From 1f8957478e512b5fbdfdf63d028d8d49d1bc103c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marc=20Busqu=C3=A9?= <marc@lamarciana.com>
Date: Wed, 17 Nov 2021 11:11:53 +0100
Subject: [PATCH] Bump version and update changelog

---
 CHANGELOG.md              | 7 +++++++
 lib/spree/auth/version.rb | 2 +-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index eff298e..442b493 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [v2.5.4](https://github.com/solidusio/solidus_auth_devise/tree/v2.5.4) (2021-11-17)
+
+[Full Changelog](https://github.com/solidusio/solidus_auth_devise/compare/v2.5.3...v2.5.4)
+
+**Fixed bugs:**
+
+- Fix authentication bypass by CSRF weakness [GHSA-xm34-v85h-9pg2](https://github.com/solidusio/solidus_auth_devise/security/advisories/GHSA-xm34-v85h-9pg2)
 ## [v2.5.3](https://github.com/solidusio/solidus_auth_devise/tree/v2.5.3) (2021-01-29)
 
 [Full Changelog](https://github.com/solidusio/solidus_auth_devise/compare/v2.5.2...v2.5.3)
diff --git a/lib/spree/auth/version.rb b/lib/spree/auth/version.rb
index f1e29fc..502ee47 100644
--- a/lib/spree/auth/version.rb
+++ b/lib/spree/auth/version.rb
@@ -2,6 +2,6 @@
 
 module Spree
   module Auth
-    VERSION = '2.5.3'
+    VERSION = '2.5.4'
   end
 end