./devel/ruby-railties52, Tools for creating, working with, and running Rails 5.2

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 5.2.6, Package name: ruby26-railties52-5.2.6, Maintainer: pkgsrc-users

= Railties -- Gluing the Engine to the Rails

Railties is responsible to glue all frameworks together. Overall, it:

* handles all the bootstrapping process for a Rails application;

* manager rails command line interface;

* provides Rails generators core;

This is for Ruby on Rails 5.2.


Required to run:
[devel/ruby-thor] [misc/ruby-method_source] [lang/ruby26-base] [devel/ruby-activesupport52] [www/ruby-actionpack52]

Required to build:
[pkgtools/cwrappers]

Master sites:

SHA1: 16ef2481c2aa0dab8c276ad8f22218c2c60db5cc
RMD160: 782fee410637e217b41049e8538134e83fb577a9
Filesize: 231 KB

Version history: (Expand)


CVS history: (Expand)


   2021-07-04 08:24:47 by Takahiro Kambe | Files touched by this commit (12) | Package updated
Log message:
www/ruby-rails52: update to 5.2.6

Ruby on Rails 5.2.6 (2021-05-05)

There are changes in www/ruby-actionpack52 only, including security fix.

Action Pack

* Accept base64_urlsafe CSRF tokens to make forward compatible.

  Base64 strict-encoded CSRF tokens are not inherently websafe, which
  makes them difficult to deal with.  For example, the common practice
  of sending the CSRF token to a browser in a client-readable cookie
  does not work properly out of the box: the value has to be
  url-encoded and decoded to survive transport.

  In this version, we generate Base64 urlsafe-encoded CSRF tokens,
  which are inherently safe to transport.  Validation accepts both
  urlsafe tokens, and strict-encoded tokens for backwards
  compatibility.

  How the tokes are encoded is controllr by the
  action_controller.urlsafe_csrf_tokens config.

  In Rails 5.2.5, the CSRF token format was accidentally changed to
  urlsafe-encoded.

  Atention: If you already upgraded your application to 5.2.5, set the
  config urlsafe_csrf_tokens to true, otherwise your form submission
  will start to fail during the deploy of this new version.

	Rails.application.config.action_controller.urlsafe_csrf_tokens = true

  If you are upgrading from 5.2.4.x, you don't need to change this
  configuration.

  Scott Blum, Étienne Barrié
   2021-04-11 15:20:09 by Takahiro Kambe | Files touched by this commit (13) | Package updated
Log message:
www/ruby-rails52: update to 5.2.5

Real changes are in devel/ruby-activestorage52 only.

## Rails 5.2.5 (March 26, 2021) ##

*   Marcel is upgraded to version 1.0.0 to avoid a dependency on GPL-licensed
    mime types data.

    *George Claghorn*

*   The Poppler PDF previewer renders a preview image using the original
    document's crop box rather than its media box, hiding print margins. This
    matches the behavior of the MuPDF previewer.

    *Vincent Robert*
   2021-02-11 15:23:42 by Takahiro Kambe | Files touched by this commit (12) | Package updated
Log message:
www/rails52: update to 5.2.4.5

## Rails 5.2.4.5 (February 10, 2021) ##

*   Fix possible DoS vector in PostgreSQL money type

    Carefully crafted input can cause a DoS via the regular expressions used
    for validating the money format in the PostgreSQL adapter.  This patch
    fixes the regexp.

    Thanks to @dee-see from Hackerone for this patch!

    [CVE-2021-22880]

    *Aaron Patterson*
   2020-09-10 16:13:12 by Takahiro Kambe | Files touched by this commit (12) | Package updated
Log message:
www/ruby-rails52: update to  5.2.4.4

Update Ruby on Rails 52 to 5.2.4.4.

Security fix in ruby-actionview52.

## Rails 5.2.4.4 (September 09, 2020) ##

*   [CVE-2020-15169] Fix potential XSS vulnerability in the `translate`/`t` helper

    *Jonathan Hefner*
   2020-05-19 17:40:32 by Takahiro Kambe | Files touched by this commit (1) | Package updated
Log message:
devel/ruby-railties52: update to 5.2.4.3

Update ruby-railties52 to 5.2.4.3.

## Rails 5.2.4.3 (May 18, 2020) ##

*   No changes.
   2020-03-20 16:43:05 by Takahiro Kambe | Files touched by this commit (2) | Package updated
Log message:
devel/ruby-railties52: update to 5.2.4.2

Update ruby-railties52 to 5.2.4.2.

## Rails 5.2.4.1 (December 18, 2019) ##

*   No changes.

## Rails 5.2.4 (November 27, 2019) ##

*   Use original `bundler` environment variables during the process of \ 
generating a new rails project.

    *Marco Costa*

*   Allow loading seeds without ActiveJob.

    Fixes #35782

    *Jeremy Weathers*

*   Only force `:async` ActiveJob adapter to `:inline` during seeding.

    *BatedUrGonnaDie*
   2020-03-01 12:36:48 by Mark Davies | Files touched by this commit (1)
Log message:
ruby-railties52: fix path in ALTERNATIVES
   2019-04-14 12:34:57 by Takahiro Kambe | Files touched by this commit (2) | Package updated
Log message:
devel/ruby-railties52: updateo to 5.2.3

## Rails 5.2.3 (March 27, 2019) ##

*   Seed database with inline ActiveJob job adapter.

    *Gannon McGibbon*

*   Fix boolean interaction in scaffold system tests.

    *Gannon McGibbon*

## Rails 5.2.2.1 (March 11, 2019) ##

*   No changes.