3'
+    VERSION = '2.5.4'
   end
 end