Bump patch version.

rack · Feb 12, 2025 · 5459513 · 5459513
1 parent d00d195
commit 5459513
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 All notable changes to this project will be documented in this file. For info on how to format all future additions to this file please reference [Keep A Changelog](https://keepachangelog.com/en/1.0.0/).
 
+## [3.0.12] - 2025-02-12
+
+### Security
+
+- [CVE-2025-25184](https://github.com/rack/rack/security/advisories/GHSA-7g2v-jj9q-g3rg) Possible Log Injection in Rack::CommonLogger.
+
 ## [3.0.11] - 2024-05-10
 
 - Backport #2062 to 3-0-stable: Do not allow `BodyProxy` to respond to `to_str`, make `to_ary` call close . ([#2062](https://github.com/rack/rack/pull/2062), [@jeremyevans](https://github.com/jeremyevans))

diff --git a/lib/rack/version.rb b/lib/rack/version.rb
@@ -25,7 +25,7 @@ def self.version
     VERSION
   end
 
-  RELEASE = "3.0.11"
+  RELEASE = "3.0.12"
 
   # Return the Rack release as a dotted string.
   def self.release