v1.4.0

[1.4.0] - 2026-06-23

• Drop the activesupport lower-bound; constraint is now < 9.0 (was ~> 7.1.6).
• Prevent ErrorResponse::RequestError from being swallowed by broad handlers such as rescue_from Exception.
• Handle RequestError through ErrorResponse::Helper#rescue_with_handler before falling back to generic rescue flow.
• Add RSpec coverage for rescue order behavior with both RequestError and non-RequestError exceptions.
• Update README to document the rescue order guarantee and usage notes with broad exception handlers.
• Released as minor bump (1.4.0) so downstream services pinned to ~> 1.3 or earlier are not auto-updated; upgrade to ~> 1.4 is opt-in per service.

v1.3.2.beta

[1.3.2.beta] - 2026-06-16

• Relax activesupport dependency constraint from ~> 7.1.6 to >= 7.1.6, < 9.0 to unblock services upgrading to Rails 7.2 / 8.x.

v1.3.1.beta

[1.3.1.beta] - 2026-06-03

• Prevent ErrorResponse::RequestError from being swallowed by broad handlers such as rescue_from Exception.
• Handle RequestError through ErrorResponse::Helper#rescue_with_handler before falling back to generic rescue flow.
• Add RSpec coverage for rescue order behavior with both RequestError and non-RequestError exceptions.
• Update README to document the rescue order guarantee and usage notes with broad exception handlers.

v1.3.0

[1.3.0] - 2026-06-02

• Add config.error_message_resolver extension hook to customize ErrorResponse::Helper#error_response without monkey patching.
• Add compatibility support for both keyword and positional resolver signatures.
• Add RSpec coverage for resolver behavior and fallback handling.

v1.2.1

• Patch addressable to 2.9.0.
  • Fix Regular Expression Denial of Service in Addressable templates.
• Raise the minimum supported Ruby version to 3.1.

v1.2.0

• Patch activesupport to 7.2.3.1.
  • Fix possible ReDoS vulnerability in number_to_delimited.
  • Fix possible XSS vulnerability in ActiveSupport::SafeBuffer#%.
• Add SECURITY.md.
• Add README.md link to the security policy.
• Add RSpec coverage for loading remote error definitions.
• Add RuboCop configuration and clean up lint issues.
• Improve remote YAML loading safety.

v1.1.6

• Fix readme typo.

v1.1.5

• Update development_dependency.
• Update require active_support/concern instead of active_support/all.
• Optimize rspec test.
• Update CI to use Ruby 3.4.5.
• Fix Deserialization of untrusted data CWE-502 by using YAML.safe_load.