2.5.3 (11-09-2017)

• Fix SSRF vulnerability in Resource#find. CVE is pending. Commit: 1bb0284

2.4.10 (11-09-2017)

• Fix SSRF vulnerability in Resource#find. CVE is pending. Commit: 1bb0284

2.3.9 (11-09-2017)

• Fix SSRF vulnerability in Resource#find. CVE is pending. Commit: 1bb0284

2.2.4 (11-09-2017)

• Fix SSRF vulnerability in Resource#find. CVE is pending. Commit: 1bb0284

2.1.10 (11-09-2017)

• Fix SSRF vulnerability in Resource#find. CVE is pending. Commit: 1bb0284

2.0.12 (11-09-2017)

• Fix SSRF vulnerability in Resource#find. CVE is pending. Commit: 1bb0284

2.11.1 (10-20-2017)

• Added subscriptions link to Invoice and Transaction PR

2.11.0 (10-06-2017)

This release will upgrade us to API version 2.8.

• Added custom invoice notes to Purchase PR
• Added imported_trial boolean field to Subscription Commit

Upgrade Notes

There are two breaking changes in this API version you must consider.

Country Codes

All country fields must now contain valid 2 letter ISO 3166 country codes. If your country code fails validation, you will receive a validation error. This affects any endpoint where an address is collected.

Purchase Currency

The purchases endpoint can create and invoice multiple adjustments at once but our invoices can only contain items in one currency. To make this explicit the currency can no longer be provided on an adjustment, it must be set once for the entire purchase:

purchase = Recurly::Purchase.new(
  # The purchase object is the only place you can set the currency:
  currency: 'USD',
  account: {
    account_code: 'someone'
  }
  adjustments: [
    {
       # Remove this currency
       # You can no longer set the currency on adjustment level
       currency: 'USD',
       unit_amount_in_cents: 1000
    }
  ]
)

2.10.2 (2017-09-27)

• Fix Subscription constructor API breakage PR

2.10.1 (07-03-2017)

NOTE: This release contains an accidental breaking change on Subscription.new. See #338 for more details. Upgrade to 2.10.2 for the fix.

This release will upgrade us to API version 2.7. There are no breaking changes.

• Added updated_account_notification notification event PR
• Removed Plan#trial_requires_billing_info coercion PR
• Fixed "address" being serialized as "addres" bug PR
• Bump to API v2.7 (Purchase endpoint updates) PR