release 2.49.1

ViewComponent · Mar 2, 2022 · b8a5f4a · b8a5f4a
1 parent 5f41f38
commit b8a5f4a
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 1 deletion.
diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md
@@ -7,6 +7,12 @@ title: Changelog
 
 ## main
 
+## 2.49.1
+
+* Patch XSS vulnerability in `Translatable` module caused by improperly escaped interpolation arguments.
+
+    *Cameron Dutro*
+
 ## 2.49.0
 
 * Fix path handling for evaluated view components that broke in Ruby 3.1.
@@ -657,6 +663,12 @@ _Note: This release includes an underlying change to Slots that may affect incor
 
     *Joel Hawksley*
 
+## 2.29.1
+
+* Patch XSS vulnerability in `ViewComponent::Translatable` module caused by improperly escaped interpolation arguments.
+
+    *Cameron Dutro*
+
 ## 2.29.0
 
 * Allow Slot lambdas to share data from the parent component and allow chaining on the returned component.

diff --git a/lib/view_component/version.rb b/lib/view_component/version.rb
@@ -4,7 +4,7 @@ module ViewComponent
   module VERSION
     MAJOR = 2
     MINOR = 49
-    PATCH = 0
+    PATCH = 1
 
     STRING = [MAJOR, MINOR, PATCH].join(".")
   end