Merge pull request #217 from solidusio/waiting-for-dev/bump_version_and_update_changelog

waiting-for-dev · web-flow · commit b02f89132758 · 2021-11-17T11:15:02.000+01:00
Bump version and update changelog
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [v2.5.4](https://github.com/solidusio/solidus_auth_devise/tree/v2.5.4) (2021-11-17)
+
+[Full Changelog](https://github.com/solidusio/solidus_auth_devise/compare/v2.5.3...v2.5.4)
+
+**Fixed bugs:**
+
+- Fix authentication bypass by CSRF weakness [GHSA-xm34-v85h-9pg2](https://github.com/solidusio/solidus_auth_devise/security/advisories/GHSA-xm34-v85h-9pg2)
 ## [v2.5.3](https://github.com/solidusio/solidus_auth_devise/tree/v2.5.3) (2021-01-29)
 
 [Full Changelog](https://github.com/solidusio/solidus_auth_devise/compare/v2.5.2...v2.5.3)
diff --git a/lib/spree/auth/version.rb b/lib/spree/auth/version.rb
@@ -2,6 +2,6 @@
 
 module Spree
   module Auth
-    VERSION = '2.5.3'
+    VERSION = '2.5.4'
   end
 end
