./databases/ruby-activerecord60, Object-relational mapper framework (part of Rails 6.0)

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2022Q4, Version: 6.0.6.1, Package name: ruby31-activerecord60-6.0.6.1, Maintainer: pkgsrc-users

= Active Record -- Object-relational mapping put on rails

Active Record connects classes to relational database tables to establish an
almost zero-configuration persistence layer for applications. The library
provides a base class that, when subclassed, sets up a mapping between the new
class and an existing table in the database. In context of an application,
these classes are commonly referred to as *models*. Models can also be
connected to other models; this is done by defining *associations*.

This is for Ruby on Rails 6.0.

Master sites:

Filesize: 402.5 KB

Version history: (Expand)

CVS history: (Expand)


   2023-03-04 14:58:17 by S.P.Zeidler | Files touched by this commit (14) | Package updated
Log message:
Pullup ticket #6732 - requested by taca
databases/ruby-activerecord60: security update
devel/ruby-activejob60: distinfo update
devel/ruby-activemodel60: distinfo update
devel/ruby-activestorage60: distinfo update
devel/ruby-activesupport60: distinfo update
devel/ruby-railties60: distinfo update
mail/ruby-actionmailbox60: distinfo update
mail/ruby-actionmailer60: distinfo update
textproc/ruby-actiontext60: distinfo update
www/ruby-actioncable60: distinfo update
www/ruby-actionpack60: distinfo update
www/ruby-actionpack60: distinfo update
www/ruby-actionview60: distinfo update
www/ruby-rails60: distinfo update

Revisions pulled up:
- databases/ruby-activerecord60/distinfo                        1.21
- devel/ruby-activejob60/distinfo                               1.21
- devel/ruby-activemodel60/distinfo                             1.21
- devel/ruby-activestorage60/distinfo                           1.21
- devel/ruby-activesupport60/distinfo                           1.21
- devel/ruby-railties60/distinfo                                1.21
- lang/ruby/rails.mk                                            1.138
- mail/ruby-actionmailbox60/distinfo                            1.21
- mail/ruby-actionmailer60/distinfo                             1.21
- textproc/ruby-actiontext60/distinfo                           1.21
- www/ruby-actioncable60/distinfo                               1.21
- www/ruby-actionpack60/Makefile                                1.5
- www/ruby-actionpack60/distinfo                                1.21
- www/ruby-actionview60/distinfo                                1.21
- www/ruby-rails60/distinfo                                     1.21

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Jan 19 14:27:26 UTC 2023

   Modified Files:
   	pkgsrc/databases/ruby-activerecord60: distinfo
   	pkgsrc/devel/ruby-activejob60: distinfo
   	pkgsrc/devel/ruby-activemodel60: distinfo
   	pkgsrc/devel/ruby-activestorage60: distinfo
   	pkgsrc/devel/ruby-activesupport60: distinfo
   	pkgsrc/devel/ruby-railties60: distinfo
   	pkgsrc/lang/ruby: rails.mk
   	pkgsrc/mail/ruby-actionmailbox60: distinfo
   	pkgsrc/mail/ruby-actionmailer60: distinfo
   	pkgsrc/textproc/ruby-actiontext60: distinfo
   	pkgsrc/www/ruby-actioncable60: distinfo
   	pkgsrc/www/ruby-actionpack60: Makefile distinfo
   	pkgsrc/www/ruby-actionview60: distinfo
   	pkgsrc/www/ruby-rails60: distinfo

   Log message:
   www/ruby-rails60: update to 6.0.6.1

   Only databases/ruby-activerecord61 has updated.

   Rails 6.0.6.1 (2023-01-17)

   * Make `sanitize_as_sql_comment` more strict

     Though this method was likely never meant to take user input, it was
     attempting sanitization. That sanitization could be bypassed with
     carefully crafted input.

     This commit makes the sanitization more robust by replacing any
     occurrances of "/*" or "*/" with "/ *" or \ 
"* /". It also performs a
     first pass to remove one surrounding comment to avoid compatibility
     issues for users relying on the existing removal.

     This also clarifies in the documentation of annotate that it should not
     be provided user input.

     [CVE-2023-22794]

   To generate a diff of this commit:
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/databases/ruby-activerecord60/distinfo
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/devel/ruby-activejob60/distinfo
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/devel/ruby-activemodel60/distinfo
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/devel/ruby-activestorage60/distinfo
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/devel/ruby-activesupport60/distinfo
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/devel/ruby-railties60/distinfo
   cvs rdiff -u -r1.137 -r1.138 pkgsrc/lang/ruby/rails.mk
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/mail/ruby-actionmailbox60/distinfo
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/mail/ruby-actionmailer60/distinfo
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/textproc/ruby-actiontext60/distinfo
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/www/ruby-actioncable60/distinfo
   cvs rdiff -u -r1.4 -r1.5 pkgsrc/www/ruby-actionpack60/Makefile
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/www/ruby-actionpack60/distinfo
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/www/ruby-actionview60/distinfo
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/www/ruby-rails60/distinfo