🔖 Prepare release v1.1.8

Author: pboling

docs/file.CHANGELOG.html

@@ -82,11 +82,6 @@ <h3 id="removed">Removed</h3>
 
 <h3 id="fixed">Fixed</h3>
 
-<ul>
-  <li>Constrained the Ruby 2.4 appraisal away from <code>cgi</code> 0.1.1, which calls<br>
-<code>String#delete_prefix</code> before oauth’s test backports are loaded.</li>
-</ul>
-
 <h3 id="security">Security</h3>
 
 <h2 id="118---2026-06-18">
@@ -110,6 +105,14 @@ <h3 id="changed-1">Changed</h3>
   <li>Raised the <code>oauth-tty</code> runtime dependency floor to <code>&gt;= 1.0.11</code>.</li>
 </ul>
 
+<h3 id="fixed-1">Fixed</h3>
+
+<ul>
+  <li>Updated the auth-sanitizer subprocess isolation spec to load the standard<br>
+test bootstrap, including Ruby 2.4 backports.</li>
+  <li>Made the Ruby 2.4 appraisal’s legacy <code>cgi</code> dependency explicit.</li>
+</ul>
+
 <h2 id="117---2026-06-15">
 <a href="https://github.com/ruby-oauth/oauth/compare/v1.1.6...v1.1.7">1.1.7</a> - 2026-06-15</h2>
 
@@ -139,7 +142,7 @@ <h3 id="changed-2">Changed</h3>
 the transitive external <code>cgi</code> runtime dependency for Ruby 2.4 consumers.</li>
 </ul>
 
-<h3 id="fixed-1">Fixed</h3>
+<h3 id="fixed-2">Fixed</h3>
 
 <ul>
   <li>
@@ -210,7 +213,7 @@ <h3 id="changed-4">Changed</h3>
   <li>auth-sanitizer v0.1.3</li>
 </ul>
 
-<h3 id="fixed-2">Fixed</h3>
+<h3 id="fixed-3">Fixed</h3>
 
 <ul>
   <li>Load <code>auth-sanitizer</code> through an internal isolated loader so requiring <code>oauth</code> does not add top-level <code>Auth</code> or <code>AuthSanitizer</code> constants that may collide with downstream applications.</li>
@@ -257,7 +260,7 @@ <h3 id="added-2">Added</h3>
   <li>base64 dependency, fixes Ruby 3.4 and 3.5 HEAD compatibility</li>
 </ul>
 
-<h3 id="fixed-3">Fixed</h3>
+<h3 id="fixed-4">Fixed</h3>
 
 <ul>
   <li>Fix ActionController request proxy NoMethodError when building signatures
@@ -484,7 +487,7 @@ <h2 id="0514-2022-08-29">
 
 <p>The “hopeful last 0.5.x” Release</p>
 
-<h3 id="fixed-4">Fixed</h3>
+<h3 id="fixed-5">Fixed</h3>
 
 <ul>
   <li>More typos fixed</li>
@@ -500,7 +503,7 @@ <h2 id="0513-2022-08-23">
 
 <p>The “I think I caught ‘em all!” Release</p>
 
-<h3 id="fixed-5">Fixed</h3>
+<h3 id="fixed-6">Fixed</h3>
 
 <ul>
   <li>Typo oauth2 =&gt; oauth as gem name in one more place.</li>
@@ -516,7 +519,7 @@ <h2 id="0512-2022-08-23">
 
 <p>The “Typoes are just the worst!” Release</p>
 
-<h3 id="fixed-6">Fixed</h3>
+<h3 id="fixed-7">Fixed</h3>
 
 <ul>
   <li>Typo oauth2 =&gt; oauth as gem name in a couple places.</li>
@@ -607,7 +610,7 @@ <h3 id="added-11">Added</h3>
   <li>Added more documentation files to packaged gem, e.g. SECURITY.md, CODE_OF_CONDUCT.md</li>
 </ul>
 
-<h3 id="fixed-7">Fixed</h3>
+<h3 id="fixed-8">Fixed</h3>
 
 <ul>
   <li>Removed reference to RUBY_VERSION from gemspec, as it depends on rake release, which is problematic on some ruby engines. (by @pboling)</li>
@@ -644,7 +647,7 @@ <h3 id="changed-14">Changed</h3>
   <li>Require plaintext signature method by default (#135 by @confiks &amp; @pboling)</li>
 </ul>
 
-<h3 id="fixed-8">Fixed</h3>
+<h3 id="fixed-9">Fixed</h3>
 
 <ul>
   <li>Fixed Infinite Redirect in v0.5.5, v0.5.6 (#186, #210 by @pboling)</li>
@@ -704,7 +707,7 @@ <h3 id="changed-16">Changed</h3>
   <li>Various cleanups</li>
 </ul>
 
