Fix addressable security issue

Author: William Tsai

.rubocop.yml

@@ -3,7 +3,7 @@ plugins:
 
 AllCops:
   NewCops: enable
-  TargetRubyVersion: 3.0
+  TargetRubyVersion: 3.1
   Exclude:
     - 'bin/**/*'
     - 'pkg/**/*'

CHANGELOG.md

@@ -1,3 +1,7 @@
+## [1.2.1] - 2026-04-08
+- Patch addressable to 2.9.0.
+  - Fix Regular Expression Denial of Service in Addressable templates.
+- Raise the minimum supported Ruby version to 3.1.
 ## [1.2.0] - 2026-03-24
 - Patch activesupport to 7.2.3.1.
   - Fix possible ReDoS vulnerability in `number_to_delimited`.

Gemfile.lock

@@ -19,7 +19,7 @@ GEM
       minitest (>= 5.1, < 6)
       securerandom (>= 0.3)
       tzinfo (~> 2.0, >= 2.0.5)
-    addressable (2.8.9)
+    addressable (2.9.0)
       public_suffix (>= 2.0.2, < 8.0)
     ast (2.4.3)
     base64 (0.3.0)

VERSION.md

@@ -1 +1 @@
-1.2.0
+1.2.1

error_response.gemspec

@@ -11,7 +11,7 @@ Gem::Specification.new do |s|
   s.license     = "MIT"
   s.files       = Dir["lib/**/*"]
   s.require_path = ["lib"]
-  s.required_ruby_version = ">= 3.0"
+  s.required_ruby_version = ">= 3.1"
   s.metadata = {
     "source_code_uri" => "https://github.com/kdan-mobile-software-ltd/error_response",
     "changelog_uri" => "https://github.com/kdan-mobile-software-ltd/error_response/blob/master/CHANGELOG.md",