All,
We just released v3.2.1 of the Ruby driver for Apache Cassandra (a.k.a. the OSS driver). The main impetus for the release is the discovery of a memory leak in the driver under certain conditions (setting an extremely long request timeout). In addition, some of the libraries / tools we use have been found to have security vulnerabilities, so we updated those gems. Finally, we'd stated in previous releases that we support Ruby 2.2.x (JRuby 9.0.x) and later, but we hadn't enforced it. Since the updated gems require newer versions of Ruby, we now enforce that policy.
From the changelog:
RUBY-315: Bump rubocop version to address security vulnerability; disallow Ruby versions prior to 2.2.
RUBY-316: Memory leak in ruby driver due to request timers not being cleaned up when extremely large request timeout is set.
RUBY-317: Upgrade Yard to address security vulnerability.
RUBY-318: Fix Travis config to work with JRuby on new image.
We are also releasing v2.1.1 of the Ruby DataStax Enterprise driver, which pulls in v3.2.1 of the OSS driver, thus fixing the same tickets referenced above.