Merge branch '28184-upgrade-and-fix-Vulnerability' into 'master'

bump version to `1.4.0`

Closes #13

See merge request kdanmobile/shared-code-base/gems/error_response!51

Author: vanessachao-k

CHANGELOG.md

@@ -1,11 +1,10 @@
-## [1.3.2.beta] - 2026-06-16
-- Relax `activesupport` dependency constraint from `~> 7.1.6` to `>= 7.1.6, < 9.0` to unblock services upgrading to Rails 7.2 / 8.x.
-
-## [1.3.1.beta] - 2026-06-03
+## [1.4.0] - 2026-06-23
+- Drop the `activesupport` lower-bound; constraint is now `< 9.0` (was `~> 7.1.6`).
 - Prevent `ErrorResponse::RequestError` from being swallowed by broad handlers such as `rescue_from Exception`.
 - Handle `RequestError` through `ErrorResponse::Helper#rescue_with_handler` before falling back to generic rescue flow.
 - Add RSpec coverage for rescue order behavior with both `RequestError` and non-`RequestError` exceptions.
 - Update README to document the rescue order guarantee and usage notes with broad exception handlers.
+- Released as minor bump (1.4.0) so downstream services pinned to `~> 1.3` or earlier are not auto-updated; upgrade to `~> 1.4` is opt-in per service.
 
 ## [1.3.0] - 2026-06-02
 - Add `config.error_message_resolver` extension hook to customize `ErrorResponse::Helper#error_response` without monkey patching.

Gemfile.lock

@@ -1,8 +1,8 @@
 PATH
   remote: .
   specs:
-    error_response (1.3.2.beta)
-      activesupport (>= 7.1.6, < 9.0)
+    error_response (1.4.0)
+      activesupport (< 9.0)
 
 GEM
   remote: https://rubygems.org/
@@ -24,20 +24,20 @@ GEM
       public_suffix (>= 2.0.2, < 8.0)
     ast (2.4.3)
     base64 (0.3.0)
-    bigdecimal (3.2.2)
-    concurrent-ruby (1.3.5)
-    connection_pool (2.5.3)
+    bigdecimal (4.1.2)
+    concurrent-ruby (1.3.7)
+    connection_pool (3.0.2)
     diff-lcs (1.6.2)
     drb (2.2.3)
-    i18n (1.14.7)
+    i18n (1.15.2)
       concurrent-ruby (~> 1.0)
     io-console (0.8.1)
     irb (1.17.0)
       pp (>= 0.6.0)
       prism (>= 1.3.0)
       rdoc (>= 4.0.0)
       reline (>= 0.4.2)
-    json (2.19.2)
+    json (2.19.9)
     json-schema (6.2.0)
       addressable (~> 2.8)
       bigdecimal (>= 3.1, < 5)
@@ -46,7 +46,9 @@ GEM
     logger (1.7.0)
     mcp (0.9.2)
       json-schema (>= 4.1)
-    minitest (5.25.5)
+    minitest (6.0.6)
+      drb (~> 2.0)
+      prism (~> 1.5)
     parallel (1.27.0)
     parser (3.3.10.2)
       ast (~> 2.4.1)

VERSION.md

@@ -1 +1 @@
-1.3.2.beta
+1.4.0

error_response.gemspec

@@ -18,5 +18,5 @@ Gem::Specification.new do |s|
     "rubygems_mfa_required" => "true"
   }
 
-  s.add_dependency "activesupport", ">= 7.1.6", "< 9.0"
+  s.add_dependency "activesupport", "< 9.0"
 end