Version 7.0.0 not published to rubygems.org

[KKiti]

https://rubygems.org/gems/jquery-ui-rails rubygems.org still shows the latest version of the gem as 6.0.1. Could v7.0.0 be published to rubygems.org, please?

[skwong2000]

Currently I can only use it by adding this line in Gemfile:

gem "jquery-ui-rails", :git => 'https://github.com/jquery-ui-rails/jquery-ui-rails.git'

I am also looking forward to 7.0.0 gem in rubygems.org.

[doconnor-clintel]

As to why a release isn't published:

[massongit]

📝The link to above comment: #139 (comment)

[massongit]

@Borzik @rosenfeld @joliss jquery-ui-rails v7.0.0 contains security updates for CVE-2022-31160, CVE-2021-41182 and CVE-2021-41183.
Therefore, please publish to rubygems.org.

[dacook]

Another way to set in your gemfile, which will lock it to a particular version:

gem 'jquery-ui-rails', github: 'jquery-ui-rails/jquery-ui-rails', tag: 'v7.0.0'

[jeffgran-dox]

We forked and published a new version of this gem with jquery-ui 1.13.2 here, in case this might help someone: https://rubygems.org/gems/jquery-ui-rails-dox-fork

[fmborghino]

More folks will hit this (anyone running bundle audit) as the ruby-advisory-db project added issues that require jquery-ui-rails >=7.0.0 yesterday: rubysec/ruby-advisory-db#747 - we're going with pointing at the github tag for now - fingers crossed that this gets pushed to rubygems.org. Thanks for the project!

[dennisvandehoef]

Releasing 7.0.0 only helps if the gem will be maintained after releasing it.

Looking at an even older issue #140, I think we should not ask the maintainers to keep maintaining this if they moved on.

Maybe we need new maintainer, though simply releasing version 7.0.0 will not help us here. Latest when you want the update to jquery-ui 1.13.2 (as @jeffgran-dox mentioned) we have the issue again.

[tcostermans]

Any updates on this issue?
Trying to get rid of the bunlde audit vulnerability without pointing to the fork or a github tag.

[prpetten]

@jeffgran-dox Are you going to be maintaining your fork for the foreseeable future?

[jeffgran-dox]

@prpetten we have money-making production systems still using jquery and jquery-ui in some places and no appetite to migrate them, so yes we have vested interest in maintaining this as long as that is the case. I cannot make any kind of specific guarantees of course but that's why we decided to fork and publish this.

[prpetten]

Working on getting @jeffgran-dox access to take over maintenance and publishing of the gem moving forward.

[prpetten]

7.0.0 gem is now published.

[joshuapinter]

@prpetten @jeffgran-dox Legends! Thank you for doing this. This is what "community" is all about. 🙏