-<h3 id="fixed-9">Fixed</h3>
+<h3 id="fixed-10">Fixed</h3>
 
 <ul>
   <li>Fixes ssl-noverify</li>
@@ -725,7 +728,7 @@ <h3 id="changed-17">Changed</h3>
   <li>Various cleanups (charliesome)</li>
 </ul>
 
-<h3 id="fixed-10">Fixed</h3>
+<h3 id="fixed-11">Fixed</h3>
 
 <ul>
   <li>Fixes UnknownRequestType on Rails 5.1 for ActionDispatch::Request (xprazak2)</li>
@@ -739,7 +742,7 @@ <h2 id="053-2017-05-24">
 </li>
 </ul>
 
-<h3 id="fixed-11">Fixed</h3>
+<h3 id="fixed-12">Fixed</h3>
 
 <ul>
   <li>Fix #145 - broken CLI required loading active_support (James Pinto)</li>
@@ -787,7 +790,7 @@ <h3 id="changed-19">Changed</h3>
   <li>Reimplementing #82 - Debug Output Option (James Pinto)</li>
 </ul>
 
-<h3 id="fixed-12">Fixed</h3>
+<h3 id="fixed-13">Fixed</h3>
 
 <ul>
   <li>Fix #113 adding paths when a full URL has been specified (James Pinto)</li>
@@ -810,7 +813,7 @@ <h3 id="added-16">Added</h3>
   <li>Add license info to the gemspec (Robert Reiz)</li>
 </ul>
 
-<h3 id="fixed-13">Fixed</h3>
+<h3 id="fixed-14">Fixed</h3>
 
 <ul>
   <li>Proper handling for empty query string in RequestToken#build_authorize_url (midchildan,<br>
@@ -859,7 +862,7 @@ <h3 id="changed-21">Changed</h3>
   <li>Change token requests to exclude <code>oauth_body_hash</code>. Update doc links in comments. (John Remmen)</li>
 </ul>
 
-<h3 id="fixed-14">Fixed</h3>
+<h3 id="fixed-15">Fixed</h3>
 
 <ul>
   <li>Fix ability to pass in an authorize url with a query string (Roger Smith)</li>
@@ -890,7 +893,7 @@ <h3 id="added-18">Added</h3>
   <li>Set a configurable timeout for all requests (Rick Olson)</li>
 </ul>
 
-<h3 id="fixed-15">Fixed</h3>
+<h3 id="fixed-16">Fixed</h3>
 
 <ul>
   <li>Fix merging paths if the path is not empty</li>
@@ -911,7 +914,7 @@ <h3 id="changed-22">Changed</h3>
   <li>Make use the path component of the :site parameter (Jonathon M. Abbott)</li>
 </ul>
 
-<h3 id="fixed-16">Fixed</h3>
+<h3 id="fixed-17">Fixed</h3>
 
 <ul>
   <li>Fixed nested attributes in #normalize (Shaliko Usubov)</li>
@@ -942,7 +945,7 @@ <h3 id="changed-23">Changed</h3>
   <li>Use Net::HTTPGenericRequest (Jakub Kuźma)</li>
 </ul>
 
-<h3 id="fixed-17">Fixed</h3>
+<h3 id="fixed-18">Fixed</h3>
 
 <ul>
   <li>Fix POST Requests with Typhoeus proxy (niedhui)</li>
@@ -963,7 +966,7 @@ <h3 id="added-20">Added</h3>
   <li>Added support for Rails 3 in client/action_controller_request (Pelle)</li>
 </ul>
 
-<h3 id="fixed-18">Fixed</h3>
+<h3 id="fixed-19">Fixed</h3>
 
 <ul>
   <li>Fix LoadError rescue in tests: return can’t be used in this context (Hans de Graaff)</li>
@@ -980,7 +983,7 @@ <h2 id="043-2010-09-01">
 </li>
 </ul>
 
-<h3 id="fixed-19">Fixed</h3>
+<h3 id="fixed-20">Fixed</h3>
 
 <ul>
   <li>Fix for em-http proxy (ichverstehe)</li>
@@ -1000,7 +1003,7 @@ <h3 id="added-21">Added</h3>
   <li>Added Bundler (rc) Gemfile for easier dev/testing</li>
 </ul>
 
-<h3 id="fixed-20">Fixed</h3>
+<h3 id="fixed-21">Fixed</h3>
 
 <ul>
   <li>Fixed compatibility with Ruby 1.9.2 (ecavazos)</li>
@@ -1022,7 +1025,7 @@ <h3 id="added-22">Added</h3>
   <li>Added support for using OAuth with proxies (Marsh Gardiner)</li>
 </ul>
 
-<h3 id="fixed-21">Fixed</h3>
+<h3 id="fixed-22">Fixed</h3>
 
 <ul>
   <li>Rails 3 Compatibility fixes (Pelle Braendgaard)</li>
@@ -1058,7 +1061,7 @@ <h3 id="changed-24">Changed</h3>
   <li>Replaced hoe with Jeweler (Aaron Quint)</li>
 </ul>
 
