build: publish to README.md,LICENSE,spec and lib directory only (#1547)

avoid to vulnerability assessment in docs

Co-authored-by: Sean <[email protected]>

Author: hachi-eiji

ransack.gemspec

@@ -21,7 +21,7 @@ Gem::Specification.new do |s|
   s.add_dependency 'activesupport', '>= 7.1'
   s.add_dependency 'i18n'
 
-  s.files         = `git ls-files`.split("\n")
+  s.files         = Dir["README.md", "LICENSE", "lib/**/*"]
   s.test_files    = `git ls-files -- {test,spec,features}/*`.split("\n")
   s.executables   = `git ls-files -- bin/*`.split("\n").map{ |f| File.basename(f) }
   s.require_paths = ["lib"]