No update to CHANGES.md for v2.3.0

[baburdick]

Why no descriptive record of this large set of changes?

[disambiguator]

+1 to this. Given that this is the recommended fix to https://www.ruby-lang.org/en/news/2020/03/19/json-dos-cve-2020-10663/, a changelog would help devs feel confident in updating this dependency. Thank you!

[stmllr]

Can anyone please point to the commit which fixed the issue?

[chulkilee]

Diff is v2.2.0...v2.3.0 but not sure which commit actually fixed it. 🤷

[baburdick]

Exactly.

[marcandre]

I've opened #424 with the list of changes (all bug fixes).

Diff is v2.2.0...v2.3.0 but not sure which commit actually fixed it. 🤷

Indeed! I believe the fix is hiding in this PR which was copied over to json in this commit