From ab6d1686f1b40f8a65574515be85d4150a13112d Mon Sep 17 00:00:00 2001
From: Geremia Taglialatela <tagliala.dev@gmail.com>
Date: Wed, 15 Jul 2026 10:59:19 +0200
Subject: [PATCH] Opt-in for MFA requirement

Make the gem more secure by requiring that all privileged operations
by any of the owners require OTP.

Ref capistrano/capistrano#2189
---
 capdrupal-drupal-deploy.gemspec | 1 +
 1 file changed, 1 insertion(+)

diff --git a/capdrupal-drupal-deploy.gemspec b/capdrupal-drupal-deploy.gemspec
index 58b9cb2..3bbeb00 100644
--- a/capdrupal-drupal-deploy.gemspec
+++ b/capdrupal-drupal-deploy.gemspec
@@ -10,6 +10,7 @@ Gem::Specification.new do |spec|
   spec.authors  = [ "Simon Perdrisat", "Gilles Doge" ]
   spec.email    = 'perdrisat@gmail.com'
   spec.homepage = %q{https://github.com/capistrano/drupal-deploy}
+  spec.metadata = { "rubygems_mfa_required" => "true" }
   spec.platform     = Gem::Platform::RUBY
   spec.description  = <<-DESC
     A set of tasks for deploying Drupal 7 projects with Capistrano 3 and the help of Drush.