Security / Conservative JWT bump

.github/workflows/test.yml

@@ -9,17 +9,16 @@ jobs:
         include:
           - { os: ubuntu-latest, ruby_version: "3.0" }
           - { os: ubuntu-latest, ruby_version: "3.3" }
+          - { os: ubuntu-latest, ruby_version: "4.0" }
           - { os: ubuntu-latest, ruby_version: "jruby-9.4" }
     steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
       - name: Setup Ruby, JRuby and TruffleRuby
         uses: ruby/setup-ruby@v1.190.0
         with:
-          bundler: 1
           ruby-version: ${{ matrix.ruby_version }}
-      - name: Checkout code
-        uses: actions/checkout@v2
       - name: Run tests
         run: |
-          gem install bundler:2.3.7
           bundle install --jobs 4 --retry 3
           bundle exec rspec

.ruby-version

@@ -1 +1 @@
-3.1.2
+4.0.5

.tool-versions

@@ -1,3 +1,3 @@
-ruby 2.6.8
-protoc 3.18.0
-golang 1.15.15
+ruby 4.0.5
+protoc 35.1
+golang 1.26.4

Gemfile.lock

@@ -1,9 +1,9 @@
 PATH
   remote: .
   specs:
-    livekit-server-sdk (0.8.3)
+    livekit-server-sdk (0.9.0)
       google-protobuf (~> 4.30, >= 4.30.2)
-      jwt (>= 2.2.3, < 3.0)
+      jwt (>= 3.0, < 4.0)
       twirp (~> 1.13, >= 1.13.1)
 
 GEM
@@ -26,7 +26,7 @@ GEM
       bigdecimal
       rake (>= 13)
     json (2.11.3)
-    jwt (2.8.2)
+    jwt (3.2.0)
       base64
     logger (1.7.0)
     method_source (1.0.0)
@@ -75,4 +75,4 @@ DEPENDENCIES
   yard
 
 BUNDLED WITH
-   2.3.7
+  2.5.23

README.md

@@ -14,7 +14,7 @@
 Use this SDK to interact with <a href="https://livekit.io/">LiveKit</a> server APIs and create access tokens from your Ruby backend.
 <!--END_DESCRIPTION-->
 
-This library is designed to work with Ruby 2.6.0 and above.
+This library is designed to work with Ruby 3.0.0 and above.
 
 ## Installation
 

livekit_server_sdk.gemspec

@@ -11,7 +11,7 @@ Gem::Specification.new do |spec|
   spec.summary = "LiveKit Server SDK for Ruby"
   spec.homepage = "https://livekit.io"
   spec.license = "Apache-2.0"
-  spec.required_ruby_version = ">= 2.6.0"
+  spec.required_ruby_version = ">= 3.0.0"
 
   # spec.metadata["homepage_uri"] = spec.homepage
   # spec.metadata["source_code_uri"] = "TODO: Put your gem's public repo URL here."
@@ -27,7 +27,7 @@ Gem::Specification.new do |spec|
   spec.require_paths = ["lib"]
 
   spec.add_dependency "google-protobuf", "~> 4.30", ">= 4.30.2"
-  spec.add_dependency "jwt", ">= 2.2.3", "< 3.0"
+  spec.add_dependency "jwt", ">= 3.0", "< 4.0"
   spec.add_dependency "twirp", "~> 1.13", ">= 1.13.1"
 
   # For more information and examples about making a new gem, checkout our