Next | Query returned 21 messages, browsing 11 to 20 | Previous

History of commit frequency

CVS Commit History:


   2022-10-10 05:36:51 by Takahiro Kambe | Files touched by this commit (32)
Log message:
Remove lines for Ruby 2.6.
   2022-09-10 14:46:12 by Takahiro Kambe | Files touched by this commit (1) | Package updated
Log message:
devel/ruby-activestorage70: update to 7.0.4

* Fixes proxy downloads of files over 5MiB

  Previously, trying to view and/or download files larger than 5mb stored in
  services like S3 via proxy mode could return corrupted files at around
  5.2mb or cause random halts in the download.  Now,
  ActiveStorage::Blobs::ProxyController correctly handles streaming these
  larger files from the service to the client without any issues.

  Fixes

  Felipe Raul
   2022-07-13 16:48:48 by Takahiro Kambe | Files touched by this commit (15) | Package updated
Log message:
www/ruby-rails70: update to 7.0.3.1

Rails 7.0.3.1 (2022-07-12) updates databases/ruby-activerecord70 only.

databases/ruby-activerecord70

* Change ActiveRecord::Coders::YAMLColumn default to safe_load

  This adds two new configuration options The configuration options are as
  follows:

	o config.active_storage.use_yaml_unsafe_load

  When set to true, this configuration option tells Rails to use the old
  "unsafe" YAML loading strategy, maintaining the existing behavior but
  leaving the possible escalation vulnerability in place.  Setting this
  option to true is *not* recommended, but can aid in upgrading.

	o config.active_record.yaml_column_permitted_classes

  The "safe YAML" loading method does not allow all classes to be
  deserialized by default.  This option allows you to specify classes deemed
  "safe" in your application.  For example, if your application uses Symbol
  and Time in serialized data, you can add Symbol and Time to the allowed
  list as follows:

	config.active_record.yaml_column_permitted_classes = [Symbol, Date, Time]

  [CVE-2022-32224]
   2022-06-07 17:20:09 by Takahiro Kambe | Files touched by this commit (1) | Package updated
Log message:
devel/ruby-activestorage70: update to 7.0.3

7.0.3 (2022-05-12)

* Don't stream responses in redirect mode

  Previously, both redirect mode and proxy mode streamed their responses
  which caused a new thread to be created, and could end up leaking
  connections in the connection pool.  But since redirect mode doesn't
  actually send any data, it doesn't need to be streamed.
   2022-05-05 05:41:42 by Takahiro Kambe | Files touched by this commit (11)
Log message:
Update rest of Ruby on Rails 70 components.

No change except version.
   2022-03-27 08:43:12 by Thomas Klausner | Files touched by this commit (13)
Log message:
rails 7.0 wants ruby 2.7+, mark it as such
   2022-03-27 08:30:00 by Thomas Klausner | Files touched by this commit (24)
Log message:
ruby*: fix rails version in COMMENT
   2022-03-13 16:15:05 by Takahiro Kambe | Files touched by this commit (14) | Package updated
Log message:
www/ruby-rails70: update to 7.0.2.3

Changes are in devel/ruby-activestorage70 only.

Rails 7.0.2.3 (March 08, 2022)

* Added image transformation validation via configurable allow-list.

  Variant now offers a configurable allow-list for
  transformation methods in addition to a configurable deny-list for arguments.

  [CVE-2022-21831]
   2022-02-13 08:44:29 by Takahiro Kambe | Files touched by this commit (2) | Package updated
Log message:
devel/ruby-activestorage70: update to 7.0.2

7.0.2 (2022-02-08)

* Revert the ability to pass service_name param to DirectUploadsController
  which was introduced in 7.0.0.

  That change caused a lot of problems to upgrade Rails applications so we
  decided to remove it while in work in a more backwards compatible
  implementation.

  Gannon McGibbon

* Allow applications to opt out of precompiling Active Storage JavaScript
  assets.

  jlestavel

7.0.2.1 (2022-02-11)

* No changes.

7.0.2.2 (2022-02-11)

* No changes.
   2022-01-16 15:07:49 by Takahiro Kambe | Files touched by this commit (1) | Package updated
Log message:
devel/ruby-activestorage70: update to 7.0.1

7.0.1 (2021-01-06)

* No changes.

Next | Query returned 21 messages, browsing 11 to 20 | Previous