-<h3 id="fixed-22">Fixed</h3>
+<h3 id="fixed-23">Fixed</h3>
 
 <ul>
   <li>Strip extraneous spaces and line breaks from access_token responses (observed in the wild with Yahoo!’s OAuth+OpenID hybrid) (Eric Hartmann)</li>
@@ -1089,7 +1092,7 @@ <h3 id="changed-25">Changed</h3>
   <li>Test clean-up (Xavier Shay, Hannes Tydén)</li>
 </ul>
 
-<h3 id="fixed-23">Fixed</h3>
+<h3 id="fixed-24">Fixed</h3>
 
 <ul>
   <li>Respect <code>--method</code> in <code>authorize</code> CLI command (Seth)</li>
@@ -1130,7 +1133,7 @@ <h3 id="changed-26">Changed</h3>
   <li>OAuth::Client::Helper uses OAuth::Version::VERSION (chadisfaction)</li>
 </ul>
 
-<h3 id="fixed-24">Fixed</h3>
+<h3 id="fixed-25">Fixed</h3>
 
 <ul>
   <li>Fix OAuth::RequestProxy::ActionControllerRequest’s handling of params (Tristan Groléat)</li>
@@ -1158,7 +1161,7 @@ <h3 id="changed-27">Changed</h3>
   <li>Handle input from aggressive form encoding libraries (Matt Wood)</li>
 </ul>
 
-<h3 id="fixed-25">Fixed</h3>
+<h3 id="fixed-26">Fixed</h3>
 
 <ul>
   <li>Corrected OAuth XMPP namespace (Seth)</li>
@@ -1185,7 +1188,7 @@ <h3 id="added-27">Added</h3>
   <li>Added help to the ‘oauth’ CLI (Seth)</li>
 </ul>
 
-<h3 id="fixed-26">Fixed</h3>
+<h3 id="fixed-27">Fixed</h3>
 
 <ul>
   <li>2xx statuses should be treated as success (Anders Conbere)</li>
@@ -1202,7 +1205,7 @@ <h2 id="031-2009-01-26">
 </li>
 </ul>
 
-<h3 id="fixed-27">Fixed</h3>
+<h3 id="fixed-28">Fixed</h3>
 
 <ul>
   <li>Fixed a problem with relative and absolute token request paths. (Michael Wood)</li>
@@ -1231,7 +1234,7 @@ <h3 id="changed-28">Changed</h3>
   <li>Improved test-cases and compatibility for encoding issues. (Pelle)</li>
 </ul>
 
-<h3 id="fixed-28">Fixed</h3>
+<h3 id="fixed-29">Fixed</h3>
 
 <ul>
   <li>Correctly handle multi-valued parameters (Seth)</li>
@@ -1242,7 +1245,7 @@ <h2 id="027-2008-09-10">0.2.7 2008-09-10</h2>
 
 <p>The lets fix the last release release</p>
 
-<h3 id="fixed-29">Fixed</h3>
+<h3 id="fixed-30">Fixed</h3>
 
 <ul>
   <li>Fixed plain text signatures (Andrew Arrow)</li>
@@ -1267,7 +1270,7 @@ <h3 id="changed-29">Changed</h3>
   <li>Omit token when signing with RSA</li>
 </ul>
 
-<h3 id="fixed-30">Fixed</h3>
+<h3 id="fixed-31">Fixed</h3>
 
 <ul>
   <li>Fixed RSA verification to support RSA providers now using Ruby and RSA</li>
@@ -1279,7 +1282,7 @@ <h2 id="022-2008-02-22">0.2.2 2008-02-22</h2>
 
 <p>Lets actually support SSL release</p>
 
-<h3 id="fixed-31">Fixed</h3>
+<h3 id="fixed-32">Fixed</h3>
 
 <ul>
   <li>Use HTTPS when required.</li>
@@ -1299,7 +1302,7 @@ <h3 id="changed-30">Changed</h3>
 
 <h2 id="012-2007-12-1">0.1.2 2007-12-1</h2>
 
-<h3 id="fixed-32">Fixed</h3>
+<h3 id="fixed-33">Fixed</h3>
 
 <ul>
   <li>Fixed checks for missing OAuth params to improve performance</li>
@@ -1319,7 +1322,7 @@ <h3 id="added-30">Added</h3>
 </div></div>
 
       <div id="footer">
-  Generated on Thu Jun 18 18:11:00 2026 by
+  Generated on Thu Jun 18 18:36:23 2026 by
   <a href="https://yardoc.org" title="Yay! A Ruby Documentation Tool" target="_parent">yard</a>
   0.9.44 (ruby-4.0.5).
 </div>